Question 910
Two separate review files raise different issues. File A: An applicant combines a real identification number with fabricated personal details to build a false credit profile. File B: A fraudster applies for credit using an unrelated person's complete stolen identification details. Which pairing accurately classifies both files?
- File A: Synthetic identity borrowing; File B: Identity-based tax refund diversion.
- File A: Stolen-personal-data loan; File B: Synthetic identity borrowing.
- File A: Synthetic identity borrowing; File B: Stolen-personal-data loan.
- File A: Child identity misuse; File B: Stolen-personal-data loan.
Explanation
Correct Answer
C:File A is Synthetic identity borrowing because a synthetic identity blends genuine and invented attributes rather than simply impersonating one full real identity, while File B is Stolen-personal-data loan because an impersonator assumes a real victim's identity to obtain an unauthorized loan. The evidence chains differ: for File A, reviewers should cross-validate identity attributes and account histories using reliable independent records; for File B, they should confirm applicant control through independent identity checks and device history.
Incorrect Answers
A:File B is misidentified as Identity-based tax refund diversion instead of Stolen-personal-data loan. With the proposed pairing Synthetic identity borrowing / Identity-based tax refund diversion, the distinction is substantive: File A shows that identity attributes do not reliably resolve to one genuine person across independent sources, whereas File B shows that the real person denies the application despite matching submitted personal data. For these Synthetic identity borrowing and Stolen-personal-data loan files, choosing the pair Synthetic identity borrowing / Identity-based tax refund diversion would misdirect the review away from at least one of these mechanisms.
B:File A is misidentified as Stolen-personal-data loan instead of Synthetic identity borrowing; File B is misidentified as Synthetic identity borrowing instead of Stolen-personal-data loan. With the proposed pairing Stolen-personal-data loan / Synthetic identity borrowing, the distinction is substantive: File A shows that identity attributes do not reliably resolve to one genuine person across independent sources, whereas File B shows that the real person denies the application despite matching submitted personal data. For these Synthetic identity borrowing and Stolen-personal-data loan files, choosing the pair Stolen-personal-data loan / Synthetic identity borrowing would misdirect the review away from at least one of these mechanisms.
D:File A is misidentified as Child identity misuse instead of Synthetic identity borrowing. With the proposed pairing Child identity misuse / Stolen-personal-data loan, the distinction is substantive: File A shows that identity attributes do not reliably resolve to one genuine person across independent sources, whereas File B shows that the real person denies the application despite matching submitted personal data. For these Synthetic identity borrowing and Stolen-personal-data loan files, choosing the pair Child identity misuse / Stolen-personal-data loan would misdirect the review away from at least one of these mechanisms.
Question 911
The risk team has identified the following sham offshore tax shelter exposure: A paper structure intended to conceal taxable facts differs from lawful tax structuring with genuine substance. Which proposed prevention step is most effective?
- Document lawful elections and avoid misrepresentation of relevant facts.
- Use identity-proofing and verify anomalous refund-account changes.
- Apply substance-over-form review and follow applicable transfer-pricing rules.
- Verify input-tax eligibility and reconcile invoice data to actual transactions.
Explanation
Correct Answer
C:The control directly addresses the failure point in Sham offshore tax shelter, since a paper structure intended to conceal taxable facts differs from lawful tax structuring with genuine substance. A subsequent independent review could trace beneficial control, functions and genuine commercial substance to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Lawful tax planning distinction rather than Sham offshore tax shelter, because tax avoidance or planning can lawfully reduce tax; evasion involves unlawful deception or concealment. Unlike the control for Lawful tax planning distinction, the more direct design for Sham offshore tax shelter is to apply substance-over-form review and follow applicable transfer-pricing rules; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Stolen-identity tax return rather than Sham offshore tax shelter, because refund fraud uses another person's tax identity rather than understating the criminal's own income. Unlike the control for Stolen-identity tax return, the more direct design for Sham offshore tax shelter is to apply substance-over-form review and follow applicable transfer-pricing rules; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at False consumption-tax input credit rather than Sham offshore tax shelter, because false input credits reduce remitted VAT or generate improper refunds. Unlike the control for False consumption-tax input credit, the more direct design for Sham offshore tax shelter is to apply substance-over-form review and follow applicable transfer-pricing rules; a different safeguard cannot substitute for it.
Question 912
The case file describes the following: An employee receives disability benefits while secretly working elsewhere despite reporting complete incapacity. Which classification best explains the events?
- Insurance premium diversion
- Concealed preexisting condition
- Duplicate casualty claims
- Workers compensation malingering
Explanation
Correct Answer
D:Workers compensation malingering fits the facts because misstated disability status can sustain benefits inconsistent with actual capacity; the distinguishing observation is that claimed work restrictions conflict with verified employment or functional evidence. To test this interpretation, a reviewer should compare benefit certifications with lawful employment and activity records.
Incorrect Answers
A:Insurance premium diversion would involve a different sequence from Workers compensation malingering: the intermediary misappropriates premium cash without necessarily creating a false claim. Unlike the rejected Insurance premium diversion label, the evidence concerns Workers compensation malingering, since claimed work restrictions conflict with verified employment or functional evidence; reviewers should compare benefit certifications with lawful employment and activity records.
B:Concealed preexisting condition would involve a different sequence from Workers compensation malingering: material misrepresentation at policy inception differs from fabricating a later insured loss. Unlike the rejected Concealed preexisting condition label, the evidence concerns Workers compensation malingering, since claimed work restrictions conflict with verified employment or functional evidence; reviewers should compare benefit certifications with lawful employment and activity records.
C:Duplicate casualty claims would involve a different sequence from Workers compensation malingering: multiple recoveries for one loss can exceed the legitimate indemnifiable damage. Unlike the rejected Duplicate casualty claims label, the evidence concerns Workers compensation malingering, since claimed work restrictions conflict with verified employment or functional evidence; reviewers should compare benefit certifications with lawful employment and activity records.
Question 913
An examination of money-mule transfers begins with this observation: Funds enter and leave a personal account within hours with little economic explanation. Which follow-up procedure gives the most direct evidence?
- Trace incoming and outgoing counterparties, timelines and the person's stated purpose.
- Compare bills of lading, pricing benchmarks and intercompany settlement flows.
- Build transaction-network maps and compare economic purpose with invoice evidence.
- Aggregate linked cash transactions by beneficial party, time and channel.
- Trace the purchase funds, beneficial owner and later disposition proceeds.
Explanation
Correct Answer
A:For the Money-mule transfers concern, the procedure tests source evidence behind this observation: Funds enter and leave a personal account within hours with little economic explanation. This matters because money mules help move proceeds while separating the originator from subsequent recipients; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
B:This comparison primarily addresses Trade over-invoicing, in which inflated trade prices can transfer value across borders under cover of legitimate commerce; because the present question instead concerns Money-mule transfers, reviewers should trace incoming and outgoing counterparties, timelines and the person's stated purpose rather than apply a check designed for Trade over-invoicing.
C:This comparison primarily addresses Layering through repeated wires, in which layering introduces transaction complexity to obscure the origin and control of funds; because the present question instead concerns Money-mule transfers, reviewers should trace incoming and outgoing counterparties, timelines and the person's stated purpose rather than apply a check designed for Layering through repeated wires.
D:This comparison primarily addresses Cash-deposit structuring, in which structuring intentionally fragments transactions to evade detection or reporting; the exact threshold is jurisdiction-dependent; because the present question instead concerns Money-mule transfers, reviewers should trace incoming and outgoing counterparties, timelines and the person's stated purpose rather than apply a check designed for Cash-deposit structuring.
E:This comparison primarily addresses Integration through luxury property, in which integration converts earlier illicit value into apparently lawful assets or proceeds; because the present question instead concerns Money-mule transfers, reviewers should trace incoming and outgoing counterparties, timelines and the person's stated purpose rather than apply a check designed for Integration through luxury property.
Question 914
Two separate review files raise different issues. File A: Funds circulate rapidly through multiple entities and countries without evident business need. File B: A nominee buys an expensive property with illicit proceeds and later presents sale proceeds as legitimate wealth. Which pairing accurately classifies both files?
- File A: Integration through luxury property; File B: Layering through repeated wires.
- File A: Trade over-invoicing; File B: Integration through luxury property.
- File A: Money-mule transfers; File B: Layering through repeated wires.
- File A: Layering through repeated wires; File B: Money-mule transfers.
- File A: Layering through repeated wires; File B: Integration through luxury property.
Explanation
Correct Answer
E:File A is Layering through repeated wires because layering introduces transaction complexity to obscure the origin and control of funds, while File B is Integration through luxury property because integration converts earlier illicit value into apparently lawful assets or proceeds. The evidence chains differ: for File A, reviewers should build transaction-network maps and compare economic purpose with invoice evidence; for File B, they should trace the purchase funds, beneficial owner and later disposition proceeds.
Incorrect Answers
A:File A is misidentified as Integration through luxury property instead of Layering through repeated wires; File B is misidentified as Layering through repeated wires instead of Integration through luxury property. With the proposed pairing Integration through luxury property / Layering through repeated wires, the distinction is substantive: File A shows that circular transfers and closely offsetting wires involve related counterparties, whereas File B shows that purchase funding traces to opaque entities without plausible commercial income. For these Layering through repeated wires and Integration through luxury property files, choosing the pair Integration through luxury property / Layering through repeated wires would misdirect the review away from at least one of these mechanisms.
B:File A is misidentified as Trade over-invoicing instead of Layering through repeated wires. With the proposed pairing Trade over-invoicing / Integration through luxury property, the distinction is substantive: File A shows that circular transfers and closely offsetting wires involve related counterparties, whereas File B shows that purchase funding traces to opaque entities without plausible commercial income. For these Layering through repeated wires and Integration through luxury property files, choosing the pair Trade over-invoicing / Integration through luxury property would misdirect the review away from at least one of these mechanisms.
C:File A is misidentified as Money-mule transfers instead of Layering through repeated wires; File B is misidentified as Layering through repeated wires instead of Integration through luxury property. With the proposed pairing Money-mule transfers / Layering through repeated wires, the distinction is substantive: File A shows that circular transfers and closely offsetting wires involve related counterparties, whereas File B shows that purchase funding traces to opaque entities without plausible commercial income. For these Layering through repeated wires and Integration through luxury property files, choosing the pair Money-mule transfers / Layering through repeated wires would misdirect the review away from at least one of these mechanisms.
D:File B is misidentified as Money-mule transfers instead of Integration through luxury property. With the proposed pairing Layering through repeated wires / Money-mule transfers, the distinction is substantive: File A shows that circular transfers and closely offsetting wires involve related counterparties, whereas File B shows that purchase funding traces to opaque entities without plausible commercial income. For these Layering through repeated wires and Integration through luxury property files, choosing the pair Layering through repeated wires / Money-mule transfers would misdirect the review away from at least one of these mechanisms.
Question 915
The team is assessing a potential bid-sharing cartel discrepancy. Initial observation: Winner patterns rotate while bids share unusual formatting and pricing structures. Which verification step is most informative?
- Analyze repeated bid participants, price spreads and shared document metadata.
- Compare hiring decisions, supplier influence and communications about procurement scoring.
- Compare payments and customs records with government fee schedules.
- Compare access history to restricted procurement files with bidder drafts and benefits.
Explanation
Correct Answer
A:For the Bid-sharing cartel concern, the procedure tests source evidence behind this observation: Winner patterns rotate while bids share unusual formatting and pricing structures. This matters because bid rotation is collusion among bidders that undermines competitive award outcomes; independent corroboration is necessary before accepting any conclusion.
Incorrect Answers
B:This comparison primarily addresses Improper job-for-favor arrangement, in which noncash personal advantages can function as bribes when tied to official discretion; because the present question instead concerns Bid-sharing cartel, reviewers should analyze repeated bid participants, price spreads and shared document metadata rather than apply a check designed for Improper job-for-favor arrangement.
C:This comparison primarily addresses Unapproved facilitation payment, in which a privately directed payment to influence routine official action can be corrupt despite its small amount; because the present question instead concerns Bid-sharing cartel, reviewers should analyze repeated bid participants, price spreads and shared document metadata rather than apply a check designed for Unapproved facilitation payment.
D:This comparison primarily addresses Conflict through confidential specifications, in which disclosure of privileged tender information trades an entrusted advantage for private benefit; because the present question instead concerns Bid-sharing cartel, reviewers should analyze repeated bid participants, price spreads and shared document metadata rather than apply a check designed for Conflict through confidential specifications.
Question 916
The risk team has identified the following concealment through false refunds exposure: A false refund creates an apparently authorized cash outflow, unlike an off-record cash receipt theft. Which proposed prevention step is most effective?
- Restrict manual price overrides and review exception reports independently.
- Use two-person opening of donations and sequential receipt logs.
- Require independent approval and physical-return evidence for cash refunds.
- Use numbered sales receipts and independent inventory-to-sales reconciliation.
Explanation
Correct Answer
C:The control directly addresses the failure point in Concealment through false refunds, since a false refund creates an apparently authorized cash outflow, unlike an off-record cash receipt theft. A subsequent independent review could match refund authorizations to returned-stock records and original receipt identifiers to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Cash-sale understatement rather than Concealment through false refunds, because the portion never entered in the till is skimmed even though a partial sale appears in the books. Unlike the control for Cash-sale understatement, the more direct design for Concealment through false refunds is to require independent approval and physical-return evidence for cash refunds; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Charity donation skimming rather than Concealment through false refunds, because a donation stolen before entry may leave no accounting shortage unless outside records are used. Unlike the control for Charity donation skimming, the more direct design for Concealment through false refunds is to require independent approval and physical-return evidence for cash refunds; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Off-register retail skimming rather than Concealment through false refunds, because skimming removes receipts before they enter the organization's accounting records. Unlike the control for Off-register retail skimming, the more direct design for Concealment through false refunds is to require independent approval and physical-return evidence for cash refunds; a different safeguard cannot substitute for it.
Question 917
A process owner is assessing safeguards for sham consulting bribe. The mechanism is: A fake service agreement can launder a corrupt payment as a commercial expense. Which control addresses it most directly?
- Treat employment opportunities as potential benefits subject to conflict review.
- Set hospitality limits and require advance independent approval for high-risk recipients.
- Apply third-party diligence to charitable contributions connected to public or procurement officials.
- Require substantiated consultant work and anti-bribery diligence before payment.
Explanation
Correct Answer
D:The control directly addresses the failure point in Sham consulting bribe, since a fake service agreement can launder a corrupt payment as a commercial expense. A subsequent independent review could review contracts, service evidence and beneficial recipients of advisory fees to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Improper job-for-favor arrangement rather than Sham consulting bribe, because noncash personal advantages can function as bribes when tied to official discretion. Unlike the control for Improper job-for-favor arrangement, the more direct design for Sham consulting bribe is to require substantiated consultant work and anti-bribery diligence before payment; a different safeguard cannot substitute for it.
B:This safeguard is directed primarily at Lavish hospitality influence rather than Sham consulting bribe, because material personal entertainment can influence purchasing discretion even without cash transfer. Unlike the control for Lavish hospitality influence, the more direct design for Sham consulting bribe is to require substantiated consultant work and anti-bribery diligence before payment; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Inflated charitable donation conduit rather than Sham consulting bribe, because an apparent donation may disguise a benefit routed to someone able to influence business. Unlike the control for Inflated charitable donation conduit, the more direct design for Sham consulting bribe is to require substantiated consultant work and anti-bribery diligence before payment; a different safeguard cannot substitute for it.
Question 918
For a review of suspicious-activity reporting decision, which evidence-based warning sign is the most specific?
- Payments and settlement records do not resemble ordinary end-to-end bank transfers.
- A documented pattern raises a reasonable suspicion even though proof of an offense is incomplete.
- Disbursements reach concealed end users unrelated to the published charitable mission.
- Nominal directors cannot explain operations and ownership trails end in opaque nominees.
Explanation
Correct Answer
B:This observation is a pertinent indicator of Suspicious-activity reporting decision because a SAR or STR is a suspicion-based regulatory tool; examiners need not prove criminal guilt before considering it. The practical corroborating procedure is to review linked transactions and record the rationale for a report under applicable law; the indicator by itself does not establish intent or error.
Incorrect Answers
A:The proposed observation fits Alternative remittance settlement, where value transfer can occur through broker-ledgers and net settlements, whether legitimate or abused, rather than the particular mechanism in Suspicious-activity reporting decision. Unlike the clue for Alternative remittance settlement, the more directly related indicator for Suspicious-activity reporting decision is this: A documented pattern raises a reasonable suspicion even though proof of an offense is incomplete.
C:The proposed observation fits Terrorist-financing source distinction, where terrorist financing can involve legitimately sourced money; destination and intended use are central concerns, rather than the particular mechanism in Suspicious-activity reporting decision. Unlike the clue for Terrorist-financing source distinction, the more directly related indicator for Suspicious-activity reporting decision is this: A documented pattern raises a reasonable suspicion even though proof of an offense is incomplete.
D:The proposed observation fits Opaque beneficial-ownership layers, where legal-entity layers can conceal who controls funds and defeat superficial name-only screening, rather than the particular mechanism in Suspicious-activity reporting decision. Unlike the clue for Opaque beneficial-ownership layers, the more directly related indicator for Suspicious-activity reporting decision is this: A documented pattern raises a reasonable suspicion even though proof of an offense is incomplete.
Question 919
Control designers are focusing on the mechanism behind inflated charitable donation conduit: An apparent donation may disguise a benefit routed to someone able to influence business. Which measure best limits that opportunity?
- Use transparent service criteria and protected independent complaint channels.
- Apply third-party diligence to charitable contributions connected to public or procurement officials.
- Set hospitality limits and require advance independent approval for high-risk recipients.
- Require substantiated consultant work and anti-bribery diligence before payment.
Explanation
Correct Answer
B:The control directly addresses the failure point in Inflated charitable donation conduit, since an apparent donation may disguise a benefit routed to someone able to influence business. A subsequent independent review could trace donation beneficiaries and governance to tender decisions and communications to identify exceptions that bypassed the safeguard.
Incorrect Answers
A:This safeguard is directed primarily at Economic extortion demand rather than Inflated charitable donation conduit, because extortion relies on coercive leverage over a decision or entitlement rather than a voluntary gratuity. Unlike the control for Economic extortion demand, the more direct design for Inflated charitable donation conduit is to apply third-party diligence to charitable contributions connected to public or procurement officials; a different safeguard cannot substitute for it.
C:This safeguard is directed primarily at Lavish hospitality influence rather than Inflated charitable donation conduit, because material personal entertainment can influence purchasing discretion even without cash transfer. Unlike the control for Lavish hospitality influence, the more direct design for Inflated charitable donation conduit is to apply third-party diligence to charitable contributions connected to public or procurement officials; a different safeguard cannot substitute for it.
D:This safeguard is directed primarily at Sham consulting bribe rather than Inflated charitable donation conduit, because a fake service agreement can launder a corrupt payment as a commercial expense. Unlike the control for Sham consulting bribe, the more direct design for Inflated charitable donation conduit is to apply third-party diligence to charitable contributions connected to public or procurement officials; a different safeguard cannot substitute for it.
Question 920
A reviewer wants to distinguish contactless payment relay from adjacent risk patterns. Which observation is the most diagnostic indicator?
- Device telemetry shows implausible proximity or timing between card and reader interactions.
- Debit originators lack customer authorization evidence and generate return disputes.
- Authentic-looking emails originate from an altered thread and route funds to a new account.
- Cleared images show altered writing inconsistent with the drawer's retained check copy.
Explanation
Correct Answer
A:This observation is a pertinent indicator of Contactless payment relay because relay attacks extend a credential's communication path rather than physically duplicating the card. The practical corroborating procedure is to analyze terminal traces and transaction authentication logs for relay characteristics; the indicator by itself does not establish intent or error.
Incorrect Answers
B:The proposed observation fits Unauthorized ACH debit, where the debit exploits the payment rail without the payer's required consent, rather than the particular mechanism in Contactless payment relay. Unlike the clue for Unauthorized ACH debit, the more directly related indicator for Contactless payment relay is this: Device telemetry shows implausible proximity or timing between card and reader interactions.
C:The proposed observation fits Business email payment diversion, where the payment is authorized for a real invoice but settlement instructions are fraudulently replaced, rather than the particular mechanism in Contactless payment relay. Unlike the clue for Business email payment diversion, the more directly related indicator for Contactless payment relay is this: Device telemetry shows implausible proximity or timing between card and reader interactions.
D:The proposed observation fits Check-washing alteration, where check washing modifies a valid instrument to redirect its value, rather than the particular mechanism in Contactless payment relay. Unlike the clue for Check-washing alteration, the more directly related indicator for Contactless payment relay is this: Device telemetry shows implausible proximity or timing between card and reader interactions.