ACAMS CCAS Exam Guide: Format, Domains and Study Plan

Table of Contents

• • What Is the CCAS Exam Format?
• • How Are the Three CCAS Domains Weighted?
• • What Does Each CCAS Domain Test?
• • How Should You Use the 180 Official CCAS Flashcards?
• • A Six-Week CCAS Study Plan
• • What Are the Most Common CCAS Exam Traps?

Quick answer: The ACAMS CCAS exam contains 100 multiple-choice and multiple-response questions, allows 175 minutes, and uses a passing score of 75. Its three domains are weighted 30%, 35% and 35%.

The ACAMS Certified Cryptoasset Anti-Financial Crime Specialist (CCAS) exam tests whether you can connect blockchain technology with practical AML controls. Memorising the names of wallets, exchanges or analytics tools is not enough. Strong answers distinguish a technical feature from a risk indicator, assess the available evidence and choose a proportionate control or escalation.

This guide uses the supplied official CCAS study guide, factsheet and 180-card flashcard deck, together with the current ACAMS CCAS certification page. Check ACAMS directly for current eligibility, booking and delivery policies.

What Is the CCAS Exam Format?

Item	Official detail
Questions	100
Question types	Multiple choice and multiple response
Duration	175 minutes
Passing score	75
Guessing penalty	None
Unscored items	Some unidentified questions may be unscored

The time allowance averages 105 seconds per question. Use that as a pacing guide, not a rigid limit. Direct definitions should take less time, leaving room for scenarios that combine customer risk, wallet attribution, transaction paths and jurisdiction-specific duties.

Because there is no penalty for guessing, answer every item. Remove options that treat a red flag as proof, confuse an analytics score with a final decision, or assign an action to the wrong control owner. Then select the response that best preserves the evidence, escalation path and applicable rule.

How Are the Three CCAS Domains Weighted?

Domain	Weight	Questions in a 100-question practice paper
Cryptoasset and Blockchain	30%	30
AML Foundations for Cryptoasset and Blockchain	35%	35
Risk Management Programs for Cryptoasset and Blockchain	35%	35

The study guide contains 12 teaching modules: four inside each domain. That structure explains why a course can have 12 summaries while the exam blueprint still has three weighted rows. Keep the two maps separate. Modules organize learning; domains allocate exam attention.

Start with the published weighting, then adapt after timed practice. If analytics or investigations repeatedly cause errors, those topics may need more revision even when their parent domain already receives its planned share.

What Does Each CCAS Domain Test?

Cryptoasset and Blockchain covers blocks, hashes, consensus, mining, cryptoasset types, VASPs, exchanges, DeFi, wallets, transactions, smart contracts and analytics. The recurring distinction is between what the technology does and what can be concluded from it. A public ledger supports tracing, but an address does not identify a person without reliable attribution.

AML Foundations for Cryptoasset and Blockchain applies familiar financial-crime concepts to the crypto sector. It includes money laundering, terrorist financing, sanctions, fraud, bribery, tax evasion, cybercrime, customer and product risk, KYC, monitoring, research and suspicious-activity reporting. A red flag prompts review; it does not prove an offence.

Risk Management Programs for Cryptoasset and Blockchain moves from individual indicators to program design. It covers FATF standards, the Travel Rule, jurisdiction-specific requirements, risk appetite, third-party tools, VASP assessment, source of funds and wealth, blockchain monitoring, investigations, external requests and SAR or STR narratives.

How Should You Use the 180 Official CCAS Flashcards?

The supplied official deck contains 60 cards for each domain, numbered from 1-1 through 3-60. The course preserves every card and does not append generated material to the official set.

Use each card in three passes:

1. Answer before revealing the back.
2. Explain the closest competing concept—for example, hosted versus unhosted wallet or pseudonymity versus anonymity.
3. Apply the answer to a short control scenario.

Tag misses by cause. Useful labels include definition gap, custody confusion, wrong risk category, red-flag-as-proof, source-of-funds error, weak attribution and incorrect escalation. This turns 180 isolated prompts into a targeted repair list.

Flashcards build recall, but fresh scenarios test transfer. You should still practise questions that combine several facts: a customer’s expected activity, a VASP’s controls, indirect mixer exposure, a blockchain analytics score and the organization’s risk appetite.

A Six-Week CCAS Study Plan

Week	Focus	Evidence of progress
1	Baseline mock; blockchain, consensus and cryptoasset types	Technology terms explained without mixing asset and ledger
2	VASPs, wallets, transactions, smart contracts and analytics	Custody and attribution decisions supported by evidence
3	Financial-crime typologies and cryptoasset red flags	Indicators separated from proof and offence conclusions
4	Risk categories, KYC, monitoring, research and reporting	Customer cases documented from profile to escalation
5	Regulation, Travel Rule, risk programs and investigations	Jurisdiction, control owner and legal gateway identified
6	Three timed mocks and targeted repair	Stable scores above target within 175 minutes

After each mock, locate the relevant module, restate the rule from memory and explain why the nearest distractor fails. Re-reading may improve familiarity without fixing the reasoning error that produced the wrong answer.

What Are the Most Common CCAS Exam Traps?

• Cryptoasset versus blockchain: the asset and the infrastructure are related but not interchangeable.
• Wallet versus storage location: a wallet manages keys; the asset remains represented on the blockchain.
• Pseudonymity versus anonymity: pseudonymous activity can still be traced and attributed.
• Analytics score versus decision: a score needs context, distance, value, timing and confidence review.
• Red flag versus proof: unusual behavior requires validation and corroboration.
• KYC versus monitoring: KYC establishes expected behavior; monitoring tests actual activity against it.
• Source of funds versus source of wealth: one explains assets used for a transaction or relationship; the other explains accumulated wealth.
• High risk versus prohibited: elevated risk may require stronger controls, while a prohibition depends on applicable law.
• SAR filing versus exit: reporting does not automatically dictate account closure.

Before exam day, confirm that you can state the three domain weights, distinguish the major blockchain and wallet models, explain VASP and DeFi risk, classify financial-crime indicators, assess inherent and residual risk, interpret analytics cautiously, and follow an investigation from alert to documented reporting decision.

CCAS preparation works best when technical knowledge and AFC judgment develop together. Use the official flashcards for recall, the 12 modules for understanding and timed 30/35/35 mocks to practise decisions under the real time limit.