Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.

AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by ACAMS
Exam Format
Registration
Validity
Skills this practice test covers
- Classify FinTech business models, from PSPs to cryptocurrency exchanges, by their financial crime risk.
- Apply CIP, CDD and EDD to a customer according to its risk rating.
- Check digital data points, such as IP address and GPS coordinates, against what a customer claims.
- Screen payments for sanctions and fraud, and decide what happens to a payment that raises a concern.
- Investigate a transaction monitoring alert and decide whether to file a SAR.
- Reassess risk when a FinTech adds a product, a market or an outsourced control.
Explore related topics
CAFCA exam content
5 domains · 34 topics · 138 questions
Governance, Guidance, and Regulation20%33 questions
This domain sets the ground rules. Candidates define the types of FinTech and the financial crimes they attract, explain the regulatory principles for each business model, and describe the risk management framework, from the lines of defense to the MLRO.
Skills tested
- Identify FinTech types such as PSPs, digital wallets and cryptocurrency exchanges, and what makes each one vulnerable.
- Explain registration, licensing and banking charters, and the purpose of a regulatory sandbox.
- Handle PII and SPII under privacy laws such as GDPR and CCPA.
- Set out a risk-based approach, a risk assessment and a risk appetite, and when to review each.
- Explain how banks risk-categorize FinTechs and how a FinTech keeps its banking relationships.
Questions by topic
- Risk Management Framework4
- Data Privacy and Information Handling4
- Regulatory Principles for FinTechs6
- Risk-Based Approach and Risk Assessment4
- FinTech Risk Categorization by Traditional Institutions2
- Types of Financial Crime4
- Internal Threat Mitigation4
- Definition and Types of FinTechs5
Due Diligence Across Customer Types20%27 questions
This domain covers knowing the customer, often without meeting them. Candidates apply CIP, KYC, eKYC, CDD and EDD, verify identity digitally, screen for sanctions, PEPs and known fraudsters, and rate each customer's risk.
Skills tested
- Apply CDD to every customer and EDD where the risk rating calls for it.
- Verify identity by matching data points against the expected documents and their quality.
- Use digital data points such as IP address, GPS coordinates, MAC addresses and application completion time.
- Screen customers against the right sanctions lists and assess PEP risk.
- Spot onboarding red flags such as spoofing, identity theft and counterfeit documentation.
Questions by topic
- Identity Verification and Digital Identification2
- Data Sources and Digital Data Points8
- Red Flags in Onboarding4
- Sanctions and PEP Screening3
- CIP/KYC/eKYC/CDD/EDD Processes10
Payment Screening and Transaction Monitoring25%32 questions
The largest domain covers watching money move. Candidates screen payments for sanctions and fraud, recognize red flags such as layering, investigate alerts and keep an audit trail. They also explain how monitoring systems set thresholds and how results are reported.
Skills tested
- Decide what to do when payment screening finds a possible sanctions match.
- Recognize layering and integration patterns in transaction data.
- Compare the risks of reversible and non-reversible transactions, and of convertible and non-convertible ones.
- Compare rule-based and machine learning monitoring, including threshold setting and model validation.
- Report monitoring trends and results with KPIs and OKRs.
Questions by topic
- Red Flags and Suspicious Transactions13
- TMS Technology and Reporting6
- Payment Methods and Transaction Types8
- Transaction Monitoring Fundamentals2
- Audit Trail Best Practices1
- Alert Investigation Process2
Investigations, Inquiries, and Reporting20%26 questions
This domain starts when an alert becomes a case. Candidates review KYC data, transactions and open-source research, avoid confirmation bias, write SARs or STRs, and work with law enforcement, banking partners and regulators.
Skills tested
- Review KYC information, transactions and open-source research to build a case.
- Decide what a customer may be asked and told during an investigation and at offboarding.
- Write a clear SAR or STR and know when one is required.
- Respond to law enforcement information requests and court orders, both domestic and international.
- Tell a financial crime concern apart from a breach of company policy when contacting the customer.
Official topics
- Customer Communication During Investigations
- Investigation Review Process
- Analytical Principles in Investigations
- SARs/STRs Reporting
- Third-Party Communication and Collaboration
- Law Enforcement Requests
- Customer Communication for Financial Crime vs. Policy Violations
- Banking Partner Terms of Service
Scaling Anti-Financial Crime Strategies15%20 questions
Growth changes risk. This domain covers assessing new products and features, updating the risk assessment as the firm scales, keeping records, and outsourcing controls with care.
Skills tested
- Assess a new product, such as a move from domestic to international payments, for new risks and controls.
- List the changes that should trigger a financial crime assessment review.
- Apply the rules for record retention and data storage.
- Weigh outsourcing to RegTechs or surge capacity, and test the compliance framework independently.
Questions by topic
- Importance of reviewing and updating the risk assessment as a part of scaling2
- Considerations of outsourcing controls8
- How to assess new products/additional features2
- Methods and rules of record retention and data storage2
- Types of changes that should lead to a financial crime assessment review3
- Types of risk1
- New Product and Feature Risk Assessment2
Requirements
- Required: active membership of ACAMS.
- No work experience or earlier AML training is needed to sit the exam.
About the CAFCA exam
CAFCA checks that compliance staff at FinTech (financial technology) firms can apply anti-money laundering (AML) and fraud controls to their business. ACAMS sets it at associate level: the only requirement is an active ACAMS membership, and no work experience is needed. Its five domains run from governance and regulation through due diligence on customers, payment screening and transaction monitoring to investigations and the controls a firm needs as it grows. Passing earns the Certified AML FinTech Compliance Associate certification, which is renewed every year.
The PlanetCert practice test gives the most questions to governance and to payment screening and transaction monitoring, which is also the largest exam domain. The explanations separate terms that sit close together, such as CDD and EDD, layering and integration, or an information request and a court order. Flashcard Mode suits the acronyms, from CIP and eKYC to MLRO and SPII. Brainy AI Assistant can explain what a customer may be told during an investigation without tipping them off, or why an IP address that does not match the stated country is a red flag at onboarding.
How to earn the certification
- Earns
- Certified AML FinTech Compliance Associate (CAFCA)Associate
CAFCA is valid for one year at a time and is renewed through ACAMS.
- After
- CAMS Certified Anti-Money Laundering Specialist (CAMS)
The ACAMS specialist certification in anti-money laundering, a usual next step after an associate certification.
- CGSS Certified Global Sanctions Specialist (CGSS)
The ACAMS specialist certification for sanctions compliance, which takes CAFCA's screening topics further.
- CAMS Certified Anti-Money Laundering Specialist (CAMS)
How to prepare for CAFCA
- 1
Sort the FinTech business models
List PSPs, digital wallets, cryptocurrency exchanges, BaaS providers and neo-banks, and note how money moves through each. Then note the financial crimes each model attracts and the license or charter it needs.
- 2
Draw the digital onboarding flow
Sketch an online onboarding from application to approval. Mark where CIP, eKYC, sanctions and PEP screening and the risk rating happen, and where red flags such as spoofing can appear.
- 3
Work an alert through to a SAR
Take one suspicious pattern, such as funds layered quickly through a wallet, and write the investigation notes, the escalation and a short SAR narrative. Keep an audit trail at every step.
- 4
Review a product launch for risk
List the risks of a new feature, such as international payments or a new account type, and the controls each one needs. Scaling Anti-Financial Crime Strategies asks for this kind of review.
- 5
Start with the heaviest domain
Payment Screening and Transaction Monitoring carries the most weight, so practise it first in Study Mode. Finish with the CAFCA practice test in Timed Mode and review each miss with Brainy AI Assistant.
Start a timed CAFCArun
ACAMS offers CAFCA as a certification package that includes a study guide, digital flashcards, online study materials and a practice exam.
Who CAFCA is for
- Compliance and onboarding staff at payment apps, digital wallets and other FinTechs.
- People starting out in financial crime compliance who want an entry-level certification.
- Compliance professionals who want to build on their AML knowledge in a FinTech role.
Typical job titles: AML analyst · Compliance analyst · KYC analyst · Transaction monitoring analyst · FinTech compliance officer
CAFCA glossary
20 terms from the exam objectives and the vendor's official material, each defined in a sentence.
- BaaS (Banking as a Service) providers
- Banks or platforms that let a FinTech offer accounts, cards or payments on top of a licensed bank's systems.
- CDD (Customer Due Diligence)
- The checks that confirm who a customer is and what activity to expect, so that the customer's risk can be rated.
- CIP (Customer Identification Program)
- The rules for collecting and verifying a customer's identity details when an account is opened.
- Confirmation bias
- The habit of favoring evidence that supports an early theory and overlooking evidence against it.
- De-risking
- A bank's decision to end or limit relationships with whole groups of customers, such as some FinTechs, to avoid their risk.
- Digital wallets
- Apps that store payment details or a balance, so users can pay or send money from a phone or computer.
- EDD (Enhanced Due Diligence)
- Extra checks for higher-risk customers, such as confirming the source of funds and reviewing the account more often.
- eKYC (Electronic KYC)
- Customer identity checks done digitally, such as document scans, selfie matching or database lookups.
- FATF recommendations
- The international standards on AML and counter-terrorist financing set by the Financial Action Task Force.
- Integrating funds
- The step in which laundered money returns to the legitimate economy, for example through purchases or investments.
- Layering funds
- Moving money through many transactions or accounts to hide where it came from.
- Lines of defense
- A risk model that gives separate control duties to the business, to risk and compliance, and to internal audit.
- MLRO (Money Laundering Reporting Officer)
- The person who oversees a firm's AML controls and decides whether to report suspicious activity to the authorities.
- PEPs
- Politically exposed persons: people with prominent public roles, and their close associates, who carry a higher risk of corruption.
- PSPs (Payment Service Providers)
- Companies that move and process payments on behalf of merchants or consumers.
- RegTechs
- Regulatory technology firms that supply software for compliance work, such as screening or transaction monitoring.
- Risk appetite
- The amount and kind of risk a firm is willing to accept to reach its goals.
- SPII
- Sensitive personally identifiable information, such as a passport or social security number, whose exposure can cause serious harm.
- Suspicious Activity Reports (SARs)
- Reports a firm files with the authorities when it suspects money laundering or another financial crime. Many countries call them suspicious transaction reports (STRs).
- Tipping off
- Telling a customer, directly or by hint, that a report or investigation about them exists, which the law forbids in many countries.
Related practice tests
- CAMS-FCIAdvanced CAMS-Financial Crimes Investigations
- CAMS-RMAdvanced CAMS-Risk Management
- Advanced-CAMS-AuditAdvanced Certified Anti-Money Laundering Specialist - Audit
- CAFSCertified Anti-Fraud Specialist
- CAMSCertified Anti-Money Laundering Specialist (6th edition)