Prepaid Cards and Stored Value Products

Why This Topic Matters
Prepaid cards and stored value products (SVPs) sit at the intersection of financial inclusion and financial crime. They give unbanked and underbanked people access to electronic payments, payroll, government benefits, and e-commerce. At the same time, they offer criminals many of the attributes of cash: portability, relative anonymity, and the ability to move value across borders without a traditional bank account. The Financial Action Task Force (FATF) has repeatedly identified new payment products and services (NPPS), including prepaid cards, as an area of elevated money laundering and terrorist financing risk. For the CAMS exam, this topic appears within the broader domain of risks and methods of money laundering and terrorist financing, and it tests whether you can identify vulnerabilities, recognise red flags, and apply a risk-based approach to mitigating controls.

What Prepaid Cards and Stored Value Products Are
A stored value product is any instrument that holds monetary value that has been paid in advance and can later be spent, transferred, or withdrawn. The value may be stored on the card itself (less common today) or, more typically, in a central database maintained by the issuer or program manager. Key categories include:

Open-loop (network-branded) prepaid cards: Carry a Visa, Mastercard, American Express, or Discover logo and can be used anywhere those networks are accepted, including ATM withdrawals and cross-border transactions. These present the highest financial crime risk because of their broad usability and cash-access features.

Closed-loop prepaid cards: Usable only at a specific merchant or group of merchants (for example, a retailer gift card or a transit card). Lower inherent risk because value cannot easily be converted to cash, though they can still be exploited in fraud and scam schemes and resold on secondary markets.

Semi-closed or restricted-loop cards: Usable at a defined set of merchants, such as a shopping mall card. Risk falls between open and closed loop.

Reloadable versus non-reloadable cards: Reloadable cards can receive additional value repeatedly, potentially from multiple funding sources, which increases their attractiveness for layering. Non-reloadable cards are single-use and lower risk individually, though bulk purchases can still be abused.

Payroll cards, government benefit cards, and health or flexible spending cards: Typically lower risk because funding sources are known and verified employers or government agencies.

Mobile wallets and digital stored value: Value held in apps or online accounts shares many of the same characteristics and is often grouped with SVPs in regulatory guidance.

Key Participants in the Prepaid Ecosystem
Understanding who does what is essential, because responsibility for AML controls is distributed:

Issuer: Usually a bank or regulated financial institution that holds the funds and bears regulatory responsibility.
Program manager: Designs and markets the card program, often outsourcing operations; may perform customer identification on behalf of the issuer.
Processor: Handles transaction authorisation and settlement.
Distributor or seller: Retail outlets, kiosks, or online channels that sell and load the cards, often with minimal interaction with the customer.
Network: The card scheme that provides acceptance infrastructure.
Reload agents: Third parties that accept cash to add value to cards.

The involvement of many non-bank intermediaries creates gaps in customer knowledge and oversight, which is one of the central vulnerabilities examiners expect you to recognise.

How Prepaid Products Are Exploited for Financial Crime
Anonymity and weak identification: Many low-value or non-reloadable cards can be purchased with cash and no identification. Criminals can buy numerous cards below identification thresholds, a form of structuring.

Cash-like portability: Open-loop cards allow value to be carried across borders in a wallet rather than a suitcase, evading currency reporting requirements. A card loaded with the maximum balance is physically indistinguishable from an empty one.

Global ATM access: Funds loaded in one country can be withdrawn as cash in another, effectively providing an informal cross-border remittance channel and a tool for integrating illicit proceeds.

Multiple funding sources: Reloadable cards can be funded by cash, bank transfers, other cards, or third parties, enabling layering and obscuring the origin of funds.

Rapid loading and depletion: Cards loaded to the maximum and quickly emptied, often at ATMs, are a classic laundering pattern.

Fraud and scam proceeds: Gift cards and prepaid cards are the preferred payment method demanded in many scams (romance, tech support, impersonation of government agencies). Victims are instructed to buy cards and read the numbers to the fraudster, who then resells or liquidates them.

Drug trafficking and bulk value movement: Trafficking organisations have used prepaid cards to repatriate proceeds; cards can be loaded by money mules and withdrawn by associates abroad.

Terrorist financing: Small-value, hard-to-trace cards have been used to fund travel, logistics, and operational costs.

Human trafficking and smuggling: Traffickers use prepaid cards to pay for advertising, travel, and lodging while avoiding traceable bank accounts.

Tax evasion and corruption: Value can be held outside the banking system and spent without a clear audit trail.

Red Flags Associated with Prepaid Products
Common indicators tested on the CAMS exam include:
Purchase of multiple cards in a single transaction or in a short period, especially with cash.
Loads structured just below identification or reporting thresholds.
Cards loaded in one jurisdiction and consistently used or emptied in another, particularly a high-risk jurisdiction.
Frequent ATM withdrawals immediately after loading, with little or no point-of-sale activity.
Loading by third parties unrelated to the cardholder.
Large numbers of cards linked to the same name, address, phone number, device, or IP address.
Use of cards to purchase other prepaid cards or to fund virtual asset purchases.
Cardholder reluctance to provide identification or inconsistent identity information.
Unusual activity patterns from reload agents or sellers, such as high volumes inconsistent with their business profile.
Cards detected during border crossings in bulk, or travellers carrying many cards.

Regulatory and Industry Responses
FATF guidance: FATF's guidance on prepaid cards, mobile payments, and internet-based payment services encourages a risk-based approach that considers whether a product is reloadable, its value limits, its usability (open versus closed loop), cash access, funding methods, and cross-border functionality.

United States: Under the Bank Secrecy Act, FinCEN's prepaid access rule brought providers and sellers of prepaid access within the definition of money services businesses, requiring registration, AML programs, customer identification, recordkeeping, and suspicious activity reporting. Certain lower-risk products are exempted, such as closed-loop products below defined limits, payroll and government benefit cards, and non-reloadable products under specified thresholds, provided they lack certain high-risk features. Prepaid access is also included in the definition of monetary instruments for purposes of cross-border reporting in certain circumstances.

European Union: Successive Anti-Money Laundering Directives have progressively lowered the thresholds under which anonymous prepaid cards may be issued and restricted the use of anonymous cards issued outside the EU, reflecting concern about terrorist financing.

Card network rules: Visa and Mastercard impose their own program requirements on issuers and program managers, including limits and monitoring expectations.

Risk-Based Controls
Effective mitigation combines product design and operational controls:

Product design controls: Value limits on loads, balances, and withdrawals; limits on the number of cards per customer; restrictions on cash loading and ATM access for lower-verification tiers; blocking of use in high-risk jurisdictions; and limiting third-party reloads.

Customer due diligence: Tiered identification where functionality expands only as verification increases; collection and verification of identity for reloadable and higher-value cards; screening against sanctions and politically exposed person lists; and enhanced due diligence for high-risk customers and geographies.

Transaction monitoring: Rules and analytics designed for prepaid patterns, such as rapid load-and-withdraw cycles, cross-border ATM usage, linked card networks, and aggregation across cards sharing common identifiers.

Third-party oversight: Due diligence and ongoing monitoring of program managers, distributors, and reload agents, with clear contractual allocation of AML responsibilities. The issuer cannot outsource its regulatory accountability.

Reporting and recordkeeping: Filing suspicious activity reports, maintaining transaction records that allow reconstruction of activity, and ensuring that records are available to law enforcement.

Training: Educating frontline retail staff to recognise bulk purchases, scam victims, and structuring behaviour.

How to Approach Exam Questions on This Topic
CAMS questions are scenario-based and ask you to identify the best answer among plausible options. Questions on prepaid products typically fall into several patterns:

Risk identification questions: You are given a product description and asked which feature presents the greatest risk. Apply the FATF risk factors: open-loop beats closed-loop, reloadable beats non-reloadable, cash loading and ATM access raise risk, cross-border functionality raises risk, anonymous purchase raises risk.

Red flag recognition questions: You are given a transaction pattern and asked whether it is suspicious and what action to take. Look for structuring, rapid load-and-withdraw cycles, geographic mismatch, third-party funding, and linked cards.

Control selection questions: You are asked which control would most effectively mitigate a described risk. Choose the control that directly addresses the specific vulnerability; for anonymity choose identification requirements, for cross-border withdrawal choose geographic blocking or ATM limits, for bulk purchase choose per-customer card limits.

Responsibility questions: You are asked who bears the AML obligation in a multi-party program. Remember that the regulated issuer retains ultimate accountability even when functions are outsourced to program managers or sellers.

Exam Tips: Answering Questions on Prepaid Cards and Stored Value Products

Tip 1: Rank risk features systematically. When comparing products, mentally score each on five factors: open versus closed loop, reloadable versus non-reloadable, cash in and cash out capability, cross-border use, and level of identification. The product with more high-risk features is the answer to the question asking which is riskiest.

Tip 2: Treat prepaid cards as cash equivalents. Many correct answers follow from the principle that an open-loop prepaid card is functionally portable cash. If a scenario describes someone carrying many cards across a border, think bulk cash smuggling and currency reporting evasion.

Tip 3: Watch for structuring language. Phrases such as multiple purchases just under the limit, several cards bought at different stores on the same day, or loads kept below the threshold signal structuring. The expected response is usually to file a suspicious activity report rather than merely to refuse the transaction or confront the customer.

Tip 4: Remember the load-and-withdraw pattern. Rapid loading followed by immediate ATM depletion, especially abroad, with no retail spending, is the single most tested prepaid red flag.

Tip 5: Distinguish the players. Know the difference between issuer, program manager, seller, and reload agent. If asked who must register or who is ultimately accountable, the regulated issuer bears responsibility; the question may try to tempt you with the program manager or retailer.

Tip 6: Apply the risk-based approach rather than a blanket prohibition. Answers that suggest banning all prepaid products or applying identical controls to every card are almost always wrong. The CAMS philosophy favours proportionate controls tailored to risk, such as tiered identification and value limits.

Tip 7: Do not confuse fraud with money laundering, but recognise the link. Gift card scams are fraud, but the subsequent liquidation of those cards is laundering. If the question asks about laundering risk, focus on how value is converted and moved; if it asks about fraud, focus on victim indicators.

Tip 8: Remember closed-loop is not zero risk. Closed-loop gift cards are lower risk but can be resold, used in scams, or purchased in bulk with illicit cash. If a question describes a large volume of gift card purchases with cash at a retailer, this is still reportable.

Tip 9: Know the regulatory direction of travel. Both the US prepaid access rule and EU directives have expanded coverage and lowered anonymity thresholds over time. Answers reflecting tighter identification requirements for reloadable and higher-value products align with the current regulatory stance.

Tip 10: Choose the answer that preserves the investigation. When a frontline employee spots suspicious prepaid activity, the best answer typically involves documenting, escalating to compliance, and filing a report, rather than tipping off the customer or taking unilateral action.

Summary
Prepaid cards and stored value products offer legitimate convenience and inclusion benefits but replicate many of the attributes that make cash attractive to criminals. The CAMS exam expects you to classify products by risk features, recognise characteristic red flags such as structuring and rapid cross-border depletion, understand the distributed responsibilities within the prepaid ecosystem, and select proportionate risk-based controls. Master the five risk factors, the load-and-withdraw pattern, and the principle that the issuer remains accountable, and you will be well prepared for any question in this area.