100+ Free CCAS Practice Questions

Pass your ACAMS Certified Cryptoasset Anti-Financial Crime Specialist (CCAS) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

Not published Pass Rate

100+ Questions

100% Free

1 / 10

Question 1

Score: 0/0

What does 'pseudonymous' mean in the context of public blockchains like Bitcoin and Ethereum?

Fully anonymous — no link to real-world identity can ever be made

Transactions and addresses are visible publicly; identity is not directly attached but can be linked via off-chain data (KYC, analytics)

All users use real names

Addresses are encrypted and invisible

to track

2026 Statistics

Key Facts: CCAS Exam

Exam Questions

ACAMS (approximate)

75%

Passing Score

ACAMS

3 hours

Exam Duration

ACAMS

$895

Exam Fee

ACAMS (approximate)

3 years

Validity

ACAMS (CE required)

3 certs + exam

Prerequisites

ACAMS crypto certificate path

CCAS is an ACAMS specialist-level credential for crypto AFC professionals. The exam has approximately 90 questions over 3 hours with a 75% passing score and a fee of approximately $895. Candidates must complete three ACAMS crypto certificates and maintain active ACAMS membership. The credential is valid for 3 years and requires continuing education credits to recertify. Pearson VUE delivery (test center or online proctored). Verify exact specs on acams.org — ACAMS does not publish all details publicly.

Sample CCAS Practice Questions

Try these sample questions to test your CCAS exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1What does 'pseudonymous' mean in the context of public blockchains like Bitcoin and Ethereum?

A.Fully anonymous — no link to real-world identity can ever be made

B.Transactions and addresses are visible publicly; identity is not directly attached but can be linked via off-chain data (KYC, analytics)

C.All users use real names

D.Addresses are encrypted and invisible

Explanation: Public blockchains are pseudonymous: the ledger is transparent (addresses, amounts, timestamps), but the natural-person identity behind an address is not directly on chain. Attribution requires off-chain data (exchange KYC, subpoenas, analytics heuristics). Privacy coins differ — they obscure the on-chain data itself.

2Which consensus mechanism is used by Bitcoin?

A.Proof of Stake (PoS)

B.Proof of Work (PoW)

C.Proof of Authority (PoA)

D.Delegated Proof of Stake (DPoS)

Explanation: Bitcoin uses Proof of Work — miners expend computational effort to solve hash puzzles; the first to solve proposes a block and earns rewards. PoW has AML implications (miner-related flows, mining pool attribution). Ethereum migrated from PoW to PoS in 2022 (The Merge).

3The UTXO model (used by Bitcoin) differs from the account model (used by Ethereum) in that:

A.UTXO has no transactions

B.UTXO tracks unspent outputs that must be fully consumed, while the account model updates balances directly

C.They are identical

D.Account model has no addresses

Explanation: UTXO (Unspent Transaction Output) — each transaction consumes UTXOs and creates new ones. Account model — addresses have balances updated directly. UTXO enables complex coin-flow tracing (inputs/outputs per transaction); account model requires tracking state changes per block.

4FATF Recommendation 15 requires:

A.Banning cryptocurrencies

B.Applying AML/CFT obligations to Virtual Asset Service Providers (VASPs), including licensing/registration and supervision

C.Exempting crypto from sanctions

D.Mandating 1-coin minimum balance

Explanation: FATF R.15 (updated 2018-2019) extended AML/CFT to virtual assets and VASPs — requiring licensing/registration, AML program, CDD, record-keeping, SAR/STR filing, and supervision. The EU's MiCA and national implementations (e.g., FinCEN CVC guidance, NYDFS BitLicense) operationalize it.

5The FATF 'Travel Rule' for crypto (R.16) generally requires:

A.Travel agents to file SARs

B.Originator and beneficiary information (name, wallet address, account ID) to travel with crypto transfers between VASPs above set thresholds

C.All transfers to stop

D.Free global wires

Explanation: FATF R.16 (Travel Rule) requires VASPs to transmit originator/beneficiary info with transfers (generally $/€1,000+ threshold). EU's Transfer of Funds Regulation applies it without threshold to crypto; U.S. FinCEN's proposed lower $3,000 CVC threshold was a contested proposal. Implementations use protocols like TRISA, OpenVASP, TRP.

6A 'stablecoin' is:

A.A coin physically held in a safe

B.A digital asset designed to maintain a stable value (typically pegged to a fiat currency like USD), often backed by reserves or algorithmic mechanisms

C.A coin with no value

D.A DAO governance token

Explanation: Stablecoins (USDT, USDC, DAI, PYUSD) peg to fiat or other assets. Fiat-backed (USDT, USDC), crypto-backed (DAI), and algorithmic (formerly UST/Terra — which collapsed in 2022). AML concerns: reserve adequacy, BO of issuers, use in sanctions evasion, freeze capabilities.

7The Terra/Luna collapse in May 2022 was caused by:

A.A single password leak

B.The algorithmic UST stablecoin losing its peg, triggering a death spiral that destroyed ~$60B in value

C.A hacker stealing private keys

D.A sudden Bitcoin rally

Explanation: UST was an algorithmic stablecoin relying on burn/mint arbitrage with LUNA. A large UST redemption triggered a death spiral: falling UST price required more LUNA minting, collapsing LUNA. The event wiped ~$60B and led to criminal charges against Do Kwon and increased regulatory focus on stablecoin reserves.

8A 'privacy coin' example is:

A.Bitcoin (BTC)

B.Monero (XMR)

C.Ethereum (ETH)

D.USDT

Explanation: Monero uses ring signatures, stealth addresses, and RingCT to obscure sender, receiver, and amount. Zcash offers optional shielded transactions via zk-SNARKs. Dash has (weaker) CoinJoin-based PrivateSend. Many regulated exchanges delist privacy coins due to AML concerns.

9Tornado Cash was OFAC-designated in:

A.August 2022 (reversed/altered by U.S. court in 2024; partial delisting in 2025)

B.Never

C.October 2020

D.January 2018

Explanation: OFAC designated Tornado Cash smart contracts in August 2022, citing laundering of ransomware and North Korea Lazarus proceeds. The Van Loon v. Treasury (5th Cir. 2024) ruling found immutable smart contracts were not 'property' under IEEPA; OFAC removed the designation in 2025 but individual sanctions remain. AML focus on mixers continues.

10A cross-chain 'bridge' in crypto is used to:

A.Physically connect servers

B.Transfer tokens between different blockchains (e.g., ETH to Solana) via locking/minting or burning/minting

C.Replace exchanges

D.Issue passports

Explanation: Bridges move tokens between chains. Lock-and-mint: original token locked on source chain; wrapped version minted on destination. High-profile bridge exploits: Ronin ($625M, March 2022, DPRK Lazarus), Wormhole ($326M, Feb 2022), Nomad ($190M, August 2022). Bridges are prime laundering vectors.

About the CCAS Exam

The CCAS certification is ACAMS' specialist credential for crypto AFC professionals. It validates competency in blockchain fundamentals, crypto asset types, AML risks specific to virtual assets, regulatory frameworks (FATF, MiCA, FinCEN CVC guidance, NYDFS BitLicense, OFAC crypto sanctions), blockchain analytics tools, and crypto typologies (ransomware, darknet, mixers, pig butchering, rug pulls, exchange hacks). The program is structured as three ACAMS crypto certificates (AML Foundations for Cryptoasset and Blockchain; Cryptoasset and Blockchain; Risk Management Programs for Cryptoasset and Blockchain) plus the proctored CCAS exam.

Questions

90 scored questions

Time Limit

3 hours

Passing Score

75%

Exam Fee

$895 (ACAMS / Pearson VUE)