Currency Exchange, Gold, and an Undeclared Border Seizure
A licensed currency exchange company in Peshawar has a customer, a 41-year-old dealer in used electronics, who has exchanged PKR into USD 11 times in six weeks, each time between USD 9,000 and USD 9,800, always just under the USD 10,000 declaration threshold. He states the purpose is 'family travel to Dubai'. On three occasions he was accompanied by a cousin whose name is a 96% match to an individual on the UNSC 1988 sanctions list (Taliban). The exchange company's branch is 4 km from Torkham border. Customs later seize USD 45,000 in undeclared cash from a vehicle registered to the customer's cousin at Torkham. The exchange company's compliance officer learns of the seizure from a newspaper and must decide what to do; the company has already filed three CTRs but no STR.
1. What obligations arise from the pattern of exchanges and the 96% sanctions name match?
Read the worked answer
The pattern is consistent with structuring to avoid the USD 10,000 declaration threshold. Eleven exchanges in six weeks, each kept just below the threshold, with a generic 'family travel' purpose, should be aggregated and treated as suspicious. The exchange company must conduct CDD, verify the purpose, and consider whether the amounts are consistent with the customer's profile. The three CTRs do not replace an STR.
The 96% name match to a UNSC 1988 listed individual requires immediate escalation. The company must verify identifiers, including date of birth, passport, nationality, and address. If the cousin is confirmed as the listed person, the company must freeze the funds involved and any funds owned or controlled by him, without prior notice, and report under the TFS framework. If the hit is a false positive, the company should document the analysis. In either case, the structuring and the sanctions nexus justify an STR. The branch's proximity to Torkham and the later customs seizure reinforce the cross-border risk.
2. How should the company respond to the newspaper report of the customs seizure, given that no STR was filed?
Read the worked answer
The newspaper report is open-source information, not proof, but it is highly relevant. The compliance officer should initiate an internal review of the customer's transactions, the cousin's involvement, the branch's CDD files, CCTV, and screening logs. The company should file an STR now, explaining the new information and why no STR was filed earlier. A late filing is better than no filing; the explanation should be factual, not defensive.
The company should preserve records and cooperate with the FMU and customs through proper channels. It should not contact the customer or cousin in a way that tips them off about the STR or the internal review. It should also review whether the three CTRs were accurate and whether staff missed the aggregation. If the review shows that the branch deliberately avoided escalation, the company should consider disciplinary action and a control remediation plan.
3. What control changes should the exchange company make at branch and head-office level?
Read the worked answer
At branch level, the company should aggregate exchanges by customer, beneficiary, accompanying persons, and linked CNICs, and set review triggers below the USD 10,000 declaration threshold. It should add specific rules for border-area branches, travel-related purposes, and repeat exchanges just under thresholds. Staff should screen accompanying parties, not only the transacting customer, and should record the purpose and verification documents.
At head-office level, the company should strengthen STR escalation, test whether CTR filings are being used as a substitute for suspicion reporting, and audit branches near Torkham and other border crossings. Training should use real typologies: structuring, third-party involvement, sanctions screening, and cross-border cash movement. The company should also review its sanctions screening system for name-match thresholds and false-positive handling. Finally, it should document the remedial actions and report progress to senior management and, where required, the regulator.