Certifications / CCAS / Free practice questions
Free CCAS practice questions 2026
5 real-format CCAS questions from our bank of 51, each with the correct answer, an explanation and a source. Certified Cryptoasset Anti-Financial Crime Specialist, issued by ACAMS.
In a peel chain, what happens?
Show answer and explanation
Correct answer: D. A large balance moves through a long series of addresses, with a small amount peeled off to a new address at each step
In a peel chain, a large holding passes through many transactions, each sending a small portion to a different address, often an exchange deposit, and the remainder to a new address. It is commonly used to cash out illicit funds in amounts that attract less attention.
Source: US DOJ and IRS-CI case filings; blockchain analytics typology reports
A customer withdraws to an unhosted wallet. Which measures can a VASP take to manage the risk?
Select 2 answers.
Show answer and explanation
Correct answer: C. Verify that the customer controls the wallet, e.g. via a signed message or small test transfer, D. Screen the wallet with blockchain analytics before and after the transfer
Proof of ownership (signing a message or a test transaction) and analytics screening are common controls. Never ask for private keys. EU rules require verification for self-hosted addresses above EUR 1,000.
Source: Regulation (EU) 2023/1113, Art. 14 and 16; EBA Travel Rule Guidelines
Which TWO are red flags related to ransomware payments?
Select 2 answers.
Show answer and explanation
Correct answer: B. Funds are sent to an address linked by analytics to a known ransomware group, E. A company customer with no prior crypto activity urgently buys a large amount and sends it to a new address
Urgent first-time purchases by businesses and exposure to addresses attributed to ransomware groups are key indicators. OFAC also warns that paying sanctioned ransomware actors can breach sanctions.
Source: FinCEN Advisory on Ransomware (2021); OFAC Updated Advisory on Ransomware Payments (2021)
In the US, the GENIUS Act signed in July 2025 mainly concerns:
Show answer and explanation
Correct answer: A. A federal framework for payment stablecoins, including issuer requirements and AML obligations
The GENIUS Act created a US regulatory framework for payment stablecoin issuers, including reserve requirements and treating issuers as financial institutions for BSA/AML purposes.
Source: Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act, July 2025
A customer's deposit is traced to an address that received funds directly from a darknet market two hops earlier. What is the most appropriate action?
Show answer and explanation
Correct answer: C. Treat it as a risk indicator, investigate the source and the customer's explanation, and consider filing a suspicious activity report
Indirect exposure to illicit sources is a risk indicator whose weight depends on the number of hops, amounts and context. It should prompt an investigation and, where suspicion remains, a report to the FIU. VASPs do not confiscate funds themselves.
Source: FATF Virtual Assets Red Flag Indicators (2020)
Want more CCAS questions?
Create a free account for more questions with explanations, or take the free 10-question diagnostic with no sign-up and see your score by domain. The full bank has 51 questions.
These questions are written independently from public standards and are not recalled exam questions. Facts are checked against ACAMS; how we check facts. Also read the CCAS certification guide.