AFC Auditor Exam Study Guide (2026)
Everything the ACAMS Certified AFC Auditor Exam (formerly Advanced CAMS-Audit) tests, topic by topic: what each section covers, the facts that come up most, and how to study it. Pair it with the free 15-question practice test.
The exam at a glance
| Questions | 90 multiple-choice questions (knowledge and scenario-based) |
|---|---|
| Time | 3 hours |
| Passing score | Set by ACAMS (see the Candidate Handbook) |
| Format | Closed book, computer-based |
| Certifying body | ACAMS (Association of Certified Anti-Money Laundering Specialists) |
| Test provider | Pearson VUE (test center or online proctored) |
Mind map: the whole exam on one screen
1. Governance and the Audit Function
This topic covers where internal audit fits, the standards it follows, and how independence and objectivity are protected.
Key facts
- In the IIA Three Lines Model, internal audit is the third line, giving independent assurance to the board.
- The IIA Global Internal Audit Standards took effect on 9 January 2025, replacing the previous IPPF standards.
- The chief audit executive reports functionally to the board or audit committee and administratively to senior management.
- An audit charter sets audit's purpose, authority, access and responsibilities.
- Objectivity is impaired by self-review, conflicts of interest and undue influence; impairments must be disclosed.
- Auditors shouldn't audit areas they were responsible for recently (generally within the past year).
- The US BSA requires independent testing of the AML program by qualified, independent parties.
Flashcards
Exam tip: Independence questions often hide a conflict. Look for who designed, ran or benefits from the area being audited.
2. Risk-Based Audit Planning
Know how the AFC audit universe and annual plan are built, how risk is assessed and how scope is set for an individual audit.
Key facts
- The audit universe lists all auditable areas; the plan prioritizes them by risk.
- Inputs include the AFC risk assessment, regulatory findings, prior audit results, business changes and emerging risks.
- Higher-risk areas (such as correspondent banking, high-risk customers and new products) are audited more often.
- Each audit has objectives, scope, period, criteria and resources agreed in a planning memo.
- Criteria are the standards the area is tested against: laws, regulations, policies and procedures.
- Auditors consult management on scope, but audit decides it independently.
- Plans should be flexible enough to add reviews when risks change.
Flashcards
Exam tip: If an option lets the auditee decide what's tested, it's wrong. Audit consults, but decides.
3. Fieldwork, Testing and Sampling
This topic covers how auditors test AFC controls: walkthroughs, design and operating effectiveness, sampling and evidence.
Key facts
- Walkthroughs follow a process end to end to confirm understanding of the controls.
- Design testing checks whether a control could prevent or detect the risk; operating effectiveness testing checks whether it actually did over the period.
- Statistical sampling allows results to be projected to the population; judgmental sampling targets known risk.
- Evidence should be sufficient, reliable, relevant and useful; re-performance is stronger than inquiry alone.
- Workpapers must document what was tested, how, the results and conclusions so a reviewer could re-perform the work.
- Exceptions need evaluation for root cause and whether they're isolated or systemic.
- Data analytics can test whole populations, such as all alerts or all new accounts.
Flashcards
Exam tip: Inquiry alone is the weakest evidence. When asked for the best test, pick re-performance or inspection.
Test yourself on these topics
Take the free 15-question AFC Auditor test, then save your results to unlock your Readiness Score and the mistakes bank.
4. Auditing Core AFC Controls
Know what to test in each part of the AFC program: risk assessment, KYC, screening, monitoring, reporting and training.
Key facts
- Risk assessment: check methodology, data used, coverage of all business lines and whether results drive controls.
- KYC: test files for complete CIP, beneficial ownership, risk rating and EDD where required.
Flashcards
Exam tip: For monitoring audits, data integrity comes first. If data is incomplete, every later test is unreliable.
5. Reporting, Recommendations and Follow-Up
This topic covers writing findings, rating them, agreeing actions with management and validating that issues are fixed.
Key facts
- Findings set out criteria, condition, cause, effect and recommendation.
- Ratings (for example high, medium, low) reflect impact and likelihood and drive deadlines and escalation.
Flashcards
Exam tip: Never close an issue on management's say-so. The validated answer is the right one.
How to pass
- Think like an auditor, not an operator: questions ask how you would test, evidence and rate a control, not how you'd run it.
- Independence and objectivity come up often. Know what impairs them and what to do about it.
- Learn sampling basics: when to use statistical versus judgmental samples, and what to do when you find exceptions.
- 90 questions in 3 hours is 2 minutes each. Scenario questions are long, so keep moving.
Frequently asked questions
How long should I study for the AFC Auditor exam?
Most working candidates need 4 to 8 weeks at 45 to 60 minutes a day. Book your exam once your Readiness Score has stayed at 80 or higher for about a week.
Can I take the AFC Auditor exam online?
Yes. ACAMS exams are delivered by Pearson VUE at test centers or online with a remote proctor. Format: closed book, computer-based. Check the current Candidate Handbook from ACAMS for the rules.
What score do I need to pass the AFC Auditor exam?
Set by ACAMS (see the Candidate Handbook). The exam has 90 multiple-choice questions (knowledge and scenario-based) and a time limit of 3 hours.
What are the most tested topics?
The outline covers governance and the audit function, risk-based audit planning, fieldwork, testing and sampling, auditing core afc controls, reporting, recommendations and follow-up. Use the free practice test to see which ones you need most.
Get every note, flashcard and question
All-Access Monthly
- All 10 ACAMS exams, from CKYCA to CAMS and the advanced certifications
- Full question banks + timed simulations
- Study notes, flashcards & mind maps
- Spaced repetition + mistakes bank
- Readiness Score & detailed reports
- Video lessons as they release
- New exams added during your access
- 5 bonuses: red flags cheat sheet, key numbers sheet, study planner and more
- Pass Guarantee: complete the prep, pass or 100% back
Renews monthly until you cancel. Cancel in two clicks from your account; you keep access until the end of the month you've paid for. No minimum term.
All-Access Yearly
- All 10 ACAMS exams, from CKYCA to CAMS and the advanced certifications
- Full question banks + timed simulations
- Study notes, flashcards & mind maps
- Spaced repetition + mistakes bank
- Readiness Score & detailed reports
- Video lessons as they release
- New exams added during your access
- 5 bonuses: red flags cheat sheet, key numbers sheet, study planner and more
- Pass Guarantee: complete the prep, pass or 100% back
Renews once a year until you cancel. We email you before each renewal. Cancel any time from your account; you keep access until the end of the year you've paid for.
Summarized from ACAMS' official candidate information and the standards and regulations cited, checked October 2026. Confirm current requirements with ACAMS (Association of Certified Anti-Money Laundering Specialists).