Securities firms and broker-dealers face distinctive money laundering and financial crime risks that CAMS professionals must understand. Unlike banks, these institutions handle complex products, rapid transactions, and international flows, creating opportunities for criminals to disguise illicit funds.

Key vulnerabilities include: (1) Layering opportunities – securities markets allow rapid buying and selling across jurisdictions, making it easy to obscure the origin of funds through multiple transactions. (2) Variety of products – equities, bonds, derivatives, options, and mutual funds offer numerous vehicles for moving value. (3) Non-cash nature – because most transactions involve wire transfers or checks rather than cash, placement typically occurs elsewhere, meaning broker-dealers mainly face layering and integration risks. (4) Journal entries and account transfers – funds can move between accounts within the same firm or across firms with limited scrutiny. (5) Bearer securities and physical certificates – though declining, these remain anonymity tools.

Specific typologies include market manipulation schemes such as pump-and-dump, where criminals inflate low-priced microcap or penny stocks before selling; insider trading; wash trading; and matched orders, where parties simultaneously buy and sell to create false activity or transfer value. Low-priced securities and shell companies are frequently exploited. Omnibus accounts and introduced accounts (where one firm executes and another clears) can obscure beneficial ownership, especially when foreign financial institutions are involved. Nominee accounts and offshore entities further complicate identification.

Regulatory frameworks—such as the U.S. Bank Secrecy Act requirements, FINRA Rule 3310, and FATF Recommendations—require broker-dealers to implement risk-based AML programs including Customer Identification Programs, customer due diligence, suspicious activity monitoring and reporting, independent testing, and designated compliance officers. Red flags include customers indifferent to investment risk or returns, unexplained wire transfers to unrelated third parties, frequent deposits of physical certificates, use of multiple accounts without business rationale, and transactions inconsistent with stated investment objectives. Effective mitigation demands trade surveillance integrated with AML monitoring, robust beneficial ownership verification, and strong oversight of correspondent and omnibus relationships.

Investment funds and asset management present distinct money laundering and terrorist financing risks that CAMS professionals must understand within a sector-based risk framework. These vehicles pool capital from multiple investors and deploy it across diverse assets, creating layers between the ultimate beneficial owner and the underlying investments. This structural complexity can be exploited by criminals seeking to obscure the origin of illicit funds.

Key vulnerabilities include the use of intermediaries such as distributors, platforms, and nominee accounts, which can distance the fund manager from the end investor and weaken customer due diligence. Reliance on third parties for KYC introduces risk if those parties apply weaker standards or operate in jurisdictions with inadequate AML controls. Omnibus accounts, where many investors are aggregated under one name, further reduce transparency of beneficial ownership.

Certain fund types carry elevated risk. Hedge funds and private equity vehicles often involve high-net-worth individuals, politically exposed persons, and offshore structures, and their investment strategies can be opaque. Funds domiciled in secrecy jurisdictions or using layered corporate structures, trusts, and foundations complicate ownership identification. Redemption features also matter: early or frequent redemptions, particularly to third-party accounts or different jurisdictions, may indicate layering or integration of criminal proceeds.

Typical red flags include investors unwilling to disclose source of wealth, subscriptions funded from unrelated third parties, rapid in-and-out transactions inconsistent with stated investment objectives, requests to redeem to accounts other than the originating one, and unusual interest in a fund's AML procedures.

Mitigation requires a risk-based approach: robust beneficial ownership verification, enhanced due diligence for PEPs and high-risk jurisdictions, clear contractual allocation of KYC responsibilities with intermediaries, ongoing transaction monitoring tuned to fund-specific patterns, and independent testing. Regulators such as FATF, the SEC, and ESMA emphasize that asset managers, not just custodians or administrators, bear direct AML obligations, making governance and a strong compliance culture essential.

In the CAMS framework, lending, mortgage and consumer finance products are recognized as vulnerable vehicles for money laundering and financial crime, even though they are often perceived as lower-risk than deposit or payment products because they move money out of the institution rather than in. The core risk arises because criminals can use loans to legitimize illicit funds: proceeds of crime are used to repay or prepay a loan, so the asset acquired (property, vehicle, business) appears to be financed by a legitimate lender rather than by dirty money. This is a classic layering and integration technique.

Mortgage lending carries specific risks. Launderers may purchase real estate with a mortgage, then rapidly pay down the balance using cash or structured deposits, or deliberately default so the lender forecloses and returns apparent 'clean' equity. Inflated or deflated appraisals, straw buyers, nominee purchasers, back-to-back loans secured by cash collateral in another jurisdiction, and mortgage fraud schemes involving false income documentation all create exposure. Properties can also be flipped repeatedly to obscure beneficial ownership.

Consumer finance products such as auto loans, personal loans, credit cards and buy-now-pay-later facilities present risks through overpayment of balances followed by refund requests, use of third-party payers, early settlement with unexplained funds, and synthetic or stolen identities used to obtain credit (fraud that generates laundered proceeds). Loan-back schemes, where a criminal lends to themselves through a shell company, are another concern.

Mitigating controls expected under CAMS principles include robust customer due diligence and beneficial ownership verification, scrutiny of source of funds for down payments and repayments, monitoring for unusual prepayment or third-party payments, collateral verification, appraisal independence, and suspicious activity reporting. Institutions should apply a risk-based approach, recognizing that lending products, despite outbound cash flows, remain attractive to launderers seeking a documented, legitimate-looking financial trail.

Prepaid cards and stored value products (SVPs) are payment instruments that hold monetary value, either on the card itself or on a linked remote account, and can be used for purchases, cash withdrawals, or transfers. Within the CAMS framework and the broader analysis of financial crime risks by sector, they are recognized as a higher-risk product category because of specific structural vulnerabilities. Key risk factors include: (1) Anonymity—many prepaid products, especially non-reloadable gift cards or those issued without full customer due diligence, allow users to hold value without identity verification; (2) Portability—cards are small, easily concealed, and may fall outside traditional cross-border currency reporting thresholds, making them attractive for bulk cash smuggling substitutes; (3) Funding flexibility—cards may be loaded via cash, wire, other cards, or online channels, obscuring the origin of funds and enabling the placement stage of money laundering; (4) Global ATM access—open-loop cards (branded by networks like Visa or Mastercard) permit cash withdrawal worldwide, facilitating layering and integration; (5) Layered intermediaries—program managers, issuers, distributors, and third-party processors create fragmented oversight and gaps in AML responsibility. FATF guidance on New Payment Products and Services and the Prepaid Access Rule in the United States (FinCEN, 2011) address these risks by requiring providers of prepaid access to register as money services businesses, implement AML programs, perform customer identification, maintain records, and file suspicious activity reports. Mitigating controls include load and velocity limits, restricting cash reloads and ATM access, transaction monitoring for structuring and rapid card-cycling, geographic restrictions, and robust due diligence on distributors and agents. Red flags include multiple cards purchased by one individual, cards loaded just below reporting thresholds, immediate withdrawal of loaded funds in foreign jurisdictions, and use of cards by unrelated third parties. Professionals must balance financial inclusion benefits against these laundering and terrorist financing risks.

Money Services Businesses (MSBs) and remittance providers are a critical sector in anti-money laundering (AML) frameworks, and CAMS candidates must understand their unique risk profile. An MSB is a non-bank financial institution that offers services such as currency exchange, check cashing, money orders, traveler's checks, stored value or prepaid cards, and, most significantly, money transmission or remittance. Remittance refers to the cross-border transfer of funds, typically by migrant workers sending money to family in their home countries, and it represents hundreds of billions of dollars annually.

From a financial crime perspective, MSBs present elevated risks for several reasons. First, transactions are often cash-based and one-off, meaning the provider may have limited, non-continuous relationships with customers, making it harder to establish a baseline of normal behavior. Second, transactions move quickly and across jurisdictions, including high-risk or sanctioned countries with weak AML regimes. Third, the use of agents and sub-agents creates a layered distribution network where oversight can be inconsistent, and some agents may collude with criminals. Fourth, structuring—breaking large sums into smaller transfers below reporting thresholds—is a common typology, as is the use of multiple senders or recipients (smurfing). Informal value transfer systems such as hawala operate outside formal channels and leave minimal paper trails.

Regulators therefore expect MSBs to register or license with authorities (e.g., FinCEN in the United States), implement a written AML program, appoint a compliance officer, conduct customer due diligence and verify identity above specified thresholds, screen against sanctions lists, monitor and report suspicious activity, keep records of funds transfers, and train staff and agents. Principals must perform risk-based oversight of their agents. Banks providing accounts to MSBs must apply enhanced due diligence, which has contributed to de-risking, where banks terminate MSB relationships, pushing funds into less transparent channels—an outcome regulators like FATF discourage. Understanding this balance between financial inclusion and crime prevention is central to the CAMS curriculum.

Payment Service Providers (PSPs) and e-money issuers are non-bank financial institutions that facilitate electronic payments, money transfers, and the storage of monetary value in digital form. PSPs include payment processors, merchant acquirers, mobile payment platforms, and remittance apps, while e-money issuers offer prepaid cards, digital wallets, and stored-value accounts funded by customers and usable for purchases or transfers. In the CAMS framework, these sectors are recognised as presenting distinct money laundering and terrorist financing risks.

Key vulnerabilities include: speed and volume of transactions, which allow rapid layering of funds; non-face-to-face onboarding, which increases identity fraud and the use of straw men or synthetic identities; cross-border reach, enabling funds to move across jurisdictions with varying regulatory standards; and the potential for anonymity, particularly where products have high load limits, permit cash funding, or allow person-to-person transfers without robust customer due diligence. Prepaid cards are especially attractive to criminals because they are portable, reloadable, and can be used to withdraw cash abroad, effectively functioning as a cash substitute. Agent and distributor networks add another layer of risk, as they may be poorly supervised and susceptible to complicity in structuring or smurfing.

Typologies associated with these sectors include funding wallets with illicit proceeds and cashing out through ATMs, merchant collusion with fictitious transactions, micro-structuring across multiple accounts, and the use of e-money to finance terrorism due to low value thresholds and ease of international transfer.

Mitigating controls expected by regulators and FATF include risk-based customer due diligence proportionate to product functionality, transaction and load limits, monitoring for unusual velocity or geographic patterns, enhanced oversight of agents, screening against sanctions lists, and timely suspicious activity reporting. The FATF Recommendations on new payment methods and the EU Payment Services Directive and E-Money Directive establish licensing, safeguarding, and AML obligations. AML professionals must understand these products' features to calibrate controls effectively while preserving financial inclusion benefits.

E-commerce platforms and online marketplaces present distinctive money laundering and financial crime risks that CAMS professionals must understand. These platforms connect buyers and sellers globally, process high volumes of transactions, and often involve multiple intermediaries, creating opportunities for criminals to disguise illicit funds as legitimate commercial activity.

Key risks include transaction laundering, where a merchant processes payments for illegal goods or services through a seemingly legitimate storefront, often using a front website approved by an acquirer. Shell merchants may be created solely to move funds, with fictitious sales or inflated invoices supporting the appearance of real commerce. Collusive buyer-seller schemes allow criminals to purchase goods from themselves using stolen cards or illicit funds, converting dirty money into clean marketplace payouts.

Marketplaces are also vulnerable to the sale of counterfeit goods, stolen merchandise, and sanctioned products, as well as to fraud involving account takeover, synthetic identities, and refund abuse. Gift cards, stored-value products, and digital goods are attractive because they are easily resold and difficult to trace. Cross-border transactions complicate jurisdiction and sanctions compliance, while rapid onboarding of sellers can weaken Know Your Customer and Know Your Business controls.

From a compliance perspective, marketplaces may be classified as money services businesses or payment facilitators depending on jurisdiction and whether they hold or transmit funds. Effective mitigation requires robust seller due diligence, including verification of beneficial ownership and business legitimacy; ongoing transaction monitoring to detect anomalies such as round-dollar sales, velocity spikes, or mismatches between product type and transaction value; website content monitoring to identify misrepresented goods; and strong sanctions screening of sellers, buyers, and shipping destinations.

Collaboration with acquiring banks and payment processors, clear suspicious activity reporting procedures, and periodic risk assessments aligned with FATF guidance help ensure that e-commerce ecosystems are not exploited as conduits for laundering criminal proceeds.

Hawala and other Informal Value Transfer Systems (IVTS) are mechanisms for moving money or value across borders without physically transferring funds through the formal banking system. Hawala, originating in South Asia and the Middle East, operates through a network of brokers called hawaladars who rely on trust, family ties, and reputation rather than written contracts. A customer in one country gives cash to a hawaladar, who contacts a counterpart in the destination country to release an equivalent amount (minus a small commission) to the recipient, often within hours. The brokers settle their balances later through trade invoices, reciprocal transfers, commodities, or cash couriers. Similar systems include Fei-Chien (China), Hundi (India), Padala (Philippines), and the Black Market Peso Exchange in Latin America.

For CAMS candidates, IVTS matter because they provide legitimate, low-cost, fast, and accessible remittance services for migrant workers and unbanked populations, yet they also present significant money laundering and terrorist financing vulnerabilities. Key risks include minimal or no record-keeping, anonymity of senders and recipients, lack of customer due diligence, settlement methods that disguise the origin of funds (such as over- or under-invoicing in trade-based money laundering), and limited regulatory oversight. Terrorist groups and criminal organizations have exploited hawala because transactions leave little audit trail and cross jurisdictions with weak controls.

International standards address these risks. FATF Recommendation 14 requires countries to license or register money or value transfer service providers, apply AML/CFT obligations, and sanction unregistered operators. The USA PATRIOT Act similarly requires registration of money services businesses. Financial institutions should identify red flags such as accounts receiving frequent cash deposits followed by wire transfers to high-risk corridors, unexplained third-party payments, structured deposits, and businesses like travel agencies or import-export firms with transaction patterns inconsistent with their stated activity, which may indicate an unlicensed hawaladar operating through a bank account.

Life insurance and annuity products present distinct money laundering risks because they combine investment features with the ability to store, transfer, and withdraw value, often with limited scrutiny compared to banks. For CAMS purposes, understanding these vulnerabilities is essential to sector-specific risk assessment.

Key product risks: Single-premium life policies and annuities allow a launderer to place a large lump sum of illicit cash into the financial system in one transaction. Products with cash surrender value can be redeemed early—often with a penalty the criminal willingly absorbs—producing a clean cheque from a reputable insurer. Policy loans against accumulated value provide another layer of apparent legitimacy. Free-look or cooling-off periods let a buyer cancel and receive a refund, effectively laundering funds quickly. Assignment of policies to third parties, changes of beneficiary, and transfers of ownership can obscure the true source and destination of funds. Overpayment of premiums followed by requests for refunds, and the use of structured or cash premium payments, are classic red flags.

Distribution risks: Insurers typically rely on agents, brokers, and independent intermediaries who are commission-driven and may lack incentive to conduct thorough customer due diligence. This indirect relationship weakens the insurer's visibility into the customer and the origin of funds. Cross-border sales and products denominated in foreign currencies add complexity.

Typologies and red flags include customers indifferent to investment performance or penalties, unusual interest in early termination terms, purchases inconsistent with the customer's profile, premiums paid by unrelated third parties or from offshore accounts, and requests to pay out to unknown beneficiaries.

Mitigation: FATF and national regulators (e.g., U.S. FinCEN rules for insurers) require risk-based AML programs covering covered products, customer due diligence, agent oversight, suspicious activity reporting, and monitoring of surrenders, loans, and beneficiary changes. Term life and pure protection products without cash value carry comparatively lower risk.

Virtual Asset Service Providers (VASPs) are businesses that conduct activities such as exchanging virtual assets for fiat currency or other virtual assets, transferring virtual assets, safekeeping or administering them (custodial wallets), or participating in and providing financial services related to an issuer's offer or sale of a virtual asset. In 2019, the Financial Action Task Force (FATF) amended Recommendation 15 and issued an Interpretive Note clarifying that VASPs must be licensed or registered and subjected to the full range of AML/CFT obligations applied to traditional financial institutions, including customer due diligence, record keeping, suspicious transaction reporting, and sanctions screening. The sector carries elevated financial crime risk because virtual assets offer speed, global reach, pseudonymity, and the possibility of layering through mixers, privacy coins, chain-hopping, and decentralized exchanges, which complicates tracing illicit proceeds from ransomware, darknet markets, fraud, and sanctions evasion.

The Travel Rule, derived from FATF Recommendation 16 on wire transfers, requires that identifying information 'travel' with a transaction. For virtual asset transfers above the applicable threshold (FATF suggests USD/EUR 1,000), the originating VASP must obtain, hold, and transmit to the beneficiary VASP the originator's name, account or wallet identifier, and address, national identity number, customer identification number, or date and place of birth, along with the beneficiary's name and wallet identifier. The beneficiary VASP must obtain and retain this information, verify its accuracy where required, and screen the parties against sanctions lists. Both sides must be able to provide the data to competent authorities on request.

Compliance challenges include the 'sunrise issue' (uneven adoption across jurisdictions), interoperability between competing technical messaging protocols, and handling transfers with unhosted (self-custodied) wallets, where enhanced due diligence and risk-based controls are expected. For CAMS candidates, the key takeaway is that VASPs are now firmly within the regulated perimeter, and the Travel Rule is the central mechanism for ensuring transparency and traceability of virtual asset transfers.

Cryptoasset laundering exploits the pseudonymous, borderless and fast-settling nature of blockchains to obscure the origin of criminal proceeds. For CAMS practitioners, three typologies are central.

Mixers (tumblers): Services such as the sanctioned Tornado Cash or Blender.io pool funds from many users and redistribute them, breaking the on-chain link between source and destination addresses. Centralised mixers hold custody and are classic layering tools; decentralised mixers use smart contracts and cryptographic proofs, making them harder to shut down. FATF regards mixing as a red-flag indicator, and FinCEN has proposed treating convertible-virtual-currency mixing as a primary money laundering concern under Section 311.

Privacy coins: Monero, Zcash (shielded) and Dash use ring signatures, stealth addresses or zero-knowledge proofs to hide sender, receiver and amount by default or optionally. They frustrate blockchain analytics, so many regulated exchanges delist them, and the FATF Travel Rule is very difficult to apply. Criminals often convert illicit Bitcoin into Monero (chain-hopping) before cashing out.

DeFi (decentralised finance): Protocols for lending, decentralised exchanges (DEXs) and cross-chain bridges operate via smart contracts with no identified intermediary conducting KYC. Launderers swap tokens through DEXs, bridge assets between chains, and use liquidity pools to layer funds. FATF guidance states that if persons retain control or sufficient influence over a DeFi arrangement they may be VASPs and subject to AML obligations; the Lazarus Group's laundering of hacked funds through bridges illustrates the risk.

Risk management expectations include: licensing/registration of VASPs, Travel Rule compliance, blockchain analytics to trace and risk-score wallets, screening against OFAC-listed addresses, enhanced due diligence for exposure to mixers or privacy coins, SAR filing for chain-hopping and rapid-movement patterns, and understanding fiat on/off-ramps where traditional controls still apply. Sector-specific risk assessments should weigh customer, product, geographic and delivery-channel factors in a risk-based approach.

Casinos and online gambling operators are classified as high-risk sectors for money laundering because they handle large volumes of cash and offer financial services similar to banks, such as accounts, credit, currency exchange and cheque issuance. Under FATF Recommendation 22, casinos are designated as non-financial businesses and professions (DNFBPs) subject to AML/CFT obligations including customer due diligence, record-keeping and suspicious transaction reporting. In the United States, casinos with gross annual gaming revenue exceeding $1 million are defined as financial institutions under the Bank Secrecy Act and must file Currency Transaction Reports (CTRs) for cash transactions over $10,000 and Suspicious Activity Reports (SARs) for transactions of $5,000 or more that appear suspicious.

Typical laundering techniques include: 'minimal play' or 'chip walking', where criminals buy chips with illicit cash, gamble little or not at all, then redeem chips for a casino cheque or wire transfer that appears to be legitimate winnings; structuring cash buy-ins below reporting thresholds; using multiple players or 'smurfs'; exploiting player accounts as de facto bank accounts; collusion with junket operators who bring high-roller clients and move funds across borders, particularly in Macau and Southeast Asia; and purchasing winning tickets or chips from legitimate gamblers at a premium.

Online gambling heightens risk through anonymity, cross-border reach, rapid transactions, use of e-wallets, prepaid cards and virtual currencies, and the ability to deposit funds and withdraw them with little play, effectively transferring value between accomplices. Unlicensed offshore sites may lack any AML controls. Peer-to-peer games like poker allow deliberate 'chip dumping', where one player intentionally loses to another to transfer funds.

Effective mitigation requires risk-based customer identification at account opening and payout, monitoring of play patterns relative to buy-ins, scrutiny of source of funds for high rollers and politically exposed persons, limits on third-party payments, staff training, and cooperation with regulators and law enforcement.

Real estate is one of the oldest and most attractive vehicles for laundering illicit funds, and the CAMS curriculum treats it as a high-risk sector requiring specific attention. Property appeals to criminals because it absorbs large sums in a single transaction, holds or increases value, generates legitimate-looking rental income, and historically has faced weaker AML oversight than banks.

Typical laundering techniques include: purchasing property outright with cash or through complex financing arrangements; using shell companies, trusts, or nominees to hide beneficial ownership; deliberately over- or under-valuing property so that the difference can be paid under the table or booked as a legitimate gain; rapidly buying and selling (flipping) to create a paper trail of apparently lawful profits; using loan-back schemes in which criminal money is lent to the purchaser through a controlled offshore entity and then 'repaid'; and investing in renovations funded by illicit cash to inflate resale value. Rental income and mortgage repayments can also be used to integrate dirty money into the legitimate economy over time.

Red flags include buyers who show little interest in the property's condition or price, purchases well above or below market value, unexplained third-party funding, use of cash or multiple cashier's cheques, buyers from high-risk jurisdictions with no connection to the location, repeated purchases and quick resales, and reluctance to disclose beneficial owners or source of funds.

Gatekeepers—real estate agents, lawyers, notaries, title and escrow companies—are central to these schemes, sometimes unwittingly. The FATF Recommendations therefore classify real estate agents as designated non-financial businesses and professions (DNFBPs) subject to customer due diligence, record keeping, and suspicious activity reporting when involved in buying or selling property. Regulators such as FinCEN have used Geographic Targeting Orders to require title companies to identify beneficial owners behind all-cash purchases of luxury property. Effective controls include verifying source of funds and wealth, identifying beneficial owners, risk-rating transactions, and monitoring for unusual pricing or ownership patterns.

In the CAMS framework, lawyers, notaries, accountants and other independent legal professionals are classified as 'gatekeepers' because they control access to the financial system and can, knowingly or unknowingly, facilitate money laundering. The FATF designates them as Designated Non-Financial Businesses and Professions (DNFBPs) under Recommendations 22 and 23, requiring AML obligations when they engage in specified activities such as buying and selling real estate, managing client money or assets, managing bank or securities accounts, organizing contributions for company formation, and creating, operating or managing legal persons and arrangements.

Gatekeepers are attractive to launderers for several reasons. They lend an appearance of legitimacy and respectability to transactions; they can create complex corporate vehicles, trusts and shell companies that obscure beneficial ownership; they hold client funds in pooled trust or escrow accounts (often called IOLTA accounts in the US), which commingle money and break the audit trail; and legal professional privilege or attorney-client confidentiality can shield communications from scrutiny. Notaries, especially in civil law jurisdictions, authenticate property transfers and company documents, making them critical checkpoints in real estate laundering.

Typical red flags include clients who are secretive about beneficial owners, use of the professional's account as a pass-through with no underlying legal work, payment of fees from unrelated third parties, rapid purchase and resale of property, requests to structure entities in high-risk jurisdictions without a clear business rationale, and reluctance to meet in person.

Mitigation measures emphasized by CAMS include risk-based customer due diligence, verification of beneficial ownership, enhanced due diligence for politically exposed persons, record keeping, staff training and suspicious activity reporting where privilege does not apply. Regulation remains uneven globally; some jurisdictions impose full reporting duties while others, such as the United States, have historically exempted lawyers, relying instead on bar association guidance. Gatekeeper oversight is therefore a recognized vulnerability and a continuing FATF priority.

Trust and Company Service Providers (TCSPs) are businesses or professionals that form, administer, or manage legal entities and arrangements on behalf of clients. Their services typically include incorporating companies, acting as or arranging nominee directors, shareholders, or trustees, providing registered office or correspondence addresses, and serving as trustees of express trusts. Within the CAMS framework, TCSPs are classified as Designated Non-Financial Businesses and Professions (DNFBPs) under FATF Recommendations 22 and 23, meaning they must apply customer due diligence, record-keeping, and suspicious activity reporting obligations similar to financial institutions.

The financial crime risk associated with TCSPs is considered high because the structures they create can obscure beneficial ownership. Criminals exploit shell companies, layered ownership chains, trusts, and nominee arrangements to distance illicit funds from their true controllers, facilitating money laundering, tax evasion, sanctions evasion, bribery, and terrorist financing. The Panama Papers and Pandora Papers investigations highlighted how some TCSPs, operating across multiple jurisdictions, enabled anonymity at scale. Risk is heightened when TCSPs operate in secrecy jurisdictions, when they serve non-resident clients remotely, when they use bearer shares or complex multi-layered structures without clear commercial rationale, and when they fail to verify who ultimately owns and controls the entities they administer.

Effective AML controls for TCSPs include identifying and verifying beneficial owners (typically at the 25 percent threshold or lower where risk warrants), understanding the purpose and intended nature of each structure, applying enhanced due diligence to politically exposed persons and high-risk jurisdictions, conducting ongoing monitoring of administered entities, and maintaining accurate ownership records accessible to competent authorities. Many jurisdictions now require TCSPs to be licensed or registered, subject to fit-and-proper testing, and supervised for AML compliance. For a CAMS professional, the key lesson is that TCSPs sit at the gateway of corporate opacity, so robust beneficial ownership transparency, risk-based oversight, and cross-border cooperation are essential to prevent their misuse.

Beneficial ownership concealment is a core money laundering typology in which the true natural person who ultimately owns or controls an asset, account, or legal entity is hidden behind layers of legal structures or front individuals. In the CAMS framework, understanding this risk is essential because criminals rely on opacity to separate themselves from illicit proceeds, defeat customer due diligence (CDD), and evade sanctions, tax, and law enforcement scrutiny.

Nominees are a primary concealment tool. A nominee director, shareholder, or account holder appears on official records but acts on instructions from the hidden beneficial owner, often under a private nominee agreement or declaration of trust. Corporate service providers in some jurisdictions supply professional nominees at scale, enabling a single individual to appear as director of hundreds of companies. Bearer shares, shell companies, trusts, foundations, and multi-jurisdictional layering further obscure control, as do straw men, relatives, employees, or lawyers who lend their names to transactions.

Sector risk varies. Banks face exposure through corporate accounts opened with nominee documentation; trust and company service providers risk being complicit facilitators; real estate agents and lawyers encounter cash-rich purchases through anonymous vehicles; and casinos or dealers in high-value goods may accept payments from entities whose controllers are unknown.

Red flags include directors with no apparent business knowledge, addresses shared by many entities, frequent changes of officers, reluctance to disclose ownership, complex structures without economic rationale, and jurisdictions with weak transparency.

Regulatory responses include FATF Recommendations 24 and 25, the EU directives mandating beneficial ownership registers, the U.S. Corporate Transparency Act, and CDD rules requiring identification of owners above a 25 percent threshold or anyone exercising control. Compliance professionals must verify beneficial ownership using independent sources, apply enhanced due diligence to high-risk structures, monitor for changes, and file suspicious activity reports when concealment appears deliberate.

In the Certified Anti-Money Laundering Specialist (CAMS) body of knowledge, accountants and auditors are classified as 'gatekeepers' or Designated Non-Financial Businesses and Professions (DNFBPs). Because they hold trusted professional status and possess specialized financial expertise, they can—knowingly or unknowingly—become enablers of money laundering, terrorist financing, tax evasion, and corruption.

Their enabling role arises in several ways. First, accountants often create and manage corporate structures such as shell companies, trusts, and layered holding entities across multiple jurisdictions. These vehicles obscure beneficial ownership and complicate the audit trail. Second, they may prepare or certify financial statements that disguise illicit proceeds as legitimate revenue, inflate or deflate invoices, or misclassify transactions, thereby lending credibility to tainted funds. Third, they may act as intermediaries by opening bank accounts, managing client money through professional or escrow accounts, or acting as nominee directors and company secretaries, which distances criminals from their assets. Fourth, through tax advisory services, they may design aggressive schemes that blur the line between avoidance and criminal evasion, as exposed in the Panama Papers and Pandora Papers.

Auditors can enable crime through negligence or complicity: failing to detect red flags, accepting management explanations without verification, or issuing unqualified opinions on falsified books. High-profile collapses linked to fraud and laundering frequently reveal audit failures.

FATF Recommendations 22 and 23 require accountants to apply customer due diligence, maintain records, and report suspicious transactions when performing specified activities. In the EU, successive Anti-Money Laundering Directives and in the US, state-level rules and professional standards impose similar obligations, although legal professional privilege can complicate reporting.

For AML professionals, key red flags include clients seeking complex structures without clear commercial rationale, reluctance to disclose beneficial owners, use of professional accounts for pass-through payments, and requests to backdate or alter records. Effective mitigation combines robust risk-based due diligence, professional skepticism, independence safeguards, ongoing training, and firm-wide compliance cultures that treat gatekeeping as a legal and ethical duty rather than a formality.

Dealers in precious metals, precious stones, and other high-value goods (such as luxury cars, yachts, art, antiques, jewelry, and watches) are recognized by the FATF as Designated Non-Financial Businesses and Professions (DNFBPs) because their products present attractive vehicles for money laundering and terrorist financing. These goods combine high intrinsic value with physical portability, making them easy to transport across borders, difficult for authorities to trace, and readily convertible to cash in global markets. Gold and diamonds, in particular, function almost as alternative currencies: they retain value, are accepted worldwide, and can be melted, re-cut, or re-certified to obscure origin. Valuation of such goods is often subjective, allowing criminals to manipulate prices through over- or under-invoicing in trade-based money laundering schemes. The sector has historically relied heavily on cash transactions and informal trust networks, with limited regulatory oversight compared to banks. Typical red flags include customers paying large sums in cash, structuring purchases below reporting thresholds, buying items inconsistent with their stated occupation or income, quickly reselling goods at a loss, requesting delivery to third parties or unusual jurisdictions, and showing little interest in the quality or price of the item. Dealers may also be exploited unwittingly or complicitly, for instance through conflict diamonds, smuggled gold from illegal mining, or sanctions-evasion schemes. Regulatory responses include FATF Recommendation 22 and 23, which require dealers to conduct customer due diligence and file suspicious transaction reports when engaging in cash transactions at or above a designated threshold (USD/EUR 15,000). In the United States, the Bank Secrecy Act and the PATRIOT Act extend AML program requirements to dealers in precious metals, stones, and jewels, with FinCEN oversight and Form 8300 cash reporting. The Kimberley Process addresses conflict diamonds. For CAMS candidates, key takeaways are the sector's vulnerabilities, cash intensity, valuation subjectivity, and the importance of risk-based controls and training.

Art, antiquities and luxury assets (such as jewellery, watches, yachts, classic cars and precious stones) represent a significant money laundering and financial crime risk, recognised in the CAMS curriculum under sector-specific vulnerabilities. Several features make these markets attractive to launderers. First, valuation is highly subjective: prices depend on taste, provenance and market sentiment rather than objective benchmarks, so criminals can inflate or deflate values to justify moving illicit funds across borders or to disguise bribes. Second, the market has traditionally operated with a strong culture of secrecy and discretion, allowing buyers and sellers to transact anonymously through intermediaries, shell companies, or auction house 'private sales'. Third, these assets are portable, durable stores of value that can be moved internationally with relative ease and held in freeports or bonded warehouses, where they may sit untaxed and unexamined for years, with ownership changing hands without the item ever leaving storage. Fourth, cash is still widely used in certain segments, and payment through layered corporate vehicles complicates tracing. Antiquities carry additional risks: looted or trafficked cultural property from conflict zones has been linked to terrorist financing and organised crime, and forged provenance documents can integrate stolen items into the legitimate market. Regulatory responses have expanded in recent years. The EU's 5th Anti-Money Laundering Directive brought art dealers, galleries and freeports into the regulated sector for transactions of EUR 10,000 or more, while the US Anti-Money Laundering Act of 2020 extended Bank Secrecy Act requirements to antiquities dealers and mandated a study of the art market. Mitigation measures include robust customer due diligence on buyers, sellers and beneficial owners, verification of provenance and source of funds, scrutiny of unusual pricing or rapid resale, enhanced due diligence on politically exposed persons, monitoring for sanctions exposure, staff training, and filing suspicious activity reports. Compliance professionals must balance legitimate client confidentiality with transparency expectations to prevent these markets being exploited for laundering and sanctions evasion.

Free Trade Zones (FTZs), also called free ports or special economic zones, are designated geographic areas where goods can be landed, stored, handled, manufactured, or re-exported under special customs regulations and often with reduced taxes, duties, and regulatory oversight. For Certified Anti-Money Laundering Specialists (CAMS), FTZs represent a high-risk sector because the very features that promote trade—minimal documentation, relaxed customs inspection, limited transparency of ownership, and weak coordination between zone authorities and national supervisors—also create vulnerabilities to money laundering, terrorist financing, and sanctions evasion. The FATF has highlighted that FTZs can be exploited to disguise the origin, destination, and true value of goods, facilitate smuggling and counterfeiting, and enable trade-based money laundering (TBML).

Import-export structures are the commercial arrangements through which goods and services cross borders, involving importers, exporters, freight forwarders, customs brokers, shipping companies, and financial institutions providing trade finance such as letters of credit, documentary collections, and open account transactions. Criminals exploit these structures through TBML techniques including over- and under-invoicing of goods, multiple invoicing for the same shipment, phantom shipments where nothing is actually shipped, misrepresentation of quality or quantity, and the use of shell companies as counterparties. Illicit value is transferred across borders disguised as legitimate commerce, allowing criminals to integrate proceeds into the financial system.

Red flags include transactions inconsistent with a customer's known business, pricing that deviates significantly from market value, circuitous shipping routes through FTZs or high-risk jurisdictions, frequent amendments to trade documents, payments from unrelated third parties, and commodities commonly used in laundering such as gold, textiles, or electronics. Mitigation requires enhanced due diligence on trade counterparties, document and price verification, beneficial ownership identification, sanctions and dual-use goods screening, and cooperation between customs authorities, financial intelligence units, and banks. Understanding these risks enables AML professionals to detect misuse of international trade channels.

Non-profit organisations (NPOs) and charities are recognised by the FATF (Recommendation 8) and by CAMS as a sector vulnerable to abuse for money laundering and, especially, terrorist financing. Their vulnerability stems from several features: they enjoy high public trust, often operate across borders in conflict or high-risk jurisdictions, handle large volumes of cash donations, and may be subject to lighter regulatory oversight than financial institutions. Many are tax-exempt and have complex funding chains involving intermediaries and partner organisations, which obscures the trail of funds.

Typologies of abuse include: (1) diversion of funds, where legitimate donations are siphoned off by insiders or complicit staff to support terrorist groups or personal enrichment; (2) sham charities created solely as fronts to collect and move illicit funds under a charitable guise; (3) exploitation of programme delivery, where aid or cash is delivered to beneficiaries who are in fact terrorist operatives or affiliates; (4) use of NPOs to provide logistical support, recruitment or cover for travel to conflict zones; and (5) laundering of criminal proceeds disguised as donations, which are then returned as 'grants' or payments to related entities. Charities may also be used to layer funds through multiple jurisdictions, benefiting from the plausible humanitarian rationale for international transfers.

Red flags for financial institutions include donations inconsistent with the charity's stated purpose or size, transfers to high-risk jurisdictions without clear programme links, unusual cash deposits, overlapping directors across several NPOs, vague or inconsistent documentation, and reluctance to disclose beneficiaries or partners. Mitigation involves a risk-based approach: enhanced due diligence on NPO customers, understanding governance, sources of funds and destination of disbursements, screening directors and partners against sanctions lists, and ongoing transaction monitoring. The FATF stresses that measures must be proportionate so that legitimate charitable activity is not unduly disrupted, in line with its 2016 revisions to Recommendation 8 and its Interpretive Note.