Sanctions screening requirements include that a financial institution should:

How does the Financial Action Task Force (FATF) measure the effectiveness of a country's efforts to combat money laundering and terrorist financing?

The investigative department of a financial institution (Fl) receives an internal escalation notice from the remittance department for a SWIFT message requesting a refund due to potential fraud. The notice indicates that a total of three international incoming remittances were transferred to a corporate customer from Country A, in the amount of approximately 5 million EUR for each. The first two incoming remittances had been exchanged into currency B and transferred out to Country B a few days ago. The third incoming remittance has been held by the remittance department.
As noted from the KYC profile, the corporate customer is working in the wood industry. with the last account review completed 3 months ago. Since the account's opening. there has been no history of a large amount of funds flowing through the account. The investigator conducts an Internet search and finds that the remitter is a food beverage company.
The same morning, the investigator receives a call from a financial intelligence unit (FIU) inquiring about the same incident. The FIU states that it will issue a warrant to freeze the account on the same day.
After further review, the decision is made that transactions appear suspicious. Which are the next steps the investigator should take? (Select Two.)

A client with many personal and business deposits with the financial institution (Fl) seeks a business loan. The client wants to guarantee the loan with a trust for which they are the beneficiary.
An investigator examines the trust. The trust has many layers, including shell companies in known tax havens.
The client's ultimate beneficial ownership claim cannot be validated, and the loan is denied.
Two months later, the Fl receives a law enforcement (LE) request on one of the client's business accounts.
While reviewing the business account, the Fl receives another LE request on the same account from another agency. The requested information is shared.
Three months later, a branch manager receives a request to open a business deposit account related to a complex trust. The manager forwarded the request because of the complexity. The trust was the same as the previously examined trust, but the request came from a different client. The second client also has many accounts with the Fl. Further inspection finds links between the second client and the Paradise Papers. The Papers state the client led illegal activities and committed tax evasion.
What steps should the investigator perform in reference to the first client's existing accounts? (Select Three.)

An unusual spike in activity has occurred for a customer who is a supplier of aviation parts to a military force.
The customer's current line of business is consistent with the banks records, and no adverse media hits have occurred. Which is the best reason for an investigator to continue an investigation?