Risk Manifestation Through Products and Services

1. Why This Topic Matters

Money launderers do not launder money in the abstract. They launder it through something: a wire transfer, a correspondent account, a single-premium life insurance policy, a letter of credit, a prepaid card, a trust, or a casino chip. The products and services a financial institution offers are the actual pipes through which illicit funds flow. If you understand how each product can be abused, you understand the mechanics of financial crime at the operational level.

For the ACAMS CAMS exam, this topic sits inside the Financial Crime Risks and Methods domain, which historically carries roughly a quarter or more of the exam weight. Products and services are also one of the four classic pillars of an institutional AML risk assessment (alongside customers, geographies, and delivery channels), so this content reappears in questions about risk assessments, compliance program design, and suspicious activity identification. You cannot build a risk-based approach without knowing which products are inherently higher risk and why.

Regulators and standard-setters (FATF, the Wolfsberg Group, the Basel Committee, the US FFIEC Examination Manual, and the EU AML Directives) all require institutions to assess product risk. A compliance officer who cannot articulate why private banking or correspondent banking is higher risk than a basic payroll account will fail both the exam and the job.

2. What Risk Manifestation Through Products and Services Means

The phrase describes how money laundering, terrorist financing, sanctions evasion, fraud, and corruption risks become visible and exploitable within specific financial offerings. Every product has characteristics that make it more or less attractive to criminals. The key attributes that drive inherent product risk are:

- Anonymity: Can the true user hide behind the product (cash, bearer instruments, some prepaid cards, nested correspondent relationships)?
- Speed and velocity: How quickly can value move and how hard is it to recall (wire transfers, electronic funds transfers, virtual assets)?
- Cross-border reach: Does the product naturally move funds across jurisdictions (correspondent banking, trade finance, remittances)?
- Convertibility and liquidity: Can the product easily be converted to cash or other assets (cash-value insurance, securities, precious metals, casino chips)?
- Third-party involvement: Does the product allow funds to be paid in or out by someone other than the account holder (payable-through accounts, third-party payment processors, loans repaid by third parties)?
- Complexity: Does the product obscure the audit trail through layers (structured products, trusts, shell company services, back-to-back loans)?
- Volume of cash: Does the product naturally involve large or frequent cash flows (cash-intensive business accounts, safe deposit boxes, currency exchange)?

A product scoring high on several of these attributes is inherently high risk. Controls then reduce that to residual risk. The exam tests whether you can identify the inherent risk and the appropriate mitigating control.

3. How It Works: Key Products and Their Vulnerabilities

3.1 Private Banking and Wealth Management
Private banking serves high-net-worth individuals with personalized, confidential service. Risk manifests through: relationship managers who are compensated on assets gathered and may be reluctant to challenge clients; use of personal investment companies (PICs), trusts, and offshore structures that obscure beneficial ownership; numbered or coded accounts; concentration accounts commingling client funds; and the presence of politically exposed persons (PEPs). The Riggs Bank case (Pinochet, Equatorial Guinea) and the Citibank Salinas case are the classic examples. Key control: enhanced due diligence (EDD), senior management approval for high-risk clients, independent review of the relationship manager, and source of wealth and source of funds verification.

3.2 Correspondent Banking
A correspondent bank provides services (payments, clearing, cash management) to a respondent bank in another jurisdiction. The correspondent does not know the respondent's customers, so it relies on the respondent's AML program. Risks include: nested or downstream correspondent accounts, where the respondent allows other banks to use the account; payable-through accounts (PTAs), where the respondent's customers can directly transact on the correspondent's books, effectively becoming anonymous customers of the correspondent; and shell banks, which have no physical presence and no affiliation with a regulated group. The USA PATRIOT Act Section 312 requires due diligence and EDD for foreign correspondent accounts, Section 313 prohibits accounts for foreign shell banks, and Section 319 allows seizure of funds in US correspondent accounts and requires maintaining ownership and agent records. The Wolfsberg Correspondent Banking Principles and the Correspondent Banking Due Diligence Questionnaire (CBDDQ) are the industry standard. Key control: understand the respondent's business, ownership, regulatory environment, AML program, and whether it allows nesting or PTAs.

3.3 Electronic Funds Transfers and Wire Transfers
Wires move value quickly and across borders, making them ideal for layering. Red flags include transfers to or from high-risk jurisdictions with no business rationale, round-dollar amounts, immediate outbound transfer of just-received funds, incomplete originator or beneficiary information, use of multiple accounts to aggregate funds, and payments inconsistent with the customer's profile. FATF Recommendation 16 (the Travel Rule) requires originator and beneficiary information to accompany transfers. Cover payments (MT202 COV) historically allowed stripping of originator information; SWIFT message changes now require transparency. Key control: transaction monitoring, sanctions screening of all parties, and rejection of incomplete messages.

3.4 Trade Finance
Trade-based money laundering (TBML) exploits letters of credit, documentary collections, and open account trade. Methods include over- and under-invoicing, multiple invoicing of the same shipment, over- and under-shipment, phantom shipments, and misrepresenting goods or quality. The black market peso exchange is the classic TBML scheme. Red flags: goods inconsistent with the customer's business, shipments through high-risk or sanctioned jurisdictions, invoice prices significantly off market, unusual payment structures, and letters of credit amended frequently without reasonable justification. Key control: document review, price checking against market benchmarks, dual-use goods screening, and vessel and sanctions screening.

3.5 Cash-Related Products
Cash deposits, currency exchange, safe deposit boxes, and cash-intensive business accounts (restaurants, car washes, convenience stores, parking lots) are the gateway for the placement stage. Structuring (smurfing) involves deposits just below reporting thresholds, such as USD 10,000 for the Currency Transaction Report in the US. Safe deposit boxes offer no transaction trail and may store cash, bearer instruments, or precious metals. Key control: cash reporting, monitoring for structuring patterns across branches and days, and understanding expected cash volume for the business type.

3.6 Monetary Instruments
Cashier's checks, money orders, traveler's checks, and bearer bonds allow cash to be converted into a portable, less suspicious form. Purchases in sequential numbers, just under thresholds, or for third parties are red flags. Many jurisdictions require recordkeeping for monetary instrument purchases with cash above a certain amount (USD 3,000 in the US).

3.7 Prepaid Cards and Stored Value
Open-loop prepaid cards can be loaded with cash, used anywhere, and carried across borders without being declared as currency in some jurisdictions. Risks: anonymous or minimally verified cards, high load limits, reloadability, cash access at ATMs, and loading by third parties. Key control: customer identification at purchase or activation, load and velocity limits, monitoring of multiple cards linked to one customer, and restrictions on cash access.

3.8 Lending and Credit Products
Loans can be laundering tools when criminals collateralize a loan with illicit funds (cash-secured or back-to-back loans), repay loans early with dirty money, or have a third party repay the loan. Credit cards can be overpaid to create a credit balance that is then refunded by check. Mortgages used in real estate schemes may involve inflated appraisals or straw buyers. Red flags: sudden early repayment with no plausible source, collateral held in offshore accounts, loans guaranteed by unrelated third parties, and loans that are immediately drawn and wired overseas.

3.9 Insurance Products
Life insurance, particularly single-premium policies and annuities with cash surrender value, is the most vulnerable insurance line. A launderer pays a large premium with illicit funds, then surrenders the policy early (accepting a penalty) to receive a clean check from the insurer. Other methods: changing beneficiaries to unrelated parties, overpaying premiums and requesting refunds, assigning policies to third parties, and using the free-look period to cancel and obtain refunds. Brokers and agents are intermediaries who may not perform adequate CDD. Key control: CDD at the insurer level, monitoring early surrenders and premium refunds, and attention to policies paid by third parties or from offshore accounts.

3.10 Securities and Brokerage
Securities products enable layering because they are liquid, international, and can be transferred in and out quickly. Risks include: wash trades and mirror trading (buying and selling the same security to transfer value, as in the Deutsche Bank Russian mirror trading case), penny stock pump-and-dump schemes, use of omnibus accounts that hide underlying clients, journaling of securities between unrelated accounts, delivery versus payment transactions where the counterparty is unknown, and brokers who are commission-driven. Key control: CDD on underlying clients of omnibus accounts where possible, monitoring for trades with no economic purpose, and suspicious activity reporting.

3.11 Trust and Company Service Providers and Corporate Vehicles
The service of creating shell companies, shelf companies, trusts, and foundations, and providing nominee directors and shareholders, allows criminals to hide beneficial ownership. Bearer shares are a particular concern. The Panama Papers and the Pandora Papers illustrate the scale. FATF Recommendations 24 and 25 address transparency of legal persons and arrangements. Key control: identify and verify beneficial owners (typically at 25 percent or lower thresholds), understand the purpose of the structure, and be alert to complex structures with no legitimate rationale.

3.12 Money Services Businesses and Remittances
MSBs (money transmitters, currency exchangers, check cashers) often deal with cash, serve unbanked and migrant populations, and may operate through agents with limited oversight. Informal value transfer systems such as hawala, hundi, and fei chien move value without moving funds, relying on trust and settlement through trade or other means. Banks providing accounts to MSBs face indirect exposure. Key control: registration and licensing, agent oversight, and risk-based due diligence by banks that serve MSBs.

3.13 Virtual Assets and New Payment Methods
Virtual currencies, mobile payments, peer-to-peer payment apps, and online marketplaces offer speed, cross-border reach, and varying degrees of pseudonymity. FATF extended its standards to virtual asset service providers (VASPs) and applied the Travel Rule to them. Risks: mixers and tumblers, privacy coins, unhosted wallets, decentralized exchanges, and ransomware payments. Key control: VASP registration, blockchain analytics, Travel Rule compliance, and CDD on customers transacting with VASPs.

3.14 Casinos and Gaming
Casinos offer chips, markers (credit), front-money accounts, and payouts by check. A launderer buys chips with cash, gambles minimally, and cashes out, or deposits cash into a front-money account and withdraws by check. Junket operators introduce an additional layer. Online gaming adds cross-border and anonymity issues. Many jurisdictions treat casinos as financial institutions for AML purposes.

3.15 Real Estate, Dealers in High-Value Goods, and Gatekeepers
Real estate absorbs large sums, can appreciate, and can be bought through corporate vehicles or all-cash transactions. Dealers in precious metals, stones, art, and luxury vehicles accept cash and sell portable, high-value, subjectively priced goods. Lawyers, accountants, and notaries (gatekeepers) provide services such as managing client funds, forming companies, and conducting real estate transactions. FATF Recommendations 22 and 23 cover these designated non-financial businesses and professions (DNFBPs).

3.16 Concentration Accounts and Third-Party Payment Processors
Concentration (or omnibus or suspense) accounts commingle funds from multiple customers for internal processing; if customer identifiers are stripped, the audit trail is lost. Third-party payment processors (TPPPs) process payments for merchants; the bank sees the processor, not the merchants, creating a nested-type risk. Key control: prohibit customers from directing transactions into concentration accounts, maintain audit trails, and perform due diligence on processors and their merchant base.

4. How Product Risk Fits into the Risk Assessment

An institution should inventory every product and service, rate the inherent risk of each using the attributes in Section 2, identify the controls applied, and arrive at a residual risk rating. Product risk is then combined with customer, geographic, and delivery channel risk to produce an enterprise-wide assessment. The outputs drive policies, transaction monitoring scenarios, training, and resource allocation. New products must go through a new product approval process that includes compliance review before launch. Regulators expect the risk assessment to be documented, periodically updated, and responsive to changes such as entering a new market or launching a new digital channel.

5. Exam Tips: Answering Questions on Risk Manifestation Through Products and Services

Tip 1: Identify which product is in the scenario first. CAMS questions are scenario-based. Before reading the answer choices, name the product (correspondent account, single-premium annuity, letter of credit, prepaid card) and recall its signature vulnerability. The correct answer almost always aligns with that signature vulnerability.

Tip 2: Know the distinguishing vocabulary. Expect to differentiate nested accounts from payable-through accounts, shell banks from shell companies, concentration accounts from omnibus accounts, open-loop from closed-loop prepaid cards, and structuring from smurfing (smurfing is structuring using multiple people). Precision in terminology eliminates distractors.

Tip 3: Match the product to the laundering stage. Cash products and monetary instruments typically appear in placement. Wires, securities, trade finance, and insurance surrender appear in layering. Real estate, loans, and business investments appear in integration. If a question asks which stage is illustrated, use the product as your clue.

Tip 4: Look for the absence of economic rationale. The common thread across all products is activity that makes no business sense: early loan repayment with a penalty, insurance surrender in the free-look period, wash trades, letters of credit for goods unrelated to the customer's business. When an answer choice centers on lack of legitimate purpose, it is usually correct.

Tip 5: Prefer the risk-based, proportionate control. When asked what the institution should do, avoid extreme choices such as immediately closing all accounts or ignoring the issue. The best answer is typically to conduct enhanced due diligence, escalate to compliance, document the review, and file a suspicious activity report if warranted. Never tip off the customer.

Tip 6: Remember correspondent banking is a favorite. Expect several questions on correspondent banking, including the prohibition on shell banks, the need to understand whether a respondent permits nesting, PTA controls, the Wolfsberg principles, and the limits of relying on the respondent's AML program. If a question involves a foreign bank customer, think Section 312, 313, and 319.

Tip 7: Link products to famous cases. Riggs Bank and private banking for PEPs, Citibank and Raul Salinas, Deutsche Bank mirror trades and securities, HSBC and cash and MSB exposure, Danske Bank Estonia and non-resident portfolios, Wachovia and Mexican casas de cambio. Case recognition helps you decode what the question is really testing.

Tip 8: Watch for the four risk pillars. If a question asks what categories a risk assessment should consider, the answer includes products and services alongside customers, geographies, and delivery channels. If it asks about a new product, the answer involves pre-launch compliance review and updating the risk assessment.

Tip 9: Read for the single best answer. Several options may be plausible red flags or controls. Choose the one most specific to the product in the scenario. A generic answer about CDD will lose to an answer about verifying whether the respondent bank allows nested accounts if the scenario involves a correspondent relationship.

Tip 10: Manage your time. Product questions can be long. Skim for the product name and the suspicious behavior, eliminate two obviously wrong choices, then decide between the remaining two using the economic-rationale and proportionate-control tests above.

6. Quick Reference Summary

- Private banking: PEPs, secrecy, PICs, relationship manager conflicts; control with EDD and senior approval.
- Correspondent banking: nesting, PTAs, shell banks; control with respondent due diligence and Wolfsberg CBDDQ.
- Wires: speed and cross-border layering; control with Travel Rule, monitoring, and screening.
- Trade finance: over and under invoicing, phantom shipments; control with document and price review.
- Cash and monetary instruments: placement and structuring; control with reporting and pattern monitoring.
- Prepaid cards: anonymity and portability; control with ID, load limits, and velocity monitoring.
- Loans: cash-collateralized, early repayment, third-party payers; control by questioning source of repayment.
- Insurance: single-premium and early surrender; control by monitoring surrenders and refunds.
- Securities: wash and mirror trades, omnibus accounts; control by scrutinizing trades with no purpose.
- Corporate vehicles and trusts: hidden beneficial ownership; control by identifying beneficial owners.
- MSBs and hawala: cash and agent risk; control with licensing and agent oversight.
- Virtual assets: pseudonymity and speed; control with VASP regulation and blockchain analytics.
- Casinos, real estate, high-value goods, gatekeepers: DNFBP exposure; control through sector-specific AML obligations.

Master these pairings of product, vulnerability, and control, and you will be well positioned to answer any CAMS question on how financial crime risk manifests through products and services.