Anti-Money Laundering and KYC Training Course

Duration 10 days 21 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends AML Analyst, KYC Analyst and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-FFC-027

Before you join: Participants should understand basic financial services products, customer onboarding processes or internal control procedures.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Money laundering controls fail when firms cannot connect customer risk, transaction behaviour, ownership information, sanctions exposure and escalation decisions. Financial institutions and regulated businesses must identify customers reliably, understand expected activity, detect unusual patterns, investigate alerts, file reports where required and maintain evidence for supervisors, auditors and law enforcement. Weak KYC files, inconsistent risk ratings and poorly documented decisions create regulatory, financial and reputational exposure.

This course develops the practical judgement and control methods required for anti-money laundering, counter-terrorist financing and customer due diligence work. Participants examine the Financial Action Task Force risk-based approach, customer acceptance standards, beneficial ownership verification, politically exposed person controls, sanctions screening, transaction monitoring, suspicious activity reporting and case management. They learn how to convert policy requirements into workable customer files, risk assessments, investigation narratives and monitoring rules.

Instructor-led sessions combine focused briefings with financial-crime cases drawn from banking, payments, trade finance, correspondent banking, insurance and corporate onboarding. Participants assess customer scenarios, review transaction data, test control decisions and prepare documented escalations. They leave with an AML/KYC control pack containing a customer risk-rating model, enhanced due diligence checklist, alert investigation template, suspicious activity report narrative structure, quality-assurance checklist and implementation plan.

The course is suited to compliance, onboarding, operations, risk, audit and financial-crime professionals who already work with customer data, transactions or regulated control processes. It is also relevant to managers responsible for setting practical standards for first-line and second-line AML controls.

What you will be able to do

  • Apply the FATF risk-based approach to customer, product, geography and channel risk assessments
  • Construct customer risk ratings using documented scoring factors and escalation thresholds
  • Perform customer due diligence and beneficial ownership verification using reliable source evidence
  • Design enhanced due diligence measures for high-risk customers, PEPs and complex ownership structures
  • Investigate transaction-monitoring alerts through structured analysis, evidence capture and disposition decisions
  • Draft suspicious activity report narratives that state facts, concerns, rationale and supporting evidence
  • Test AML/KYC controls using quality-assurance sampling, exception classification and remediation tracking
  • Present a complete AML/KYC case file with risk assessment, investigation and control recommendations

Benefits of attending

For you

  • Make documented customer acceptance and escalation decisions with greater confidence
  • Improve the quality and consistency of KYC files and periodic reviews
  • Recognise money-laundering typologies within customer behaviour and transaction patterns
  • Write clearer alert dispositions and suspicious activity report narratives
  • Build evidence of practical AML/KYC capability for compliance and financial-crime roles

For your organisation

  • Reduce inconsistent customer-risk decisions through common scoring and evidence standards
  • Improve detection and investigation of suspicious customer and transaction activity
  • Strengthen audit trails for regulatory examination, internal audit and management review
  • Reduce rework caused by incomplete onboarding files and weak enhanced due diligence
  • Create clearer ownership of escalations, remediation actions and control-quality findings

Course modules

21 modules over 10 days

Participants can explain how AML controls connect financial-crime risks, governance responsibilities and operational decisions.

  • Money laundering stages: placement, layering and integration within financial systems
  • Predicate offences and illicit proceeds driving money-laundering activity
  • Terrorist financing compared with money laundering: sources and movement
  • FATF Recommendations as the international baseline for AML controls
  • Risk-based approach linking threats, vulnerabilities, controls and residual risk
  • Three lines model for first-line, compliance and audit responsibilities

Participants can translate AML regulatory expectations into accountable governance and documented control requirements.

  • Board oversight, senior management accountability and money laundering reporting officers
  • AML policy hierarchy: enterprise standards, procedures and operating instructions
  • Regulatory examinations focused on governance, evidence, testing and remediation
  • Record-retention requirements for customer files, transactions and investigation records
  • Management information covering alerts, backlogs, quality and suspicious reports
  • Issue management registers with owners, due dates and closure evidence

Participants can build a documented financial-crime risk assessment for a business area or product.

  • Inherent-risk assessment across customers, products, geographies and delivery channels
  • Risk appetite statements translated into measurable customer acceptance thresholds
  • Control design assessment using preventive, detective and corrective classifications
  • Residual-risk calculation after control effectiveness and known control gaps
  • Risk assessment evidence drawn from incidents, alerts and external intelligence
  • Annual refresh triggers following product changes, acquisitions or regulatory findings

Participants can define customer acceptance requirements and assemble complete KYC evidence files.

  • Customer identification programme requirements for individuals, entities and authorised signatories
  • Minimum KYC data fields supporting identification, verification and risk rating
  • Reliable and independent sources for identity verification and document validation
  • Customer acceptance criteria defining prohibited, restricted and approved relationships
  • Purpose and intended nature statements linked to expected account activity
  • KYC file indexing for retrieval, review and audit evidence

Participants can create and apply a customer risk-rating model with clear scoring and review rules.

  • Customer-risk factors covering occupation, ownership, products and transaction expectations
  • Geographic-risk scoring using FATF lists, sanctions and corruption indicators
  • Product and channel risk weights for cash, remote and cross-border services
  • Weighted scoring models with documented rationale for factor calibration
  • Risk-rating overrides controlled through approvals, rationale and expiry dates
  • Periodic-review frequencies aligned with low, medium and high-risk ratings

Participants can identify, verify and document beneficial ownership within complex legal entity structures.

  • Beneficial owner definitions based on ownership, control and economic benefit
  • Ownership charts tracing direct holdings, intermediate entities and controlling persons
  • Corporate registries, constitutional documents and shareholder registers as evidence sources
  • Nominee shareholders, trusts and foundations requiring additional ownership analysis
  • Control through voting rights, board appointment rights and contractual arrangements
  • Unresolved ownership discrepancies escalated through documented risk acceptance decisions

Participants can apply proportionate enhanced due diligence measures to high-risk customer relationships.

  • Enhanced due diligence triggers from risk ratings, adverse media and ownership complexity
  • Source-of-wealth analysis distinguishing asset origin from income generation
  • Source-of-funds evidence matched to anticipated transaction size and frequency
  • Senior management approval requirements for high-risk customer acceptance
  • Enhanced monitoring plans defining scenarios, thresholds and review frequency
  • Documented rationale where evidence remains incomplete but relationship continues

Participants can assess PEP exposure and adverse media findings using documented, risk-based decisions.

  • PEP categories: domestic, foreign, international organisation and family members
  • Close associates identified through ownership, business and personal relationships
  • Risk factors beyond PEP status, including jurisdiction and transaction behaviour
  • Adverse media searches assessed for source reliability, recency and relevance
  • False-positive resolution supported by identifiers, source review and documented rationale
  • PEP exit procedures following office departure and continuing risk assessment

Participants can assess sanctions-screening results and escalate potential sanctions exposure appropriately.

  • Targeted financial sanctions, trade sanctions and sectoral sanctions distinctions
  • Sanctions lists issued by UN, OFAC, EU and UK authorities
  • Name-screening logic using transliteration, aliases and fuzzy matching thresholds
  • Payment-screening controls for originator, beneficiary, banks and vessel information
  • Potential-match investigation using identifiers, ownership data and transaction context
  • Sanctions escalation, asset-freeze and reporting decisions under internal procedures

Participants can specify transaction-monitoring scenarios that reflect defined customer and product risks.

  • Expected activity profiles built from customer purpose, income and business model
  • Scenario typologies for structuring, rapid movement and unusual cash activity
  • Threshold calibration using customer segmentation, historical behaviour and risk appetite
  • Peer-group analysis identifying activity inconsistent with comparable customer populations
  • Rules-based monitoring compared with behavioural analytics and network analysis
  • Scenario documentation stating typology, inputs, thresholds and investigative actions

Participants can triage AML alerts using risk indicators, available evidence and service-level requirements.

  • Alert inventory controls preventing missed, duplicated or aged investigations
  • Triage criteria based on customer risk, transaction value and typology indicators
  • Case prioritisation matrices combining potential harm, urgency and regulatory exposure
  • Alert suppression controls requiring approval, rationale and periodic retesting
  • Initial information gathering from KYC records, transaction data and prior cases
  • Service-level tracking for assignment, investigation, approval and closure stages

Participants can investigate unusual transactions and reach supported conclusions on alert disposition.

  • Transaction reconstruction using dates, counterparties, amounts and payment references
  • Funds-flow analysis tracing incoming funds, transfers and ultimate beneficiaries
  • Red-flag assessment against known typologies and expected customer activity
  • Open-source intelligence research with source capture and reliability assessment
  • Customer outreach requests framed to obtain relevant transaction explanations
  • Disposition decisions: close, monitor, escalate or submit suspicious activity report

Participants can prepare fact-based suspicious activity reports supported by a clear investigative record.

  • Suspicion threshold distinguished from proof of criminal conduct
  • SAR narratives structured around subject, activity, concern and supporting evidence
  • Chronologies presenting transactions, investigative steps and escalation decisions clearly
  • Objective language separating verified facts, customer explanations and analyst judgement
  • Tipping-off prohibitions controlling customer communications after report submission
  • Post-submission monitoring, account restrictions and law-enforcement information requests

Participants can assess AML risks and due diligence requirements for correspondent banking relationships.

  • Correspondent banking roles: respondent banks, payable-through accounts and nested relationships
  • Due diligence on respondent ownership, licensing, controls and adverse information
  • Cross-border payment transparency requirements for originator and beneficiary information
  • Nested correspondent relationships identified through payment flows and account usage
  • High-risk jurisdictions requiring enhanced controls, approvals and transaction scrutiny
  • Relationship exit decisions supported by risk analysis and documented governance

Participants can identify trade-based money-laundering indicators within trade finance documentation and payments.

  • Trade-based money laundering through over-invoicing, under-invoicing and phantom shipments
  • Documentary credit red flags involving goods, parties and routing
  • Bill of lading review for inconsistencies, unusual ports and shipment patterns
  • Trade price verification using market references and product-specific benchmarks
  • Dual-use goods, sanctions exposure and restricted trade counterparties
  • Escalation records linking trade documents, payment flows and customer profile

Participants can recognise AML risks arising from digital payments, virtual assets and fraud-related proceeds.

  • Digital-payment risks from speed, remote onboarding and mule-account activity
  • Mule-account indicators including rapid transfers, funnel accounts and shared identifiers
  • Virtual asset service providers and Travel Rule information requirements
  • Blockchain transaction analysis concepts: wallets, clusters and exposure indicators
  • Fraud proceeds moving through accounts before laundering or cash withdrawal
  • Fraud and AML case coordination using shared intelligence and escalation routes

Participants can plan ongoing due diligence that keeps customer records and risk assessments current.

  • Event-driven review triggers from ownership, behaviour and adverse information changes
  • Periodic-review workflows for low, medium and high-risk customer populations
  • KYC remediation campaigns prioritised by risk, data gaps and regulatory deadlines
  • Customer outreach controls for overdue documents and incomplete information
  • Risk-rating recalculation after material customer or transactional changes
  • Account restriction and exit processes where KYC cannot be refreshed

Participants can test AML/KYC work quality, identify root causes and track corrective actions.

  • Quality-assurance sampling using risk-based selection and documented sample rationale
  • File-review checklists testing completeness, evidence quality and policy adherence
  • Investigation quality testing for rationale, chronology and disposition support
  • Exception taxonomy distinguishing process errors, judgement errors and system defects
  • Root-cause analysis using five whys and corrective action ownership
  • Control-testing reports presenting findings, severity, remediation and validation results

Participants can maintain defensible AML case records while applying data protection and access controls.

  • Case-management workflows from intake, assignment and investigation through closure
  • Audit trails capturing decisions, approvals, evidence versions and timestamps
  • Investigation notes distinguishing facts, hypotheses, requests and conclusions
  • Data minimisation principles applied to KYC collection and case documentation
  • Role-based access controls protecting sensitive customer and investigation information
  • Retention schedules balancing AML obligations, privacy and litigation holds

Participants can define an AML/KYC operating model with accountable processes, metrics and improvement priorities.

  • Target operating model covering people, process, technology and governance
  • RACI matrices assigning ownership for onboarding, monitoring and escalation activities
  • Key risk indicators measuring backlog, alert quality and overdue reviews
  • Capacity planning using volumes, handling times and quality-review rates
  • Procedure updates triggered by regulatory change, incidents and control findings
  • Implementation roadmaps sequencing quick fixes, dependencies and accountable owners

Participants can build, review and present a complete AML/KYC case file with documented recommendations.

  • Customer profile assembled from identification, ownership and business-purpose evidence
  • Risk rating calculated using customer, geography, product and channel factors
  • Enhanced due diligence plan addressing PEP, sanctions and adverse-media findings
  • Transaction investigation documenting funds flow, red flags and customer explanations
  • Suspicious activity decision supported by chronology, rationale and evidence references
  • Control recommendations presented with owners, priorities and implementation milestones

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Customer risk-rating model
  2. Enhanced due diligence checklist
  3. Beneficial ownership analysis template
  4. Transaction-monitoring scenario specification
  5. Alert investigation and SAR narrative template
  6. AML/KYC implementation plan

Who should attend

  • AML Analyst — needs consistent methods for reviewing alerts, cases and customer risk
  • KYC Analyst — needs stronger customer due diligence and ownership verification decisions
  • Compliance Officer — needs defensible AML control design, oversight and escalation records
  • Onboarding Manager — needs practical standards for customer acceptance and periodic review
  • Internal Auditor — needs criteria for testing AML/KYC control effectiveness and evidence
  • Relationship Manager — needs to identify financial-crime red flags during customer engagement

Skills and tools covered

Customer risk assessmentBeneficial ownership analysisSanctions screeningTransaction monitoringAlert investigationSuspicious activity reporting

Tools and standards

FATF Recommendations, FATF risk-based approach, RACI matrix, Five Whys

How the course runs

Training methodology

Teaching combines short instructor briefings with case-based analysis of customer files, ownership structures, sanctions matches and transaction-monitoring alerts. Small groups apply risk-rating methods, review evidence, make escalation decisions and compare rationale against defined control standards. Simulations cover alert investigation, suspicious activity reporting and quality-assurance review. Participants progressively assemble an AML/KYC control pack, then use it during the final case. Individual application planning links the methods to participants’ own customer segments, products and control responsibilities.

Requirements and prerequisites

Participants should understand basic financial services products, customer onboarding processes or internal control procedures. Experience in compliance, operations, risk, audit, payments, lending, trade finance or corporate customer administration is useful. Participants should be comfortable reading customer records, transaction listings and policy documents. Prior AML certification, legal training, coding skills and previous suspicious activity reporting experience are not required. The course explains core regulatory concepts before applying them to customer files, monitoring alerts and escalation decisions.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should understand basic customer onboarding, financial products or internal control processes. Previous AML certification or suspicious activity reporting experience is not required.

Bring a laptop if attending online or if permitted at the classroom venue, plus any non-confidential AML/KYC procedures or reporting challenges relevant to your role. Course materials and case documentation are provided.

The course is designed for AML, KYC, compliance, onboarding, operations, risk and audit professionals. Relationship managers and managers overseeing customer acceptance or financial-crime controls will also benefit.

This course treats sanctions and fraud as connected financial-crime risks within an AML/KYC control framework. It gives equal attention to customer due diligence, risk rating, transaction monitoring, investigations and reporting.

Participants can use the templates and methods to improve customer files, assess ownership structures, investigate alerts and test control quality. The final case file provides a practical model for documenting decisions at work.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes customer-risk, KYC and screening methods; the second week focuses on monitoring, investigations, control testing and the final capstone.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.