1. When reviewing an alert, how do you decide which transactions are relevant to the investigation and which are noise?
2. How would you approach a case where a customer’s declared source of funds does not match their current transaction volume?
3. What steps would you take if you see a pattern suggesting possible funnel account activity?
4. How do you assess whether a customer is acting on their own behalf or potentially as a nominee or intermediary?
5. A corporate client’s ownership structure spans multiple jurisdictions — walk me through how you would verify beneficial ownership and identify red flags.
6. During an investigation, you find transactions that are suspicious but individually small — how would you determine whether structuring is involved?
7. If you receive conflicting information from frontline teams and system records, how would you resolve it while maintaining objectivity?
8. How would you justify your decision not to escalate a borderline suspicious case, knowing it might be reviewed later by audit or compliance?