According to the Bank Secrecy Act (BSA), a financial institution or business must establish an anti-money laundering (AML) program that includes at least four elements: (a) a system of internal policies, procedures and controls to prevent, detect and report money laundering and other illicit activities; (b) a designated compliance officer who is responsible for overseeing the implementation and effectiveness of the AML program; an ongoing employee training program that covers the legal and regulatory obligations, the risks and red flags of money laundering, and the roles and responsibilities of the staff in the AML program; and (d) an independent audit function that tests and evaluates the adequacy and compliance of the AML program12.
While the Office of Foreign Assets Control (OFAC) is a key agency that enforces economic and trade sanctions against targeted foreign countries, entities and individuals, it is not part of the BSA or the AML program requirements. However, financial institutions and businesses are expected to comply with OFAC regulations and screen their customers and transactions against the OFAC lists of sanctioned parties. Failure to do so may result in civil or criminal penalties34. Therefore, it is advisable for financial institutions and businesses to have an OFAC program that is integrated with their AML program, but it is not a mandatory element that they have to specifically address in their AML program.
References:
1: Financial Crimes Enforcement Network (2020). Anti-Money Laundering Programs
2: ACAMS (2020). CAMS Certification Package (6th Edition)
3: Office of Foreign Assets Control (2023). Sanctions Programs and Country Information
4: Moses & Singer LLP (2023). Anti-Money Laundering, Bank Secrecy and OFAC Regulations

Reference:
https://www.wolfsberg-principles.com/sites/default/files/wb/pdfs/faqs/20.%20Wolfsberg-FAQs-on- Intermediaries-May-2012.pdf (2)

One of the key components of an effective anti-money laundering (AML) program is customer due diligence (CDD), which involves verifying the identity of the customer, understanding the nature and purpose of the customer's relationship with the financial institution (FI), and assessing the risk of money laundering or terrorist financing that the customer poses. CDD is essential for preventing and detecting the misuse of the FI's services by criminals, and for complying with the relevant laws and regulations.
However, CDD can be challenging for FIs that offer online services to customers, as there is a greater difficulty in matching the customer with the provided identification documentation. Unlike face-to-face interactions, online services rely on electronic or remote methods of identification and verification, such as scanned copies of documents, biometric data, digital signatures, or third-party verification services. These methods may not be as reliable or secure as physical verification, and may expose the FI to the risk of identity fraud, document forgery, or impersonation. Moreover, online services may attract customers from different jurisdictions, which may have different standards and requirements for identification and verification, and may pose different levels of risk.
Therefore, FIs that offer online services to customers should implement enhanced due diligence (EDD) measures to mitigate the risk of money laundering, such as obtaining additional information or documentation from the customer, applying more stringent verification procedures, conducting more frequent and intensive monitoring of the customer's transactions and behavior, and restricting or limiting the types or amounts of transactions that the customer can perform online.
References:
CAMS Study Guide - 6th Edition, Chapter 3, Section 3.4, page 82
Anti-Money Laundering in a Nutshell, Chapter 4, Section 4.2, page 63
Guidance on Digital Identity, Section 2, page 8
Anti-Money Laundering, The Basics: Installment 1, Section 3.2, page 5

According to the CAMS Certification Package - 6th Edition1, one of the essential components of customer due diligence is verifying the identity of the customer using reliable and independent sources. This verification process should be done before or during the establishment of the business relationship, and should not be delayed unless there is a low risk of money laundering or terrorist financing, and the delay is necessary to avoid interrupting the normal course of business. Therefore, after customers have provided acceptable identification, the financial institution should next confirm the validity of the customer information, as option A suggests. Option B is not necessary, as an electronic picture of each customer is not a mandatory requirement for customer verification, and may not be feasible or effective in some cases. Option C is not the next step, as closely monitoring the account for 30 days is part of the ongoing due diligence process, which should be performed after the customer verification is completed and the account is established. Option D is not advisable, as establishing the account based on the information provided without verifying its validity may expose the financial institution to money laundering and terrorist financing risks, and may violate the KYC and AML regulations.
References:
* 1: CAMS Certification Package - 6th Edition | ACAMS, Chapter 3: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), pages 69-70.

According to the Wolfsberg Anti-Money Laundering (AML) Principles for Correspondent Banking, one of the key aspects of establishing and maintaining a correspondent relationship is to conduct a risk-based due diligence on the respondent bank, which includes obtaining approval from at least one person other than the person sponsoring the relationship12. This is to ensure that the correspondent bank has a clear understanding of the nature, purpose, and expected activity of the relationship, as well as the respondent bank's ownership, governance, AML policies, and customer base12.
Another aspect of the Wolfsberg AML Principles is to recognize and assess the factors that may increase the risk inherent in a correspondent relationship, such as the involvement of politically exposed persons (PEPs), the presence of downstream (nested) correspondents, the geographic location of the respondent bank and its customers, and the types of products and services offered by the respondent bank12. These factors may require enhanced due diligence, monitoring, and reporting of suspicious activities by the correspondent bank, as well as the application of appropriate risk mitigation measures12.
References:
* 1: Wolfsberg Correspondent Banking Principles 20221
* 2: Wolfsberg Anti-Money Laundering Principles for Correspondent Banking2 Reference: https://www.wolfsberg-principles.com/sites/default/files/wb/pdfs/wolfsberg-standards/8.%
20Wolfsberg-Correspondent-Banking-Principles-2014.pdf