CKYCA Certified Know Your Customer Associate Exam Prep Guide

Kyc is intended to manage risk through customer due diligence and client onboarding, collecting data per regulatory requirements and applying risk-based controls, including enhanced due diligence when warranted.

Determine who your customer by jurisdiction and type—individual, listed company, or private company—before starting KYC. Onboarding requirements reflect the risk and complexity of each type for the KYC profile.

Explore the definition of a customer across jurisdictions, detailing customer types—natural persons and entities like LLCs, trusts, and charities—and how ownership, accounts, and complex structures affect KYC responsibilities.

Identify customer types in financial services, from individuals and legal entities to government bodies and financial institutions, and assess due diligence across residency, visas, dual citizenship, and high-risk structures.

Examine regulatory, legal, financial, and reputational risks within the risk matrix, and learn how each type affects penalties, brand value, and resource allocation.

Explore how kyc regulations align anti-money laundering and terrorism financing rules across jurisdictions, including US Bank Secrecy Act, EU fifth AML directive, UK money laundering regulation 2019, FATF.

Assess customer risk and identify red flags by comparing behavior to KYC profiles, noting high-risk factors like money mules, fraud, exploited cash-intensive industries, and unknown sources of funds or wealth.

Identify and mitigate politically exposed persons (PEP) per FATF definitions—foreign and domestic— including immediate family and close associates, to manage AML and KYC risk in high-risk contexts.

Decode shell companies, entities with no assets or operations that mask ultimate beneficial ownership. Shelf companies, older shells, may look legitimate, but risk complex structures, nominees, and bearer share ownership.

Explore how jurisdiction risk shapes the KYC onboarding process, driving risk ratings from low to high and triggering enhanced due diligence through sanctions, tax havens, and red flags.

Identify product risk and red flags across high-risk areas like wealth management, third-party exposure, and trade finance, and link AML programs and KYC with risk assessment.

Explore product risk and red flags through a private banking case: assess due diligence, source of wealth, structuring risk, potential PEP concerns, and decision-making for onboarding.

Analyze delivery channel risk and red flags, including non face to face interactions, correspondent banking, and payable through accounts, and apply AML/CTF controls with document certification and direct first payments.

Adopt a risk-based approach to assess client risk, assign risk ratings, and conduct due diligence to strengthen AML programs against money laundering and terrorist financing.

Balance risk and reward through financial crime risk assessments and risk controls. Apply preventive, detective, and corrective controls, including four-eyes and segregation of duties within an internal control framework.

Explain the residual risk equation as inherent risk minus controls equals residual risk, showing you cannot eliminate all risk, even with a risk-based program for KYC, AML, and financial crime.

Apply a risk-based KYC approach to onboarding and ongoing monitoring to identify money laundering and terrorism financing risks, allocating resources by risk appetite and reassessing high-risk clients annually.

Follow organization-specific policies and procedures to support a structured AML program with KYC, transaction monitoring, and sanctions. Train staff to locate, interpret, and rigorously apply these policies to mitigate risk.

Apply four research steps for KYC analysis: assess the information, explore with documents and data, organize findings clearly, and present and defend your case.

Institutions have a duty to report financial crimes; penalties include fines, prison time, willful blindness liability, with anti-money laundering roles—the money laundering reporting officer and chief compliance officer—overseeing reporting.

Learn how tipping off protects investigations by keeping suspicious activity reports confidential, not informing subjects, and maintaining normal client behavior, while understanding penalties and safe harbour for institutions.

Assess the client at a macro level to plan onboarding, anticipate challenges, and identify who to involve; prepare to streamline multi-account kyc with name screening and sanctions checks.

Explore the three lines of defense—line of business, compliance, and internal audit—and how KYC roles fit into front office, with training and reporting to regulators and the board.

Produce a high-quality KYC onboarding file that clearly identifies the customer and ultimate beneficial owner, with risk rating and name screening, readable by regulators and other stakeholders.

Protect data security and privacy in KYC by ensuring sensitive data is shared only on a need-to-know basis, with cyber security measures, data retention rules, and GDPR considerations.

Explore levels of due diligence in KYC, including standard, customer, and enhanced due diligence, guided by the customer identification program (CIP), determining verification and ongoing reassessment.

Explore the customer identification process for a natural person in KYC, detailing core information like name, address, date of birth, primary ID, and tax file number.

Identify the customer for a legal person by verifying the certificate of incorporation, place of incorporation, place of business, and the government-issued company number within the jurisdiction.

Documentary verification divides into primary and secondary documents. Primary IDs like passports or driver’s licenses verify legal name, photo, and age, while secondary documents establish address and jurisdiction validity.

Learn non-documentary verification for primary and secondary documents by cross-checking client data with public records, databases, and internet sources, including address validation via Google Maps and front-office phone verifications.

Identify the ultimate beneficial owner and the control prong in AML contexts. Explore thresholds like 25% and 10% and shell companies and UBO.

Identify the ultimate beneficial owner through legal arrangements such as trusts, limited partnerships, and foundations, and explain why entities complicate know your customer.

Differentiate beneficial ownership from control: identify the natural person who owns a company and the controller who directs it, typically requiring threshold checks and multiple ids for kyc onboarding.

Explain beneficial ownership and the ultimate beneficial owner in aml contexts, including thresholds and the control prong. Learn to identify the ubo and establish procedures to do so.

Conduct customer due diligence for a natural person in KYC onboarding by researching the individual, assessing risk, and identifying the purpose, residence, occupation, and sources of funds for monitoring.

Examine customer due diligence for a natural person via a case example of Ms. Singh, opening a checking account near a retirement community, transferring funds, and receiving pension deposits.

Apply a risk-based approach to customer due diligence for a PEP case, using identity verification, purpose of the account, and enhanced due diligence to assess funds from Nigeria.

Identify ownership to reveal the beneficial and ultimate owners, then complete KYC and CDD with identity verification, screening for PEPs, negative news, and sanctions, and determine account purpose.

Analyze a shell UK company with nominee officers used to bid on a government contract, highlighting enhanced due diligence to identify the ultimate beneficial owner and assess state-owned risks.

Apply risk appetite and risk rating to determine customer onboarding, using four-eyes checks and escalations to senior officers or specialized desks for sanctions, PEP, or reputational risk.

Apply risk-based escalation when a previous conviction for fraud or suspicious activity arises, involve a special committee and stakeholders, and pursue enhanced due diligence to mitigate risk.

Learn how enhanced due diligence applies to natural persons with a risk-based approach, assess PEP exposure and industry risk, and mitigate through verifying source of funds and wealth.

Identify risk factors for a natural person in kyc due diligence, including related parties, indirect links to politically exposed persons, reputational risk, and source-of-wealth verification with supporting documents.

Apply enhanced due diligence for a natural person in a case involving Mr. Garfinkel, assessing high money-laundering risk in the gem and jewelry industry, verifying funds and ongoing monitoring.

Enhanced due diligence for a legal person extends fact finding and verification to identify beneficial owners and controllers, based on risk.

Explore enhanced due diligence for a company case in a tax haven, assessing red flags, identifying ultimate beneficial owners, and verifying source of funds through deeper documentation.

Use a risk-based approach to determine reasonable research for KYC, including understanding ownership and control structures to verify beneficial owners, and establish systems to detect, monitor, and report risks.

Explore how to select standard customer research sources by evaluating reliability and favoring government and industry recognized sources, then verify with external data to avoid bias and obscure listings.

Identify and evaluate standard customer research sources approved by your organization, prioritizing reliable, recent, and verifiable government or industry sources while avoiding biased or obscure listings.

Identify and deepen research for enhanced due diligence by focusing on high-risk indicators, client-specific sources, and reputable media, then consult specialized desks to mitigate risks.

Conduct internet searches to gather reliable information for customer due diligence, following policies and procedures for reputable sources, using public name searches, and treating social media as investigative, not factual.

Explore internet search techniques and taxonomies, learn how to select the right keywords, understand search engine algorithms, boolean logic, and how to document keywords for know your customer due diligence.

Use an internet search case example for Derek Limited Artisan Bakery and Coffee Shop to identify founders with public information and keywords, noting LinkedIn as a pointer, not for KYC.

Learn how sanctions screening protects KYC and AML by cross-referencing clients against UN, US OFAC SDN, EU, and Australian lists, applying 50% ownership blocking and escalation thresholds.

Use proprietary databases to efficiently screen customers against worldwide sanctions lists. Tailor rules, cross-reference records to reduce false positives, then rely on human analysis to confirm true matches.

Identify adverse media checks and negative news during customer screening. Use a vendor tool with artificial intelligence and human review to assess matches for sanctions, PEPs, and predicate offenses.

Conduct in-person KYC interviews to verify client identities, collect documents and wet signatures, and maintain data privacy with high-level customer service to spot red flags.

Explore how to conduct site visits to verify client information, witness signatures, and assess cash-intensive businesses, especially in private banking and AML due diligence.

Document your KYC research with a risk-based approach, printing and archiving evidence as PDFs to demonstrate decision making, compliance, and data privacy across reassessments.

Master data security and privacy by following organizational data protection policies and procedures, ensuring proper data destruction, and complying with laws and regulations in a cybersecurity compliance culture.

Organize to gather, align, collect, and clarify customer data for KYC, assess risk, determine the risk rating, and finalize a file for the next step, including enhanced due diligence.

Filter only information relevant to the KYC case, tailor details to the audience, and keep data concise to protect the risk assessment and avoid irrelevant material.

Apply your institution's policies and tools to generate a consistent risk rating via a scoring methodology, reflecting the organization’s risk appetite across customers, jurisdictions, products, and channels.

Present a rock-solid KYC file by documenting findings, persuading stakeholders, and defending the research as a complete, finished product with sources and hyperlinks for years.

Senior management reviews KYC files to determine customer acceptance. Transaction monitoring staff rely on the KYC profile to assess onboarding rationale and flag suspicious activity.

The lecture explains how a properly structured customer profile supports efficient KYC reviews, detailing basic information, nature and purpose of the account, red flags, and transaction monitoring and escalation.

Apply risk-based escalation to decide accept or reject KYC cases after risk gating, ensuring fair decisions aligned with policies, sanctions checks, and senior management oversight.

Analyze transaction monitoring as an automated, rule-based system that flags potential money laundering and terrorism financing risks after KYC onboarding. Support ongoing reviews and alert triage through machine learning insights.

KYC manages financial crime risk by collecting and verifying customer information at the initial stage, assessing risk factors, and applying a risk-based approach to accept or screen customers.

Master cross-jurisdictional KYC rules by understanding home and host laws, beneficial ownership thresholds, and extraterritorial standards such as FCPA, Bribery Act, and OFAC.

Explore how customer risk ratings hinge on categories—customer, jurisdiction, product, and channel—and how factors like non-resident customers, cash-intensive operations, and non-face-to-face or complex ownership structures raise risk.

Explore dual citizenship and dual residency risk and red flags in aml and kyc onboarding. See how offshore citizenship can elevate risk with examples like Saint Lucia, Cayman, and Malta.

Private banking serves high net worth clients with asset under management fees and alpha-based returns, but involves high risk. Emphasize empowered compliance to mitigate financial crime and opaque ownership.

Explore trade finance risk and red flags to prepare for the CKYCA know your customer exam.

Explore money service businesses (MSPs), their role in money transmission, and the red flags signaling high risk and potential money laundering, including customer due diligence and KYC requirements.

Identify the risks and red flags of correspondent banking, including foreign correspondent relationships, AML controls, data limitations, and nesting, to inform due diligence and transaction monitoring.

Designated non-financial business and professions, such as lawyers and accountants, carry higher financial crime risk and shape the customer risk rating through thresholds, possibly triggering enhanced due diligence.

Explore third party payment processor risks and red flags, including AML and financial crime compliance, multi-institution relationships, and high volume, low-value transactions that may mask illicit activity.

Identify fintech risk and red flags across digital bank accounts, wallets and remittance services, crypto assets, and non-face-to-face due diligence, highlighting ID verification, AML, KYC, CDD controls and fraud mitigation.

Learn how trusts hold assets through trustees, with settlors and beneficiaries, and why revocable, irrevocable, and offshore structures raise KYC risks and red flags.

Identify shell company risks and red flags, including dormant shelf entities used to mask the ultimate beneficial owner, and how age under one year raises AML/KYC risk ratings.

Shell companies serve legal purposes like asset protection and complex deals, but multi-layered structures obscure the ultimate beneficial owner and raise concerns about tax avoidance, jurisdictional issues, and succession planning.

Identify shell company common characteristics, including easy creation and dissolution, concealment of ownership, and use of secrecy havens. Spot red flags via corporate registries, multiple directorships, and recent formation dates.

Explore Nawaz Sharif's ownership case with shell companies in the BVI and London properties to reveal ultimate beneficial ownership, money laundering risk, pep risk, and need for enhanced due diligence.

Study the Russian laundromat case to see how shell companies and fake loans move 20.8 billion through courts and banks, underscoring enhanced due diligence and documented loan purpose.

Analyze how the Odebrecht group in Brazil used a shell company, Arcade Corporation, and Braskem’s fake and inflated expenses to pay bribes and move funds via a bought bank.

This lecture clarifies beneficial ownership in KYC, distinguishes the beneficial owner from the control prong, and defines the ultimate beneficial owner, including thresholds and verification procedures.

Identify the ultimate beneficial owner by analyzing the control prong, management and directors who exercise control, and require name screening and verification; complex structures raise risk ratings under EU regulations.

Compute beneficial ownership in complex aggregates to determine when CIP and KYC apply, identify natural persons, verify identities, and confirm address verification for thresholds above 10%.

Assess source of wealth and funds within KYC due diligence, especially in private banking, by tracing seed money, plausibility, and evidence to verify legitimacy.

Explore internet search false positives in KYC screening, applying thresholds, documenting mitigations, and evaluating name, birth date, location, nationality, and occupation to reduce operational risk.

Investigate a mistaken identity case with Beaufort Group and Beaufort Securities to highlight due diligence, identity verification, and checking legal names, directors, and branding to prevent client confusion.

Select standard customer research sources for KYC, prioritizing industry-recognized, reputable, and unbiased publications with recent dates, avoid dodgy sources, rely on real media, and recognize specialist desks for reputational risk.

Use official, global sources for enhanced customer research, including national and international databases and judicial databases, avoiding LinkedIn as a source, and following vendor lists and policy guidelines.

Discover how internet search practices impact organizational privacy, reduce cybersecurity risks, and prevent data security breaches by safeguarding data and avoiding personal accounts on work devices.

Explore how government corporate registries and online databases, such as Delaware and ASIC, support KYC by confirming legal name, date of establishment, status, registered address, and company number.

Explore government online publications to inform your KYC program, focusing on statistics, rule changes, fines, warnings, and consultation papers that reveal financial crime typologies and risk trends.

Explore non-government online sources for KYC and AML, including World Bank and IMF data on financial crime, corruption indices, Wolfsberg Group guidance, FATF standards, and Egmont Group cooperation.

Leverage social media and online presence to inform KYC, then verify findings with multiple reliable sources, recognizing limits, including potential terrorist financing signals, and avoiding treating social media as truth.

Learn to conduct internet searches with objectivity and skepticism, verifying information for potential financial crime indicators, sources of wealth, and debatable claims while avoiding prejudice.

Filter and include only relevant information for KYC. Apply a risk-based approach to determine relevance, focusing on source of wealth and risk rating, and keep reports concise.

Learn how to identify and mitigate politically exposed person risk using the FATF framework, distinguishing foreign and domestic peps, red flags, and enhanced due diligence in KYC processes.

Explore anti-bribery and corruption as a financial crime, its link to money laundering, and how due diligence, policies, and extraterritorial laws like FCPA and the UK anti-bribery act manage risk.

Identify state owned enterprise risks and red flags, including bribery, corruption, and money laundering, tied to PEPs, board composition, government contracts, and cross-border operations in oil, gas, and mining.

Identify embassies as high risk under the Wolfsburg framework, due to foreign currency, NGO and charity funds, and emphasize KYC to verify embassy transaction purposes.

Identify gatekeeper risk among lawyers, notaries, accountants, investment advisors, and other FATF-designated non-financial businesses or professions, and learn how due diligence, record-keeping, and reporting suspicious activities prevent money laundering.

Explore why charities and NGOs carry high financial crime risk and red flags, including terrorism financing exposure, tax-exempt status, and the need for transaction monitoring and due diligence during onboarding.

Differentiate tax avoidance from tax evasion, defining legal strategies that reduce tax liability and illegal methods that trigger penalties and predicate offenses to money laundering, with FATCA and CRS reporting.

Explore the difference between tax avoidance and tax evasion, and assess jurisdiction risk posed by tax havens, offshore profits, shell companies, and beneficial ownership.

Explore the difference between tax avoidance and tax evasion through the Panama Papers case, illustrating how shell companies and beneficial owners challenge KYC onboarding and customer due diligence.

Explain the duty to report suspected money laundering, the role of AML officers and compliance officers, and the process for submitting suspicious activity reports to financial intelligence units.

Learn how dual controls reduce errors and prevent staff collusion in Know Your Customer onboarding, via the four eyes check and segregation of duties across onboarding and verification.

Illustrates how the second line stays independent from the business line within the three lines of defense, with clearly defined roles, access to information, investigative authority, and board-level reporting.

The MLRO oversees the AML program, directs policy and training, and decides on SARs, while coordinating with financial intelligence units and regulators to address inquiries.

Refuse to onboard or offboard a customer with documented reasons aligned to risk appetite and red flags. Learn to manage suspicions and avoid tipping off the customer at any stage.

Apply a risk based approach to KYC for initial and ongoing screening, classifying customers by risk levels to tailor due diligence, monitoring, and review timeframes.

Learn how transaction monitoring analyzes historical data to detect potential money laundering and sanctions breaches, using rules, AI and ML to minimize false positives and support risk-based ongoing reviews.

Engage in ongoing due diligence by continuously monitoring and reassessing customer activity to update KYC for material changes, such as new export contracts, inheritance, or personal status updates, with documentation.

Reassess customer risk ratings and refresh files in the review cycle, applying remediation for inadequate controls. Monitor sanctions, negative news, and transactions to detect changes and escalate when needed.

Apply ongoing due diligence to detect red flags in volume and deposit patterns, illustrated by the Dermot and Eric case with ghost employees, false invoices, and reputational risk.

Stand confident as you finish this KYC exam prep course, prepare thoroughly for the exam, and advance your career; share feedback or message for further guidance.