During the 9/11 terrorist financing pattern, withdrawals often occurred immediately after which activity?

• A. After funding by cash and overseas wire transfers
• B. After establishing permanent addresses
• C. After the credit activity
• D. After the account is opened

Answer: (C)

The pattern hinges on rapid movement of funds: withdrawals tend to occur right after money is credited to the account. When deposits or credits—from cash, checks, or wire transfers—show up, the funds are quickly withdrawn to move them on to other locations or uses. This timing minimizes the money staying in one place, making it harder for monitoring systems to spot and for investigators to trace, which is exactly what attackers aim for in terrorist financing. The other events—establishing addresses or simply opening an account—are setup steps and don’t capture the timing signal that immediate withdrawals after credit activity provide.