Financial Crime Compliance Training Course

Duration 10 days 17 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Financial Crime Compliance Manager, AML or CFT Analyst and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 9 Nov 2026 Course code SD-FFC-004

Before you join: Participants should understand basic compliance, risk, audit, fraud prevention or financial services operations.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Financial crime compliance teams must identify, assess and control connected risks spanning money laundering, terrorist financing, sanctions breaches, fraud, bribery, corruption and insider abuse. Failures often arise not from one missing policy but from weak risk assessment, unclear ownership, poorly configured monitoring, inadequate case files, inconsistent escalation and governance that does not challenge control performance. Senior managers, compliance officers and investigators need to translate regulatory expectations into evidence-based operating controls that withstand audit, regulatory review and criminal investigation.

This course develops the practical capabilities expected of experienced financial crime compliance professionals. Participants examine the Financial Action Task Force risk-based approach, customer due diligence, beneficial ownership, politically exposed persons, sanctions screening, transaction monitoring, fraud risk management, suspicious activity reporting, investigations and compliance governance. They learn to assess inherent and residual risk, set risk appetite, design control frameworks, document decisions, test controls and report meaningful management information. The course also addresses data quality, model governance, outsourcing, emerging payment risks and the relationship between financial crime, conduct and operational risk.

Teaching combines focused technical briefings with bank, payments, trade finance, public-sector procurement and multinational corporate cases. Participants work through customer files, alert scenarios, sanctions escalation decisions, fraud patterns, control-testing evidence and investigation records. Throughout the course, they develop components of a financial crime compliance programme for a realistic organisation. They leave with a completed programme pack containing a risk assessment, control matrix, monitoring and escalation design, reporting pack and implementation roadmap, supported by a certificate of completion.

The course suits professionals with existing exposure to compliance, risk, audit, fraud, investigations or financial services operations who need stronger ownership of financial crime controls and decisions.

What you will be able to do

  • Conduct an enterprise financial crime risk assessment using inherent and residual risk methodology
  • Design customer due diligence and enhanced due diligence workflows for risk-based onboarding
  • Apply sanctions screening, ownership analysis and escalation rules to complex customer cases
  • Build a transaction monitoring coverage model using typologies, thresholds and scenario logic
  • Investigate fraud and suspicious activity using evidence plans, case records and disposition rationales
  • Test financial crime controls through control design reviews and operating-effectiveness sampling
  • Prepare management information, suspicious activity reports and governance papers for senior review
  • Produce a financial crime compliance programme pack with prioritised implementation actions

Benefits of attending

For you

  • Make defensible risk-based decisions on customers, alerts and escalations
  • Write clearer investigation rationales and suspicious activity narratives
  • Assess whether financial crime controls work beyond policy wording
  • Contribute credibly to regulator, audit and senior-management discussions
  • Build a reusable financial crime compliance programme portfolio

For your organisation

  • Improves consistency of customer, sanctions and transaction-risk decisions
  • Produces clearer evidence for audits, regulatory reviews and investigations
  • Identifies control gaps before they create avoidable financial crime exposure
  • Strengthens governance reporting on residual risk, backlogs and control performance
  • Creates practical implementation plans for priority programme improvements

Course modules

17 modules over 10 days

Participants can explain the components, accountabilities and control objectives of an effective financial crime compliance programme.

  • Financial crime taxonomy covering laundering, fraud, sanctions, bribery and corruption
  • Three lines model assigned to business, compliance and internal audit
  • FATF Recommendations translated into programme policies, procedures and control evidence
  • Risk-based approach distinguishing inherent exposure from residual controlled risk
  • Board accountability, senior management oversight and money laundering reporting officer duties
  • Regulatory enforcement themes drawn from control failures and deficient governance

Participants can build and document a risk-based assessment covering products, customers, channels, geographies and controls.

  • Inherent risk assessment across customer, product, geography and channel factors
  • Risk appetite statements linked to prohibited, restricted and accepted relationships
  • Scoring methodology combining likelihood, impact, control effectiveness and residual exposure
  • Data inventories identifying source systems, gaps, ownership and refresh cycles
  • Control mapping connects risks, preventive controls, detective controls and owners
  • Heat maps supported by documented assumptions, evidence sources and challenge records

Participants can design proportionate customer due diligence workflows and document onboarding decisions.

  • Customer identification programme requirements for individuals, entities and legal arrangements
  • Verification methods using reliable, independent documents, data and source records
  • Purpose and intended nature captured through expected activity profiles
  • Risk-rating models assign customer scores using weighted risk indicators
  • Periodic review frequencies determined by risk rating and trigger events
  • Onboarding decision records document evidence, exceptions, approvals and conditions

Participants can identify beneficial owners, assess ownership structures and escalate opacity risks.

  • Beneficial ownership thresholds applied alongside control, voting rights and influence
  • Ownership charts trace subsidiaries, trusts, nominees and cross-border holding companies
  • Source-of-wealth enquiries distinguish asset origin from transaction funding source
  • Corporate registries assessed for reliability, recency, coverage and conflicting information
  • Red flags identify shell companies, circular ownership and unexplained intermediaries
  • Escalation memoranda present unresolved ownership concerns and recommended risk treatment

Participants can apply enhanced due diligence to politically exposed persons and other high-risk customers.

  • PEP identification includes domestic, foreign, international organisation and family connections
  • Enhanced due diligence establishes source of wealth and source of funds
  • Senior management approval requirements documented before higher-risk relationship acceptance
  • Adverse media assessment distinguishes allegations, corroboration, relevance and recency
  • Ongoing monitoring plans reflect customer profile, expected activity and risk triggers
  • Exit decisions consider legal obligations, customer fairness and suspicious activity concerns

Participants can assess sanctions exposure and manage screening alerts through documented escalation.

  • Sanctions regimes compared across United Nations, OFAC, EU and UK lists
  • Name screening matches assessed using identifiers, aliases, transliteration and false-positive logic
  • Ownership and control analysis applies applicable sanctions aggregation principles
  • Payment screening reviews parties, banks, vessels, goods and narrative fields
  • Trade finance red flags identify diversion, dual-use goods and documentary discrepancies
  • Sanctions escalation records preserve rationale, approvals, holds and reporting decisions

Participants can design transaction monitoring scenarios aligned to risk assessment findings and typologies.

  • Transaction monitoring coverage maps risks to scenarios, data and investigation queues
  • Scenario design uses thresholds, velocity, peer groups and behavioural baselines
  • Typology libraries cover structuring, mule activity, trade laundering and layering
  • Segmentation separates retail, corporate, correspondent and high-net-worth customer behaviour
  • Alert tuning balances detection value, false positives and investigator capacity
  • Change governance documents scenario amendments, testing results and approval records

Participants can triage alerts, conduct proportionate reviews and create defensible case records.

  • Triage rules prioritise alerts by risk score, urgency and potential harm
  • Case management workflows define assignment, ageing, escalation and quality assurance
  • Investigative narratives link facts, analysis, evidence and disposition rationale
  • Transaction review compares activity against customer profile and expected behaviour
  • Reasonable grounds assessments distinguish suspicion from proof and unsupported inference
  • Quality assurance sampling identifies weak rationale, missed evidence and inconsistent decisions

Participants can prepare clear suspicious activity reports and manage post-reporting obligations.

  • Suspicious activity report narratives state who, what, when, where, why and how
  • Chronologies organise transactions, customer events, communications and investigative actions
  • Supporting evidence indexes preserve documents, account data and system records
  • Tipping-off restrictions guide internal communication, customer contact and account actions
  • Defence against money laundering requests assessed under applicable legal procedures
  • Post-report monitoring plans address continuing activity, account restrictions and exit decisions

Participants can assess fraud threats and design preventive, detective and responsive controls.

  • Fraud risk assessments examine incentives, opportunities, rationalisation and control weaknesses
  • Fraud triangle analysis applied to payment, procurement and employee misconduct cases
  • Preventive controls include segregation, authentication, approval limits and vendor validation
  • Detective analytics identify duplicate payments, account takeover and unusual refunds
  • Incident response plans assign containment, evidence preservation, recovery and notification actions
  • Fraud loss data supports root-cause analysis, control remediation and trend reporting

Participants can assess third-party corruption risk and define appropriate due diligence and controls.

  • ISO 37001 principles inform anti-bribery management system control design
  • Third-party risk segmentation considers services, geography, government touchpoints and remuneration
  • Due diligence reviews ownership, reputation, capability, conflicts and adverse media
  • Contract clauses address anti-bribery commitments, audit rights and termination triggers
  • Payment controls test invoices, commissions, expenses and unusual payment instructions
  • Gifts and hospitality registers support approval, aggregation and conflict detection

Participants can plan financial crime investigations and maintain evidence suitable for review.

  • Investigation plans define allegations, scope, hypotheses, evidence and reporting lines
  • Evidence preservation protects records, devices, communications and transaction data
  • Chain of custody logs record collection, transfer, storage and access
  • Interview planning uses issue trees, chronology analysis and corroboration questions
  • Privilege considerations distinguish legal advice, factual records and investigation materials
  • Investigation reports separate findings, evidence, limitations, conclusions and remediation

Participants can evaluate data quality, automated decision controls and model governance requirements.

  • Data lineage traces customer and transaction fields from source to report
  • Data quality controls test completeness, accuracy, timeliness, validity and uniqueness
  • Screening model validation reviews matching logic, calibration and outcome testing
  • Machine learning governance documents training data, explainability, bias and human oversight
  • Access controls restrict sensitive investigations, sanctions decisions and customer information
  • Vendor oversight assesses service levels, model changes, incidents and audit rights

Participants can test financial crime controls and report design or operating failures clearly.

  • Control design assessment tests whether procedures address stated risk causes
  • Operating-effectiveness testing selects samples, evidence, period coverage and exceptions
  • Walkthroughs trace end-to-end onboarding, screening, monitoring and escalation processes
  • Key control indicators measure backlog, ageing, quality failures and overdue reviews
  • Issue management assigns root causes, owners, due dates and validation steps
  • Second-line challenge documents management responses, residual exposure and acceptance decisions

Participants can prepare governance reporting and support credible regulatory engagement.

  • Management information combines risk metrics, control indicators, incidents and remediation status
  • Board reports explain material exposure, trends, decisions and required actions
  • Risk and control self-assessments align business attestations with supporting evidence
  • Regulatory examination packs organise policies, testing, cases, training and governance minutes
  • Remediation programmes sequence actions by risk, dependency, owner and delivery date
  • Committee terms of reference define quorum, challenge, escalation and decision authority

Participants can evaluate changing financial crime threats and prioritise programme improvements.

  • Virtual asset risks include mixers, unhosted wallets, fraud and sanctions evasion
  • Instant payment controls address mule networks, authorised push payment and velocity
  • Trade-based laundering indicators connect invoices, shipping data and value anomalies
  • Environmental crime proceeds examined through commodities, permits and beneficial ownership
  • Horizon scanning links regulatory changes, criminal typologies and internal incidents
  • Prioritisation matrices rank improvements by risk reduction, effort, cost and dependency

Participants can build, review and present a complete risk-based financial crime compliance programme for a defined organisation.

  • Programme scope defines legal entities, products, jurisdictions and customer segments
  • Risk assessment quantifies inherent exposure, control effectiveness and residual priorities
  • Control matrix assigns preventive, detective, corrective controls and accountable owners
  • Monitoring design specifies scenarios, data inputs, thresholds, triage and escalation
  • Governance pack presents metrics, issues, decisions, resourcing and implementation milestones
  • Peer review challenges assumptions, evidence, proportionality and regulatory defensibility

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Enterprise financial crime risk assessment template
  2. Customer due diligence decision checklist
  3. Sanctions alert escalation matrix
  4. Transaction monitoring coverage model
  5. Financial crime control testing plan
  6. Financial crime compliance programme pack

Who should attend

  • Financial Crime Compliance Manager — responsible for designing or improving programme controls
  • AML or CFT Analyst — needs stronger judgement on alerts, files and escalation
  • Fraud Risk Manager — connects fraud controls with wider financial crime obligations
  • Compliance Officer — advises business teams on customer, transaction and sanctions risk
  • Internal Auditor — assesses financial crime control design and operating effectiveness
  • Risk Manager — integrates financial crime exposure into enterprise risk reporting

Skills and tools covered

Financial crime risk assessmentCustomer due diligenceSanctions complianceTransaction monitoringFraud investigationControl testing

Tools and standards

FATF Recommendations, ISO 37001, Three Lines Model, Fraud Triangle

How the course runs

Training methodology

Instructor-led sessions combine short technical briefings with detailed case work drawn from banking, payments, trade finance, procurement and corporate operations. Participants analyse customer files, transaction patterns, sanctions matches, fraud incidents and investigation records in facilitated groups. Simulations require evidence-based escalation, challenge and committee decisions. Trainers use worked examples to demonstrate risk scoring, control mapping, alert disposition and report writing. Individual application planning links each method to participants’ own policies, systems, control gaps and governance responsibilities.

Requirements and prerequisites

Participants should understand basic compliance, risk, audit, fraud prevention or financial services operations. Familiarity with customer onboarding, transaction processing, internal controls or regulatory reporting is useful, as the course moves quickly into risk assessment, investigations and control design. Participants should be able to read policies, analyse case information and contribute to structured group discussions. Prior specialist certification in anti-money laundering, law enforcement experience, programming ability or prior use of screening and monitoring systems is not required. The course explains relevant regulatory concepts before applying them.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need working familiarity with compliance, risk, audit, fraud prevention or financial services operations. Specialist anti-money laundering certification and previous investigation experience are not required.

Bring a laptop for working with templates and case materials. Participants may also bring redacted policies, risk assessments or control issues from their organisation for application planning.

It is designed for intermediate practitioners who own, review or challenge financial crime controls. It is particularly relevant to compliance managers, AML analysts, fraud managers, auditors and risk professionals.

Basic courses focus mainly on core obligations and awareness. This course addresses programme design, risk assessment, sanctions, fraud, investigations, control testing, governance and evidence-based improvement.

Participants develop reusable risk, control, monitoring and reporting materials throughout the course. The final programme pack can be adapted to support a live review, remediation plan or internal audit response.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first part establishes core controls and builds working materials, while the later part deepens assurance, governance and programme design before the capstone.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.