Course content

What the course covers

Six learning sections and 21 scored quiz items. Course version AML-2026.1.

What AML and the BSA mean

6 min read

AML stands for anti-money laundering. Money laundering is the practice of disguising the origins of illegally obtained money so it appears legitimate. Mortgage transactions are attractive to launderers because a single closing can move a very large sum, the asset is durable, and the paperwork can be made to look ordinary.

  • The Bank Secrecy Act framework was designed to assist in detecting money laundering and other financial crimes through reporting and recordkeeping.
  • Penalties can vary, and whether conduct was willful or negligent is one factor that matters.
  • Mortgage staff support prevention by noticing unusual facts and escalating them internally.
  • Awareness is the point of this training. You are not expected to investigate, prove anything, or decide whether a crime occurred.
  • Terrorist financing is treated alongside money laundering even though the money may start out lawful, because the concern is where it is going rather than where it came from.

Key terms

Money laundering
Making money that came from crime look as though it came from a legitimate source.
Bank Secrecy Act (BSA)
The core United States recordkeeping and reporting framework used to detect financial crime.
FinCEN
The Financial Crimes Enforcement Network, the Treasury bureau that administers BSA rules and receives the reports.
Willful versus negligent
Whether a failure was knowing and deliberate or careless. It is one factor in how conduct is treated.

On the job

  • Loan officers and assistants: you usually see the first unusual fact, often in conversation rather than in a document.
  • Processors and underwriters: you see the paper trail, so mismatches between the story and the statements land with you.
  • Operations, closing and post-closing: you see last-minute changes in who is wiring the money.

Common misunderstandings

AML is only a bank problem.

Reporting and program duties reach well beyond banks, and mortgage businesses can be covered.

If I did not know, I cannot be criticized.

Ignoring facts that were in front of you is itself a problem. Escalating is how you handle that.

Placement, layering and integration

6 min read

The commonly taught three stages of money laundering are placement, layering and integration. The model is a teaching aid, not a legal test. Real activity often skips a stage or blends them, and mortgage files usually show up at the integration end.

  • Placement is physically putting bulk cash proceeds into the financial system.
  • Layering uses a series of transactions to disguise the source and trail of the funds.
  • Integration combines criminal proceeds with legitimate funds so ownership looks lawful.
  • A mortgage can be used at any stage: cash deposits before application, funds moved through several accounts and entities, or a property purchased and resold to create clean-looking proceeds.
  • Paying a mortgage down aggressively with unexplained cash and then refinancing turns the property into a source of apparently legitimate funds.

Key terms

Placement
Getting criminal cash into the financial system in the first place.
Layering
Moving the money through transactions, accounts or entities so the trail becomes hard to follow.
Integration
Spending or investing the money so it re-enters the economy looking legitimate.
Structuring
Breaking deposits or payments into smaller amounts to avoid triggering a report or attention.

Worked examples

An applicant deposits $9,300 in cash on four separate days across two banks, then applies with those funds as the down payment.

What to do: The pattern, not the total, is the point. Document what you observed factually and escalate to your compliance contact. Do not coach the applicant on how to re-present the deposits.

A borrower pays off an investment property loan in large irregular lump sums, then immediately requests a cash-out refinance on the same property.

What to do: Note the cycle and the unexplained source of the payoff funds. Escalate internally and let the compliance contact decide what happens next.

Illustrative examples for training only. They are not case files and not legal advice.

Mortgage warning signs and source of funds

8 min read

Warning signs are reasons to ask questions and escalate. They are not proof that a crime occurred. Most files with a warning sign turn out to have an innocent explanation, and that is exactly why the standard is escalation rather than accusation.

  • Large cash down payments, evasiveness about the source of funds, and structured deposits over several days deserve attention.
  • Rapid loan payoffs followed by new large cash down payments can be a pattern worth reviewing.
  • Quick property flips to closely connected buyers with suspect bank statements are a common example in training material.
  • A documented gift can be a legitimate explanation, but a notarized letter alone does not prove funds are lawful and does not replace tracing and verifying the transfer under applicable loan guidelines.
  • Watch for an applicant who is indifferent to rate, cost or terms, unusual urgency to close, or a willingness to overpay for the property.
  • Watch for third parties who direct the transaction but are not on the loan, sudden changes in the wiring party, or entities layered over a simple purchase with no business reason.
  • Watch for identity and document inconsistencies: mismatched addresses and employers, statements that appear altered, or income that does not fit the deposits.

Key terms

Source of funds
Where the money for the transaction actually came from, traced and verified rather than simply asserted.
Red flag
A fact that is unusual enough to warrant a question and, where appropriate, escalation.
Straw buyer
Someone who applies in their own name for the benefit of a hidden party who controls the money.

Worked examples

A gift letter is notarized and complete, but the donor's transfer cannot be traced to a donor account and the funds arrived as cash.

What to do: Complete paperwork is not verification. Follow your guidelines on tracing the transfer, document what could not be verified, and escalate the gap.

An applicant becomes hostile when asked routine source-of-funds questions and offers to switch lenders.

What to do: Keep the request routine and professional, do not argue, and record the exchange factually. Evasiveness combined with large cash is a classic escalation trigger.

At closing, the wire arrives from a business account belonging to someone unconnected to the file.

What to do: Stop and escalate before proceeding. An unexplained third-party funding source is one of the strongest signals in a mortgage transaction.

Illustrative examples for training only. They are not case files and not legal advice.

Common misunderstandings

One red flag means I should decline the loan.

A warning sign means ask and escalate. Credit and eligibility decisions follow your company's normal process.

If the documents are complete, the file is clear.

Documents can be produced. Verification and consistency are what matter.

Risk-based controls and responsibility

6 min read

A risk-based approach lets a business direct its controls and attention according to its actual risks. It does not mean lighter standards. It means spending the most effort where the exposure is greatest and being able to explain why.

  • When a mortgage company uses a third-party provider, the mortgage company remains responsible for its own applicable obligations and oversight.
  • Weak controls carry reputational consequences such as loss of public trust, reputational damage and lost future business, as well as operational harm.
  • Company product risks and individual job responsibilities shape what each person needs to watch for.
  • Risk generally rises with cash-heavy transactions, investor and entity borrowers, complex ownership structures, geographies your company knows little about, and channels where you never meet the borrower.
  • A risk assessment is a written judgment. Examiners look for the reasoning and for evidence that the controls actually match it.
  • Escalation is a control. If reports never get made, the program is not working no matter what the manual says.

Key terms

Risk-based approach
Allocating controls, review and training in proportion to assessed risk, with the reasoning written down.
Third-party oversight
Monitoring vendors and partners. You can outsource the work, not the responsibility.
Escalation path
The named internal route for raising a concern, ending with the designated compliance contact.

On the job

  • Know the name of your compliance contact and how to reach them today, not at the end of the month.
  • Escalate in writing, stick to observable facts, and avoid conclusions about guilt.
  • Never discuss an escalation with the applicant, a real estate agent, or anyone outside the internal process.

SARs, CTRs and customer identification

8 min read

These are different tools with different rules. Which ones apply depends on the type of business. Confusing them is one of the most common mistakes in mortgage training, so the differences are worth learning precisely.

  • Suspicious Activity Reports are filed with FinCEN. The ordinary deadline is 30 calendar days after initial detection of facts that may form a basis for filing.
  • If no suspect is identified at first, up to 30 additional calendar days may be used to identify one, never more than 60 days total.
  • The existence of a SAR is confidential, subject to authorized exceptions. Never tell a customer that a SAR was filed.
  • Escalate promptly to your employer's designated compliance contact and preserve relevant records. Do not wait for a deadline.
  • Currency Transaction Reports arise under the Bank Secrecy Act. Customer Identification Program requirements come from the USA PATRIOT Act and are implemented through entity-specific rules.
  • A filing decision belongs to the company through its designated compliance function, not to the individual who noticed the facts.
  • Recordkeeping matters as much as reporting. Preserve the documents and notes that support what was observed.
  • This training app does not collect borrower cases, SAR narratives, SAR documents or suspicious activity submissions.

Key terms

SAR
Suspicious Activity Report, filed with FinCEN when the applicable standard for reporting is met.
CTR
Currency Transaction Report, a currency-threshold report under the BSA. It applies to some institutions and not others.
CIP
Customer Identification Program, identity verification requirements that come from the USA PATRIOT Act through entity-specific rules.
Tipping off
Telling a customer or unauthorized person that a SAR exists or may be filed. Do not do it.

Worked examples

You escalated a file two weeks ago and the borrower now asks why their loan is taking longer than expected.

What to do: Answer only in ordinary processing terms. Never confirm, deny or hint at an escalation or a report, and route the question to your compliance contact if pressed.

A coworker asks you to forward them the file because they heard something was reported.

What to do: Do not share it or confirm anything. Confidentiality applies internally too, outside the authorized compliance function.

Illustrative examples for training only. They are not case files and not legal advice.

Common misunderstandings

I have 30 days, so I can sit on it.

The deadline belongs to the company's filing process. Your obligation is to escalate promptly.

Every large cash transaction means a CTR.

Which currency-reporting rule applies depends on the institution type. Follow your company's procedure.

Added by this course

Regulatory context

7 min read

This section is added by this course. It was not part of the supplied question set. Reference check date: 2026-09-11. This is general information, not legal advice, and no attorney review or accreditation is claimed.

  • 31 CFR 1029.210 requires covered loan and finance companies to maintain a senior-management-approved AML program with policies and procedures, a designated compliance officer, appropriate ongoing training, and independent testing. A training quiz alone is not a complete AML program.
  • Required independent testing cannot be performed by the designated compliance officer. Ordinary day-to-day monitoring by that officer is still expected.
  • Different BSA rules apply to different kinds of institutions. Bank Customer Identification Program requirements should not be described as identical standalone duties for every nonbank mortgage business, and Part 1029 does not itself impose a bank-style standalone CIP rule.
  • 31 CFR 1029.330 refers to Form 8300 cash reporting rules. It is not a blanket Currency Transaction Report obligation for every residential mortgage lender or originator.
  • Coverage applies to businesses. An individual job title does not create a separate business AML program duty for that person.
  • This course covers the training pillar and produces dated per-person completion records. It does not write your policies, designate your officer, or perform your independent testing.
  • State requirements and investor or agency requirements can add obligations beyond the federal rules. Confirm yours with qualified counsel or a compliance professional.

Key terms

AML program
The written set of policies, the designated officer, the ongoing training, and the independent testing taken together.
Independent testing
A review of the program by someone other than the designated compliance officer.
Covered business
A business that falls within the scope of the applicable rule. Coverage attaches to the business, not to a job title.

Documents completion of this awareness course. Not NMLS continuing education credit or a certification of regulatory compliance. Employers remain responsible for their AML programs and role-specific training.