Mini MBA in Financial Crime Training Course

Duration 10 days 19 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Financial Crime Managers, Compliance Managers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 9 Nov 2026 Course code SD-FFC-010

Before you join: Participants should have basic familiarity with their organisation’s products, customers, payment processes or control environment.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Financial crime creates direct losses, regulatory exposure, disrupted customer relationships and damaged confidence in financial institutions, public bodies and commercial firms. Fraud schemes now combine payment manipulation, identity misuse, insider access, cyber-enabled deception, money laundering and sanctions evasion. Managers responsible for prevention or response need to connect risk assessment, controls, investigations, reporting, governance and business decisions rather than treat each issue as a separate specialist concern.

This Mini MBA in Financial Crime Training Course examines the financial crime operating model from a management perspective. Participants assess fraud and money-laundering threats, interpret core AML/CFT and sanctions obligations, design control frameworks, assess customer and transaction risk, investigate suspected misconduct, and report findings to senior decision-makers. The programme also addresses fraud data analytics, cyber-enabled crime, third-party risk, whistleblowing, conduct risk, recovery options and financial crime strategy.

Teaching combines focused instructor briefings, bank, public-sector procurement and corporate case work, facilitated group analysis, investigation simulations and structured application planning. Participants progressively build components of a financial crime risk management programme, beginning with a risk assessment and ending with a board-ready capstone pack. They leave with reusable templates and a documented approach for prioritising threats, setting controls, escalating concerns and measuring programme performance.

The course suits managers who work with financial crime risk but require stronger commercial, operational and governance judgement. It is particularly relevant to compliance, risk, audit, fraud, security, legal, finance, operations and digital transformation professionals who must coordinate actions across functions.

What you will be able to do

  • Assess enterprise financial crime exposure using a documented risk assessment methodology
  • Design a financial crime control framework using preventive, detective and corrective controls
  • Apply customer risk rating and enhanced due diligence decision criteria
  • Investigate suspected fraud using evidence plans, interview protocols and case documentation
  • Interpret transaction-monitoring alerts and prepare defensible escalation decisions
  • Evaluate sanctions screening, beneficial ownership and third-party due diligence controls
  • Produce board-level financial crime reporting using KRIs, metrics and risk appetite measures
  • Present a financial crime risk management programme for executive review

Benefits of attending

For you

  • Build confidence when challenging weak financial crime controls
  • Prepare clearer fraud and AML escalation recommendations
  • Conduct structured investigations with stronger evidence discipline
  • Translate financial crime risks into executive business decisions
  • Develop a portfolio-quality financial crime programme capstone

For your organisation

  • Improved prioritisation of fraud, AML and sanctions control investment
  • More consistent escalation and case-management decisions
  • Stronger coordination between compliance, operations, security and internal audit
  • Earlier identification of customer, payment and third-party risk indicators
  • Board-ready reporting on financial crime exposure and programme performance

Course modules

19 modules over 10 days

Participants can explain financial crime exposure in business, regulatory and governance terms.

  • Financial crime typologies: fraud, laundering, sanctions, bribery and cyber-enabled offences
  • Direct loss, regulatory action, remediation cost and reputational damage analysis
  • Three lines model roles for business, oversight and assurance
  • Board accountability, senior manager responsibilities and documented risk ownership
  • Financial crime operating model: people, process, data, technology and governance
  • Risk appetite statements linked to tolerance, triggers and escalation

Participants can produce a structured financial crime risk assessment and prioritisation rationale.

  • Inherent risk assessment using products, customers, geographies, channels and transactions
  • Threat-event-control mapping identifies sources, vulnerabilities, impacts and existing safeguards
  • Likelihood and impact scoring calibrated through defined rating criteria
  • Residual risk calculation after preventive, detective and corrective control assessment
  • Risk registers record owners, treatment actions, deadlines and acceptance decisions
  • Heat maps communicate prioritised exposures without obscuring underlying evidence

Participants can identify fraud schemes and design proportionate fraud risk treatments.

  • Fraud Triangle analysis examines pressure, opportunity and rationalisation indicators
  • Occupational fraud schemes: corruption, asset misappropriation and financial statement fraud
  • External fraud patterns in payments, procurement, lending and claims
  • Fraud risk registers connect schemes, controls, owners and residual exposure
  • Segregation of duties matrices identify incompatible transaction approval responsibilities
  • Control rationalisation removes duplication while protecting critical fraud barriers

Participants can apply a risk-based AML/CFT approach to customer and transaction decisions.

  • FATF Recommendations establish risk-based AML and counter-terrorist financing expectations
  • Money laundering stages: placement, layering and integration within transaction flows
  • Terrorist financing indicators differ from conventional money laundering patterns
  • Risk-based approach aligns due diligence intensity with documented exposure
  • Suspicious activity reporting thresholds distinguish concern, evidence and reasonable grounds
  • Record-retention requirements preserve customer, transaction and investigation evidence

Participants can make and document customer due diligence decisions using risk criteria.

  • Customer identification verifies legal existence, identity and authorised representatives
  • Beneficial ownership analysis traces control through layered corporate structures
  • Purpose and intended nature establish expected account activity
  • Customer risk-rating models combine geographic, product, ownership and behavioural factors
  • Enhanced due diligence applies source-of-funds and source-of-wealth enquiries
  • Periodic review cycles respond to risk ratings and trigger events

Participants can assess sanctions exposure and determine appropriate control responses.

  • Sanctions programmes target jurisdictions, persons, entities, vessels and restricted goods
  • Name-screening logic addresses aliases, transliteration, false positives and matching thresholds
  • Ownership and control analysis identifies indirectly sanctioned counterparties
  • Trade-based money laundering indicators include pricing anomalies and document discrepancies
  • Payment interdiction procedures define holds, investigations, releases and regulatory notifications
  • Sanctions escalation records evidence, legal advice and final decision authority

Participants can assess monitoring alerts and make consistent triage decisions.

  • Scenario-based monitoring detects deviations from expected customer transaction behaviour
  • Threshold tuning balances alert volumes, coverage gaps and investigator capacity
  • Alert triage separates false positives, explainable activity and suspicious patterns
  • Case narratives connect transactions, customer profile, rationale and supporting evidence
  • Linked-account analysis reveals structuring, mule networks and circular payments
  • Quality assurance sampling tests alert disposition accuracy and documentation sufficiency

Participants can assess payment and identity fraud vulnerabilities across digital journeys.

  • Authorised push payment fraud exploits social engineering and payment urgency
  • Account takeover indicators include credential changes, device anomalies and unusual beneficiaries
  • Synthetic identity fraud combines fabricated attributes with genuine personal data
  • Payment controls use confirmation, velocity rules, step-up checks and holds
  • Behavioural biometrics identify anomalous interaction patterns during digital transactions
  • Customer communication controls reduce impersonation, phishing and callback manipulation

Participants can connect cyber incidents with fraud, laundering and control implications.

  • Business email compromise redirects payments through spoofed executive or supplier requests
  • Ransomware payments create sanctions, laundering and reporting considerations
  • Credential theft enables account takeover, invoice fraud and data extraction
  • Cyber-fraud response integrates security, finance, legal, compliance and communications
  • Incident timelines preserve payment, access-log and communication evidence
  • Post-incident reviews identify root causes, control failures and remediation actions

Participants can assess third-party financial crime risk and specify due diligence controls.

  • Third-party segmentation distinguishes agents, suppliers, intermediaries and joint-venture partners
  • Procurement fraud red flags include bid rotation, split purchases and conflicts
  • Anti-bribery due diligence examines ownership, reputation, capability and government connections
  • Contract controls define audit rights, payment terms and compliance obligations
  • Invoice analytics detect duplicate payments, abnormal pricing and suspicious vendor changes
  • Conflict-of-interest declarations support transparent sourcing and approval decisions

Participants can design financial crime controls and assess their operating effectiveness.

  • COSO Internal Control components structure control environment and monitoring assessment
  • Preventive controls stop prohibited activity before funds or assets move
  • Detective controls identify exceptions through reconciliation, monitoring and review
  • Corrective controls contain losses, restore processes and address root causes
  • Control design testing assesses precision, frequency, ownership and evidence
  • Operating effectiveness testing samples transactions against documented control requirements

Participants can define useful analytics for detecting financial crime and monitoring controls.

  • Data lineage maps source systems, transformations, ownership and quality checks
  • Benford's Law flags unusual digit distributions in expense and invoice data
  • Duplicate testing identifies repeated invoices, bank details and beneficiary records
  • Network analysis maps relationships among customers, accounts, devices and counterparties
  • Outlier detection compares transactions against peer groups and expected behaviour
  • Analytics governance documents model assumptions, validation and human review

Participants can plan a financial crime investigation with defensible evidence controls.

  • Investigation terms of reference define allegations, scope, authority and reporting lines
  • Evidence plans prioritise records, systems, witnesses and preservation actions
  • Chain-of-custody logs document collection, transfer, storage and access
  • PEACE interviewing framework structures preparation, questioning and evaluation
  • Timeline analysis reconstructs decisions, transactions, communications and control failures
  • Investigation reports separate facts, findings, conclusions and recommended actions

Participants can manage allegations and escalation routes with appropriate confidentiality and fairness.

  • Whistleblowing arrangements provide confidential reporting channels and anti-retaliation safeguards
  • Intake assessments classify allegations by urgency, credibility and potential harm
  • Case prioritisation considers loss, regulatory exposure, evidence fragility and safety
  • Need-to-know protocols protect confidentiality during sensitive internal enquiries
  • Conduct risk indicators connect incentives, culture, sales pressure and misconduct
  • Escalation matrices define notification thresholds, accountable executives and response timelines

Participants can plan actions following confirmed financial crime or material control failure.

  • Asset tracing identifies accounts, property, receivables and beneficial ownership links
  • Payment recall procedures establish urgency, counterparties, documentation and decision authority
  • Customer remediation plans address losses, communications and service restoration
  • Root-cause analysis uses five whys and causal factor mapping
  • Regulatory notifications distinguish mandatory reporting, voluntary disclosure and ongoing updates
  • Remediation tracking assigns actions, milestones, validation evidence and closure approval

Participants can create management information that supports oversight and timely intervention.

  • Governance charters define committee mandates, membership, quorum and decisions
  • Key risk indicators measure exposure, threshold breaches and adverse trends
  • Key performance indicators measure timeliness, quality, capacity and remediation progress
  • Risk appetite dashboards compare actual exposure with approved tolerance limits
  • Board reports explain material incidents, emerging threats and management actions
  • Management information controls validate definitions, sources, owners and reporting frequency

Participants can develop an implementable financial crime improvement roadmap and business case.

  • Target operating model defines capabilities, roles, processes, systems and governance
  • Capability gap assessments compare current-state evidence against required control standards
  • Business cases quantify loss avoidance, compliance costs, implementation effort and benefits
  • Change impact assessments identify affected teams, procedures, skills and communications
  • RACI matrices assign responsibility, accountability, consultation and information rights
  • Ninety-day plans sequence priority actions, dependencies, milestones and measures

Participants can adapt financial crime methods to different operating models and threat profiles.

  • Retail banking cases examine mule accounts, scams and account takeover
  • Corporate treasury cases examine invoice fraud and payment-authority compromise
  • Public procurement cases examine collusion, conflicts and supplier integrity failures
  • NGO cases examine diversion risk, restricted parties and remote delivery
  • Correspondent banking cases assess nested relationships and respondent-bank due diligence
  • Cross-border operations consider local reporting duties and group control standards

Participants can build, review and present a complete financial crime risk management programme for executive approval.

  • Risk assessment identifies priority threats, affected processes and residual exposures
  • Control framework maps preventive, detective and corrective measures to risks
  • Customer, transaction and third-party controls define documented decision criteria
  • Investigation and escalation procedures establish evidence, authority and reporting routes
  • Management information specifies KRIs, dashboards, committees and review cadence
  • Implementation roadmap sets ownership, resources, milestones and assurance activities

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Financial crime risk assessment template
  2. Fraud and AML control matrix
  3. Customer due diligence decision checklist
  4. Investigation planning and evidence log
  5. Board financial crime dashboard model
  6. Ninety-day financial crime improvement plan

Who should attend

  • Financial Crime Managers — need to coordinate fraud, AML and sanctions controls
  • Compliance Managers — need stronger operational insight into financial crime programmes
  • Risk Managers — need to assess and report non-financial crime exposures
  • Internal Auditors — need to test financial crime governance and control effectiveness
  • Fraud Investigators — need wider understanding of prevention, reporting and business decisions
  • Operations and Payments Managers — need to reduce control failures and payment fraud losses

Skills and tools covered

Financial crime risk assessmentFraud control designAML case managementSanctions complianceInvestigation planningBoard risk reporting

Tools and standards

FATF Recommendations, COSO Internal Control Framework, PEACE Interviewing Framework, Benford's Law

How the course runs

Training methodology

The programme uses short instructor briefings to establish methods, standards and decision criteria, followed by cases drawn from banking, procurement, payments and corporate misconduct. Participants analyse risk scenarios, review evidence, assess control failures, make escalation decisions and present recommendations in groups. Simulations cover alert triage, investigation planning and senior-management reporting. Individual application planning links each module to participants’ own products, processes, customers and control responsibilities, while the capstone brings the programme elements into one practical management pack.

Requirements and prerequisites

Participants should have basic familiarity with their organisation’s products, customers, payment processes or control environment. Experience in compliance, risk, audit, operations, finance, security, legal or investigations is useful, and participants should be comfortable reading short case materials and discussing business decisions. Prior specialist knowledge of anti-money laundering law, fraud examination, data analytics or criminal investigation is not required. This is not an introductory course for people with no workplace exposure to financial, operational or regulatory processes.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need workplace familiarity with business processes, controls, customers, payments or regulatory responsibilities. Specialist AML, sanctions, investigation or analytics experience is not required, but the course moves beyond introductory awareness training.

Bring a laptop for live online delivery and, where permitted, non-sensitive examples of current financial crime challenges. Participants should not bring customer data, investigation records or confidential case files.

It suits managers and experienced professionals in financial crime, compliance, risk, audit, operations, security, legal, finance and payments. It is designed for people who must coordinate decisions across functions or report financial crime issues upward.

Specialist courses usually focus deeply on one discipline, such as AML compliance, fraud examination or sanctions. This programme connects those disciplines with governance, controls, data, strategy, operational response and executive reporting.

Participants build a risk assessment, control map, escalation approach, management information model and implementation plan throughout the programme. These materials can be adapted to their own business unit after the course.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes risk, control and prevention methods; the second week focuses on investigations, governance, strategy and the final capstone presentation.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.