{ "moduleCode": "IFF606", "title": "Correspondent banking and wire chains", "levelCode": "L-02", "levelName": "Layering", "nqf": 6, "credits": 12, "notionalHours": 120, "lessons": [ { "id": "l2m2-1", "title": "Nostro, vostro and the nested correspondent problem", "readingMinutes": 32, "objectives": [ "Explain the nostro/vostro relationship and diagram a nested correspondent chain.", "Distinguish nesting from deliberate wire stripping and identify the evidentiary difference between them.", "Summarise the February 2025 FATF R.16 revisions and the EU TFR (Regulation (EU) 2023/1113).", "Assess the developmental harm caused by correspondent de-risking in African corridors." ], "keyTakeaways": [ "Nested correspondent chains can convert a four-party payment into an apparently two-party one at the ultimate clearer's compliance view.", "Wire stripping is treated by US regulators as an affirmative sanctions-evasion act, not a data-quality failure, the BNP Paribas case set the benchmark.", "FATF's February 2025 R.16 revision and the EU TFR both extend payment-transparency requirements to virtual-asset transfers." ], "keyTerms": [ { "term": "Nostro/vostro account", "definition": "The same correspondent account viewed from each bank's own books; 'our account with you' versus 'your account with us'." }, { "term": "Nesting", "definition": "A downstream respondent bank routes payments through an intermediate correspondent that presents itself as the ordering institution, hiding the true originating bank from the ultimate clearer." }, { "term": "Wire stripping", "definition": "The deliberate deletion or truncation of originator/beneficiary data from a payment message to defeat sanctions or AML screening." }, { "term": "ISO 20022 / pacs.008", "definition": "The structured, tagged messaging standard replacing legacy SWIFT MT formats for customer credit transfers, with full cutover completed November 2025." }, { "term": "De-risking", "definition": "Wholesale withdrawal of correspondent banking relationships from a region or client category to avoid compliance cost, rather than managing individual client risk." } ] }, { "id": "l2m2-2", "title": "Payment message forensics: reading the SWIFT trail", "readingMinutes": 30, "objectives": [ "Identify the SWIFT message fields most relevant to layering investigations.", "Apply value-date and amount-tolerance reconstruction techniques across a multi-hop chain.", "Explain why STP screening does not substitute for beneficial-ownership verification.", "Describe KYCC expectations and their uneven enforcement in African correspondent relationships." ], "keyTakeaways": [ "SWIFT's dual logging (sender plus network operator) preserves evidence even where domestic bank records are incomplete or altered.", "Free-text field 72 frequently contains the most revealing evidence in a payment message.", "Fee deductions across hops require tolerance-band reconstruction rather than exact amount matching.", "R.16 payment-transparency controls and R.24/25 beneficial-ownership controls are complementary, not substitutable." ], "keyTerms": [ { "term": "Field 72 (sender-to-receiver information)", "definition": "A free-text SWIFT MT field used for additional context, often containing unintentionally revealing detail." }, { "term": "Charge-allocation code (field 71A)", "definition": "OUR/SHA/BEN codes determining which party absorbs correspondent fees, explaining amount variance across a payment chain." }, { "term": "Straight-through processing (STP)", "definition": "Automated payment routing without manual review, screened only against structured fields, not beneficial ownership." }, { "term": "KYCC", "definition": "Know Your Customer's Customer, a correspondent's due diligence on a respondent bank's own downstream customer base." } ] }, { "id": "l2m2-3", "title": "De-risking, financial exclusion and the African corridor", "readingMinutes": 28, "objectives": [ "Explain the commercial logic driving correspondent de-risking decisions.", "Assess the displacement effect of de-risking on informal value-transfer volumes.", "Relate South Africa's 2023–2025 greylisting and delisting experience to correspondent risk perception.", "Propose FIU-level responses to a thinly-correspondented operating environment." ], "keyTakeaways": [ "De-risking is driven by fixed compliance costs relative to thin correspondent revenue in smaller markets.", "Displacement to informal value-transfer channels, not elimination of flow, is the typical consequence.", "FATF greylisting materially raises perceived correspondent risk independent of any individual bank decision; delisting can normalise it relatively quickly.", "National FIUs can partially offset thin correspondent coverage through peer-FIU networks and direct informal-sector monitoring capacity." ], "keyTerms": [ { "term": "Correspondent exit / de-risking", "definition": "A correspondent bank's decision to terminate relationships with an entire category or region of respondents rather than manage individual client risk." }, { "term": "FATF greylisting (increased monitoring)", "definition": "Public FATF designation of a jurisdiction with strategic AML/CFT deficiencies, raising perceived correspondent risk; South Africa was listed 2023 and delisted 2025." }, { "term": "Egmont Group", "definition": "The global network of financial intelligence units enabling secure information exchange between member FIUs." }, { "term": "Alliance for Financial Inclusion (AFI)", "definition": "A policy network of financial regulators, including many African central banks, addressing financial inclusion and de-risking impacts." } ] } ], "caseStudy": { "title": "The nested chain that hid a sanctioned counterparty", "jurisdiction": "Regional (Southern and East Africa dollar-clearing corridor)", "summary": "A regional bank routed dollar payments for a mining-sector client through a second-tier correspondent that presented itself as ordering institution to the ultimate US clearer, obscuring that the underlying originator's counterparty was a sanctioned entity operating under a similarly-named shell.", "facts": [ "A Zambian commercial bank held no direct USD correspondent account and routed all dollar clearing through a regional correspondent bank.", "The regional correspondent, in forwarding payments to its own New York clearer, populated field 50 with its own institutional details rather than the underlying Zambian respondent's customer.", "The ultimate beneficiary was a trading company sharing a near-identical name with a sanctioned entity, differing by a single character.", "Automated sanctions screening at the New York clearer did not flag the payment because the true originating customer name never appeared in the message it screened.", "The scheme was uncovered only after a whistleblower report at the regional correspondent triggered an internal audit.", "Field 72 in several messages referenced 'per standing arrangement ref. 2291', which investigators later linked to a side-letter governing the underlying commodity contract." ], "investigativeQuestions": [ "At which hop in the chain did nesting occur, and what data would restore visibility of the true originator?", "Why did automated sanctions screening fail despite the near-identical beneficiary name?", "What documentary request to the regional correspondent would evidence whether the nesting was deliberate or a default operational practice?", "How would the February 2025 R.16 revisions, if applied retrospectively, have altered the outcome?", "What role could field 72's reference to 'standing arrangement ref. 2291' play in establishing intent?" ], "learningPoints": [ "Nesting can defeat sanctions screening even without deliberate stripping, simply through default correspondent presentation practice.", "Near-identical beneficiary names are a recurring sanctions-evasion technique that automated screening alone cannot reliably catch.", "Free-text fields frequently contain the evidentiary thread that structured-field analysis alone misses.", "Retrospective application of transparency reforms is a useful analytical exercise for assessing their real-world bite." ] }, "quiz": [ { "number": 1, "type": "multiple_choice", "points": 1, "question": "A vostro account is best described as:", "options": [ "A bank's own account held with a foreign correspondent", "A foreign correspondent's account held on the domestic bank's own books", "A sanctioned-entity holding account", "A crypto exchange's fiat settlement account" ], "correctIndex": 1, "correctAnswer": "A foreign correspondent's account held on the domestic bank's own books", "rationale": "Vostro means 'yours' — the account a foreign bank holds on the domestic bank's books, mirroring the same relationship the domestic bank calls its 'nostro' abroad." }, { "number": 2, "type": "multiple_choice", "points": 1, "question": "Nesting in correspondent banking primarily defeats which control?", "options": [ "Currency transaction reporting", "Sanctions and AML screening at the ultimate clearer", "Beneficial-ownership registry filing", "Capital adequacy reporting" ], "correctIndex": 1, "correctAnswer": "Sanctions and AML screening at the ultimate clearer", "rationale": "Nesting hides the true originating respondent from the ultimate clearer's screening system by substituting the intermediate correspondent's own details." }, { "number": 3, "type": "multiple_choice", "points": 1, "question": "The BNP Paribas 2014 settlement was significant because it established that:", "options": [ "Wire stripping is treated as an affirmative sanctions-evasion act", "Correspondent banking fees must be disclosed", "SWIFT logs cannot be subpoenaed", "Nostro accounts must be denominated only in USD" ], "correctIndex": 0, "correctAnswer": "Wire stripping is treated as an affirmative sanctions-evasion act", "rationale": "US regulators treated deliberate deletion of payment data as wilful evasion, resulting in an approximately USD 8.9bn settlement." }, { "number": 4, "type": "multiple_choice", "points": 1, "question": "The February 2025 FATF revision to Recommendation 16 primarily addresses:", "options": [ "Beneficial ownership registries", "Payment transparency, including virtual-asset transfer coverage", "Casino customer due diligence", "Trust and company service provider licensing" ], "correctIndex": 1, "correctAnswer": "Payment transparency, including virtual-asset transfer coverage", "rationale": "R.16 governs payment-message transparency requirements and was revised to align wire and virtual-asset transfer data standards." }, { "number": 5, "type": "multiple_choice", "points": 1, "question": "Regulation (EU) 2023/1113 (the Transfer of Funds Regulation) is notable for:", "options": [ "Capping crypto-asset transfer coverage at EUR 1,000", "Extending wire-transparency rules to crypto-asset transfers with no minimum threshold", "Abolishing correspondent banking within the EU", "Replacing SWIFT with a EU-only messaging network" ], "correctIndex": 1, "correctAnswer": "Extending wire-transparency rules to crypto-asset transfers with no minimum threshold", "rationale": "The recast TFR applies to crypto-asset transfers of any value, stricter than several other G20 jurisdictions' travel-rule thresholds." }, { "number": 6, "type": "multiple_choice", "points": 1, "question": "ISO 20022 (pacs.008) messages differ from legacy MT103 primarily because they:", "options": [ "Cannot carry originator data at all", "Use structured, tagged fields including an explicit ultimate debtor/creditor concept", "Are only used for domestic payments", "Eliminate the need for correspondent banks" ], "correctIndex": 1, "correctAnswer": "Use structured, tagged fields including an explicit ultimate debtor/creditor concept", "rationale": "ISO 20022 replaces MT free-text conventions with structured, machine-parseable tagged data fields." }, { "number": 7, "type": "multiple_choice", "points": 1, "question": "Correspondent de-risking is best described as:", "options": [ "Individual client risk-based account closure", "Wholesale withdrawal of relationships from a region or client category to avoid fixed compliance cost", "A FATF-mandated sanction", "A crypto-specific phenomenon only" ], "correctIndex": 1, "correctAnswer": "Wholesale withdrawal of relationships from a region or client category to avoid fixed compliance cost", "rationale": "De-risking is a commercial exit decision driven by the ratio of fixed compliance cost to thin revenue, not individualised risk assessment." }, { "number": 8, "type": "multiple_choice", "points": 1, "question": "The most likely consequence of correspondent de-risking documented by the IMF and World Bank is:", "options": [ "Elimination of the underlying demand for cross-border transfer", "Displacement of flow into informal, less-traceable channels", "Immediate adoption of central bank digital currency", "No measurable effect on remittance volumes" ], "correctIndex": 1, "correctAnswer": "Displacement of flow into informal, less-traceable channels", "rationale": "Displacement to informal value-transfer systems, which carry weaker audit trails, is the documented consequence in successive IMF/World Bank surveys." } ], "essayPrompts": [ { "number": 1, "prompt": "Assess whether the February 2025 R.16 revisions are likely to reduce nesting risk in African dollar-clearing corridors, or whether they primarily accelerate de-risking by raising correspondent compliance cost.", "wordGuide": "1200-1500", "weightingPercent": 30 }, { "number": 2, "prompt": "Using South Africa's 2023 greylisting and 2025 delisting as a case study, evaluate how FATF designations affect correspondent banking sentiment independent of underlying AML performance.", "wordGuide": "1200-1500", "weightingPercent": 30 }, { "number": 3, "prompt": "Argue for or against the proposition that payment-transparency reform without complementary capacity-building support for smaller respondent banks produces a net reduction in financial inclusion.", "wordGuide": "1200-1500", "weightingPercent": 30 } ], "assignment": { "prompt": "Select a real (anonymised, if necessary) cross-border payment chain from your own casework or a public enforcement action. Map every correspondent hop, identify the message format at each hop (legacy MT or ISO 20022), and produce a two-page memorandum identifying where nesting or stripping risk was highest and what evidence request would have closed the visibility gap.", "wordGuide": "2000-2500", "weightingPercent": 35 }, "rubric": { "criteria": [ { "criterion": "Legal and regulatory accuracy", "weight": 25 }, { "criterion": "Typology and mechanism analysis", "weight": 25 }, { "criterion": "Evidence and application to the facts", "weight": 20 }, { "criterion": "Investigative or policy judgement", "weight": 15 }, { "criterion": "Structure, referencing and professional expression", "weight": 15 } ], "bands": [ { "band": "Distinction", "range": "75-100" }, { "band": "Meritorious", "range": "65-74" }, { "band": "Competent", "range": "50-64" }, { "band": "Marginal", "range": "40-49" }, { "band": "Not competent", "range": "0-39" } ], "subMinimum": "40% in the assignment component" }, "exportedAt": "2026-08-14T13:05:13.196Z" }