Retail Banking Products and Account-Based Laundering

1. Why This Topic Matters for the CAMS Exam

Retail banking is the front door of the formal financial system. Checking accounts, savings accounts, debit cards, ATMs, wire transfers and consumer loans are the products that ordinary people use every day, and that is precisely why money launderers use them too. Illicit cash must enter the system somewhere, and the retail bank account is the single most common point of placement. Once inside, accounts become the engine for layering (moving funds between accounts and jurisdictions) and integration (converting proceeds into loans, assets or apparently legitimate income).

On the CAMS exam, this material sits inside the domain Risks and Methods of Money Laundering and Terrorist Financing, which is one of the most heavily weighted areas. You will rarely be asked a simple definition. Instead, you will be given a short scenario describing a customer's account behaviour and asked which red flag is present, what the launderer is trying to achieve, which stage of laundering is occurring, or what the compliance officer should do next. If you understand how account-based laundering works mechanically, these questions become straightforward.

2. What Is Account-Based Laundering?

Account-based laundering is the use of deposit accounts and the retail products attached to them to disguise the origin, ownership or destination of criminal proceeds. The account itself is the vehicle. The launderer exploits the fact that banks process enormous volumes of routine transactions, that reporting thresholds are publicly known, and that an account in a bank's books carries an implicit presumption of legitimacy.

Key retail products and how they are abused:

Deposit accounts (checking, current, savings) - The core vehicle. Used to receive cash deposits, aggregate funds from multiple sources, and act as a pass-through before onward transfer. Launderers may open many accounts at many branches or many banks, often in the names of relatives, employees or nominees.

Cash deposits and ATMs - Cash is placed through tellers and, increasingly, through ATMs and automated deposit machines that reduce face-to-face scrutiny. Deposits are often kept just below the currency transaction reporting threshold (for example, under USD 10,000 in the United States) to avoid a Currency Transaction Report.

Wire transfers and electronic payments - Once cash is in an account, domestic and international wires move it quickly, often to jurisdictions with weak AML controls. Rapid in-and-out movement with little balance retained is a classic signature.

Debit and prepaid cards - Allow cash to be withdrawn in another country from funds deposited at home, effectively exporting value without a cross-border cash declaration.

Monetary instruments - Cashier's checks, bank drafts, traveller's cheques and money orders purchased with cash convert bulk currency into paper that is easier to transport and deposit elsewhere. Sequentially numbered instruments or instruments purchased by third parties are red flags.

Consumer loans and mortgages - Used mainly at the integration stage. The launderer takes out a loan and then repays it, often early, with criminal cash. The result is a clean asset (car, property) with a paper trail that points to a bank loan rather than to crime. A loan-back scheme goes further: the criminal deposits funds offshore, then borrows against them so that the money returns home disguised as a loan.

Credit cards - Deliberate overpayment of a card balance creates a credit that is later refunded by cheque or transfer, turning cash into a bank-issued payment. Purchasing high-value refundable goods with the card and returning them is a variation.

Safe deposit boxes - Store cash, precious metals or documents outside the transaction record. Frequent visits, particularly immediately before or after large cash transactions, are suspicious.

Remote deposit capture and mobile banking - Reduce in-person contact and allow cheques to be deposited from anywhere, which complicates identification of who truly controls the account.

Dormant and inherited accounts - A long-inactive account that suddenly receives large deposits or heavy activity may have been taken over or sold to a launderer.

3. How Account-Based Laundering Works: Core Techniques

Structuring (smurfing) - Breaking a large sum into many smaller deposits, each below the reporting threshold, made on different days, at different branches, or by different people (smurfs). Structuring is a crime in itself in many jurisdictions regardless of the source of funds. Note the exam distinction: structuring describes the technique of breaking up transactions; smurfing describes using multiple individuals to carry it out.

Cuckoo smurfing - A launderer intercepts a legitimate international payment. The innocent recipient's account receives cash deposits made by the launderer's associates in the destination country, while the original sender's funds are diverted to the criminal abroad. The account holder is unaware; the bank sees structured cash deposits into an account whose owner is expecting a transfer and therefore does not complain.

Funnel accounts - A single account that receives multiple cash deposits in one geographic region, often from many unrelated people, followed by rapid withdrawals or transfers in a different region or country. Common in drug trafficking proceeds; the deposits are typically just under the threshold.

Money mule accounts - Individuals, often recruited through job advertisements, romance scams or social media, allow their accounts to receive and forward funds for a commission. Mules may be complicit, negligent or deceived. Students, the elderly and new immigrants are frequent targets. Indicators include an account opened recently, receiving funds inconsistent with the holder's income, and immediate onward transfer or cash withdrawal.

Nominee and third-party accounts - Accounts held by family members, employees or associates who have no apparent economic reason to be transacting the volumes observed. The true beneficial owner stays off the paperwork.

Pass-through or transit activity - Funds enter and leave within hours or days, leaving a minimal balance. The account has no economic purpose beyond movement of value.

Commingling - Illicit cash is mixed with the legitimate receipts of a cash-intensive business (restaurant, car wash, convenience store) and deposited as sales revenue. The retail business account is the laundering instrument.

Account takeover and synthetic identities - Criminals hijack genuine accounts through phishing or malware, or open accounts with fabricated or stolen identity data, then use them as disposable laundering channels.

Concentration accounts - Internal bank accounts that aggregate funds from multiple customer transactions before settlement. If a bank allows customer funds to pass through these without preserving the audit trail, the link between customer and transaction is lost. Regulators expect banks to prohibit customer access to concentration accounts and to maintain full documentation.

4. Red Flags You Must Recognise

The exam expects you to identify indicators drawn from FATF, FFIEC, Wolfsberg and FinCEN guidance. The most frequently tested include:

- Cash deposits consistently just below the reporting threshold, or multiple sub-threshold deposits on the same day across branches.
- Deposits inconsistent with the customer's stated occupation, income or business type (for example, a student receiving large international wires).
- Accounts receiving funds from many unrelated third parties, or many accounts controlled by one person.
- Cash deposits rapidly followed by outgoing wires, especially to high-risk jurisdictions, with little balance retained.
- Customer asks about reporting thresholds, record-keeping or how to avoid a report, or changes a transaction after being told a report will be filed.
- Reluctance to provide identification, source of funds or beneficial ownership information; use of post office boxes or addresses that do not match.
- Sudden reactivation of a dormant account with high volumes.
- Loans repaid early in cash or repaid by an unrelated third party; loans secured by cash deposits or assets of unknown origin.
- Purchase of monetary instruments in cash in sequential or structured amounts, or by someone other than the named purchaser.
- Frequent safe deposit box access combined with cash transactions.
- Unusual ATM patterns such as deposits at many machines in one day or withdrawals abroad shortly after domestic cash deposits.
- Business accounts with deposits that do not match the nature of the business (for example, a bakery receiving large wires from a foreign shipping company).
- Multiple customers at the same address or with the same phone number or employer opening accounts around the same time.

5. Controls That Mitigate Account-Based Laundering

Exam questions often pivot from identifying the risk to selecting the appropriate control. Know these:

Customer Due Diligence (CDD) and Know Your Customer - Verify identity, understand the expected nature and purpose of the account, and establish the anticipated transaction profile so deviations can be detected.

Beneficial ownership identification - For legal entity accounts, identify the natural persons who own or control the customer, defeating the nominee strategy.

Enhanced Due Diligence (EDD) - For higher-risk customers such as cash-intensive businesses, politically exposed persons, non-resident customers and those connected to high-risk jurisdictions.

Transaction monitoring - Automated systems with scenarios for structuring, rapid movement, velocity, geographic anomalies and peer-group deviation. Aggregation of cash across branches and across the day is essential to catch structuring.

Currency transaction reporting and suspicious activity reporting - File threshold reports accurately and file Suspicious Activity Reports (or the local equivalent, such as Suspicious Transaction Reports) when activity has no apparent lawful purpose, regardless of amount. Structuring must be reported even when each transaction is individually below the threshold.

Monetary instrument logs - Record cash purchases of instruments within specified ranges (in the US, USD 3,000 to USD 10,000) to capture conversion activity.

Concentration account controls - Prohibit customer access, require dual authorisation, retain the customer identifier on every transaction and reconcile frequently.

Staff training and front-line escalation - Tellers and branch staff are the most likely to see structuring behaviour and customer evasiveness in real time. Training must cover tipping-off rules: staff must never inform the customer that a report has been or will be filed.

Ongoing monitoring and periodic review - Refresh the customer profile and risk rating; compare actual activity with expected activity.

6. Mapping Retail Products to the Three Stages of Laundering

Because the exam loves stage-identification questions, keep this mental map:

Placement: cash deposits, ATM deposits, structuring, smurfing, funnel accounts, purchase of monetary instruments with cash, commingling with business receipts.

Layering: wire transfers between multiple accounts and banks, transfers to offshore accounts, cuckoo smurfing, use of mules and nominees, conversion of instruments, card withdrawals abroad, pass-through activity.

Integration: loan-back schemes, repayment of loans with illicit funds, mortgage purchases, credit card overpayment refunds, funds appearing as legitimate business revenue or investment returns.

Some techniques span stages; if a question asks which stage is most associated with the behaviour described, focus on the dominant purpose in the scenario (getting cash in, obscuring the trail, or making the money look clean and usable).

7. How to Answer Exam Questions on This Topic

Step 1 - Identify what the question is really asking. Is it asking for the red flag, the technique, the stage, the regulatory obligation, or the next action? Many candidates lose marks by selecting a correct statement that does not answer the question posed.

Step 2 - Read the scenario for the customer profile first, then the activity. Almost every account-based laundering indicator is about inconsistency between who the customer says they are and what the account is doing. Anchor yourself in the expected profile before judging the transactions.

Step 3 - Look for the signature words. Just below the threshold signals structuring. Multiple individuals depositing into one account signals smurfing or a funnel account. Deposits in one region and withdrawals in another signals a funnel account. Innocent recipient of expected international funds receiving cash deposits signals cuckoo smurfing. Recent account, inconsistent inflows, immediate onward transfer signals a money mule. Early repayment, cash repayment, third-party repayment signals loan integration.

Step 4 - Apply the most or best logic. CAMS answer choices frequently contain two or three plausible options. Choose the one that is most specific to the scenario and most directly addresses the laundering risk. A generic answer such as all transactions should be reviewed is usually a distractor.

Step 5 - Know the correct next step. When a question asks what the compliance officer or teller should do, the correct answer is almost always to document, escalate internally and evaluate for a suspicious activity report. Wrong answers typically involve confronting or warning the customer (tipping off), refusing the transaction outright without analysis, or immediately contacting law enforcement before internal review (unless the scenario specifically describes an emergency such as imminent terrorist financing).

Step 6 - Remember that structuring is reportable even if the source of funds might be legitimate. The act of deliberately evading a reporting requirement is itself suspicious and, in many jurisdictions, criminal.

8. Exam Tips: Answering Questions on Retail Banking Products and Account-Based Laundering

Tip 1 - Memorise the definitions precisely. Structuring, smurfing, cuckoo smurfing, funnel accounts, concentration accounts, payable-through accounts, nested accounts and loan-back schemes each have a distinct meaning. The exam will test whether you can tell them apart. For example, a payable-through account allows a foreign bank's customers to write cheques directly on the correspondent account; a concentration account is an internal bank suspense account. They are not the same thing.

Tip 2 - Threshold awareness is key, but do not fixate on a single number. The USD 10,000 currency transaction threshold and the USD 3,000 monetary instrument and funds transfer record-keeping threshold are the most common figures, but questions may be framed generically. Recognise the pattern of deposits just below a reporting threshold as structuring in any jurisdiction.

Tip 3 - Watch for the innocent party. In cuckoo smurfing and money mule scenarios, the account holder may be unaware or deceived. The question may ask who is the victim or how the bank should treat the account holder. Do not assume every account owner in a scenario is the criminal.

Tip 4 - Geographic clues matter. Deposits in one city or region with withdrawals in another, or wires to jurisdictions known for weak controls, are deliberate signals from the question writer. Note them.

Tip 5 - Distinguish red flag from proof. The exam tests whether you can identify behaviour that warrants further investigation, not whether you can convict the customer. If a choice claims the activity proves money laundering, it is usually wrong. If a choice says the activity is an indicator warranting review and possible reporting, it is usually right.

Tip 6 - Never choose tipping off. Any answer in which bank staff tell the customer that a report has been filed, warn them that their activity is suspicious, or advise them how to avoid a report is incorrect.

Tip 7 - Prefer risk-based over blanket responses. Answers that apply controls proportionate to the identified risk (EDD for the specific customer, enhanced monitoring of the account) are preferred over answers that close all accounts of a type or refuse all cash customers.

Tip 8 - Connect product to stage. If the question asks which stage, map the product: cash and ATMs point to placement, wires and multiple accounts point to layering, loans and asset purchases point to integration.

Tip 9 - When two answers both seem right, choose the one that addresses root cause. For example, if a scenario describes structured deposits by several people into one account, identifying the account as a funnel account or a smurfing scheme is more complete than simply noting large cash deposits.

Tip 10 - Practise with scenario reasoning, not rote memory. Write your own three-line scenarios for each technique and ask yourself: what is the red flag, what is the technique, what stage, what control failed, what should happen next. This mirrors exactly how the exam is written.

9. Worked Example

Scenario: A customer who opened a personal checking account four months ago, stating employment as a part-time retail clerk, has received 14 cash deposits over three weeks ranging from USD 8,500 to USD 9,800 at six different branches. Within one to two days of each deposit, nearly the full balance is wired to an account in a country identified by FATF as having strategic AML deficiencies. When a branch manager asks about the source of funds, the customer says it is from selling items online and asks whether the bank reports deposits over USD 10,000.

Analysis: The deposits are consistently just under the reporting threshold across multiple branches - structuring. The activity is inconsistent with a part-time clerk's income - profile mismatch. Rapid onward wires with minimal balance - pass-through or layering. Destination is a high-risk jurisdiction - geographic red flag. The question about thresholds - evasion indicator. Taken together, this is a textbook account-based laundering pattern, most likely a funnel or mule account at the placement-to-layering transition.

Correct response for the bank: Document the observations, escalate to the AML compliance function, aggregate the deposits across branches to assess structuring, evaluate and most likely file a suspicious activity report, consider enhanced monitoring or account restriction under the bank's policy, and do not inform the customer that a report is being considered.

Typical distractors: Advise the customer to consolidate deposits so a CTR can be filed (tipping off and facilitating), close the account immediately without reporting (misses the reporting obligation), or conclude no action is needed because each deposit was under the threshold (misunderstands structuring).

10. Quick Revision Checklist

- Can you define structuring, smurfing, cuckoo smurfing, funnel accounts, money mules, nominee accounts, loan-back schemes, concentration accounts and payable-through accounts in one sentence each?
- Can you list ten red flags for retail deposit accounts without looking?
- Can you assign each retail product abuse to placement, layering or integration?
- Do you know why structuring is reportable even without proven criminal proceeds?
- Do you know what tipping off is and why it is never an acceptable answer?
- Can you explain why concentration accounts need special controls?
- Can you describe the correct escalation path for a front-line employee who observes suspicious account activity?

If you can answer yes to each of these, you are well prepared for exam questions on retail banking products and account-based laundering. Remember: the exam rewards candidates who think like an investigator - spot the inconsistency, name the technique, identify the stage, and choose the proportionate, lawful response.