CasePilot puts you in the analyst's chair. You read a suspicious-activity alert, flag the evidence that matters, decide what the activity is, and choose how to handle it — then get a graded debrief explaining the call.
Completely free to play, forever. Built by a compliance practitioner for anyone learning the craft — career changers, new analysts, and teams sharpening their instincts. No account, no card, no catch.
Each visit draws a new random set of 20 cases from the full library, so the flow is different every time you come back — there’s always a fresh caseload waiting.
Each case lays out the facts on index cards. Pin the ones a real investigator would cite as red flags.
Structuring? Account takeover? A sanctions evasion route? Decide what the activity most likely is.
Close it, request more information, file a report, or block and escalate — then read the debrief.
From a customer structuring cash deposits to a tanker going dark near a transfer zone, every case is a composite of patterns that turn up on real desks. You get a fresh random 20 each visit, drawn from all 300 — so returning always brings new cases. Two modes: Training at your own pace, or Challenge against a 90-second clock.
Close three cases in a level to open the next difficulty, and climb from Trainee to Head of Financial Crime. Your service record — accuracy, grades and rank — builds automatically.
The game is free and always will be. If you want to go deeper, CasePilot's maker — ClearPath Advisory, a compliance training and consultancy practice — offers full-length paid courses that cover the reasoning behind every case type in depth. The first, AML & Sanctions Compliance Foundations, is live now, with intermediate and advanced courses following.
Pick any open case below to start. Close three cases in a level to open the next difficulty.
Each case hands you an alert. You review the evidence, decide what the activity most likely is, and choose how the case should be handled. Here is the desk procedure.
Every docket carries the alert reason, the potential exposure, and the subject. Beginner cases open first; closing three in a level opens the next difficulty. An alert is a signal that something may need review — it is a question, never an accusation.
The evidence sits on index cards. Tap Flag on every item you would cite as a red flag, then lock in your evidence. Correct flags earn 10 points each; flagging normal activity costs 5. What you leave unflagged matters as much as what you pin.
Name the typology — what this activity most likely is. Structuring or smurfing, takeover or first-party abuse, transshipment or a false positive. One correct answer, worth 20 points.
Four stamps sit on the desk. No issue found — the alert was explained with evidence. Request information — the picture is incomplete; get documents before deciding. File a report — the suspicion threshold is met. Block & escalate — live risk that has to stop now. Worth 20 points.
A hint tells you how many red flags the case holds. Each one costs 10 points from the case score. In real work, asking a senior colleague costs you nothing but pride — here it is priced in.
Every case closes with a stamped grade, a score breakdown, and an investigator debrief — the way I would explain the case to a junior on my team. The debrief is where the learning lives; the grade is just the receipt.
Training has no clock. Challenge gives you 90 seconds per case and banks 1.5× points. Same cases, different pressure — and pressure is where real desks make their mistakes.
The library holds 300 cases, but each visit deals you a random 20 with a spread of difficulties across the six disciplines. Return tomorrow and the caseload is different — the flow never repeats the same way twice. Hit "Draw a new set" on the register to reshuffle any time. Your lifetime progress across all 300 is tracked separately on your Service Record, so nothing you close is ever lost.
Ten points per correct flag (−5 for false flags, never below zero for the step), 20 for the typology, 20 for the disposition, −10 per hint. Grades: A at 90%+, B at 75%, C at 60%, D at 40%, F below. Your best result per case is what the register records.
Structuring, shells, mules, layering and integration — hiding where money came from.
Screening matches, ownership rules, dark shipping and evasion routes. The least room for error.
Alert triage and pattern reading — profile mismatches, funnels, and dispositions that survive review.
Mixers, peel chains, chain-hopping, nested services, and proximity to illicit clusters on-chain.
Scams, account takeover, synthetic identities and internal fraud — the human patterns behind stolen money.
Small sums with big consequences, plus the procurement networks behind weapons programmes.
In most regimes the legal test for filing is suspicion, not proof. Reports go to the national financial intelligence unit — FinCEN in the US — within set deadlines from detection, and continuing activity is reviewed on a cycle. Real programmes follow their institution\u2019s policy and applicable regulations; this desk teaches the common concepts.
On 06/28/2026, customer Jane D., a retired customer in Georgia, sent $2,400 by wire to a new recipient after receiving an emergency call. The recipient withdrew the funds at once. The activity came from the customer\u2019s usual device, but call notes show pressure, secrecy, and an imposter script — supporting suspected elder financial exploitation.
Suspicious Activity (or Transaction) Report, filed with the financial intelligence unit when activity meets reporting rules.
The government office receiving those reports. FinCEN is the US example.
The kind or pattern of financial crime — structuring, romance scam, wire stripping, peel chain.
Splitting transactions to stay below a reporting threshold.
Politically exposed person — elevated corruption risk by position. A risk factor, not an accusation.
Enhanced due diligence — deeper, independently corroborated checks for higher-risk relationships.
Items with civilian and military applications, controlled under export licensing.
A service that pools and redistributes crypto to break the source-destination link.
Payment rails: batch clearing, bank-to-bank (faster, harder to recover), and person-to-person apps.
Ship-to-ship cargo transfer at sea — routine in logistics, notorious in sanctions evasion when done dark.