Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Intermediate AML Case Analysis: EDD, Sanctions and Crypto
New
Rating: 5.0 out of 5(1 rating)
2 students

Intermediate AML Case Analysis: EDD, Sanctions and Crypto

Advanced EDD, Beneficial Ownership, Sanctions Alert Review, TM Investigation, SAR Escalation and Blockchain Analysis
Created byJoshua Matesun
Last updated 7/2026
English

What you'll learn

  • Conduct risk-based enhanced due diligence and write EDD conclusions that hold up under QA, audit and regulatory examination.
  • Analyse direct, indirect and aggregated beneficial ownership — including nominees, trustees, PEP networks and indirect control indicators.
  • Review sanctions screening alerts using full identifier analysis across EU, UK (OFSI) and US (OFAC) frameworks simultaneously.
  • Apply OFAC's 50 Percent Rule and aggregated ownership concepts without conflating EU, UK and US sanctions regimes.
  • Identify sanctions evasion indicators including third-country diversion, dual-use goods procurement and maritime red flags.
  • Investigate transaction monitoring alerts using velocity, aggregation, counterparty networks and jurisdiction risk stacking.
  • Write SAR-quality internal escalations with a clear suspicion narrative — and recognise when an escalation is defensive rather than genuine.
  • Assess blockchain exposure including wallet attribution, mixer and bridge risk, stablecoin considerations and sanctioned crypto services.
  • Evaluate high-risk customer types including payment institutions, MSBs, correspondent banks, professional intermediaries and VASPs.
  • Produce practitioner-level case decisions suitable for QA review, internal audit and regulatory examination.

Course content

8 sections58 lectures1h 58m total length
  • Introduction0:05
  • Intermediate AML Case Analysis1:15
  • What Changes at Intermediate Level1:50
  • What QA and Senior Review Look For2:03
  • Concern Suspicion and a Defensible Decision1:03
  • Defensible vs Non Defensible In Practice0:43
  • Documentation That Withstands Scrutiny1:52
  • Section Assignment1:06

Requirements

  • Completion of a foundation-level AML and sanctions compliance course, or equivalent practical experience in a KYC, CDD, sanctions or transaction monitoring role.
  • Familiarity with basic AML terminology — CDD, EDD, KYC, PEP, SAR, sanctions screening — at a working level. This course does not define these concepts from scratch.
  • No legal background required. No specific software or tools required. A willingness to work through realistic, ambiguous case scenarios is essential — this course is built around practitioner judgement, not memorisation.

Description

━━━ DISCLAIMER ━━━

This course contains the use of artificial intelligence.


You completed a foundation AML course. You know the terminology. Now it's time to develop the case judgement that separates a capable intermediate analyst from someone who closes alerts on convenience rather than evidence.

This is an intermediate-level course built entirely around how real compliance files look — ambiguous beneficial ownership, contested sanctions alerts, multi-alert transaction monitoring patterns, PEP files with difficult adverse media, and crypto exposure that doesn't resolve from a single blockchain analytics risk score.

I've built this course based on 20 years of reviewing exactly these kinds of files across banks, fintechs, crypto firms and payment institutions.


━━━ WHAT YOU'LL LEARN ━━━

  • The intermediate analyst mindset — what QA, audit and senior review are actually looking for

  • Advanced beneficial ownership analysis: nominees, trustees, indirect control, PEP networks, orphaned structures

  • Enhanced due diligence (EDD) methodology: hypothesis testing, source of wealth evidence standards, PEP categories, adverse media analysis, writing defensible EDD conclusions

  • Sanctions alert review using full identifier analysis across EU, UK (OFSI) and US (OFAC) frameworks

  • OFAC's 50 Percent Rule and aggregated ownership — how to calculate it and when it applies

  • Secondary sanctions risk for non-US financial institutions

  • Sanctions evasion typologies: front companies, third-country diversion, false documentation

  • Proliferation financing red flags and maritime risk indicators

  • Transaction monitoring investigation: velocity analysis, aggregation, counterparty networks, jurisdiction risk stacking

  • SAR-quality internal escalations: structuring suspicion narratives and avoiding defensive filing

  • High-risk customer types in depth: payment institutions, MSBs, correspondent banks, professional intermediaries, crypto VASPs

  • Blockchain investigation: wallet attribution, mixer and bridge exposure, stablecoin risk, sanctioned crypto services

  • Writing case files that withstand QA review, internal audit and regulatory examination


━━━ REGULATORY COVERAGE ━━━

  • EU: EU AML package, AMLA, ownership and control under EU sanctions regulations

  • UK: UK MLRs, JMLSG, OFSI ownership and control guidance

  • US: FinCEN CDD Rule, FFIEC BSA/AML Manual, OFAC 50 Percent Rule, OFAC secondary sanctions

  • Crypto: FATF VASP guidance, MiCA, OFAC crypto designations including Tornado Cash


━━━ WHO THIS IS FOR ━━━

  • AML, KYC and EDD analysts with 1–3 years of experience seeking to develop genuine case judgement

  • Sanctions screening and sanctions operations analysts

  • Transaction monitoring investigators

  • Crypto compliance and blockchain investigation analysts

  • QC reviewers and compliance associates preparing for a senior analyst role

  • Fintech, payments, banking and regulated-crypto compliance staff

  • Learners who completed a foundation-level AML and sanctions course and want to go further


━━━ CAPSTONE: MERIDIAN CAPITAL PARTNERS LTD ━━━

  • The course closes with a multi-issue capstone combining:

  • A four-layer beneficial ownership structure with an undeclared family relationship

  • An unresolved OFAC SDN alert requiring aggregated ownership analysis

  • Prior Tornado Cash interactions and one-hop darknet market exposure

  • Four TM alerts with aggregate pass-through and same-day movement patterns

  • Adverse media across three jurisdictions including a credible investigative article


You produce seven practitioner-level deliverables: an ownership diagram, EDD conclusion, sanctions ownership analysis, TM investigation report, crypto exposure memo, internal escalation, and a QA-ready final recommendation.


━━━ CERTIFICATE ━━━

Complete all lectures, assignments and section quizzes to earn your Udemy Certificate of Completion — shareable directly to LinkedIn and downloadable as a PDF for your CV or professional portfolio.

Who this course is for:

  • AML, KYC and EDD analysts with foundation-level knowledge who want to develop genuine case judgement rather than faster checklist completion.
  • Sanctions screening and sanctions operations analysts looking to move beyond name-match review into ownership, control and evasion analysis.
  • Transaction monitoring investigators who want to build investigation methodology beyond individual alert review.
  • Crypto compliance and blockchain investigation analysts working with on-chain data, mixer exposure, stablecoin risk and sanctioned services.
  • Quality control reviewers and compliance associates who review case files and want to understand what a defensible decision actually looks like.
  • Fintech, payments, banking and regulated-crypto compliance staff stepping into a more senior analytical role.
  • Learners who completed the ClearPath Advisory AML and Sanctions Compliance Foundations course and are ready for the next level.