Swift Regulatory Frameworks & Compliance 3 — Questions and Answers
Question 1: What is the significance of SWIFT's ISO 20022 migration deadline for US financial institutions?
- It mandates switching to a new SWIFT ownership structure
- It requires adoption of a richer XML-based messaging standard replacing MT messages for cross-border payments (Correct answer)
- It eliminates correspondent banking requirements
- It only affects European banks
Correct answer: It requires adoption of a richer XML-based messaging standard replacing MT messages for cross-border payments
ISO 20022 replaces legacy MT message formats with structured XML data, enabling richer compliance and AML screening information.
Question 2: Which FATF recommendation specifically addresses correspondent banking relationships?
- Recommendation 10
- Recommendation 13 (Correct answer)
- Recommendation 16
- Recommendation 25
Correct answer: Recommendation 13
FATF Recommendation 13 requires financial institutions to apply due diligence measures to correspondent banking relationships.
Question 3: What is 'de-risking' in the context of SWIFT and correspondent banking?
- Encrypting all SWIFT messages end-to-end
- Banks terminating relationships with entire categories of customers or regions to avoid AML risk (Correct answer)
- Installing firewalls on SWIFT infrastructure
- Reducing the number of SWIFT message types used
Correct answer: Banks terminating relationships with entire categories of customers or regions to avoid AML risk
De-risking occurs when banks exit entire markets or customer segments to avoid regulatory risk, reducing financial inclusion globally.
Question 4: Under SWIFT's Payment Controls service, what type of real-time protection does it provide?
- Currency exchange rate hedging
- Detection and prevention of fraudulent or anomalous payment instructions before they are sent (Correct answer)
- Encryption of all SWIFT messages
- Automated OFAC screening
Correct answer: Detection and prevention of fraudulent or anomalous payment instructions before they are sent
SWIFT Payment Controls monitors outgoing SWIFT messages for anomalies and can block suspicious transactions before they leave the institution.
Question 5: What does the 'travel rule' (FATF Recommendation 16) require financial institutions to include in wire transfers?
- The transfer fee breakdown
- Originator and beneficiary identifying information that must travel with the payment (Correct answer)
- A copy of the originator's passport
- The exact exchange rate used
Correct answer: Originator and beneficiary identifying information that must travel with the payment
The travel rule requires that originator name, account, and address, plus beneficiary name and account, accompany each wire transfer above the threshold.
Question 6: Which of the following is a mandatory control under SWIFT's CSCF?
- Using SWIFT-provided hardware tokens exclusively
- Restricting and monitoring internet access from the SWIFT environment (Correct answer)
- Encrypting all internal bank emails
- Conducting quarterly penetration tests of all bank systems
Correct answer: Restricting and monitoring internet access from the SWIFT environment
Restricting internet access to and from the SWIFT local environment is a mandatory security control to reduce attack surface.
Question 7: What is the role of a 'nostro' account in SWIFT-based correspondent banking compliance?
- It stores SWIFT message logs
- It is the account a bank holds at a foreign correspondent bank to facilitate cross-border settlements (Correct answer)
- It is SWIFT's internal reserve account
- It is used exclusively for sanctions screening
Correct answer: It is the account a bank holds at a foreign correspondent bank to facilitate cross-border settlements
A nostro account ('our account with you') is held by one bank at another in a foreign currency and is the mechanism through which cross-border settlements are completed.
Swift Regulatory Frameworks & Compliance 3
What is the significance of SWIFT's ISO 20022 migration deadline for US financial institutions?