CAMS Certification and the Current ACAMS Exam

The Certified Anti-Money Laundering Specialist credential, better known as CAMS, remains the central specialist-level certification from ACAMS for professionals who work in anti-money laundering and wider anti-financial-crime functions. The current program is not simply the old study guide with a new date on the cover. ACAMS has modernized the learning path around four core courses, added elective learning, and placed more emphasis on practical application, technology, evolving typologies, and risk-based decision-making.

That matters for candidates who encounter older preparation material. The underlying AML disciplines remain recognizable, but the administrative details, study architecture, terminology, and emphasis have moved on. A candidate preparing now should anchor study to the current CAMS program and use older material only where the concept itself is still durable.

The Current CAMS Program and the CAMS7 Legacy

CAMS has existed for more than two decades, so version labels have accumulated around it. One of those labels is CAMS7, commonly used for the seventh-edition body of study material. ACAMS now presents the certification publicly simply as CAMS, and the current program is described as reimagined for present-day financial-crime challenges. CAMS7 therefore makes the most sense as a version-history reference, not as a separate current credential competing with CAMS.

The modern program is organized around four broad competencies: understanding financial-crime risks and methods; global anti-financial-crime frameworks, governance, and regulation; building an AFC compliance program; and the tools and technologies used to fight financial crime. That structure is useful because it reflects how practitioners actually work. A transaction-monitoring alert, for example, cannot be judged well without understanding customer risk, expected activity, the regulatory purpose of monitoring, available data, and escalation requirements.

ACAMS also includes sector- and jurisdiction-focused electives. These are not a substitute for the core body of knowledge, but they reinforce an important exam principle: AML controls do not operate in a vacuum. A bank, payment provider, money-services business, virtual-asset business, or securities firm may face different products, customer types, delivery channels, and regulatory expectations even when the basic risk-based framework is shared.

Financial-Crime Methods, Typologies, and Risk

The first layer of CAMS preparation is understanding how illicit value can enter, move through, or leave the financial system. Money laundering is often described through placement, layering, and integration, but candidates should avoid treating those stages as a rigid sequence that appears neatly in every case. Modern laundering can involve rapid movement through accounts, trade activity, shell entities, digital payment channels, professional intermediaries, cash-intensive businesses, virtual assets, or multiple jurisdictions.

The exam-oriented skill is recognizing why activity is suspicious in context. A high-value transfer is not automatically suspicious, and a low-value transfer is not automatically harmless. Customer profile, geography, product, frequency, counterparties, transaction purpose, source of funds, and changes in behavior all affect the risk interpretation. This is why CAMS questions often reward the candidate who asks what additional information is needed before jumping to a conclusion.

Terrorist financing creates a related but distinct problem. Funds may originate from legitimate sources and still be used for an unlawful purpose, which means purely source-focused controls can miss the risk. Proliferation financing, fraud proceeds, corruption, human trafficking, tax crimes, sanctions evasion, cyber-enabled crime, and other predicate offenses also interact with AML systems. CAMS candidates therefore need to think in terms of financial-crime ecosystems rather than memorize isolated typology lists.

Global Frameworks, Governance, and the Risk-Based Approach

AML programs are shaped by national laws and regulators, but the exam also expects familiarity with the international architecture that drives convergence. Candidates should understand the role of bodies such as the Financial Action Task Force, the importance of risk-based supervision, and why institutions translate external requirements into policies, procedures, governance, training, monitoring, testing, and reporting.

Governance is more than naming a compliance officer. Senior management and boards need information that allows them to understand financial-crime exposure, control performance, significant issues, and remediation. The first line owns customer and transaction activity, compliance functions provide subject-matter oversight and challenge, and independent assurance evaluates whether the framework is designed and operating effectively. The exact organizational model varies, but accountability and independence remain central.

A risk-based approach means resources and controls should be proportionate to exposure. Institutions typically consider customer, geographic, product/service, delivery-channel, transaction, and other relevant risks. The purpose is not to label every higher-risk relationship unacceptable. It is to identify where enhanced controls, greater scrutiny, more frequent review, or senior approval may be warranted.

Customer Due Diligence and Beneficial Ownership

Customer due diligence is one of the areas where AML theory becomes operational. Institutions need enough reliable information to know who the customer is, understand the nature and expected purpose of the relationship, identify relevant ownership or control, assess risk, and keep the profile current. The process may involve identity verification, business information, expected transaction behavior, source of funds or wealth where appropriate, sanctions and PEP screening, and enhanced due diligence for higher-risk relationships.

Beneficial ownership is particularly important because legal ownership and effective control are not always the same thing. Complex corporate structures, nominees, trusts, partnerships, intermediaries, and layered ownership can obscure the individuals who ultimately own or control an entity. CAMS candidates should be able to recognize when a simple document check is insufficient and when additional inquiry is needed to understand control, purpose, or source of funds.

For professionals who want a foundation focused specifically on onboarding, periodic review, CDD, and EDD, the associate-level CKYCA credential covers that narrower operating layer. CAMS goes wider: it expects the candidate to connect customer risk to monitoring, investigations, governance, regulation, and enterprise-level AML controls.

Monitoring, Investigations, Escalation, and Reporting

Transaction monitoring is not just a collection of rules and thresholds. Effective monitoring depends on complete and accurate source data, scenarios that reflect relevant typologies, sensible thresholds, governance over changes, manageable alert volumes, trained investigators, quality assurance, and a defensible escalation process. A sophisticated detection engine can still fail if it receives incomplete transactions or if analysts close alerts without considering the customer profile.

Candidates should distinguish alerts, cases, investigations, and regulatory reporting. An alert is a signal requiring review; it is not proof of money laundering. An investigation brings together transactions, customer information, related parties, historical activity, external information where permitted, and prior alerts. The decision to escalate or file a report should follow applicable law and institutional procedure rather than intuition alone.

Documentation is crucial. A well-supported decision explains what was reviewed, what was unusual or consistent with expectations, what additional information was obtained, and why the conclusion was reasonable. Poor documentation weakens both operational quality and the institution’s ability to demonstrate that its program is working.

Sanctions, Technology, and Specialized AFC Work

Sanctions controls overlap with AML but are not identical to it. Screening may involve customers, beneficial owners, counterparties, payments, vessels, goods, jurisdictions, and other data depending on the organization. The consequences of a sanctions match can also differ from a suspicious-activity decision because blocking, rejecting, freezing, licensing, or reporting obligations may apply.

Professionals who spend substantial time on this discipline may progress to the specialist CGSS credential. Within CAMS, the important point is to understand how sanctions exposure, screening, escalation, ownership/control, and evasion risk fit into the broader AFC framework.

Technology now affects almost every part of AML operations. Screening engines, transaction-monitoring systems, case-management platforms, data pipelines, analytics, machine learning, automation, and digital identity tools can improve scale and consistency, but they introduce governance questions. Candidates should ask whether data is complete, models and rules are explainable enough for their use, thresholds are controlled, changes are tested, false positives are managed, and human review remains effective.

The same principle applies to newer technologies: automation does not remove accountability. A system can process enormous volumes and still produce weak outcomes if the institution has poor data, badly designed rules, or unclear escalation criteria.

Current Exam, Eligibility, and Certification Lifecycle

Under the current ACAMS program, CAMS is a specialist-level certification. Candidates need active ACAMS membership and must meet a 40-credit eligibility requirement based on qualifying education, professional experience, certifications, and training. Once the package is purchased and the learning path is completed, the candidate submits an application and, after approval, schedules the exam through Pearson VUE.

The current CAMS exam contains 120 multiple-choice questions and lasts three and a half hours. ACAMS describes the assessment as combining theoretical knowledge with practical scenario-based problems. That distinction is important: memorizing definitions is not enough. Candidates must recognize the most appropriate control, identify what information is missing, evaluate a risk-based response, or choose the best next step in a realistic compliance situation.

CAMS is maintained rather than earned once and forgotten. Specialist certifications are valid for three years while membership remains active, and recertification requires continuing professional development under ACAMS policy. That continuing-education model fits the subject because financial-crime typologies, sanctions regimes, regulations, products, technology, and criminal methods change constantly.

How the Knowledge Areas Fit Together

The strongest CAMS preparation treats the syllabus as a connected operating system. Customer due diligence establishes who the customer is and what activity is expected. Risk assessment determines the intensity of controls. Screening and monitoring generate signals. Investigations turn signals into evidence-based decisions. Governance ensures responsibility and oversight. Independent testing asks whether the controls are designed and operating effectively. Technology carries data and decisions across the whole process.

This integration is also why experienced CAMS holders can move into more specialized work. Sanctions specialists deepen one part of the framework; investigators deepen another; auditors independently assess control effectiveness. For example, CAMS can support progression into advanced assurance work such as Certified AFC Auditor, the current successor branding to Advanced CAMS-Audit.

A candidate who can connect risk, customer information, transaction behavior, governance, technology, and regulatory purpose is better prepared than someone who memorizes disconnected terms. The current CAMS exam is designed around that application mindset. The goal is not merely to know what an AML control is called, but to understand why it exists, what can make it fail, and what a defensible risk-based response looks like.