Regulation, Compliance, Ethics and Financial Crime

Introduction and Context

International trade finance connects exporters, importers, banks, insurers, logistics providers, customs authorities and public agencies. The same instruments that reduce commercial risk—letters of credit, documentary collections, guarantees, open-account finance and supply-chain finance—can also be misused to move illicit value, evade sanctions, disguise the origin or destination of goods, or corrupt public decision-making.

Compliance is therefore not a peripheral administrative function. It is a strategic capability affecting market access, correspondent-banking relationships, capital allocation, reputation, operational resilience and the legitimacy of international commerce. A bank may face licensing restrictions, civil penalties, criminal prosecution, asset confiscation, loss of correspondent access and severe reputational damage when it processes prohibited or suspicious transactions. A corporation may face exclusion from public contracts, export privileges and financing markets.

This chapter develops an integrated approach to sanctions, export controls, anti-money-laundering (AML) controls, customer due diligence (CDD), beneficial-ownership analysis and anti-bribery compliance. It also examines trade-based money laundering (TBML), dual-use goods, invoice manipulation and evasion typologies. The central managerial challenge is to control risk without indiscriminately abandoning higher-risk countries, sectors or customer groups. Effective compliance is risk-based, proportionate, evidence-led and ethically governed.

Learning Objectives

By the end of this chapter, students should be able to:

1. Distinguish sanctions, export controls, AML, CDD, beneficial-ownership and anti-bribery obligations.
2. Apply a risk-based compliance framework to trade-finance transactions.
3. Identify common TBML, dual-use, invoice-manipulation and sanctions-evasion typologies.
4. Design an escalation and investigation process that balances efficiency, financial inclusion and legal obligations.
5. Evaluate the roles of governance, technology, human judgment and ethical culture.
6. Critically assess the limitations of screening, automated monitoring and de-risking.

1. The Regulatory Architecture of Trade Finance

1.1 Distinct but interconnected regimes

Sanctions are legal restrictions imposed by states or international bodies. They may target countries, governments, companies, vessels, aircraft, individuals, sectors, goods or financial services. Sanctions can include asset freezes, prohibitions on dealing, restrictions on correspondent banking and limitations on trade or investment. Their legal scope differs by jurisdiction; a transaction lawful under one legal system may violate another system with extraterritorial reach.

Export controls regulate the movement, transfer, brokering or provision of controlled goods, software, technology and technical assistance. They may be based on the nature of the item, its destination, end user, end use or the identity of parties. Military items are generally controlled, but many civilian products have potential military, surveillance, nuclear, chemical or biological applications.

AML and counter-terrorist-financing (CTF) controls seek to prevent and detect the movement or use of proceeds of crime and terrorist funds. They generally require risk assessment, CDD, transaction monitoring, record retention, internal controls, staff training and reporting of suspicious activity to the competent authority.

CDD is the process through which an institution identifies and verifies a customer, understands its business and ownership structure, assesses expected activity and monitors the relationship. Enhanced due diligence (EDD) is applied where risk is higher.

Beneficial ownership concerns the natural person or persons who ultimately own or control a legal entity or arrangement, even when ownership is hidden behind companies, nominees or trusts. Legal ownership and beneficial ownership are not necessarily the same.

Anti-bribery regulation prohibits offering, promising, giving, requesting or accepting an improper advantage to influence a business or official decision. It applies not only to direct payments but also to agents, distributors, consultants, gifts, hospitality, charitable contributions and facilitation payments, depending on applicable law.

These regimes overlap but are not interchangeable. A sanctioned party may not be involved in money laundering; a suspicious transaction may involve no sanctioned person; and an export-control violation may occur even where payment is made through a reputable bank.

1.2 International standards and national implementation

International standards are developed through bodies such as the Financial Action Task Force (FATF), the World Customs Organization, multilateral export-control arrangements and anti-corruption conventions. These standards do not eliminate national differences. Each jurisdiction determines the scope of prohibited conduct, licensing, reporting, information sharing, privacy, enforcement and penalties.

A practical compliance decision should therefore ask four questions:

1. Which laws apply because of the institution, transaction, currency, goods, parties or location?
2. Is a license, authorization or exemption available?
3. What evidence supports the conclusion?
4. Who has authority to approve, reject, report or escalate the transaction?

2. A Risk-Based Compliance Framework

A risk-based approach allocates stronger controls to situations presenting greater risk. It does not mean that low-risk transactions receive no controls, nor that high-risk transactions are automatically prohibited. It requires a documented relationship between risk indicators and control intensity.

A useful analytical model is:

where R is assessed risk, P is the estimated probability of a harmful event, and I is its potential impact. This is a conceptual model rather than a universally prescribed regulatory formula. Probability and impact should be defined consistently, and the institution should recognize that severe but unlikely events may require controls even when the numerical product is modest.

A more operational risk profile can be represented as:

where C represents customer risk, G geographic risk, P product or service risk, T transaction or channel risk, B behavioral or delivery risk, and wᵢ are documented weights. The expression is a governance tool, not a substitute for judgment. Scores must not encode unlawful discrimination, and a low score must not override a legally binding prohibition or a clear red flag.

Typical risk indicators include:

• opaque ownership, nominee directors or unexplained control changes;
• unusual use of intermediaries, free-trade zones or transshipment points;
• goods inconsistent with the customer’s business;
• complex routing without commercial justification;
• rapid movement of funds through multiple jurisdictions;
• prices materially inconsistent with market evidence;
• third-party payments or changes in payment instructions;
• reluctance to provide end-user, shipping or ownership information;
• connections to politically exposed persons (PEPs), sanctioned parties or corruption-sensitive sectors;
• unusual use of high-risk products such as guarantees, letters of credit or cash-intensive settlement.

Risk assessment is dynamic. A customer’s risk may change when it enters a new market, changes suppliers, receives a new beneficial owner, begins trading controlled goods, experiences adverse media or exhibits transaction behavior inconsistent with its stated profile.

3. Customer Due Diligence and Beneficial Ownership

3.1 The CDD lifecycle

CDD should be treated as a continuing process rather than a one-time onboarding event:

1. Identify and verify the customer. Obtain reliable information about legal name, registration, address, business activity and authority to act.
2. Understand ownership and control. Trace the structure to natural persons who ultimately own or control the entity. If ownership cannot be established through equity, examine voting rights, contractual control and senior management responsibility in accordance with applicable law.
3. Understand purpose and expected activity. Establish why the customer needs trade finance, expected corridors, goods, counterparties, currencies, volumes and settlement methods.
4. Screen relevant parties. Screening may include customers, beneficial owners, directors, authorized signatories, applicants, beneficiaries, buyers, sellers, guarantors, banks, vessels and other transaction participants.
5. Assign risk and determine controls. Apply standard or enhanced measures, including source-of-funds or source-of-wealth inquiries where justified.
6. Monitor and refresh information. Update records according to risk and when trigger events occur.

A frequent weakness is treating incorporation documents as proof of beneficial ownership. Corporate registries can be incomplete, outdated or inaccurate. Institutions should compare registry information with shareholder registers, organizational charts, contracts, identity documents, reliable databases and explanations of control.

3.2 PEPs and higher-risk relationships

PEP status is a risk factor, not proof of wrongdoing. Public officials and their family members or close associates may require enhanced measures, senior approval, information about source of wealth and source of funds, and closer monitoring. Controls should be proportionate and should not result in automatic exclusion solely because a person holds public office.

3.3 Data quality and privacy

Compliance requires enough information to make defensible decisions, but collecting unnecessary personal data creates privacy, security and fairness risks. Data should be accurate, relevant, protected, retained for the legally required period and accessible only to authorized personnel. Screening matches must be resolved through identity comparison rather than name similarity alone.

4. Sanctions and Export-Control Compliance

4.1 Sanctions screening and decision-making

Sanctions screening should occur at onboarding, before execution, when transaction parties change and during periodic rescreening. The control environment should cover structured and unstructured names, aliases, transliterations, addresses, identifiers, vessel information and ownership or control relationships.

A potential match is an alert, not a conclusion. Investigators should compare identifiers, nationality, date of birth, registration number, address, ownership, role and transaction context. Possible outcomes include false positive, permissible transaction, transaction requiring a license, blocked or rejected transaction, and reportable violation.

Ownership and control rules are especially important. A company may not appear on a list but may be owned or controlled by a designated person. Institutions must apply the legal rules of each relevant jurisdiction rather than relying only on a vendor’s database.

4.2 Export controls and dual-use goods

Dual-use goods have legitimate civilian applications but may also support military, weapons or surveillance capabilities. Examples can include advanced electronics, machine tools, navigation equipment, encryption technology, sensors, specialized chemicals and certain software. Classification depends on technical specifications and the applicable control list, not merely on a product’s marketing description.

A sound export-control review asks:

• What exactly is the item, including model, technical parameters and software version?
• Is it listed or controlled because of destination, end user or end use?
• Who is the ultimate end user?
• Could the item support a prohibited military, weapons or surveillance program?
• Is the route a genuine commercial route or an attempt to obscure destination?
• Is a license required, and has it been obtained and verified?

Banks may not be technical classification authorities, but they should recognize when documentary evidence is inadequate and request specialist review. Trade documents that describe sophisticated equipment only as “industrial parts” may indicate either poor documentation or deliberate concealment.

5. Trade-Based Money Laundering and Evasion Typologies

TBML uses trade transactions to transfer value and disguise criminal proceeds. The physical movement of goods may be genuine, partially genuine or entirely fictitious. Trade finance is attractive to criminals because transactions involve multiple jurisdictions, complex documents, variable prices and legitimate commercial explanations.

5.1 Common typologies

Over-invoicing and under-invoicing. A buyer and seller manipulate the stated price to transfer value. Over-invoicing imports can move excess funds to the exporter; under-invoicing exports can retain value outside the exporting country.

Multiple invoicing. The same shipment is supported by several invoices or financing claims, allowing more than one payment or source of finance.

Over-shipment and under-shipment. The quantity actually shipped differs materially from the documentary quantity.

Phantom shipments. Documents represent goods that were never shipped.

Misdescription. Goods are described inaccurately to conceal controlled items, evade duties or make pricing comparisons difficult.

Fictitious services and circular trade. Payments are justified by vague consulting, brokerage or marketing services, or goods move among related parties in a circular pattern without economic purpose.

Third-party payments. An unrelated party pays or receives funds without a credible commercial explanation.

Transshipment and routing abuse. Goods are routed through intermediary jurisdictions to obscure origin, destination or end user.

Trade diversion and shell companies. Newly formed entities with little operational capacity appear as importers, exporters or intermediaries.

5.2 Red flags and their limitations

No single red flag proves illicit conduct. A high-value shipment may be legitimate, and a small transaction may be criminal. Investigators should assess clusters of indicators and seek a coherent commercial explanation.

Price comparison requires care. Differences may reflect quality, warranty, freight, insurance, financing, delivery terms, scarcity or volume discounts. A simplistic price threshold can create false positives.

6. Anti-Bribery Compliance in Trade Finance

Trade transactions frequently involve customs officials, licensing agencies, port authorities, state-owned enterprises, inspection companies and procurement officers. Corruption risks may arise through agents, freight forwarders, customs brokers, distributors and consultants.

An effective anti-bribery program includes:

• leadership commitment and a clear prohibition on bribery;
• risk-based due diligence on intermediaries and joint-venture partners;
• written contracts with services, fees, audit rights and compliance obligations;
• controls over gifts, hospitality, travel, charitable donations and sponsorships;
• approval and documentation of commissions and success fees;
• accounting controls that prevent false descriptions such as “facilitation expense” or “marketing support”;
• training tailored to employees exposed to customs, procurement and licensing;
• confidential reporting channels and protection against retaliation;
• investigation, remediation and proportionate discipline.

A commercially attractive transaction is not a justification for ignoring a suspicious commission. Payments to accelerate routine government action may be treated differently across jurisdictions, but employees should not assume that a so-called facilitation payment is lawful. Legal advice and escalation are essential.

7. Investigation, Escalation and Reporting

A defensible investigation is structured, proportionate and documented. A practical workflow is:

1. Alert generation: screening, monitoring, employee referral, audit or external information creates a concern.
2. Triage: determine whether the alert is clearly irrelevant, requires investigation or involves an immediate legal prohibition.
3. Information gathering: obtain transaction documents, customer records, shipping data, ownership information, payment history and relevant licenses.
4. Independent corroboration: verify information through reliable sources, counterparties, carriers, customs data or technical experts.
5. Analysis: compare the activity with the customer profile, commercial rationale and applicable law.
6. Decision: release, hold, reject, block, seek a license, exit the relationship or file a suspicious-transaction report, as legally required.
7. Feedback and remediation: record rationale, improve rules, train staff and reassess residual risk.

Confidentiality rules are critical. In many jurisdictions, institutions must not disclose to the customer that a suspicious-transaction report has been filed. Legal privilege, privacy and information-sharing rules also differ. Staff should follow local requirements and obtain advice from compliance and legal functions.

8. Technology, Analytics and Human Judgment

Modern programs use sanctions-screening engines, entity-resolution tools, optical character recognition, graph analytics, shipping databases, anomaly detection and machine-learning models. These tools can compare names, identify networks, extract invoice fields and detect behavior inconsistent with historical activity.

Technology introduces risks. Poor-quality data can produce missed matches; overly sensitive rules can generate alert fatigue; opaque models can be difficult to explain; biased historical data can produce unfair outcomes; and adversaries may adapt their behavior to evade rules. Generative AI may assist with document summarization or investigation hypotheses, but it should not independently authorize transactions, close alerts or determine legal conclusions without controlled human oversight.

Model governance should address validation, performance testing, threshold calibration, change control, audit trails, access security, explainability and independent review. Useful measures include alert-to-case conversion, confirmed-case yield, average investigation time, quality-assurance error rates and the proportion of alerts closed with adequate rationale. These are management indicators, not proof that a program is effective.

9. De-Risking, Financial Inclusion and Ethical Governance

De-risking occurs when institutions terminate or avoid entire categories of customers, countries or sectors rather than managing specific risks. It may reduce short-term exposure but can push legitimate businesses into less regulated channels, increase informal finance and harm remittance users, small exporters and humanitarian trade.

The alternative is not indiscriminate accommodation. Institutions should distinguish between prohibited activity and manageable elevated risk. Proportionate measures may include narrower product scope, transaction limits, enhanced documentation, independent review, targeted monitoring and time-bound remediation. Relationships should be exited where legal prohibitions apply, information cannot be obtained, controls are deliberately circumvented or residual risk exceeds the institution’s appetite.

Ethical compliance asks not only “Can this transaction be processed?” but also “Is the decision fair, explainable, consistent and responsible?” Governance should define risk appetite, escalation authority, independence of compliance, board reporting, accountability for commercial pressure and protections for whistleblowers. Compliance staff must be able to challenge revenue-generating units without retaliation.

10. Illustrative Case: The Meridian Components Transaction

Background

Meridian Components Ltd., a newly incorporated importer, applies for a letter of credit to purchase advanced precision-control units from an exporter in Country A. The stated destination is Country B, but the goods will transit through Country C. Meridian’s beneficial owner is identified through a holding company registered in a low-transparency jurisdiction. The invoice price is approximately 35% above comparable market data.

Problem

The transaction presents possible sanctions-evasion, export-control and TBML risks. The product description—“industrial control modules”—is vague. A serial-number list is absent, the end-user certificate is unsigned, and payment is to be made by a company unrelated to Meridian. The exporter claims that the route is commercially necessary but provides no freight analysis.

Analysis

The bank should not conclude that the transaction is illicit solely because of the route or price. It should, however, identify a cluster of red flags: opaque ownership, newly formed customer, vague dual-use description, incomplete end-user evidence, unexplained third-party payment and unusual pricing. The bank should determine the applicable sanctions and export-control laws, establish whether Country B or any party is restricted, and verify whether the products require a license.

Approach and solution

The transaction is placed on hold under the bank’s procedures. Compliance requests:

• full technical specifications, model numbers and serial numbers;
• verified beneficial-ownership information and source of funds;
• signed end-user and end-use documentation;
• evidence of the commercial necessity of the route;
• independent confirmation of the buyer, seller, carrier and ultimate consignee;
• explanation and approval for the third-party payment;
• reliable price evidence adjusted for delivery terms, warranty and specifications;
• applicable export licenses and sanctions authorizations.

Technical and legal specialists review the goods. Shipping data shows that the purported consignee has no facilities capable of using the equipment and is linked to a distributor previously associated with military procurement. The exporter cannot produce a valid license. The bank rejects the transaction, documents the rationale, considers whether reporting is required and reviews the relationship for possible exit.

Outcome

The bank avoids processing a potentially prohibited transaction and identifies weaknesses in its initial onboarding of Meridian. It enhances controls for precision equipment, third-party payments and newly formed importers. It also avoids making a public accusation and preserves confidentiality while fulfilling legal reporting duties.

Learning points

1. Multiple moderate indicators can form a serious risk pattern.
2. Documentary completeness is not equivalent to documentary credibility.
3. Banks need specialist escalation for technical export-control questions.
4. Price anomalies require commercial analysis, not automatic rejection.
5. Beneficial ownership, end use and payment flows must be assessed together.

Challenges and Limitations

Compliance systems face inherent uncertainty. Beneficial-ownership records may be unavailable; sanctions lists may contain incomplete identifiers; trade data may not be comparable; export classifications may be technically complex; and criminal networks deliberately create plausible commercial explanations. Over-monitoring can overwhelm investigators, while under-monitoring can miss sophisticated schemes.

International inconsistency creates additional difficulty. Definitions of beneficial owner, reporting thresholds, privacy requirements, sanctions scope and facilitation payments vary. Multinational groups must establish a baseline global standard while adapting procedures to local law. They should not assume that a vendor’s screening result constitutes legal advice.

Finally, compliance cannot eliminate all risk. The objective is a reasonable, documented and continuously improving system that prevents prohibited conduct, detects suspicious behavior, supports lawful commerce and protects institutional integrity.

Best-Practice Framework

A mature trade-finance compliance program should:

• map applicable laws by jurisdiction, product, currency and transaction role;
• maintain board-approved risk appetite and clear accountability;
• conduct documented enterprise and customer risk assessments;
• identify and verify beneficial owners using multiple reliable sources;
• integrate sanctions, export-control, AML and anti-bribery reviews;
• apply enhanced due diligence proportionately rather than automatically;
• reconcile invoices, transport documents, goods descriptions and payment flows;
• use independent escalation for technical or legal uncertainty;
• validate technology and preserve audit trails;
• test controls through quality assurance, internal audit and red-team exercises;
• protect whistleblowers and challenge commercial pressure;
• measure outcomes, learn from enforcement actions and update controls;
• document decisions sufficiently for regulators, auditors and future investigators.

Chapter Summary

Trade-finance compliance is a strategic system linking legal obligations, risk management, ethics and operational decision-making. Sanctions restrict dealings with designated persons, jurisdictions, sectors or activities; export controls regulate goods, technology, end users and end uses; AML controls address illicit financial flows; CDD establishes customer identity, purpose and expected activity; beneficial-ownership analysis identifies the natural persons who ultimately own or control entities; and anti-bribery controls address improper advantages and corrupt intermediaries.

A risk-based framework combines customer, geographic, product, transaction and behavioral factors, while recognizing that conceptual scores cannot replace legal rules or professional judgment. TBML commonly involves over- or under-invoicing, phantom shipments, multiple invoicing, misdescription, third-party payments, circular trade and route manipulation. Dual-use goods require technical classification and credible end-user analysis. Effective investigations reconcile documents, commercial logic, ownership, logistics and payment behavior.

Technology strengthens screening and analytics but introduces data-quality, explainability, bias and model-risk concerns. Ethical governance requires proportionality, confidentiality, independence and protection against indiscriminate de-risking. The goal is not zero risk or maximum rejection; it is lawful, fair, evidence-based and continuously improving facilitation of legitimate international trade.

Key Terms

Sanctions: Legal restrictions imposed on specified persons, countries, sectors, goods or activities.

Export controls: Rules governing the export, transfer, brokering or use of controlled goods, software and technology.

Dual-use goods: Items with both civilian and potential military, weapons or surveillance applications.

AML: Measures designed to prevent and detect laundering of criminal proceeds.

CTF: Controls addressing the financing of terrorism.

Customer due diligence: Identification, verification and risk assessment of customers and their activities.

Enhanced due diligence: Additional investigation and controls applied to higher-risk relationships.

Beneficial owner: Natural person who ultimately owns or controls an entity or arrangement.

PEP: Politically exposed person who holds or has held a prominent public function.

Trade-based money laundering: Use of trade transactions to move or disguise illicit value.

Over-invoicing: Stating a price above the genuine commercial value to transfer excess value.

Under-invoicing: Stating a price below genuine value to conceal or transfer value.

Multiple invoicing: Using several invoices or financing claims for one shipment.

Phantom shipment: Fictitious shipment represented by false or misleading documents.

Sanctions evasion: Deliberate conduct intended to avoid restrictions through concealment or circumvention.

End user: Final person or organization that receives or uses the goods.

Source of funds: Origin of money used in a particular transaction.

Source of wealth: Origin of a customer’s overall assets or economic resources.

De-risking: Withdrawal from categories of customers or markets instead of managing specific risks.

Risk-based approach: Allocation of controls according to the likelihood and impact of identified risks.

Review Questions

Short Answer Questions

1. How do sanctions differ from export controls?
2. Why is beneficial-ownership identification important in trade finance?
3. What is trade-based money laundering?
4. Why is a potential sanctions-screening match not automatically a confirmed match?
5. What is meant by proportionate enhanced due diligence?

Long Answer Questions

1. Explain how AML, CDD, sanctions and export-control obligations interact in a letter-of-credit transaction.
2. Discuss five TBML typologies and the documentary or behavioral indicators associated with each.
3. Evaluate the advantages and limitations of automated sanctions screening and transaction monitoring.
4. Explain how an institution can manage higher-risk customers without engaging in indiscriminate de-risking.
5. Design an anti-bribery control framework for a bank financing trade involving customs brokers and state-owned buyers.

Analytical / Application Questions

1. A customer submits a trade-finance request involving vague goods descriptions, an unrelated third-party payer and a transshipment route. Construct an investigation plan and identify the evidence required before a decision.
2. A sanctions-screening system produces a high volume of false positives but has recently missed an ownership-related designation. Recommend governance, data and model changes.
3. Using the Meridian Components case, distinguish facts that require immediate legal prohibition from facts that require enhanced investigation, and justify a final transaction decision.

Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes sanctions from export controls?

A. Sanctions regulate only the quality of imported goods.

B. Sanctions impose restrictions on specified parties or activities, while export controls regulate controlled goods, technology, destinations, end users or end uses.

C. Export controls apply only to financial institutions, while sanctions apply only to manufacturers.

D. They are identical legal regimes with different names.

Correct Answer: B. Sanctions impose restrictions on specified parties or activities, while export controls regulate controlled goods, technology, destinations, end users or end uses.

Question 2

Which person is the beneficial owner of a company?

A. The bank employee who processes its payments

B. The freight forwarder that transports its goods

C. The natural person who ultimately owns or controls it

D. Any employee authorized to sign an invoice

Correct Answer: C. The natural person who ultimately owns or controls it

Question 3

Which is a classic trade-based money-laundering typology?

A. Using a verified market price supported by independent evidence

B. Over-invoicing goods to transfer excess value to an exporter

C. Updating a customer’s address after verification

D. Obtaining a valid export license before shipment

Correct Answer: B. Over-invoicing goods to transfer excess value to an exporter

Question 4

What is the appropriate interpretation of a potential sanctions-screening match?

A. It is automatically proof that the transaction is prohibited.

B. It should be ignored if the customer is profitable.

C. It is an alert requiring comparison of identifiers and transaction context.

D. It proves that a suspicious-transaction report must always be filed.

Correct Answer: C. It is an alert requiring comparison of identifiers and transaction context.

Question 5

Why do dual-use goods require special attention?

A. They are always illegal to export.

B. They have civilian applications but may also support military, weapons or surveillance purposes.

C. They can be traded only through cash payments.

D. They are exempt from destination controls.

Correct Answer: B. They have civilian applications but may also support military, weapons or surveillance purposes.

Question 6

Which fact most strongly suggests a need for enhanced due diligence?

A. A transparent ownership structure and activity consistent with the customer profile

B. A routine payment to a long-standing verified supplier

C. Opaque ownership combined with unexplained third-party payments and unusual routing

D. A complete invoice containing ordinary goods and verified shipping data

Correct Answer: C. Opaque ownership combined with unexplained third-party payments and unusual routing

Question 7

What is the principal ethical concern with indiscriminate de-risking?

A. It always increases transaction speed.

B. It may exclude legitimate customers and push lawful commerce into less regulated channels.

C. It eliminates the need for customer due diligence.

D. It guarantees that all suspicious activity will be detected.

Correct Answer: B. It may exclude legitimate customers and push lawful commerce into less regulated channels.

Question 8

Which control is most directly associated with anti-bribery compliance?

A. Approving unexplained success fees to customs intermediaries

B. Allowing gifts without records

C. Conducting risk-based due diligence on agents and documenting legitimate services and compensation

D. Removing all approval requirements for public-sector transactions

Correct Answer: C. Conducting risk-based due diligence on agents and documenting legitimate services and compensation

Question 9

What is a limitation of automated compliance systems?

A. They cannot process any customer data.

B. They may generate false positives, miss poor-quality data patterns or reproduce model bias.

C. They make human review legally unnecessary.

D. They eliminate the need for record retention.

Correct Answer: B. They may generate false positives, miss poor-quality data patterns or reproduce model bias.

Question 10

In the illustrative Meridian case, which combination most clearly supports escalation?

A. Transparent ownership, valid licensing and consistent end-user evidence

B. Opaque ownership, vague dual-use goods, unexplained third-party payment and incomplete licensing

C. A modest invoice supported by independent market data

D. A verified buyer using an ordinary commercial route

Correct Answer: B. Opaque ownership, vague dual-use goods, unexplained third-party payment and incomplete licensing