CCAS Exam Study Guide (2026)
Everything the CCAS Certification Exam (Certified Cryptoasset Anti-Financial Crime Specialist) tests, topic by topic: what each section covers, the facts that come up most, and how to study it. Pair it with the free 15-question practice test.
The exam at a glance
| Questions | 100 multiple-choice and multiple-select questions |
|---|---|
| Time | 175 minutes |
| Passing score | Set by ACAMS (see the CCAS Candidate Handbook) |
| Format | Closed book, computer-based, English only |
| Certifying body | ACAMS (Association of Certified Anti-Money Laundering Specialists) |
| Test provider | Pearson VUE (test center or online proctored) |
Mind map: the whole exam on one screen
1. Blockchain and Cryptoasset Fundamentals
You need a working knowledge of how blockchains, wallets and transactions work to judge crypto risk. Questions test concepts, not code.
Key facts
- A blockchain is a shared, append-only ledger of transactions grouped in blocks and secured by cryptography.
- Public ledgers are pseudonymous: addresses are visible, but the people behind them aren't named on-chain.
- A private key signs transactions and controls the funds; a public address receives them.
- Custodial wallets are run by a provider that holds the keys; self-hosted (unhosted) wallets are controlled by the user.
- Bitcoin uses a UTXO model; Ethereum uses an account model and supports smart contracts.
- Stablecoins aim to hold a stable value, usually against the US dollar; centralized issuers can freeze tokens.
- Confirmed transactions are effectively irreversible, which makes speed of response critical.
Flashcards
Exam tip: If a question asks who controls the funds, look for who holds the private keys.
2. Crypto Financial Crime Risks and Typologies
This topic covers how criminals use cryptoassets: scams, ransomware, hacks, darknet markets, sanctions evasion and the laundering methods that follow.
Key facts
- Scams (including pig butchering and fake investment platforms) are one of the largest sources of illicit crypto proceeds.
- Ransomware payments are usually demanded in cryptoassets; OFAC has warned that paying sanctioned actors can be a violation.
- DPRK-linked hackers steal large sums from exchanges and DeFi bridges, then launder through mixers, bridges and OTC brokers.
- Mixers and tumblers pool and redistribute funds to break the link between sender and receiver.
- Chain hopping moves funds across blockchains through bridges and swaps.
- Peel chains send small amounts to exchanges while the rest moves on to new addresses.
- Privacy coins hide senders, receivers or amounts, limiting traceability.
Flashcards
Exam tip: Name the pattern from the shape of the flows: many small exits in a chain = peel chain; switching blockchains = chain hopping.
3. Regulatory Frameworks for Cryptoassets
Know the international standard (FATF Recommendation 15 and the Travel Rule) and how the EU and US apply AML rules to crypto businesses.
Key facts
- FATF Recommendation 15 requires VASPs to be licensed or registered, supervised and subject to full AML/CFT obligations.
- VASPs include exchanges, custodial wallet providers, and businesses that transfer or safekeep virtual assets for others.
- The Travel Rule (R.16 applied to VASPs) requires originator and beneficiary information to travel with transfers; FATF allows a USD/EUR 1,000 de minimis threshold.
- The EU Transfer of Funds Regulation (EU) 2023/1113 applies the Travel Rule to crypto with no threshold, from 30 December 2024.
- MiCA (Markets in Crypto-Assets Regulation) sets EU licensing and conduct rules for crypto-asset service providers (CASPs).
- In the US, crypto exchangers and administrators are generally money transmitters and must register with FinCEN as MSBs.
- FATF has repeatedly found uneven Travel Rule implementation across countries, creating 'sunrise issue' gaps.
Flashcards
Exam tip: The 'sunrise issue' is when one VASP must send Travel Rule data but the receiving country hasn't implemented the rule yet.
Test yourself on these topics
Take the free 15-question CCAS test, then save your results to unlock your Readiness Score and the mistakes bank.
4. AFC Compliance Programs for Crypto Businesses
This topic applies the classic AML program to VASPs: risk assessment, KYC, wallet screening, blockchain monitoring, Travel Rule compliance and sanctions.
Key facts
- A VASP's risk assessment covers customers, products (such as staking, OTC and DeFi access), geographies, and exposure to self-hosted wallets.
- KYC for crypto customers adds checks such as device and IP data, and the source of crypto deposits.
Flashcards
Exam tip: Exposure questions usually reward a risk-based response (review, hold, escalate) over automatic rejection or automatic acceptance.
5. DeFi, NFTs and Emerging Risks
CCAS expects you to understand newer areas: decentralized finance, NFTs, cross-chain bridges and the regulatory debate about who is responsible.
Key facts
- DeFi protocols use smart contracts to offer trading, lending and other services without a traditional intermediary.
- FATF says creators, owners or operators who keep control or sufficient influence over a DeFi arrangement may be VASPs.
Flashcards
Exam tip: Calling something 'decentralized' doesn't remove obligations. Look for who has control or influence.
6. Blockchain Investigations and Case Studies
The case-study course tests investigation logic: tracing funds, attributing addresses, working with exchanges and law enforcement, and reporting.
Key facts
- Investigations start with known addresses or transaction hashes and follow the funds forward and backward.
- Clustering heuristics (such as common-input ownership) group addresses likely controlled by the same entity.
Flashcards
Exam tip: In a tracing question, the exchange where funds land is usually the most valuable lead, because that's where identity data exists.
How to pass
- You don't need to be a developer, but you must understand wallets, keys, transactions, mixers, bridges and stablecoins well enough to judge risk.
- Know FATF Recommendation 15 and the Travel Rule, and how the EU (MiCA and the Transfer of Funds Regulation) applies them.
- Case-study questions test investigation logic: following funds on-chain, spotting typologies and deciding when to file.
- The exam is only offered in English, so practice reading long scenarios quickly.
Frequently asked questions
How long should I study for the CCAS exam?
Most working candidates need 4 to 8 weeks at 45 to 60 minutes a day. Book your exam once your Readiness Score has stayed at 80 or higher for about a week.
Can I take the CCAS exam online?
Yes. ACAMS exams are delivered by Pearson VUE at test centers or online with a remote proctor. Format: closed book, computer-based, english only. Check the current Candidate Handbook from ACAMS for the rules.
What score do I need to pass the CCAS exam?
Set by ACAMS (see the CCAS Candidate Handbook). The exam has 100 multiple-choice and multiple-select questions and a time limit of 175 minutes.
What are the most tested topics?
The outline covers blockchain and cryptoasset fundamentals, crypto financial crime risks and typologies, regulatory frameworks for cryptoassets, afc compliance programs for crypto businesses, defi, nfts and emerging risks, blockchain investigations and case studies. Use the free practice test to see which ones you need most.
Get every note, flashcard and question
All-Access Monthly
- All 10 ACAMS exams, from CKYCA to CAMS and the advanced certifications
- Full question banks + timed simulations
- Study notes, flashcards & mind maps
- Spaced repetition + mistakes bank
- Readiness Score & detailed reports
- Video lessons as they release
- New exams added during your access
- 5 bonuses: red flags cheat sheet, key numbers sheet, study planner and more
- Pass Guarantee: complete the prep, pass or 100% back
Renews monthly until you cancel. Cancel in two clicks from your account; you keep access until the end of the month you've paid for. No minimum term.
All-Access Yearly
- All 10 ACAMS exams, from CKYCA to CAMS and the advanced certifications
- Full question banks + timed simulations
- Study notes, flashcards & mind maps
- Spaced repetition + mistakes bank
- Readiness Score & detailed reports
- Video lessons as they release
- New exams added during your access
- 5 bonuses: red flags cheat sheet, key numbers sheet, study planner and more
- Pass Guarantee: complete the prep, pass or 100% back
Renews once a year until you cancel. We email you before each renewal. Cancel any time from your account; you keep access until the end of the year you've paid for.
Summarized from ACAMS' official candidate information and the standards and regulations cited, checked October 2026. Confirm current requirements with ACAMS (Association of Certified Anti-Money Laundering Specialists).