The OFAC SDN List names blocked persons, vessels, aircraft, and crypto addresses. How screening works, what a true hit requires, and what a miss costs.

How bust-out fraud works, how it differs from default and account takeover, the signals and features that catch it, and why the loss ends up as a SAR.

How to run an enterprise BSA/AML risk assessment: FFIEC categories, inherent vs. residual risk, refresh triggers, examiner criticisms, program linkage.

How fuzzy name matching works in sanctions screening: Levenshtein, Jaro-Winkler, phonetic keys, OFAC's own scorer, threshold trade-offs, and validation.

Placement, layering, and integration: the techniques, transaction-data signatures, and controls at each stage, and why real schemes break the model.

How banks evaluate AML vendors under OCC and FFIEC third-party risk rules, including residual BSA risk for processors, screening, BPO, and model vendors.

BSA independent testing: independence, risk-based frequency, sampling, board reporting, and what OCC examiners expect after Bulletin 2025-37.

Wire fraud detection for banks: known-number callbacks, beneficiary checks, mule holds, and 24-hour IC3 recall. IC3 reported $20.877B in 2025 losses.