Spear phishing is a targeted form of phishing scam in which cybercriminals send highly convincing emails to specific individuals within an organization. The emails often contain personal information or details that make them seem legitimate and trustworthy. The goal of spear phishing is to trick the recipients into clicking a malicious link or downloading an infected attachment, or to reveal confidential information or money to the attackers. In this case, the customers of the telecommunications firm received an email that pretended to be from the company, but was actually a fake. The email directed them to a spoofed website that asked for their personal information, which could be used for identity theft or fraud. This is a clear example of a spear phishing attack.
References:
What is Spear Phishing? Definition and Prevention | Fortinet
What is spear phishing? Examples, tactics, and techniques | CSO Online
Spear phishing - OxfordDictionaries

The most appropriate step for an AML compliance officer to take upon receiving notice of government update including the names of the latest terrorists sanctioned by the United Nations Security Council is to update the monitoring software containing sanctioned persons. This is because the AML compliance officer is responsible for ensuring that the financial institution does not engage in any transactions or business relationships with individuals or entities that are subject to sanctions, as this could expose the institution to legal, regulatory, and reputational risks. By updating the monitoring software, the AML compliance officer can ensure that the institution's screening and filtering systems are up to date and can flag any potential matches or hits with the sanctioned persons. This would also enable the AML compliance officer to take appropriate actions, such as blocking or freezing funds, reporting to the relevant authorities, and conducting further due diligence, if necessary.
:
Anti-Money Laundering (AML) | FINRA.org, Overview.
AML Compliance Officer and Their Responsibilities - Tookitaki, Role and Responsibilities of an AML Compliance Officer.
What is an AML Compliance Officer? - Sanction Scanner, Communicate openly with the company's internal management team.
Guidance on Existing AML Program Rule Compliance ... - FinCEN.gov, Financial Institutions Toll-Free Hotline.

this activity is unusual and inconsistent with the expected behavior of an accounting firm's operational account. The account should normally receive fees from clients that are proportional to the services rendered and reflect the market rates. Receiving international payments that are substantially higher than other fees could indicate that the account is being used to launder money or finance terrorism by disguising illicit funds as legitimate income. This could trigger a red flag for the bank and prompt a comprehensive review of the account.
:
ACAMS Study Guide 6th Edition, Chapter 1, Section 1.6, page 24: "Methods to launder money used in banks and other deposit taking institutions".
ExamTopics, Question 446: "An accounting firm opened an account at a bank that is intended to be used as the operational account for the business. After a few months, a comprehensive review of the account was triggered due to unusual activity on the account. Which most likely triggered the review?"

According to the Basel Committee guidelines, banks should formulate a customer acceptance policy and a tiered customer identification programme that involves more extensive due diligence for higher risk customers12. The customer acceptance policy should be approved by senior management and include clear guidelines on the types of customers that are likely to pose a higher than average risk to the bank1. Senior management should also ensure that the bank has adequate resources and systems to effectively manage the risks associated with higher risk customers1. Therefore, senior management should determine whether or not to enter business relationships with higher risk customers, based on the bank's risk appetite, policies, and procedures.
References:
CAMS Study Guide (the 6th edition), page 1843
Customer due diligence for banks - Bank for International Settlements1
The Basel Committee: The Important Set Of International Banking Regulations2

A: Geographic risks should be used to identify the priority of the Fl in this scenario. According to the CAMS Manual (6th Edition), "Geographic risk refers to the possibility that the location of a customer, transaction, or product may increase the likelihood of money laundering or terrorist financing because of weak or nonexistent AML/CFT controls" (p. 59). In this scenario, the expansion to an area of the world with weak AML laws would increase the Fl's geographic risk.
Reference: Certified Anti-Money Laundering Specialist (the 6th edition), Section 3.2.3 Geographic Risks, p.
59.