Sum up what regulators found in the USAA case study and set out the lessons drawn from it.
The idea
The USAA case study concerns a US federal savings bank whose regulators found that its anti-money-laundering programme had not kept pace with the business. The findings centred on weaknesses in transaction monitoring, in customer due diligence, and in investigating and filing suspicious activity reports on time. Supervisors concluded that the programme was deficient and required remediation under enforcement action. The lessons are general. Scale compliance staffing, technology and rules with growth in customers and products. Refresh the risk assessment when the business changes. Clear alert backlogs and meet reporting deadlines. Give the board and senior management real accountability, and test the programme independently. Exam point: the failure was one of programme design and resourcing across the framework, not a single rogue employee or a market loss.
A practice question
In the USAA case study, what did regulators principally find to be deficient at the bank?
- Its market risk model, which understated the trading losses of the bank's treasury deskWhy not: Invents a market risk failure; the case concerned financial crime compliance, not trading.
- A rogue employee who concealed unauthorised positions in order to inflate bonusesWhy not: Describes a rogue-trader scenario, not the programme-level compliance weaknesses found.
- Its AML programme: monitoring, due diligence and suspicious activity reports - correct
- A cyber attack that exposed customer data and forced a system shutdownWhy not: Confuses the case with a data breach; the findings concerned AML controls.
Regulators concluded that the bank's anti-money-laundering programme, including monitoring, due diligence and timely suspicious activity reporting, was inadequate.
A harder one
Missed deadlines for filing suspicious activity reports were among the weaknesses regulators identified. Which element of the anti-money-laundering framework does this failure most directly concern?
- Placement controls at the point where cash first enters the bank's branch networkWhy not: Placement is a laundering stage and is not the control element concerned with report timeliness.
- Detection and reporting: investigating and escalating alerts on time - correct
- Customer identification and verification at the point of account openingWhy not: Identification happens at onboarding; late filing concerns the later investigation and reporting step.
- Segregation of duties in the accounting ledger and journal-entry approvalsWhy not: An internal fraud control, unrelated to the filing of suspicious activity reports.
Late suspicious activity reports are a failure of the monitoring-investigation-reporting chain, which is the link between detecting unusual activity and informing the authorities.
The hardest tier
A bank under a regulatory enforcement order for anti-money-laundering weaknesses is planning its remediation. Which plan best reflects the lessons of the USAA case?
- Replace the compliance officer and rely on that change alone, as the weakness was a single individual's failure of judgementWhy not: Treats a programme-wide weakness as an individual failure; the lessons concern resources, governance and design.
- Fix the monitoring system going forward only, since past activity is outside the scope of the orderWhy not: Omits the look-back; remediation normally includes reviewing prior activity to identify and report missed suspicious transactions.
- Look back for missed suspicious activity, refresh the risk assessment, add resources, and have the board oversee tested progress - correct
- Reduce reporting by tightening alert thresholds until the regulator's backlog metric is comfortably metWhy not: Optimising metrics rather than detection repeats the original failure and invites further findings.
Effective remediation is programme-wide: past-activity review, updated risk assessment, adequate resources, board accountability and independent testing to confirm the fixes work.
In the app: 6 practice questions on this outcome, spaced review that brings it back before you forget it.
Start free →