CTMA Exam Study Guide (2026)
Everything the CTMA Certification Exam (Certified Transaction Monitoring Associate) tests, topic by topic: what each section covers, the facts that come up most, and how to study it. Pair it with the free 15-question practice test.
The exam at a glance
| Questions | 60 multiple-choice questions (some unscored) |
|---|---|
| Time | 90 minutes |
| Passing score | 74% of scored questions |
| Format | Closed book, computer-based |
| Certifying body | ACAMS (Association of Certified Anti-Money Laundering Specialists) |
| Test provider | Pearson VUE (test center or online proctored) |
Mind map: the whole exam on one screen
1. Transaction Monitoring Foundations
What transaction monitoring is for, where it fits in the AML program and the basic terms you'll see throughout the exam.
Key facts
- Transaction monitoring identifies unusual activity so it can be investigated and, if suspicious, reported.
- Monitoring relies on accurate KYC data: expected activity, customer type and risk rating set the baseline.
- Monitoring can be real time (before a payment is released) or post-event (after transactions settle).
- An alert is a system flag; a case groups related alerts and investigation work.
- False positives are alerts that turn out not to be suspicious; false negatives are suspicious activity the system missed.
- Manual referrals from staff and other teams are an important source besides automated alerts.
- Monitoring coverage must match the firm's risk assessment across products and channels.
Flashcards
Exam tip: Unusual isn't the same as suspicious. Monitoring finds unusual; investigation decides suspicious.
2. Red Flags and Typologies
The exam names classic patterns and asks you to recognize them from a short description. Learn each one by its shape.
Key facts
- Structuring: cash deposits kept under the $10,000 CTR threshold, often across days or branches.
- Rapid movement of funds: money comes in and goes out quickly, leaving little balance.
- Funnel accounts: deposits in many locations, withdrawals in one distant place.
- Round-dollar wires and repeated transfers to or from high-risk jurisdictions with no clear purpose.
- Activity inconsistent with the customer's profile, such as a student receiving large business payments.
- Money mule patterns: many unrelated inbound payments forwarded on quickly.
- Trade-related red flags: payments to unrelated third parties for trade, or prices far off market value.
Flashcards
Exam tip: Read the pattern, not the amount. Most typology questions describe the shape of the flows.
3. Alert Investigation and Disposition
The largest part of CTMA. Know the steps for working an alert, what evidence to gather and how to decide and document the outcome.
Key facts
- Start with the alert details and the customer's KYC profile, risk rating and expected activity.
- Review transaction history, counterparties and related accounts for context and patterns.
- Use internal sources (account notes, prior alerts and SARs) and external sources (adverse media, registries).
- Consider whether there's a reasonable explanation; contact the business or customer only if procedures allow and there's no tipping-off risk.
- Decide: close as not suspicious, escalate for further investigation, or recommend a SAR.
- Document the evidence reviewed and the reasoning so a reviewer can follow the decision.
- Quality assurance checks samples of closed alerts for consistency and correct decisions.
Flashcards
Exam tip: 'Activity reviewed, no concerns' is never a good rationale. The best answer always explains why.
Test yourself on these topics
Take the free 15-question CTMA test, then save your results to unlock your Readiness Score and the mistakes bank.
4. Escalation, SARs and Confidentiality
When activity is suspicious, know how to escalate, the US SAR timelines and thresholds, and the confidentiality rules.
Key facts
- US banks generally file SARs for suspicious activity of $5,000 or more with a suspect, or $25,000 or more without; MSBs at $2,000.
- The SAR deadline is 30 days from initial detection, extendable to 60 days if no suspect is identified.
Flashcards
Exam tip: Initial detection is when you know enough to see the activity may be suspicious, not the date of the first transaction.
5. Monitoring Systems, Tuning and Quality
This topic covers how monitoring systems are built, tuned and tested, and what goes wrong when data or models are weak.
Key facts
- Scenarios combine conditions and thresholds; segmentation groups similar customers so thresholds fit each group.
- Tuning adjusts thresholds and logic to reduce false positives without missing risk.
Flashcards
Exam tip: Lowering false positives is good only if coverage is kept. Pick answers that test both sides.
How to pass
- Alert investigation is the heaviest part of the exam. Practice the steps: review the alert, the customer profile, the history, then decide and document.
- You need 74% of scored questions, the highest associate pass mark, so aim for 80%+ in practice.
- Learn the classic patterns by name: structuring, rapid movement of funds, funnel accounts, round-dollar transfers and pass-through activity.
- 60 questions in 90 minutes: 1.5 minutes each.
Frequently asked questions
How long should I study for the CTMA exam?
Most working candidates need 4 to 8 weeks at 45 to 60 minutes a day. Book your exam once your Readiness Score has stayed at 80 or higher for about a week.
Can I take the CTMA exam online?
Yes. ACAMS exams are delivered by Pearson VUE at test centers or online with a remote proctor. Format: closed book, computer-based. Check the current Candidate Handbook from ACAMS for the rules.
What score do I need to pass the CTMA exam?
74% of scored questions. The exam has 60 multiple-choice questions (some unscored) and a time limit of 90 minutes.
What are the most tested topics?
The outline covers transaction monitoring foundations, red flags and typologies, alert investigation and disposition, escalation, sars and confidentiality, monitoring systems, tuning and quality. Use the free practice test to see which ones you need most.
Get every note, flashcard and question
All-Access Monthly
- All 10 ACAMS exams, from CKYCA to CAMS and the advanced certifications
- Full question banks + timed simulations
- Study notes, flashcards & mind maps
- Spaced repetition + mistakes bank
- Readiness Score & detailed reports
- Video lessons as they release
- New exams added during your access
- 5 bonuses: red flags cheat sheet, key numbers sheet, study planner and more
- Pass Guarantee: complete the prep, pass or 100% back
Renews monthly until you cancel. Cancel in two clicks from your account; you keep access until the end of the month you've paid for. No minimum term.
All-Access Yearly
- All 10 ACAMS exams, from CKYCA to CAMS and the advanced certifications
- Full question banks + timed simulations
- Study notes, flashcards & mind maps
- Spaced repetition + mistakes bank
- Readiness Score & detailed reports
- Video lessons as they release
- New exams added during your access
- 5 bonuses: red flags cheat sheet, key numbers sheet, study planner and more
- Pass Guarantee: complete the prep, pass or 100% back
Renews once a year until you cancel. We email you before each renewal. Cancel any time from your account; you keep access until the end of the year you've paid for.
Summarized from ACAMS' official candidate information and the standards and regulations cited, checked October 2026. Confirm current requirements with ACAMS (Association of Certified Anti-Money Laundering Specialists).