Compliance interview prep.

What interviewers look for

• Does the candidate frame compliance as a risk-based programme, design, surveil, investigate, escalate, document, not as 'I know the rule'?
• Can they walk a BSA / AML or sanctions scenario front-to-back. KYC + screening + monitoring + investigation + SAR / STOR / OFAC report, with escalation pathways named?
• Do they understand the consumer-protection perimeter (UDAAP + Reg E + Reg Z + Consumer Duty) as DECISIONS on marketing + disclosure + fees + dispute timelines, not just rule recital?
• Are they fluent on the sponsor-bank + scheme + PCI posture, the BIN sponsorship lifecycle, scheme monitoring tiers, PCI-DSS scope, programme + audit cadence?
• Can they think about licensing + the state MTL + EMI / API authorisation lifecycle, perimeter creep, new-product expansion, regulator engagement, not just box-tick?
• Do they have an evidence + documentation instinct, every decision logged, every exception tracked, every regulator / sponsor / scheme touchpoint predictable + on the record?

Behavioural questions to expect

1. Walk me through your CV.

   What it tests: Story coherence + deliberate compliance trajectory in payments / fintech. Teams want evidence of progressive regulatory scope (a rule -> a programme -> a regulator / sponsor relationship) and quantified outcomes (exam findings closed, SAR throughput, programme builds), not 'I worked on compliance projects'.

2. Tell me about a compliance review, control gap, or regulatory response you owned end-to-end.

   What it tests: Ownership + judgment + documentation discipline. Tests whether the candidate frames a real issue with a specific risk, a structured investigation, an escalation decision, and a documented remediation, not 'I reviewed transaction-monitoring alerts'.

3. Tell me about a weakness, a failure, or feedback you've received and worked on.

   What it tests: Self-awareness + judgment discipline. Cross-role canonical. Fake weaknesses downgrade immediately. In payments compliance, the costly failure is escalating too late, being too quick to clear, over-relying on a vendor score, or being inflexible against the business when a risk-based call was needed, honesty about a real pattern matters.

4. Why payments + fintech compliance, why not bank compliance, asset-management compliance, legal, or the front office?

   What it tests: Authentic fit for the payments compliance seat: real-time perimeter (BSA + AML + sanctions + UDAAP + scheme + PCI + sponsor-bank), product-launch cadence, regulator + sponsor + scheme triangle. Tests whether the candidate is drawn to the constraints specifically, not just 'I want a compliance job at a hot fintech'.

5. BSA / AML + sanctions, consumer-protection, licensing + state MTL, scheme + PCI, or sponsor-bank oversight, which seat appeals, and why?

   What it tests: Genuine fit + grasp of how payments-compliance sub-functions differ. Tests whether the candidate has a reasoned preference rather than 'wherever you put me'.

6. Why this firm?

   What it tests: Whether the candidate has done the homework. Bar: firm-specific evidence from the product, segment, regulatory perimeter, sponsor-bank posture, scheme standing, and people, not generic 'great fintech'.

7. How would you describe this firm's compliance programme + regulatory perimeter in your own words?

   What it tests: Whether the candidate has internalised HOW the firm runs compliance, perimeter shape, sub-function org, sponsor-bank + scheme posture, programme cadence, not just that it 'has compliance people'. Tests whether they've read the licensing footprint, public enforcement, scheme placements, recent talks, and can speak to specifics.

8. What recent regulatory programme or change has touched this firm, and how would you have approached it?

   What it tests: Whether the candidate follows the payments + fintech regulatory agenda. CFPB 1033 open-banking rule, FedNow risk, EU DORA + MiCA + PSD3 / PSR, UK Consumer Duty + APP-fraud reimbursement, AI Act on algorithmic decisioning, and can frame the operational implications for a payments firm.

Technical concepts to master

Practical drills

• this firm is launching a new cross-border remittance corridor from the US to a higher-risk geography in 90 days. Volumes projected at $20m / month, average ticket $400, consumer + small-business mix. Walk me through the BSA / AML + sanctions programme you'd build pre-launch.
• A real-time screen flags a $480k cross-border payment to a high-risk corridor as a potential OFAC SDN match, a 50% partial-name hit on the beneficiary. The merchant is escalating commercial urgency (cargo on the dock). Walk me through how you handle it.
• The marketing team submits a new BNPL landing page. Headline: '0% APR, no fees, ever.' Product: 4-payment Pay-in-4 plan (no interest, $7 late fee after 10-day grace); a longer-tenor 12-month plan at 19.99% APR + $30 origination fee on a $1,000 purchase. Walk through the review + run the numbers.

Smart-question anchors

• Sub-function + scope, which compliance sub-function the role would own + the perimeter + escalation pathways
• Programme + sponsor-bank cadence, review pack rhythm, finding closure, sponsor-relationship posture
• Regulatory agenda. CFPB 1033, Consumer Duty, DORA, MiCA, PSD3 / PSR, AI Act exposure
• Sanctions + financial-crime stack. KYC / IDV / screening / monitoring vendors, alert + investigator productivity
• Licensing footprint. MSB + MTL + EMI + API + CASP perimeter + change-in-product expansion plans

Related roles

• Engineering IC
• Product Management
• Risk Management

Sourced from

• FinCEN. BSA + MSB guidance + SAR + CTR framework
• OFAC. US sanctions framework + enforcement guidance
• CFPB. UDAAP, Reg E, Reg Z, prepaid + larger-participant rules
• FCA Handbook + Payment Services Regulations + Consumer Duty (PS22/9)
• EBA + PSD2 + 6AMLD + MiCA. EU regulatory framework
• PCI Security Standards Council + scheme rule frameworks
• ACAMS + ACFE + InterviewPrep, financial-crime interview canon