CAMS-RM
Certified Anti-Money Laundering Specialist – Risk Management (CAMS-RM)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certified Anti-Money Laundering Specialist – Risk Management (CAMS-RM) is a professional credential for AML/CFT practitioners who move beyond transaction-level compliance into programme design, risk appetite setting, and control assurance. It suits compliance officers, risk managers, internal auditors, consultants, and regulators who already understand customer due diligence and suspicious activity reporting and now need to defend risk-based decisions to boards, examiners, and business lines. The exam is delivered in multiple-choice format and is organised around nine domains: governance fundamentals; risk identification, assessment, and appetite; CDD, beneficial ownership, and enhanced due diligence; transaction monitoring, screening, and detection scenarios; sanctions, PEPs, and proliferation financing; reporting, investigation, and escalation; mitigation, controls, and testing; data, technology, and model risk; and emerging risks and typologies. Questions test judgement rather than recall-expect scenarios where you must choose the most defensible control, escalate correctly, or spot a model or data weakness. Preparation should combine a close reading of FATF risk-based approach guidance and Wolfsberg principles with hands-on practice in mapping risks to controls, writing risk-appetite statements, and reviewing monitoring scenarios. Because no single textbook covers the risk-management lens, build a study log of real or hypothetical control failures and rehearse how you would test and remediate them. The official certifying body publishes current exam logistics, including question count, duration, fees, and passing scores; check its website for the authoritative figures before you schedule.
What you'll study
About CAMS-RM preparation
Is CAMS-RM the same as CAMS?
No. CAMS tests core AML knowledge across CDD, reporting, and sanctions. CAMS-RM assumes that foundation and tests risk-management judgement: setting appetite, designing controls, testing them, and defending decisions. If you already hold CAMS, treat CAMS-RM as the next layer rather than a replacement.
How many questions are on the exam and how long do I have?
The certifying body publishes the current question count, time limit, and fee on its official website. These details change between delivery windows, so confirm them there before booking. Do not rely on second-hand figures from forums or training providers.
What is the passing score and what happens if I fail?
Passing scores and retake rules are set by the certifying body and published on its site. Policies on waiting periods, fees, and the number of attempts vary, so check the official candidate handbook. Plan your study timeline with a possible retake in mind rather than assuming a single attempt.
How difficult is the exam compared with CAMS?
Candidates generally find CAMS-RM harder because questions are scenario-based and test judgement, not definitions. You must choose between plausible controls, recognise weak risk assessments, and explain escalation. Memorising regulations is not enough; you need to reason about proportionality and residual risk.
In what order should I study the nine domains?
Start with governance and risk appetite (domains 1–2), because later questions assume you can define risk tolerance. Then study CDD and EDD (3), monitoring and screening (4), and sanctions/PEPs (5). Finish with reporting (6), controls and testing (7), data and model risk (8), and typologies (9), which draw on everything before.
Do I need to work in AML to pass?
You do not need a specific job title, but the exam assumes practical familiarity with CDD files, alert triage, and control testing. Candidates without hands-on experience should build case-study practice: draft a risk assessment, design a monitoring scenario, and write an escalation memo. That closes the gap faster than reading only.
What are the most common failure modes?
Three recur: choosing the most aggressive control instead of the proportionate one, missing the escalation step when a red flag appears, and confusing model validation with model tuning. Others include ignoring data-quality root causes and treating sanctions screening as a one-time check. Practise identifying the best answer, not just a defensible one.
Which sources should I use to prepare?
Use FATF risk-based approach guidance, Wolfsberg principles, and your local regulator's AML/CFT handbooks. Pair them with the certifying body's own syllabus outline, which lists the domains and task statements. Avoid commercial question dumps; they teach recall and often contain outdated rules.
How much study time should I plan?
There is no official study-hour requirement. Working practitioners typically need several weeks of focused review, while career changers need longer. Build a schedule around the nine domain weights, spend more time on weaker domains, and reserve the final week for timed scenario practice rather than new material.