Regulatory examination and audit authority background
For Regulators & Auditors

For Auditors &
Examiners

A technical guide for FinCEN examiners, state regulators, internal auditors, and compliance reviewers on how to use NAMLC verification during examinations.

Technical Overview

What Examiners Should Know About NAMLC

NAMLC is an independent certification authority, not a training provider. Understanding this distinction is essential to evaluating NAMLC-verified certificates correctly during an examination.

Independent Verification

NAMLC is an independent certification authority, structurally separate from the training providers whose programs it certifies. This eliminates the conflict of interest inherent in self-issued certificates.

Public Registry Access

All issued certifications are recorded in a secure, publicly accessible registry at namlc.com. No credentials, login, or prior relationship with NAMLC are required to verify a certificate.

Immutable Records

Once recorded, certification data cannot be altered retroactively. The registry maintains a permanent, tamper-resistant audit trail of every issued and verified certificate.

Regulatory Alignment

NAMLC certification standards are grounded in FinCEN guidance, the Bank Secrecy Act, and risk-based training principles. Certified programs must demonstrate alignment with current regulatory expectations.

Workflow

How to Verify During an Examination

Follow this five-step workflow to independently verify NAMLC certificates as part of your examination or audit process. Each step includes a practical tip for examiner efficiency.

01

Request Certificate ID

Ask the regulated entity to provide the NAMLC Certificate ID for each AML/BSA training certificate they present. The ID is a unique alphanumeric code printed on every NAMLC-issued certificate.

Examiner Tip: If the entity cannot provide a Certificate ID, the certificate may not be NAMLC-verified.
02

Access namlc.com/verify-certificate

Navigate directly to the verification page. No account creation, API key, or special access is required. The system is open to the public, including regulators, auditors, and examiners.

Examiner Tip: Bookmark this URL for repeated use during examinations.
03

Enter the Certificate ID

Input the Certificate ID exactly as provided. The system accepts the ID in the format printed on the certificate. Verification is instantaneous for valid certificates.

Examiner Tip: IDs are case-sensitive. Copy directly from the certificate to avoid transcription errors.
04

Review Verification Output

The system returns: certificate holder full name, training program title, completion date, certification status (valid / expired / revoked), and issuing training provider.

Examiner Tip: Compare the returned name against the employee record to confirm identity match.
05

Document the Result

Save or screenshot the verification result page. The output includes a timestamp and the namlc.com URL, providing a defensible, third-party record for your examination file.

Examiner Tip: This record is stronger evidence than a PDF certificate alone.
Certificate Anatomy

What a Valid NAMLC Certificate Contains

Every NAMLC-issued certificate includes six standardized data fields. Here is what each field means and what examiners should confirm.

Certificate Holder Name

Full legal name of the individual who completed the training program.

Verify against employee records and government-issued identification.

Training Program Title

The specific AML/BSA training program completed, as certified by NAMLC.

Confirm the program title aligns with the entity's stated training curriculum.

Completion Date

The date on which the individual successfully completed all training requirements.

Check that completion falls within the required training period (e.g., annual cycle).

Certificate ID

A unique, non-sequential identifier assigned to each certification record.

This is the primary key for verification. Every legitimate NAMLC certificate has one.

Validity Status

Current status: Valid, Expired, or Revoked. Most certifications carry a defined validity period.

An expired certificate does not satisfy ongoing training requirements unless renewed.

Issuing Provider

The authorized training provider whose program was certified (e.g., Soflo Consulting).

NAMLC certifies the program; the provider delivers the training. Both are documented.
Risk Indicators

Red Flags to Watch For

During examinations, these indicators suggest that a presented certificate may be invalid, fraudulent, or insufficient for compliance documentation.

No Certificate ID Present

Any certificate lacking a NAMLC Certificate ID cannot be verified through the NAMLC system. This may indicate a non-certified or self-issued document.

Recommended Action: Request the Certificate ID. If none exists, treat the certificate as unverifiable.

Verification Returns "Not Found"

The Certificate ID does not exist in the NAMLC registry. This may indicate a fraudulent certificate, a typo, or a certificate from a non-NAMLC provider.

Recommended Action: Double-check the ID for transcription errors. If still not found, the certificate is not NAMLC-verified.

Name Mismatch

The name returned by the verification system does not match the employee or individual presenting the certificate.

Recommended Action: Investigate whether the certificate was transferred, shared, or fraudulently presented.

Expired Status

The certificate has passed its validity period. NAMLC certifications are time-bound to reflect the expectation of periodic refresher training.

Recommended Action: Confirm whether the entity has required the individual to complete updated training.

Revoked Status

The certification has been administratively revoked by NAMLC, typically due to program decertification, fraud discovery, or standards non-compliance.

Recommended Action: Treat as invalid. Contact NAMLC examiner support if context is needed.
Evidence Standards

What Constitutes Acceptable Evidence

Not all training documentation carries the same weight. Here is how to distinguish acceptable evidence from insufficient documentation during your review.

Acceptable Evidence

  • NAMLC verification result page (screenshot or printout) with visible timestamp
  • NAMLC certificate PDF accompanied by a live verification record
  • Direct registry query result showing Valid status for the Certificate ID

Insufficient Evidence

  • Training provider-issued certificate without independent NAMLC verification
  • Certificate ID that returns "Not Found" in the NAMLC registry
  • Expired or Revoked certificate presented without evidence of renewal
  • Certificate with name mismatch against employee records
Regulatory Framework

How NAMLC Maps to Regulatory Expectations

NAMLC certification and verification are designed to satisfy the training documentation requirements that examiners evaluate under FinCEN guidance, the BSA Examination Manual, and state-level regulations.

FinCEN Guidance
Regulatory Requirement

AML programs must include ongoing, role-appropriate training for appropriate personnel.

NAMLC Alignment

NAMLC certifies that training programs cover FinCEN-aligned content and that completion is independently verified.

BSA Examination Manual
Regulatory Requirement

Examiners should assess whether training is documented, current, and appropriate to the entity's risk profile.

NAMLC Alignment

NAMLC verification records provide documented, dated, and role-specific proof of training completion.

State MSB Regulations
Regulatory Requirement

Many states require proof of AML training for licensed money services businesses.

NAMLC Alignment

NAMLC certificates are accepted by multiple state regulators as evidence of compliant training.

Risk-Based Approach
Regulatory Requirement

Training depth and frequency should be proportional to the entity's money laundering risk exposure.

NAMLC Alignment

NAMLC-endorsed programs are evaluated for industry-specific and role-appropriate content alignment.

Examiner Support

NAMLC provides direct support for regulators, state examiners, and internal auditors who need assistance with certificate verification, registry access, or questions about certification standards during an active examination.

examiner.support@namlc.comResponse within 24 hours during business days

For general verification, use the public verification tool at namlc.com/verify-certificate. Examiner support is reserved for complex cases, bulk verification requests, and regulatory inquiries.

Start Verifying Certificates

Use the public verification tool to confirm any NAMLC-issued certificate instantly.