Browse CISI Exam Guides: UK RPI, IRT, Risk, CFC & Investment Management

CISI CFC Financial Sanctions Guide

CISI Combating Financial Crime chapter guide for financial sanctions, with section lessons, UK control cues, and review priorities.

Financial Sanctions is a CISI Combating Financial Crime exam topic weighted at 4%. Use this chapter landing page to classify the crime or control problem first, then move into the section lessons for the specific UK authority, firm obligation, escalation, reporting, and evidence cues.

What this topic is really testing

  • sanctions objectives and legal framework
  • screening, designation, and enforcement
  • penalties and practical sanctions controls

Sanctions questions test whether the candidate can move from a name, entity, country, sector, ownership link, or payment route to the correct restriction and control response. The issue is not merely whether a customer appears on a list. A firm may also need to consider ownership and control, indirect benefit, asset-freezing obligations, rejected or blocked activity, licence requirements, and reporting.

The exam often uses sanctions to test discipline under pressure. A transaction may look profitable, routine, or supported by a long-standing client relationship, but a sanctions concern changes the priority. The stronger answer preserves evidence, checks the relevant screening and escalation route, and avoids letting commercial convenience override a legal restriction.

Sanctions pattern recognition

Pattern in the factsWhy it mattersBetter exam response
exact or likely match against a designated personpotential dealing restriction or asset-freeze issueescalate, validate the match, and follow freeze/reporting controls
ownership or control link to a designated partyrisk may exist even if the direct customer is not namedinvestigate beneficial ownership and control before proceeding
payment routed through a high-risk jurisdictionmay indicate sanctions evasion or restricted activityreview the full payment chain and supporting evidence
sector, goods, or services restrictionprohibition may be activity-based, not only name-basedcheck the restricted activity before treating the client as cleared
request to change names, route, or documentationmay indicate evasionpreserve evidence and escalate
old client becomes newly exposedsanctions risk changes over timerescreen, update risk assessment, and apply current restrictions

Sanctions-control sequence

  1. screen customer, beneficial owner, counterparty, payment data, and relevant geography
  2. validate possible matches rather than ignoring close or fuzzy matches
  3. identify whether the restriction is name-based, ownership-and-control based, sectoral, geographic, or activity-based
  4. stop, freeze, reject, block, or hold the activity as required by the control framework
  5. escalate internally and report where required
  6. document the decision and remediate screening or governance weaknesses if the case reveals a process gap

Section lessons

LessonMain review cue
Sanctions objectives and legal frameworkDescribe the purpose of financial sanctions in restricting dealings with designated persons, entities, sectors, or jurisdictions
Screening, designation, and enforcementExplain the purpose of sanctions screening against names, ownership links, counterparties, payment data, and other relevant identifiers
Penalties and practical sanctions controlsIdentify the potential civil, criminal, regulatory, and reputational consequences of sanctions breaches

Better first instincts

If the case feels most like…Better first move
a listed or near-listed namevalidate the match and follow escalation, freeze, and reporting controls
ownership or control uncertaintyidentify beneficial ownership and control before allowing the activity
a sector, product, or country restrictioncheck whether the activity itself is restricted even if the customer name is not listed
a payment-chain concernreview counterparties, intermediaries, geography, and purpose
ignored alert or manual overridetreat it as a governance and evidence problem, not just a screening result

Common traps

  • using financial crime as a vague label instead of classifying the threat
  • confusing sanctions, tax, bribery, fraud, terrorist financing, and money laundering controls
  • treating a reporting step as complete when the firm also needs evidence, prevention, and follow-up
  • choosing the strictest-sounding answer instead of the one that fits the authority, duty, and timing
  • assuming sanctions only matter when the exact customer name appears on a list
  • forgetting ownership and control links
  • letting a long-standing relationship override a new sanctions concern
  • proceeding first and documenting later when the facts point to a possible restriction

Sample Exam Question

A corporate client is not itself listed on a sanctions screen, but new ownership information suggests that a designated person may control the company indirectly. The client asks the firm to process a payment quickly and says the name mismatch proves there is no sanctions issue. What is the strongest next step?

  • A. Process the payment because only exact name matches matter
  • B. Ignore the ownership information because the client has not been listed directly
  • C. Escalate the possible ownership-and-control concern, validate the screening result, and avoid processing until the sanctions position is resolved
  • D. Treat the case only as a money-laundering issue and skip sanctions controls

Answer: C.

Sanctions risk can arise through ownership or control, not only through a direct name match. The firm should escalate, validate the concern, and apply the appropriate hold, freeze, reporting, or licensing logic before processing. Treating the case as only AML would miss the sanctions-specific restriction.

In this section

Revised on Friday, May 29, 2026