{"id":26637,"date":"2026-10-06T09:52:29","date_gmt":"2026-10-06T09:52:29","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=26637"},"modified":"2026-10-06T09:52:29","modified_gmt":"2026-10-06T09:52:29","slug":"acams-cams-what-the-current-exam-covers","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/acams-cams-what-the-current-exam-covers\/","title":{"rendered":"ACAMS CAMS: What the Current Exam Covers"},"content":{"rendered":"

ACAMS has modernized the CAMS certification around a new four-domain blueprint that reflects a broader anti-financial crime role rather than a narrow AML-only syllabus. The current CAMS<\/a> exam is a 3.5-hour computer-based, proctored assessment with 120 questions that combine knowledge and scenario-based judgment. ACAMS requires active membership and 40 eligibility credits before a candidate can sit the exam.<\/p>\n

The current blueprint is weighted 30% Understanding the Risks and Methods of Financial Crime, 20% Global AFC Frameworks, Governance, and Regulations, 30% Building an AFC Compliance Program, and 20% Tools and Technologies to Fight Financial Crime. ACAMS has also restructured preparation around four core online courses with the same competency themes.<\/p>\n

Domain A: Risks and Methods of Financial Crime is 30%<\/h3>\n

This domain starts with definitions across AML, CFT, sanctions, fraud, anti-bribery and corruption, tax evasion and related predicate crime. It then moves into how financial crime affects institutions, financial systems, reputation and society.<\/p>\n

The current blueprint expects candidates to recognize how risk manifests through customers, products, services, jurisdictions and delivery channels rather than learning one generic laundering lifecycle.<\/p>\n

Sector-specific exposure is a major part of Domain A<\/h3>\n

Current objectives include banking segments, high-risk customers and PEPs, MSBs, PSPs, ecommerce, insurance, virtual assets\/VASPs, gaming, real estate, gatekeepers, trusts\/company service providers, accountants and other high-risk sectors.<\/p>\n

This breadth matters because the same financial crime method can look different in retail banking, crypto, real estate or professional-services structures.<\/p>\n

Domain B: Global AFC Frameworks, Governance and Regulations is 20%<\/h3>\n

The second domain focuses on the international standards and regulatory architecture that shape anti-financial crime programs. FATF-style standards, national\/regional regimes, enforcement expectations, governance structures and international cooperation belong here.<\/p>\n

The current program explicitly teaches global frameworks alongside regional regulations across major jurisdictions, helping candidates separate universal risk-based principles from local implementation requirements.<\/p>\n

Governance means understanding responsibility as well as rules<\/h3>\n

Candidates should know how boards, senior management, compliance, business lines, operations, audit, law enforcement, regulators and other stakeholders interact. Effective AFC governance requires clear responsibility, escalation and independent testing rather than a policy document owned only by compliance.<\/p>\n

Regulatory knowledge should therefore be tied to how institutions translate standards into accountable operating programs.<\/p>\n

Domain C: Building an AFC Compliance Program is 30%<\/h3>\n

This second 30% domain covers the design and operation of a risk-based AFC program. Current ACAMS course material emphasizes risk assessments, control frameworks, customer lifecycle, onboarding, screening, monitoring, periodic review, offboarding, investigations, SAR filing and engagement with law enforcement.<\/p>\n

The program domain is where theory becomes operational: risk assessment should influence controls, controls should create alerts\/evidence, and investigations should lead to defensible decisions.<\/p>\n

Customer lifecycle is a recurring exam frame<\/h3>\n

A customer relationship moves from identification\/onboarding to risk assessment, screening, due diligence, ongoing monitoring, periodic or trigger-based review and eventually offboarding. Higher-risk customers can require enhanced diligence, stronger approval or more intensive monitoring.<\/p>\n

The exam can test which control belongs at which stage and when new information should trigger a reassessment.<\/p>\n

Transaction monitoring and investigations connect detection with action<\/h3>\n

Monitoring systems generate alerts based on scenarios, thresholds, behavior or analytics. Analysts then investigate context, customer history, counterparties, expected activity and red flags before reaching a conclusion.<\/p>\n

A suspicious activity reporting decision should be supported by documented analysis and applicable legal\/regulatory requirements, not one isolated alert.<\/p>\n

Domain D: Tools and Technologies is 20%<\/h3>\n

This new-current domain reflects digital onboarding, data, screening, monitoring and investigation technology. The official blueprint includes data quality, integrity, access, taxonomy, customer experience\/friction, e-KYC, digital identity, facial recognition, liveness, biometrics and geolocation.<\/p>\n

It also includes external data sources, customer\/name screening, watchlists, perpetual KYC, AI\/machine learning, transaction monitoring, investigation tools and privacy\/regulatory considerations.<\/p>\n

Technology is governed, not trusted automatically<\/h3>\n

A screening or AI system can be poorly tuned, biased by bad data or create unacceptable false positives. CAMS candidates should understand where human oversight, validation, data governance and regulatory expectations remain necessary even when controls are automated.<\/p>\n

The modern CAMS role therefore includes technology literacy without turning the certification into a data-science exam.<\/p>\n

The current CAMS blueprint is broader than legacy AML memorization<\/h3>\n

The enhanced CAMS program is explicitly broader than its earlier AML\/CFT framing. Domain A now uses the language of financial crime and includes sanctions, fraud, anti-bribery\/corruption and tax evasion alongside money laundering and terrorist financing. That shift reflects how modern compliance teams increasingly operate across integrated anti-financial-crime risks.<\/p>\n

Domain A also tests the consequences of financial crime and regulatory violations. Institutions can face fines, license restrictions, remediation programs, legal exposure and reputational damage; individuals can face professional or legal consequences. Understanding why the rules exist helps candidates interpret scenario urgency.<\/p>\n

High-risk customers and politically exposed persons should not be treated as automatically prohibited. The risk-based approach asks institutions to identify higher exposure, understand source\/activity\/context, apply enhanced controls where required and make documented decisions consistent with applicable law and policy.<\/p>\n

Virtual asset and crypto risk is now an explicit current topic. Candidates should understand VASP exposure, pseudonymous addresses, rapid cross-border movement, mixers or complex transactional typologies conceptually, while also recognizing that legitimate virtual-asset activity exists and controls should be risk-based.<\/p>\n

Real estate, gaming, gatekeepers and trust\/company-service providers appear because financial crime can move outside traditional deposit accounts. Ownership opacity, high-value assets, third-party payments, cross-border structures and professional intermediaries can all change risk indicators.<\/p>\n

Domain B’s international framework layer should begin with bodies and standards such as FATF-style recommendations and the way national\/regional authorities turn them into enforceable requirements. Candidates should distinguish global guidance from the law applicable in a specific jurisdiction.<\/p>\n

Governance matters because an effective AFC program requires senior-management support, defined compliance authority, independent testing, qualified staff and a clear relationship with business units. The program cannot function if compliance has responsibility but no access to data or escalation.<\/p>\n

International cooperation and information sharing can involve financial intelligence units, law enforcement, regulators and cross-border institutions under appropriate legal channels. Candidates should understand purpose and constraints rather than assume confidential customer information can be shared freely.<\/p>\n

Domain C starts with enterprise-wide risk assessment because controls should be proportional to exposure. A product, customer, geography or delivery channel can increase or decrease risk. Risk assessment should influence onboarding, screening, monitoring, staffing and testing rather than sit as a periodic document disconnected from operations.<\/p>\n

Customer due diligence includes identity, beneficial ownership, purpose\/nature of relationship and risk understanding. Enhanced due diligence adds depth where risk requires it, while periodic or perpetual KYC keeps the customer profile current as information changes.<\/p>\n

Screening can apply at onboarding and throughout the relationship. Sanctions, PEP, adverse-media or other watchlist sources need quality names, matching logic and documented resolution. False positives are expected in many systems; strong operations distinguish them from true risk without creating uncontrolled backlogs.<\/p>\n

Transaction monitoring should be calibrated to the institution’s products and risks. Scenarios and thresholds need testing, tuning and governance. A system can produce thousands of alerts and still miss meaningful risk if data is incomplete or rules do not reflect real typologies.<\/p>\n

Investigations should be evidence-driven. The analyst reviews customer profile, transactions, counterparties, prior alerts, open-source or approved external data and explanations. Escalation or reporting decisions should document why activity is suspicious or why it is reasonably explained.<\/p>\n

Domain D’s data-quality emphasis is central because every automated control inherits data weaknesses. If birth dates, addresses, beneficial owners, product codes or transaction descriptions are wrong, identity verification, screening and monitoring all degrade at once.<\/p>\n

Digital onboarding technologies reduce friction but create fraud and privacy trade-offs. Biometrics, liveness, document verification and geolocation can strengthen identity assurance, but institutions must understand accuracy, bias, consent, retention and fallback processes.<\/p>\n

Perpetual KYC and AI\/ML can prioritize reviews or identify unusual patterns, yet models require governance, explainability appropriate to the use, testing and human oversight. Regulators and internal decision makers still need confidence that automated outputs are controlled and evidence-based.<\/p>\n

Current ACAMS public materials also emphasize technology used in investigations and privacy\/regulatory alignment. This means CAMS candidates should be comfortable discussing both control design and the information-system dependencies that make a modern AFC program operational.<\/p>\n

The current blueprint’s 30\/20\/30\/20 split means the two largest domains together account for 60% of the exam, but the smaller technology and frameworks domains are not optional. Many scenarios combine them\u2014for example, a digital onboarding control can involve both technology governance and regulatory expectations, while a transaction-monitoring issue can involve program design and financial-crime typology.<\/p>\n

Current ACAMS materials also emphasize practical application through modular eLearning and an exam simulator. That reinforces the exam’s scenario orientation: candidates need to recognize the most appropriate control, escalation or investigation step from facts, not only recall definitions.<\/p>\n

Eligibility is part of the current certification path as well. Candidates need active ACAMS membership and 40 eligibility credits before the exam application is approved. The enhanced core courses can contribute credits, but candidates should use ACAMS’ current eligibility calculator and handbook for their own combination of education, work experience and training.<\/p>\n

The current exam structure also rewards candidates who distinguish control design from investigative judgment. A risk-based customer rating determines which controls apply; a screening or monitoring system generates potential issues; an investigator evaluates context; governance determines escalation and reporting requirements. Treating an alert as an automatic finding skips several stages of the program.<\/p>\n

Because financial-crime regulation varies by jurisdiction, CAMS preparation should use global principles to organize knowledge while preserving local differences. Filing thresholds, reporting forms, sanctions regimes and record-retention rules can differ. The exam’s global perspective is strongest when candidates understand the principle and recognize when a local legal requirement controls the answer.<\/p>\n

The CAMS exam context<\/a> is now strongly scenario-oriented, with financial crime methods, global regulation, program design and technology all connected. Within the wider ACAMS certification<\/a> portfolio, the strongest candidate can explain why a control exists, how it fits the risk and what evidence supports the final compliance decision.<\/p>\n","protected":false},"excerpt":{"rendered":"

ACAMS has modernized the CAMS certification around a new four-domain blueprint that reflects a broader anti-financial crime role rather than a narrow AML-only syllabus. The current CAMS exam is a 3.5-hour computer-based, proctored assessment with 120 questions that combine knowledge and scenario-based judgment. ACAMS requires active membership and 40 eligibility credits before a candidate can […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/26637"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=26637"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/26637\/revisions"}],"predecessor-version":[{"id":26638,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/26637\/revisions\/26638"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=26637"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=26637"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=26637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}