CISI Combating Financial Crime study guide for consent regimes, with learning objectives, UK control cues, and exam traps.
Consent regimes belongs to the CISI Combating Financial Crime The Role of the Financial Services Sector exam topic, weighted at 7%. Study it as a UK financial-crime control lesson: the paper usually asks whether you can classify the risk, place the right authority or obligation, and choose the next defensible control, escalation, or reporting step.
| Concept | What to know for CISI CFC review |
|---|---|
| Consent or DAML-style process | A mechanism for seeking protection or authority before proceeding with activity that may involve criminal property or suspicious circumstances. |
| Suspicion trigger | The point at which the firm must consider whether continuing with a transaction could create legal risk. |
| Transaction hold | A control step that prevents routine processing while the MLRO or nominated officer assesses the position. |
| Scope of consent | Any permission or defence is tied to the facts and activity described; it is not a blanket clearance for all future conduct. |
| Tipping-off control | Staff must manage customer communications carefully while consent-related issues are reviewed. |
Consent or defence-against-money-laundering style regimes exist because a firm may identify suspicion before a transaction is complete. The firm then needs a controlled way to decide whether it can proceed, whether it must pause, whether it should report, and how it can avoid committing a separate offence by dealing with suspected criminal property.
The exam point is practical. Once suspicion is identified, business-as-usual processing may be unsafe. The firm should route the issue to the MLRO or nominated officer, preserve facts, consider whether a report or consent request is required, and avoid tipping off the customer.
This topic sits between reporting obligations and transaction control. Reporting asks whether suspicion must be escalated or reported. Consent-style analysis asks whether the firm can safely perform a specific act after suspicion has arisen. The strongest exam answers keep those two questions linked but separate.
| Question | Main focus | Exam trap |
|---|---|---|
| Is there suspicion? | whether internal escalation and possible external reporting are required | waiting for proof of criminality before escalating |
| What act is proposed? | transfer, release, redemption, sale, closure, return of funds, or other dealing | treating the whole customer relationship as automatically cleared |
| Is the act connected to suspected criminal property? | whether proceeding creates legal or financial-crime risk | processing first and planning to report later |
| Has the MLRO or nominated officer assessed it? | controlled decision-making and record keeping | letting the relationship team decide informally |
| What can be said externally? | no tipping off and no prejudicing investigation | telling the customer the firm has made or may make a report |
| Question | Why it matters |
|---|---|
| What suspicious activity or property is involved? | Consent analysis depends on the facts and the proposed act. |
| Has the matter been escalated internally? | Staff should not make informal consent judgments alone. |
| What transaction is pending? | The firm must identify whether it is being asked to transfer, release, redeem, sell, close, or otherwise deal. |
| Has an external report or consent request been made where required? | The firm’s legal protection depends on following the process. |
| What can be said to the customer? | Customer communication must avoid tipping off or prejudicing an investigation. |
Use this sequence when a suspicious fact is linked to a pending customer instruction:
The sequence matters. The exam often makes the wrong answer attractive by offering a commercially convenient action before the reporting and consent questions have been resolved.
| Proposed act | Why it can become sensitive |
|---|---|
| transfer funds to another account | may move suspected criminal property beyond the firm’s control |
| redeem an investment | may convert or release value linked to suspected criminal property |
| sell securities | may change the form or traceability of suspected value |
| close an account and return funds | may still involve dealing with suspicious property |
| release a blocked payment | may complete the act that triggered suspicion |
| accept a new deposit | may increase laundering or layering risk |
| provide an explanation to the customer | may tip off if it reveals suspicion or reporting activity |
A consent-related response is not a general statement that the customer is clean. It normally addresses a specific activity, based on specific facts, at a specific time. If the customer later requests a different transaction, if new facts arise, or if the risk changes, the firm may need a fresh assessment.
This is a common exam trap. An answer that says “consent was obtained once, so all future transactions can proceed” is usually too broad. A stronger answer checks the scope, conditions, timing, and facts of the request.
| Scope question | Why it matters |
|---|---|
| Which customer, account, and property are involved? | the decision must match the actual facts |
| What exact act is proposed? | a transfer, sale, redemption, or closure may require different handling |
| What suspicion was identified? | the risk must be tied to the suspected property or activity |
| What facts were included in the request or assessment? | protection may not cover omitted or later-discovered facts |
| What timing applies? | delay, expiry, or changed circumstances can alter the decision |
| Are there conditions or restrictions? | processing outside the permitted scope can create risk |
| Have new facts emerged? | fresh suspicion may require fresh assessment |
The firm should avoid accidental execution while a consent-related question is unresolved. Practical controls may include placing a payment hold, restricting account activity, limiting customer communications, documenting who can approve any release, and ensuring operations teams understand that ordinary service standards do not override legal risk.
The firm also needs to manage customer pressure. If a customer asks why a payment has not been made, staff should use approved wording and escalate difficult conversations. The objective is to avoid tipping off while still managing the relationship lawfully and consistently.
| Control option | When it may be relevant | Risk if mishandled |
|---|---|---|
| temporary hold | suspicion affects a pending transaction | customer pressure may lead to unauthorized release |
| restricted account activity | repeated instructions create unresolved risk | restriction may be applied inconsistently without governance |
| senior or MLRO approval gate | release needs controlled authority | unclear approver can create execution errors |
| approved customer script | customer asks why the transaction is delayed | casual wording may tip off |
| evidence preservation | facts may later support reporting, defence, or investigation | missing records weaken the firm’s position |
| post-decision monitoring | activity continues after a decision | treating one decision as permanent clearance |
Customer communication is one of the highest-yield traps in consent-regime questions. The firm may need to ask normal clarifying questions, but once suspicion and reporting risk are live, staff must avoid telling the customer that the firm suspects money laundering, has made a report, is waiting for consent, or is coordinating with authorities.
| Customer pressure | Better response |
|---|---|
| “Why is my transfer delayed?” | use approved wording and escalate if pressure continues |
| “Are you reporting me?” | avoid confirming suspicion or reporting activity; route to approved internal channel |
| “I will complain unless you release funds now.” | keep the hold or escalation process controlled and document the pressure |
| “Can I move the money another way?” | treat as a potential new proposed act requiring assessment |
| “Delete the instruction if it causes a problem.” | preserve records and escalate rather than altering evidence casually |
| Evidence | Why it matters |
|---|---|
| customer instruction | shows the exact act the firm is being asked to perform |
| suspicious facts | explains why the consent-style issue arose |
| transaction status | shows whether funds were pending, held, released, rejected, or restricted |
| MLRO or nominated-officer rationale | records the controlled assessment |
| external report or request record | shows timing, scope, facts, and outcome where applicable |
| customer communication notes | evidence that staff avoided tipping off and used approved wording |
| approval and release logs | show who allowed processing and when |
| follow-up monitoring | shows the firm did not treat the decision as a blanket clearance |
| Fact pattern | Better exam response |
|---|---|
| suspicion arises after a customer submits a payment | pause routine processing, escalate, assess reporting and consent-style requirements |
| customer asks to close account and receive all funds | do not assume closure avoids risk; assess dealing with suspected property |
| consent was obtained for one transfer and customer requests another | check scope and reassess if the act or facts differ |
| relationship manager wants to warn customer about a report | control communications and avoid tipping off |
| operations releases funds before MLRO review | treat as transaction-control and governance failure |
| new adverse media appears after a consent-style decision | reassess because facts have changed |
| customer offers an alternative route for the same funds | treat as a new or related proposed act requiring controlled review |
A customer asks a firm to transfer funds shortly after staff identify a credible suspicion that the funds may be criminal property. The relationship team wants to process the transfer because a suspicious activity report may be made later. What is the best response?
A. Process immediately because reporting and transaction handling are unrelated. B. Escalate to the MLRO or nominated officer, consider whether consent or a DAML-style process is required before proceeding, and avoid tipping off the customer. C. Tell the customer that the firm suspects money laundering and ask for permission to report. D. Close the account and return all funds without checking whether that itself creates risk.
Answer: B. Once suspicion affects a pending transaction, the firm should not treat the matter as business as usual. The MLRO or nominated officer should assess reporting, consent, transaction handling, and tipping-off risk.
For final review, remember that consent regimes are about the proposed act, not the customer’s general reputation. In exam questions, identify exactly what the firm is being asked to do and whether suspicion has already changed the legal risk of doing it.
Return to the CISI Combating Financial Crime guide for the full exam-topic table, or use the CFC Cheat Sheet for threat classification, UK authority cues, and final review prompts.