Financial Crime Prevention and Investigation Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends Compliance Officers, Internal Auditors and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-FFC-030

Before you join: Participants should understand basic business processes such as payments, procurement, customer onboarding, payroll or financial reporting.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Fraud, money laundering, sanctions breaches and corruption can produce direct losses, regulatory action, damaged customer trust and disrupted operations. Financial crime controls often fail at the handover points: weak customer due diligence, unreviewed alerts, poor segregation of duties, incomplete evidence or investigations that do not establish the facts. Staff responsible for prevention and response need to distinguish indicators from proof, make defensible decisions and preserve a clear audit trail.

This course develops practical capability across fraud risk assessment, anti-money laundering controls, sanctions screening, transaction monitoring, whistleblowing, case management and internal investigation. Participants examine how fraud schemes are constructed, how suspicious activity is detected and escalated, and how to plan investigations without compromising evidence or alerting subjects prematurely. The course uses recognised approaches including FATF Recommendations, the COSO Internal Control Framework, the Fraud Triangle and ISO 37001 anti-bribery management systems.

Teaching combines focused instructor briefings with sector-based cases from banking, procurement, public funds, insurance, charities and corporate finance. Participants assess red flags, triage alerts, map fraud scenarios, review control failures, prepare investigation plans and practise structured investigative interviews. They leave with a reusable financial crime control assessment pack, fraud risk register, alert triage model, investigation plan and case documentation templates that can be adapted to their own organisation.

The course suits professionals with responsibility for financial controls, compliance, audit, risk, investigations, procurement or operational oversight. It is particularly relevant where teams must identify concerns early, coordinate an appropriate response and report findings clearly to management, regulators, law enforcement or internal disciplinary bodies.

What you will be able to do

  • Assess fraud and financial crime exposure using a structured fraud risk assessment
  • Identify money laundering, sanctions, bribery and fraud red flags from operational evidence
  • Apply customer due diligence and enhanced due diligence decision criteria
  • Design transaction monitoring scenarios and alert triage workflows
  • Evaluate internal controls using the COSO Internal Control Framework
  • Plan financial crime investigations using allegation, evidence and interview matrices
  • Conduct investigative interviews using the PEACE interviewing framework
  • Produce defensible case reports, escalation records and corrective action plans

Benefits of attending

For you

  • Recognise financial crime indicators before losses or regulatory breaches escalate
  • Make better documented decisions when escalating alerts and allegations
  • Plan investigations that preserve evidence and protect confidentiality
  • Communicate case findings credibly to senior management and control functions
  • Build transferable skills for compliance, audit, risk and investigation roles

For your organisation

  • Earlier identification of fraud, money laundering and sanctions concerns
  • More consistent alert triage and escalation decisions across teams
  • Stronger evidence trails for disciplinary, regulatory and recovery actions
  • Better targeted controls against procurement, payment and customer fraud
  • Clearer remediation ownership following investigations and control failures

Course modules

10 modules over 5 days

Participants can classify major financial crime threats and map accountability across prevention, detection and response.

  • Financial crime typologies: fraud, laundering, sanctions evasion, bribery and corruption
  • Three lines model responsibilities for business, compliance, audit and investigations
  • FATF Recommendations applied to risk-based financial crime control programmes
  • Criminal, civil, regulatory and disciplinary consequences of control failures
  • Mapping threat actors, opportunities, targets and enabling control weaknesses
  • Escalation thresholds, confidentiality duties and need-to-know information handling

Participants can assess fraud exposure and prioritise treatments using a documented fraud risk assessment.

  • Fraud Triangle analysis of pressure, opportunity and rationalisation factors
  • Scheme mapping for procurement, payroll, expense, revenue and asset fraud
  • Inherent risk scoring using likelihood, impact, velocity and control exposure
  • Facilitate fraud risk workshops with process owners and control stakeholders
  • Residual risk ratings supported by documented control design assessments
  • Fraud risk registers linking scenarios, owners, indicators and treatments

Participants can evaluate preventive and detective controls against identified fraud scenarios.

  • COSO Internal Control Framework principles applied to fraud prevention
  • Segregation of duties matrices for purchasing, payments and master data
  • Approval authorities matched to transaction value, risk and exception type
  • Control design tests distinguishing preventive, detective and corrective measures
  • Vendor onboarding controls covering beneficial ownership and conflict declarations
  • Continuous control monitoring using exception reports and threshold analysis

Participants can determine appropriate due diligence measures and document customer risk decisions.

  • Customer identification and verification requirements under risk-based due diligence
  • Beneficial ownership analysis through ownership chains, control rights and nominees
  • Risk rating models using customer, geography, product and channel factors
  • Enhanced due diligence triggers for politically exposed persons and high-risk relationships
  • Source of funds and source of wealth evidence assessment
  • Periodic review schedules determined by customer risk and material changes

Participants can assess financial crime alerts, document rationale and escalate credible concerns.

  • Transaction monitoring scenarios for structuring, rapid movement and unusual counterparties
  • Alert triage using risk indicators, customer profile and transactional context
  • Sanctions screening against names, entities, vessels and beneficial owners
  • False-positive disposition supported by matching logic and documented rationale
  • Investigate adverse media findings, negative intelligence and reputational risk
  • Suspicious activity escalation records separating facts, analysis and recommendations

Participants can identify bribery and corruption risks and specify proportionate third-party controls.

  • ISO 37001 control measures for anti-bribery management systems
  • Red flags in agents, distributors, consultants and charitable intermediaries
  • Third-party due diligence covering ownership, reputation, capability and payment terms
  • Gifts, hospitality and sponsorship registers tested against approval limits
  • Conflict-of-interest declarations assessed for undisclosed personal or financial relationships
  • Contract clauses addressing audit rights, anti-bribery warranties and termination

Participants can establish reporting channels and assess allegations consistently before investigation.

  • Whistleblowing channel design protecting anonymity, confidentiality and non-retaliation
  • Allegation intake records capturing source, facts, dates and supporting materials
  • Triage criteria based on harm, credibility, urgency and jurisdiction
  • Data analytics indicators for duplicate payments, split purchases and dormant vendors
  • Case prioritisation matrices assigning ownership, deadlines and escalation routes
  • Management information reporting on allegations, trends, outcomes and overdue actions

Participants can plan proportionate investigations and maintain an auditable chain of evidence.

  • Investigation terms of reference defining allegations, scope, authority and constraints
  • Hypothesis-based investigation plans linking issues, evidence sources and tests
  • Evidence matrices recording relevance, reliability, provenance and access restrictions
  • Chain-of-custody logs for documents, devices, recordings and extracted data
  • Preservation notices preventing deletion, alteration or concealment of records
  • Forensic accounting procedures tracing funds through accounts, invoices and counterparties

Participants can conduct structured interviews and report evidence-based findings without overstating conclusions.

  • PEACE framework stages for planning, engagement, account and closure
  • Interview question funnels progressing from open prompts to specific challenge
  • Cognitive bias controls when assessing witness accounts and suspect explanations
  • Case management logs tracking actions, decisions, evidence and legal holds
  • Findings reports separating substantiated facts, inferences, limitations and recommendations
  • Disclosure decisions coordinated with legal, compliance, human resources and regulators

Participants can convert investigation findings into owned corrective actions and response priorities.

  • Root cause analysis using five whys and control failure mapping
  • Corrective action plans specifying owners, deadlines, evidence and validation
  • Recovery options including civil claims, insurance, restitution and asset freezing
  • Control remediation testing before closure of investigation recommendations
  • Lessons-learned reviews identifying recurring schemes, failed controls and training needs
  • Ninety-day financial crime action plan prioritising immediate control improvements

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Financial crime fraud risk register template
  2. Customer due diligence decision checklist
  3. Transaction monitoring alert triage model
  4. Investigation terms of reference template
  5. Evidence matrix and chain-of-custody log
  6. Ninety-day financial crime action plan

Who should attend

  • Compliance Officers — responsible for AML, sanctions, anti-bribery or conduct controls
  • Internal Auditors — testing fraud risks and control effectiveness
  • Fraud Investigators — handling allegations, evidence and case files
  • Risk Managers — assessing financial crime exposure and treatment actions
  • Finance Managers — protecting payments, revenue and financial reporting processes
  • Procurement Managers — detecting supplier fraud, conflicts and bribery indicators

Skills and tools covered

Fraud risk assessmentAML controlsSanctions screeningInvestigative interviewingEvidence managementCase reporting

Tools and standards

FATF Recommendations, COSO Internal Control Framework, ISO 37001, PEACE interviewing framework

How the course runs

Training methodology

The course uses short instructor briefings to establish methods, standards and decision criteria, followed by facilitated case work drawn from banking, procurement, insurance, public funds and corporate operations. Small-group activities cover fraud scenario mapping, suspicious activity assessment, alert triage, control testing, evidence review and investigation planning. Participants work through a simulated case file, including interview preparation and findings reporting. Individual application planning translates course materials into priorities for participants' own control environment.

Requirements and prerequisites

Participants should understand basic business processes such as payments, procurement, customer onboarding, payroll or financial reporting. Experience in compliance, audit, finance, risk, operations, investigations or control functions is helpful. Participants should be comfortable reading internal policies, transaction records and management reports. No prior qualification in anti-money laundering, law enforcement, forensic accounting or legal practice is required. The course explains key regulatory and investigative terminology before applying it to cases. It is not designed as introductory bookkeeping training or specialist criminal law instruction.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need familiarity with common business processes and basic financial records. Prior experience in compliance, audit, finance, risk or investigations is useful, but specialist AML or forensic accounting qualifications are not required.

Bring a laptop if possible, as participants may wish to adapt templates and record application priorities. You may also bring non-confidential examples of policies, process maps or control concerns from your organisation.

It is designed for compliance officers, internal auditors, fraud investigators, risk managers, finance managers and procurement leaders. It also suits operational managers who own controls over payments, customers, suppliers or public funds.

AML courses concentrate primarily on customer due diligence, sanctions and suspicious activity reporting. This course includes those areas while also addressing occupational fraud, procurement fraud, bribery, control design, whistleblowing and internal investigations.

Participants can use the fraud risk register, alert triage model, evidence matrix and investigation templates in current cases and control reviews. The final application plan helps identify priority actions for the next 90 days.

The course runs from 08:30 to 16:30 each day, with approximately 6.5 contact hours daily. Time is divided between instructor input, case analysis, group activities, simulated case work and individual application planning.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.