CFE-Fraud-Investigations-and-Legal-Issues Certified Fraud Examiner (CFE) - Fraud Investigations and Legal Issues Question and Answers

Under the ACFE Fraud Examiners Manual, Law Section, specifically in The Law Related to Fraud and International Initiatives Against Fraud and Corruption , the OECD Recommendation on Combating Bribery of Foreign Public Officials in International Business Transactions emphasizes strengthening the legal infrastructure of member states.

The Recommendation calls on countries to adopt and enforce effective criminal laws that prohibit the bribery of foreign public officials. It also encourages the enhancement of civil, commercial, and administrative frameworks to support enforcement. This includes corporate liability provisions, adequate sanctions, proper accounting and auditing standards, whistleblower protections, and mechanisms for international cooperation. The goal is to ensure that bribery is clearly defined as a criminal offense and that enforcement mechanisms are robust, coordinated, and effective.

The focus is not on data protection, e-commerce regulations, or general public health and safety laws. Instead, it centers on harmonizing and strengthening anti-bribery statutes and related legal systems to ensure transparency, accountability, and deterrence in international business transactions.

Therefore, the primary area member states are encouraged to improve is their criminal, civil, commercial, and administrative laws, making option B the correct answer.

In civil law jurisdictions, the duty to take affirmative steps to preserve evidence is generally narrower than in common law jurisdictions. The Fraud Examiners Manual explains that civil law systems often rely on the court to determine what evidence must be preserved and produced. This differs from common law systems, where the preservation duty commonly arises when litigation is reasonably anticipated. Here, because the question specifically states that XYZ Company operates in a civil law jurisdiction, the company’s duty would begin when trial proceedings commence and the court instructs the parties to retain items. The earlier events might be relevant facts, but they do not automatically trigger the civil law preservation duty described in the CFE materials.

“Deleted files are recoverable until they are overwritten because data is not erased until it is overwritten… Deleted files that have been overwritten generally are not recoverable”.

Other data such as time/date stamps, websites, or chats can often be retrieved.

The Fraud Examiners Manual specifies:

“Fraud examinations should proceed from the general to the specific. That is, they should begin with general information that is known and then move to more specific details.”

Therefore, statement B is false, making it the correct answer.

Whistleblower antiretaliation laws generally protect employees from adverse action because they made a protected disclosure. Therefore, Ted’s employer should not terminate him merely for reporting fraud to the contracting government agency. However, whistleblower protection does not give an employee immunity for independent misconduct. The investigation revealed that Ted threatened violence against employees accused of fraud because they failed to include him in the scheme. Those threats are separate misconduct and can justify discipline or termination if handled consistently with law and company policy. Option B is wrong because firing him for protected reporting could be retaliatory. Option C is too broad because whistleblowers can still be disciplined for legitimate, nonretaliatory reasons. Option D reverses the correct rule. Therefore, option A is most accurate.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about BEST.

The correct answer is B: Carnages.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Admission-seeking questions are used when the examiner has a reasonable basis to believe the subject committed the act and wants to obtain a legal admission of wrongdoing. The most effective question is one that assumes the conduct occurred and encourages the subject to explain it, rather than merely deny it. Option D is strongest because it directly focuses on Harsha’s conduct and is phrased as though the personal purchases have already been established. Options A and C are informational questions, not admission-seeking questions. Option B is a closed yes-or-no question and uses accusatory wording that can encourage a denial. In admission-seeking interviews, the examiner should use disciplined phrasing designed to move the subject toward explanation and admission.

The 2014 International Fraud Examiners Manual and CFE Prep - Investigations explicitly state:

“Like some printers, copiers and other multifunction machines might have internal storage devices that store relevant data. In fact, almost every copier built since 2002 has a hard drive that stores images of documents the machines have copied, scanned, or emailed. Some copiers store user access records and a history of copies made. … when seizing a computer for forensic analysis, it is generally necessary to seize any copiers and scanners connected to it.”

Thus, the correct answer is C.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, the question asks about the core concepts in this area.

The correct answer is A: Yes, the evil action can be filed if the jurisdiction permits parallel proceedings..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about the core concepts in this area.

The correct answer is A: An importer and an exporter conspire to conceal illicit funds by creating invoices that understate the quantity of goods shipped internationally.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes. Money laundering typically involves three stages: placement (introducing illegal funds into the financial system), layering (creating complex transactions to hide the source), and integration (returning the funds to the launderer in an apparently legitimate form).

 “Before commencing a formal investigation (and especially before starting the evidence collection process), it might be necessary to prepare the subject organisation… such as preparing the managers of the employees who will be involved in the investigation, notifying key decision makers, and notifying the organisation’s legal counsel”.

ï‚· It is not good practice to notify the entire workforce or inform the suspect.

The tracing process begins by profiling the subject. The Fraud Examiners Manual identifies “Profile the Subject” as an early step in tracing illicit transactions, followed by reviewing information for leads, prioritizing those leads, and tracing the transactions. A proper profile includes financial information, such as assets, liabilities, income, and expenses, along with behavioral indicators such as lifestyle, habits, residences, vehicles, and spending patterns. Option A is incorrect because tracing is not a one-time collection event; it is iterative and lead-driven. Option B is incomplete because recovery considerations should influence the tracing strategy throughout the matter, not only after tracing is finished. Option D is inefficient because leads should be prioritized by relevance, reliability, and likely value, not simply handled in order received.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about the core concepts in this area.

The correct answer is B: False.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The correct answer is A. A fraudulent conveyance. The CFE Manual states that debtors often attempt to conceal assets by transferring them to another person or company, and a transfer is considered a fraudulent conveyance if its purpose is to hinder, delay, or defraud a creditor. In this question, Bob transferred one of the company’s luxury vehicles to his wife just one week before the business filed for bankruptcy. That timing strongly suggests an attempt to move valuable property out of the reach of creditors before the bankruptcy estate is formed.

Option B is too broad because “fraudulent bankruptcy” is not the specific scheme described. Option C is not the standard label used in the Manual for this kind of transfer. Option D, a planned bustout, refers to a different scheme involving building up credit with suppliers and then collapsing the business without payment. The facts here center on the transfer of an asset to a related party to keep it away from creditors, which is the classic definition of a fraudulent conveyance under the CFE Law materials. Accordingly, A is the most accurate answer.

This question tests your knowledge of Domain 6.

In the context of Tax Fraud, specifically relating to tax avoidance, tax evasion, the question asks about EXCEPT.

The correct answer is B: Death of the taxpayer.

This question focuses on tax fraud concepts. The correct answer distinguishes between legal tax avoidance and illegal tax evasion, or identifies specific tax evasion schemes. Tax fraud investigations require specialized knowledge of tax laws and common evasion techniques.

Signs of stress (e.g., shallow breathing, stuttering, shifting posture) do not automatically equal deception. The Fraud Examiners Manual states:

“Signs of stress do not always mean a subject is lying. An honest subject might feel stress simply by being questioned. Conclusions must be based on clusters of behavior and corroborating evidence, not a single indicator”.

This question tests your knowledge of Domain 6.

In the context of Tax Fraud, specifically relating to tax evasion, wealth tax, the question asks about MOST LIKELY.

The correct answer is D: An income and wealth tax evasion scheme.

This question focuses on tax fraud concepts. The correct answer distinguishes between legal tax avoidance and illegal tax evasion, or identifies specific tax evasion schemes. Tax fraud investigations require specialized knowledge of tax laws and common evasion techniques.

The most accurate statement is that a verbal admission may be obtained chronologically, by transaction, or by event, depending on the facts of the case. In an admission-seeking interview, the examiner transitions to the verbal confession once the accused begins providing detailed information about the offense. The examiner should then obtain relevant details, including dates, amounts, other participants, locations of evidence, and disposition of proceeds. The examiner should not automatically assume that all amounts are accurate because confessors might minimize or distort facts. Material discrepancies should generally be saved until the subject provides the remaining relevant facts, rather than interrupting the flow immediately. Therefore, option D reflects the proper approach.

The attorney is using a bias attack. In cross-examination, opposing counsel might try to show that an expert witness’s work, report, or opinion is not independent, but instead was influenced by the party that hired or paid the expert. Suggesting that Llewellyn was directed to reach a particular conclusion attacks impartiality and implies that the testimony was purchased or shaped to favor the hiring party. Contradiction focuses on inconsistent statements or conflicts with prior testimony or documents. Myopic vision focuses on excessive attention to one area while ignoring another. A sounding board technique attempts to use the witness to support the opposing side’s theory. Because the question attacks Llewellyn’s neutrality, answer A is correct.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is B: The entity is known to have a history of regulatory problems..

This question tests your understanding of key fraud examination concepts and legal principles.

The Fraud Examiners Manual explains:

“Before running tests on the data, the fraud examiner must make certain the data being analysed are relevant and reliable for the objective of the engagement… Using the profile of potential frauds as a guide, the fraud examiner must identify the target data for analysis”.

When dealing with potentially hostile or volatile interviewees, fraud examiners are advised not to give much advance notice. This reduces the chance that the subject will prepare evasive or combative responses. The Fraud Examiners Manual emphasizes minimizing preparation time for resistant interviewees to ensure more candid responses.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about examinations of expert witnesses in most inquisitorial jurisdictions is accurate.

The correct answer is B: Both the parties and the judge may question an expert ' s credibility..

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

According to the ACFE Fraud Examiners Manual, Law Section, under The Criminal Justice System and The Law Related to Fraud , obstruction of justice occurs when a person corruptly interferes with the administration of law or the proper functioning of the judicial process. This includes attempting to improperly influence, intimidate, or tamper with witnesses in a pending proceeding.

Offering money to witnesses in exchange for changing their testimony constitutes witness tampering, which is a classic form of obstruction of justice. The essence of obstruction is not merely the success of the interference but the corrupt attempt to impede the due administration of justice. The legal system depends on truthful testimony, and any effort to alter or influence witness statements through bribery undermines the integrity of judicial proceedings.

“Conspiracy to influence the court” is not a standard standalone criminal charge in this context, and fraudulent misrepresentation typically relates to deception for financial or property gain, not interference with judicial proceedings. Judicial extortion involves coercion under color of official authority, which does not apply here.

Therefore, Monique’s conduct—offering payment to alter testimony—would most likely result in additional charges for obstruction of justice because she is attempting to corruptly interfere with the criminal trial process.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, the question asks about the core concepts in this area.

The correct answer is A: True.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The organizational filings with the government of the jurisdiction in which the company is incorporated

Organizational filings (e.g., articles of incorporation) are generally public records and include ownership information, initial shareholders, and the location of the principal office.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is C: A witness testifies that they saw the employee take the money..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The main purpose of imaging a seized computer’s hard drive is to create a forensic copy that can be used for analysis while preserving the original evidence. A forensic image is an exact duplicate of the storage media, created using proper forensic tools and verified for accuracy. Investigators generally analyze the image rather than the original device to reduce the risk of altering original evidence. Option A is incorrect because forensic analysis should not normally be performed directly on the suspect system. Option B describes documentation of the scene, which is important but not the purpose of imaging. Option D is not the primary objective. Imaging protects evidence integrity and supports later authentication and admissibility.

When obtaining a verbal confession, the fraud examiner should secure details such as: admission of wrongdoing, number of instances, amount involved, dates, involvement of others, residual assets, and motive. However, it does not matter whether the suspect claims the conduct was an accident; that is not necessary to record.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to corruption, bribery, the question asks about MOST ACCURATE, UK, the UK Bribery Act.

The correct answer is B: Even if an organization ' s anti-corruption program complies with the FCPA, it might not be sufficient for the purpose of complying with the UK Bribery Act.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

Capturing social media content with a specialized program that preserves metadata is the most effective method for establishing authenticity. Social media evidence can change quickly because users can edit, delete, or restrict access to posts. Traditional methods such as screenshots, summaries, printed pages, or saved URLs might preserve visible content, but they often fail to preserve underlying metadata needed to authenticate the evidence. Specialized collection tools can capture information in a searchable native format, preserve key metadata, and support a defensible chain of custody. Witness interviews and summaries may help corroborate what was seen, but they are weaker than a technically sound capture that preserves the digital evidence’s original characteristics and context.

The Fraud Examiners Manual explains:

“Benford’s Law applies to data that is not assigned (such as IDs or phone numbers) but that occurs naturally in transactions. For example, payment amounts, invoice values, and expense reimbursements are well suited.”

Thus, payment amounts are best suited for Benford’s Law.

The correct answer is B. False. A defendant does not ordinarily file the initial lawsuit. In a civil action, the plaintiff—here, Mary—is the party who begins the case by filing a complaint or similar pleading in a court that has proper jurisdiction. The CFE Law materials explain that civil actions generally begin with the filing of a pleading by the plaintiff, usually in the jurisdiction where the defendant resides or where the claim arose. That directly contradicts the statement in the question.

The statement is also inaccurate because a lawsuit cannot simply be filed in any court in either country. A proper court must have jurisdiction over the parties and the subject matter, and venue rules must also be satisfied. In cross-border disputes, those issues can become even more complex, especially where the parties live in different countries. The core error, however, is enough to make the statement false: Keith, as the defendant, does not get to initiate the case merely because he is the defendant. Mary, as the party claiming legal relief, would normally be the one to file. Therefore, under basic civil procedure principles used in the CFE Law topics, the answer is False.

“Alibis generally can be diffused by displaying physical evidence… evidence should be displayed one piece at a time, in reverse order of importance”【16:2014 International Fraud Examiners Manual.pdf†L11-L14】.

The Prep Guide warns: “The proper technique is not to lay it all out at once” .

Thus, showing everything at once is the least effective.

Public records can help fraud examiners confirm background details, locate assets, identify property ownership, find business affiliations, and develop leads that support asset recovery. They are especially useful for locating real property, liens, corporate filings, court records, and other information that can help determine whether losses might be recoverable. Bank deposits and payment history are generally private financial records, not public records. Telephone call records and web browsing history are also typically private or held by service providers and require consent or legal process. Therefore, option C is correct because public records can be used to corroborate information and support recovery efforts, while the other choices describe nonpublic or privacy-protected information.

In civil law jurisdictions, the standard of proof in civil trials is often described as the inner conviction of the judge, also called the conviction intime standard. This standard generally requires stronger evidence than the common law preponderance of the evidence standard but less than the common law beyond a reasonable doubt standard. Option A describes the common law civil standard. Option B describes a criminal standard used in many common law systems. Option D describes an intermediate evidentiary burden used in some jurisdictions for selected matters, but it is not the general civil law standard described in the CFE materials. Therefore, option C most accurately describes the burden of proof for civil trials in civil law jurisdictions.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is D: Existence of an employment contract.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Civil trials in civil law jurisdictions differ substantially from common law civil trials. They are often conducted as a continuing series of meetings and written communications rather than one single trial event. The common law division between pretrial and trial stages usually does not apply in the same way. Judges play a more active role in managing and evaluating evidence, and it is common for the judge to select an expert witness to address technical matters. The purpose is to obtain a court-appointed expert who is considered less biased than experts hired by the parties. Therefore, options A, B, and C reflect common law or inaccurate assumptions, while option D accurately describes a common feature of civil law proceedings.

Within CFE investigation guidance on data analysis, predictive approaches are framed as using analytical techniques (including statistical processes and machine learning) to identify patterns and outliers that can indicate fraud risk and, importantly, help detect a fraudulent situation earlier than traditional methods. Predictive analytics is not limited to one specific technology such as layered neural networks (A); neural networks can be one possible technique, but predictive analytics is broader than that. Option B describes robotic process automation (RPA)—software that imitates human actions to automate routine tasks—rather than predictive analytics. Option D describes artificial intelligence in a general sense (systems performing “human tasks” like perception and decision-making), which is also broader and not specific to predictive modeling. The most accurate description is therefore C: predictive analytics uses historical data along with statistical analysis and machine learning methods to build models that reflect patterns/trends and generate projections about likely future outcomes (e.g., predicting which transactions, vendors, employees, or accounts are higher-risk).

The correct answer is B. Mail fraud. Mail fraud generally involves using the postal system in furtherance of a scheme to defraud. In this question, Cindi used the U.S. mail system to send fraudulent advertisements to potential victims. That use of the mail is the key jurisdictional hook that would most likely support federal prosecution. The fact that the victims are located in China does not change the central point that the U.S. mail system was used as part of the fraudulent scheme.

Option A, wire fraud, would apply more naturally if the scheme were carried out by electronic communications such as telephone calls, emails, internet transmissions, or other interstate or international wire communications. Option C, communications fraud, is not the standard offense name typically used in this context. Option D, interstate fraud, is also not the most precise legal label for prosecution under these facts. In fraud law, prosecutors often rely on statutes such as mail fraud and wire fraud because they are broad and effective tools for prosecuting deceptive schemes. Since the question specifically states that Cindi used the U.S. mail system, the most likely basis for the charges would be mail fraud, making B the correct answer.

The correct answer is D. The CFE Manual lists the basic elements of perjury as follows: the defendant made a false statement, made it under oath, the statement was material or relevant to the proceeding, and the defendant made the statement knowing it was false. Therefore, materiality is a required element, which makes D the correct answer.

Option A is not sufficiently accurate because the Manual explains that perjury does not have to occur strictly in a court of law. A perjurious statement can also occur in other formal settings, such as depositions, bail hearings, venue hearings, suppression hearings, and similar proceedings, so limiting the offense to statements made in court is too narrow. Option B is incorrect because perjury does not require proof that the false statement actually influenced the fact finder’s decision; it is enough that the statement was material to the proceeding. Option C is incorrect because the statement need not be made specifically to a judge. The legal focus is on a knowingly false, material statement under oath in a qualifying proceeding. Thus, among the options provided, D is the required element that must be proven.

“Signs of stress do not always mean that a subject is lying… While lying and deception do cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

The Prep guide confirms: “While lying and deception do indeed cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

Therefore, Carlos should not automatically conclude deception from stress behaviors.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is B: False.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Benford’s Law applies to naturally occurring sets of numbers such as invoice amounts, expense reports, and transaction data. The Fraud Examiners Manual shows Benford’s Law tests applied to vendor payments to detect anomalies like duplicate or inflated invoices. Telephone numbers, employee IDs, and bank account numbers are assigned numbers and do not follow Benford’s di stribution, so they are unsuitable for this test.

The correct answer is C because a false-statements offense generally does not require the government to prove that it suffered a financial loss by relying on the statement. Under 18 U.S.C. § 1001, the key elements include that the statement concerned a matter within the jurisdiction of a government agency, that it was knowingly false, and that it was material. The Department of Justice and the statutory text both identify jurisdiction, knowledge, and materiality as core elements.

That means options A, B, and D all describe recognized elements of the offense. By contrast, actual loss to the government is not required. A defendant can violate the statute even if the agency detects the lie immediately and never changes its position or loses money. The law is designed to protect the integrity of governmental functions and decision-making, not merely to punish lies that cause measurable financial harm. So long as the false statement is material and knowingly made in a matter within agency jurisdiction, the offense can be established. Therefore, the statement saying the government must prove that it “suffered a loss for relying on the false statement” is the incorrect one, making C the right answer. (Department of Justice)

The correct answer is C. In most inquisitorial jurisdictions, expert witnesses are often appointed or closely supervised by the court, and the judge typically has a central role in defining the expert’s mission, the materials the expert may review, and the issues to be addressed. Even so, the parties are usually allowed to challenge the expert in meaningful ways, including raising concerns about the expert’s bias, neutrality, qualifications, methodology, or conclusions. That makes C the most accurate statement.

Option A is incorrect because, in inquisitorial systems, the parties do not ordinarily control the scope of the expert’s authority in the same way they often do in adversarial systems; the judge commonly exercises that control. Option B is too absolute because although the judge plays the dominant role, it is not generally true that only the judge may question the expert’s analysis. Option D is also inaccurate because the ultimate decision about the weight to assign to expert testimony is generally for the judge, not jointly for the judge and the parties.

Thus, the best statement is that the parties are usually permitted to raise objections concerning the expert’s possible biases, making C the correct choice.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is C: Structuring.

This question tests your understanding of key fraud examination concepts and legal principles.

The 2014 International Fraud Examiners Manual provides:

“Fraud examiners can use a correlation analysis to determine the relationships between different variables in raw data… For example, there should be a strong correlation between the independent and dependent variables because there is a direct relationship between them. Hotel costs should increase as the number of days travelled increases.”

CFE Prep – Investigations echoes this:

“Using the correlation analysis function, fraud examiners can determine the relationships between different variables in the raw data. For example… Hotel costs should increase as the number of days travelled increases.”

Thus, the most useful analysis is Correlation analysis.

“Securities regulators… require disclosures that typically include: corporate financial statements, identification of officers and directors, identification of significant owners… and a history of the business”【10:2014 International Fraud Examiners Manual.pdf†L73-L95】.

Thus, regulatory securities records are the best source for financial statements.

Pretexting is defined as impersonating someone else or making false/misleading statements to obtain information. Many jurisdictions specifically prohibit pretexting against financial institutions, which includes pretending to be a customer to access their bank account information.

Under the ACFE Fraud Examiners Manual, Law Section, specifically in the Money Laundering chapter , money services businesses MSBs are non-bank financial institutions that provide services such as currency exchange, money transmission, check cashing, issuing or selling money orders, and dealing in stored value. These entities are specifically recognized in anti-money laundering frameworks because of their exposure to cash-based and cross-border transactions.

A currency exchange clearly falls within the definition of an MSB because it engages in the exchange of one currency for another, often involving large volumes of cash transactions. Such businesses are subject to anti-money laundering compliance requirements, including customer identification procedures, recordkeeping, and reporting of suspicious transactions.

Depository institutions, including commercial or investment banks, are generally regulated as banks rather than MSBs. Furthermore, MSBs are often considered higher risk for money laundering due to the volume of cash transactions and international transfers they process. While MSBs are regulated, they do not typically have stricter regulations than full-service banks, which are subject to comprehensive prudential and AML supervision.

Therefore, the most accurate statement is that a currency exchange is classified as an MSB.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about MOST ACCURATE, how criminal bargaining agreements are typically handled in jurisdictions where such agreements are allowed.

The correct answer is A: The defense generally has the discretion to decide whether to settle charges with a bargaining agreement..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Fraud examiners should generally avoid allowing unnecessary observers in interviews. Additional observers can affect the interviewee’s responses, create confidentiality concerns, increase the chance of later disputes, and potentially expose the organization or examiner to legal claims. The Fraud Examiners Manual emphasizes that interviews should be controlled and that the interviewer should avoid unnecessary third-party participation unless the law, a collective bargaining agreement, language needs, or similar requirements make an observer necessary. The HR manager’s desire to observe is not, by itself, a sufficient reason to permit attendance. Option D is still risky because silent presence can influence the interview. Option A is based on comfort rather than investigative control. Therefore, if the law permits, Ana should not allow the HR manager to witness the interview.

The manual explains:

“Link analysis is very effective for identifying indirect relationships… and is particularly useful when conducting a money laundering investigation because it can track the placement, layering, and integration of money” .

Therefore, statement A is false, making it the correct choice.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to misrepresentation, the question asks about the core concepts in this area.

The correct answer is C: " Would a reasonable investor wish to know the information to make an informed decision? " .

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

Jim most likely committed obstruction of justice. Obstruction occurs when a person engages in conduct intended to impede or obstruct an investigation, proceeding, or trial related to another offense. Here, Jim is already being investigated for fraudulent health care claims. When the government auditor arrives, Jim stages a fake emergency to stop the review and then continues to evade the auditor. Those actions are designed to interfere with the government’s investigative process. Fraudulent misrepresentation concerns false statements used to induce another party to act, but the stronger and more specific offense here is interference with an official review. Conspiracy requires an agreement with at least one other person, which is not stated. Misappropriation of evidence is not the best description.

If a computer is running, it might be appropriate for a trained digital forensic examiner to conduct live evidence collection when the needed evidence exists only as volatile data. Volatile data, such as information in RAM, active network connections, running processes, or encryption keys, can disappear when the system is powered down. However, live collection should be performed carefully because interacting with the system can alter evidence. Option A is wrong because a computer that is off generally should be left off. Option C is too broad because a graceful shutdown can alter files and destroy volatile evidence. Option D is also incorrect because turning on an off computer can change evidence. Therefore, option B is the most accurate statement.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is B: As part of her sentence for bribery a defendant is ordered to transfer a car she received as a bribe to the government.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Fraud examiners can obtain documentary evidence by consent, subpoena, or other legal means. While oral consent may sometimes be sufficient, bank records from financial institutions generally require written consent. Without written consent, the bank is not required to provide access. As stated in the manual:

“Accessing a subject’s bank records from financial institutions, for instance, generally requires written consent. If no consent is given… legal action might be required, most often a subpoena or other court order”.

Thus, although the suspect gave oral consent, Alex cannot access the bank records without written authorization or legal order.

According to the ACFE Fraud Examiners Manual, Law Section, particularly in discussions related to public corruption and remedies in criminal and administrative proceedings , debarment is an administrative sanction that prohibits an individual or entity from participating in government contracts or programs for a specified period of time. Debarment is commonly imposed after convictions involving fraud, bribery, collusion, or other misconduct affecting the integrity of the procurement process.

In this case, Freya was convicted of colluding to manipulate the competitive bidding process. As a result, she was placed on a list prohibiting her from bidding on government contracts for five years. This exclusion from government contracting is the defining characteristic of debarment. The purpose of debarment is not merely punitive but also protective—it safeguards public funds and ensures that only responsible and ethical contractors conduct business with the government.

License revocation or suspension would involve withdrawing or temporarily removing a professional or business license. Disenfranchisement refers to the loss of voting rights. Neither accurately describes exclusion from government contracting opportunities.

Therefore, the administrative penalty imposed on Freya is best described as debarment.

According to the ACFE Fraud Examiners Manual, Law Section, particularly under The Criminal Justice System and Sentencing , probation is a sentencing alternative in which a convicted offender’s incarceration is suspended, and the individual is allowed to remain in the community under specified conditions. If the offender complies with the conditions—such as maintaining good behavior, reporting to a probation officer, or paying restitution—the individual may avoid serving the custodial sentence.

In this scenario, Paul has already been convicted of embezzlement. The court has imposed a sentence but suspended its execution contingent upon his promise of good behavior. This arrangement is characteristic of probation. The conviction remains in place, but incarceration is conditionally withheld. If Paul violates the terms, the court may revoke probation and require him to serve the original sentence.

A deferred prosecution agreement occurs before conviction and typically involves postponing prosecution in exchange for compliance with certain conditions. Determinate and indeterminate sentences refer to the structure or length of imprisonment, not to suspension of incarceration.

Therefore, Paul’s sentence is best described as probation.

Tree maps are a data visualization technique that display hierarchical data using rectangles divided into smaller regions. The size, color, or placement of each rectangle can help communicate relative volume, grouping, or importance within the hierarchy. Option A is incorrect because keyword size and frequency are associated more closely with word clouds, not geospatial analysis. Geospatial analysis concerns location-based data. Option C is incorrect because color-coding and compatibility may improve visual communication, but they are not the core objectives of data visualization. Option D confuses link analysis with geospatial mapping; link analysis is used to show relationships among people, entities, transactions, accounts, or events. Therefore, the statement about tree maps is the accurate description.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to GDPR, the question asks about EU, GDPR.

The correct answer is A: An organization must obtain a data subject ' s consent before collecting or processing personal data about that individual..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Corporate criminal liability often follows the doctrine of respondeat superior in common law systems. Under this doctrine, a corporation may be vicariously liable for employee misconduct when the employee acts within the scope of employment and with at least some intent to benefit the corporation. The Fraud Examiners Manual also explains that liability can arise even if senior management did not know about or participate in the wrongdoing. Therefore, option A states a typically required element. Option B is incorrect because liability is not limited to acts by management; even lower-level employees can create liability. Option C is wrong because purely personal benefit is not the key requirement. Option D is too narrow because management direction or knowledge is not always required.

This question tests your knowledge of Uncategorized.

the question asks about NOT.

The correct answer is D: The defendant made a false statement in a court of law..

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, preserve evidence, the question asks about MOST LIKELY.

The correct answer is A: An employee intentionally destroys a relevant document prior to the company announcing the possibility of litigation..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about the core concepts in this area.

The correct answer is B: Exclusive control of the proceeding is entrusted to an independent insolvency representative..

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

The correct answer is C because it is the best example of circumstantial evidence. Circumstantial evidence does not directly prove the ultimate fact in dispute. Instead, it establishes surrounding facts from which a judge or jury may reasonably infer the conclusion. Here, proof that the cashier deposited $900 into a personal bank account the day after $900 was stolen does not directly show the cashier taking the money, but it strongly suggests involvement in the theft. That is precisely how circumstantial evidence works in fraud and theft cases.

Option A is direct evidence, not circumstantial evidence, because an eyewitness claims to have actually seen the cashier remove money from the register. Option B is merely demonstrative or illustrative evidence showing store layout; by itself, it does not tend to prove that the cashier committed the theft. Option D also does not prove the act of theft; it only explains a workplace rule or standard. In fraud examinations, circumstantial evidence is often very important because many fraudulent acts occur in secret, requiring investigators to prove wrongdoing through patterns, financial links, timing, and conduct rather than direct observation alone. Therefore, C is the strongest circumstantial-evidence choice.

The correct answer is A. In common law systems, authentication is the process of showing that an item of evidence is what the proponent claims it is. Federal Rule of Evidence 901 states that to satisfy the authentication requirement, the party offering the evidence must produce enough proof to support a finding that the item is what that party claims. This is the core purpose of authentication.

Option B is incorrect because records, including many digital records, can often be authenticated through testimony or certification from a person with knowledge, such as a custodian of records, depending on the applicable rule and context. Option C is wrong because authentication is not something that must be “reviewed and voted on” by a jury as a prerequisite; it is an evidentiary foundation issue generally handled by the court. Option D is also incorrect because even properly authenticated evidence must still be relevant to be admissible. Authentication and relevance are separate requirements, and satisfying one does not eliminate the need for the other. For CFE purposes, the essential idea is that authentication establishes genuineness and identity, so A is the correct answer.

Under the ACFE Fraud Examiners Manual discussion of false statements and false claims involving government agencies, the prosecution must establish specific statutory elements to obtain a conviction. Generally, the government must prove that the defendant knowingly and willfully made or used a false statement or document, that the statement was false, that the defendant knew of its falsity, and that the false statement was material. Materiality means that the statement had the natural tendency or capability of influencing the decision of the governmental agency.

Importantly, the government is not required to prove that it actually relied upon the false statement or that it suffered a loss as a result. The offense is complete once a materially false statement is knowingly made within the jurisdiction of a government agency. Actual reliance or damages are not necessary elements.

Therefore, while materiality, knowledge of falsity, and the making of the false statement are essential components of the offense, proof that the government relied on the statement is not required. For purposes of CFE examination preparation, it is critical to distinguish between materiality and reliance, as they are not synonymous under federal false statement statutes.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is B: A witness testifies that they saw the defendant take the money.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Beth’s strongest claim is public disclosure of private facts. The Fraud Examiners Manual explains that this civil wrong occurs when someone publicizes private facts about another person’s life that are not of public concern and would be highly offensive to a reasonable person. Medical information about surgery and a chronic illness is private, and Eric disclosed it to coworkers who were not involved in the investigation. Defamation and slander require false statements that harm reputation, but the facts here state that Eric disclosed true information. Negligent misrepresentation involves false information supplied carelessly, usually in a business or transactional setting. Because liability can arise even when private facts are true, option B is the best answer.

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

The Fraud Examiners Manual notes:

“Companies are formed by submitting some type of organisational filing… these company records are generally public records and will include: corporate name, ownership information, location of the principal office, date of incorporation”.

The Prep guide also confirms: “A company’s organisational filing with the government generally includes information about the company’s ownership, initial shareholders, and the location of its principal office”.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is A: True.

This question tests your understanding of key fraud examination concepts and legal principles.

False imprisonment occurs when one person restrains another person’s physical liberty without consent or legal justification. In workplace interviews, liability can arise if an interviewer locks the interview room, blocks the exit, refuses to allow the employee to leave, or otherwise creates involuntary confinement. Jordan wanted to leave, but Sam locked the door and continued the interview. If a trier of fact concludes that this restrained Jordan against his will and without legal justification, Sam would likely lose. Option A is incorrect because ignorance of the law is not a reliable defense. Option B misstates the issue; the key issue is unlawful restraint, not failure to explain cooperation duties. Option C is wrong because acting for the company does not excuse unlawful confinement.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATE, judgments involving parties that are in multiple jurisdictions is MOST ACCURATE.

The correct answer is D: Whether a foreign judgment is enforceable might depend on whether the two jurisdictions have an enforcement treaty..

This question tests your understanding of key fraud examination concepts and legal principles.

The Fraud Examiners Manual stresses confidentiality:

“To preserve confidentiality, investigators should avoid transmitting confidential information by email or other electronic means whenever possible, as these are susceptible to interception or unauthorized access.”

Suspending employees or blanket bans on discussion are not best practices. Confidentiality is preserved primarily by secure communication and controlled access to information.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about the core concepts in this area.

The correct answer is B: Placement.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes. Money laundering typically involves three stages: placement (introducing illegal funds into the financial system), layering (creating complex transactions to hide the source), and integration (returning the funds to the launderer in an apparently legitimate form).

Oral consent is generally not sufficient to obtain a suspect’s bank records. The CFE Prep - Investigations states:

“Accessing a subject’s bank records from financial institutions generally requires written consent. Oral consent is the least effective way to obtain permission”.

The Fraud Examiners Manual also notes that bank information can usually only be obtained with subpoena, search warrant, or written consent.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, anti-money laundering, FATF, the question asks about EXCEPT, FATF.

The correct answer is C: Require financial institutions to monitor their customers ' political affiliations..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about the core concepts in this area.

The correct answer is A: Reorganization bankruptcy.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to GDPR, the question asks about EU, GDPR, NOT.

The correct answer is B: An organization must have a documented lawful basis for collecting or processing personal data..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, the question asks about the core concepts in this area.

The correct answer is A: True.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The Fraud Examiners Manual notes:

“Fraud examiners are often tasked with tracing illicit transactions… For example, a victim of fraud might want a tracing search to facilitate the recovery of criminal proceeds”.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, administrative, the question asks about the core concepts in this area.

The correct answer is A: License suspension.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Before conducting surveillance, a memorandum should document the basis for the covert operation, including: (1) the information the operation is based on, (2) expected information to be gained, (3) identities of suspects (subjects) if known, and (4) operatives under the examiner’s control. Confidential sources should not be identified by name but referred to symbolically.

During direct examination, the attorney who calls the witness generally asks nonconfrontational questions designed to present the witness’s background, procedures, findings, and opinions clearly to the fact finder. For expert witnesses, the Fraud Examiners Manual explains that direct examination commonly uses open questions, such as asking the expert to explain the background of the case or the procedures performed. Two-part or compound questions generally should not be used because they can confuse the witness and the fact finder. Leading questions are generally not allowed during direct examination because they suggest the desired answer. Assessment questions are interview questions used to evaluate credibility, not direct-examination questions. Therefore, open questions are the most likely type of questions Esme will be asked.

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to chain of custody, the question asks about MAIN PURPOSE.

The correct answer is A: Establish that the evidence has not been altered or changed from the time it was collected through its production in court.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

The correct answer is C. Whether an employee is covered by a union contract can significantly affect the employee’s rights during an internal investigation because unionized employees may have representation rights during investigatory interviews. In the United States, the National Labor Relations Board explains that employees in unionized workplaces can have Weingarten rights, meaning they may request union representation during an interview the employee reasonably believes could lead to discipline.

That makes a union or collective bargaining agreement far more relevant to investigation rights than the other choices. Option A, the employee’s length of service, might matter in some human-resources settings but does not usually determine the employee’s legal investigation rights. Option B, a noncompetition agreement, concerns post-employment competition restrictions rather than representation, questioning, or procedural protections during an internal inquiry. Option D, the likelihood of guilt or innocence, is likewise not what determines the employee’s rights; legal protections apply based on the governing employment relationship and applicable labor law, not the employer’s suspicion level. For fraud examiners, this distinction matters because interview procedures can change depending on whether the employee is unionized or otherwise contractually protected. Therefore, the factor most likely to affect the employee’s rights is whether the employee has signed a union contract.

Digital forensics guidance stresses:

If the computer is off, do not turn it on, because booting will alter files and timestamps.

If the computer is on and volatile data is needed (e.g., RAM), a formally trained examiner may collect it live. Otherwise, simply unplugging the system (hard shutdown) preserves volatile evidence better than a graceful shutdown.

Thus, if the evidence exists only in volatile data and the system is running, Nobles may collect it via the normal interface.

✅ Answer: A. If Lucas ' s computer is running, Nobles may retrieve data… if the evidence exists only in volatile data

The Fraud Examiners Manual states:

“Records obtained from financial institutions are perhaps the single most important financial source available to a fraud examiner for tracing purposes”.

These records reveal deposits, withdrawals, transfers, and are essential in asset tracing.

According to CFE Prep – Investigations:

“In most jurisdictions, income tax records are not public records and cannot be accessed for pre-employment purposes”.

Common public sources include court, property, licensing, and utility records.Thus, searching income tax filings is not a common use of public sources.

The correct answer is C. Integration. Money laundering is commonly described as having three stages: placement, layering, and integration. Placement is the initial introduction of illicit funds into the financial system. Layering involves moving the money through multiple transactions, accounts, or jurisdictions to obscure its source. Integration is the final stage, where the laundered funds are reintroduced into the economy and used in ways that appear legitimate. FinCEN and the FFIEC both describe integration as the stage where illicit proceeds are returned to the criminal in apparently lawful form, after the paper trail has been obscured.

In Lance’s fact pattern, the deposit of stolen cash into a domestic account reflects placement. The wires to foreign accounts and multiple transfers are classic layering because they are designed to make the funds difficult to trace. When Lance finally brings the money back and spends it on home improvements, he is using the funds as if they were legitimate personal assets. That is the hallmark of integration. FinCEN also notes that purchases of real estate-related assets and improvements commonly appear in the last stage of laundering because they help the criminal enjoy the proceeds with a veneer of legitimacy.

The strongest evidence is the direct deposit payslips showing that Jordan and the fictitious employee share the same bank account details. In a ghost employee or fictitious employee payroll scheme, one key test is whether multiple employees are using the same bank account for direct deposit. This evidence directly links Jordan to the payroll payments issued to the fictitious employee and directly rebuts his denial that he is only paid for his own work. The coworker’s statement about vacations might show lifestyle changes but does not prove the payroll scheme. System-access records show opportunity, not actual diversion of wages. Negative social media posts are irrelevant to whether Jordan created and collected pay for a fictitious employee.

The manual and CFE Prep list the main limitations:

Coverage varies by jurisdiction.

Searches are limited in area.

Records are often abstracts.

Information may be inaccurate or outdated.

Searches can be erratic.

Nowhere is “difficulty in finding database companies” mentioned.

The best answer is A. A personal mobile phone brought to the office from home. In the CFE Law materials, workplace privacy analysis turns on whether the employee has a reasonable expectation of privacy in the place or item searched and whether the employer’s search is justified, necessary, and proportionate. Personal items that belong to the employee, especially items brought from home and used for private communications or storing personal data, are the strongest candidates for a protected privacy interest.

By contrast, an employer-issued laptop is usually much less private because it is company property and often subject to workplace monitoring policies. A desk drawer in a communal workspace may carry some expectation of privacy in certain situations, but generally less than a personally owned phone, especially if the workspace is shared or subject to employer access. A recycling bin is the weakest option because discarded items usually carry little or no reasonable expectation of privacy. Therefore, among the listed choices, the item an employee is most likely to have a reasonable expectation of privacy in is the personal mobile phone. This answer is also consistent with the broader CFE principle that privacy protection is strongest where the item is personal, private, and not owned or controlled by the employer.

Employees generally have a duty to cooperate with reasonable workplace investigations arising from the employer-employee relationship. The Fraud Examiners Manual explains that this duty commonly extends to internal investigations, provided that the employer’s requests are reasonable under the facts and circumstances. Florence is an employee of Q-22, and Virgil is conducting a private internal investigation into suspected fraudulent expense claims. Therefore, Florence likely must cooperate with reasonable interview requests, document requests, or other investigative steps related to her duties. Option B is too broad because employees are not required to comply with unreasonable demands. Options A and D incorrectly suggest that private-company status eliminates the duty to cooperate.

The Manual says admission-seeking interviews should be conducted only when:

There is reasonable probability the subject committed the act,

All other reasonable investigative steps are complete, and

“The interviewer can reasonably control the place, time, and subject matter of the interview.”.Therefore, Erica must ensure control of time, place, and content before scheduling.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to conspiracy, the question asks about the core concepts in this area.

The correct answer is C: The defendant knew all the details or objectives of the conspiracy.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

Isaiah is using a rationalization theme based on empathy for perceived unfair treatment. In an admission-seeking interview, the examiner develops a theme that gives the suspect a psychologically acceptable reason to confess. Here, Isaiah suggests that Ruben acted because he was mistreated by his supervisor and denied a raise. By saying he would “probably feel the same,” Isaiah reduces emotional resistance and frames the conduct as understandable, though not justified. Option B would apply if Isaiah suggested Ruben acted to help others. Option C would apply if the misconduct were presented as a one-time mistake. Option D would involve minimizing the seriousness of the offense. The statement primarily empathizes with Ruben’s perceived unfair treatment.

The electronic device in option B is most likely to have its authenticity questioned because the storage area is only described as accessible to company employees generally, not restricted to authorized custodians or monitored through a clear chain of custody. Authenticity requires showing that evidence is what it purports to be and that it has not been materially altered. The ACFE materials explain that chain of custody documents who possessed the evidence, how it was stored, what was done with it, and how it left each custodian’s control. Options A, C, and D describe stronger safeguards, such as restricted access, monitoring, access logs, password protection, secure storage, or formal transfer. Option B creates a greater risk that unauthorized access or alteration could be alleged.

The privilege is not necessarily waived when an attorney shares protected information with a forensic accountant hired to assist with legal advice or litigation preparation. Legal professional privileges and work-product protections can extend to third-party agents, consultants, fraud examiners, or forensic accountants when their involvement is necessary to help counsel advise the client or prepare the case. Option A is too broad because disclosure to every third party does not automatically waive privilege when the third party is part of the legal team’s work. Option B is also incorrect because a lawsuit need not always be filed for protection to apply if litigation is reasonably anticipated. Option D is wrong because privileges can be waived in some circumstances. Therefore, option C is most accurate.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, privacy, the question asks about CFE, MOST LIKELY, ABC.

The correct answer is B: Intrusion into Green ' s private matters.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, bustout, concealment of assets, the question asks about MOST COMMON.

The correct answer is D: Concealment of assets.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about the core concepts in this area.

The correct answer is D: Mya will assist the fact finder by providing specialized knowledge that will help them understand evidence..

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about large cash transactions with customers which of the following transactions would require a report to be Wed with the government, FATF.

The correct answer is D: A lump-sum cash deposit to a bank above the jurisdiction ' s designated threshold.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, common law, the question asks about MOST LIKELY.

The correct answer is B: Civil law.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about large cash transactions with customers as provided by the Financial Action Task Force (FATF) Recommendations, which of the following transactions would require a report to be filed with the government, FATF.

The correct answer is C: A single cash purchase of casino credits for a sum that is above the jurisdiction ' s designated threshold..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Explanation with Extracts = The Fraud Examiners Manual explains:

“Conducting digital forensic investigations in the cloud environment (i.e., cloud forensics) presents challenges not faced in traditional forensic practices… Some of the important challenges… Lack of frameworks and specialist tools, Lack of information accessibility, Lack of data control, Jurisdiction of storage…” .

Specifically: “With cloud computing, clients of cloud service providers do not have physical control of the media or the network on which their data resides, and this lack of data control can complicate efforts to collect data stored on the cloud” .

Thus, lack of data control is a unique challenge.

A well-written fraud examination report should be accurate, clear, impartial, relevant, and complete enough to support the findings. Otis should include facts that could be potentially relevant to the case, even if some facts do not support the allegation. However, he should not overload the main report with full interview details when separate interview memoranda are more appropriate. Technical language should be avoided unless necessary and explained when used, because the report may be read by nontechnical users, legal counsel, management, or outside parties. Signed interview notes are not the primary reporting document. The report’s purpose is to communicate relevant investigative activities, findings, and recommendations in a clear and objective manner.

“Opinions or conclusions concerning the guilt or innocence of a fraud suspect is outside the scope of a fraud examination and should never be included in a report”.

Functions of a fraud examination report include presenting evidence, corroborating facts, and supporting credibility. Communicating the examiner’s qualifications to provide opinions is not a function.

Therefore, option D is not a function of a fraud examination report.

A best practice when collecting and organizing documents is to establish a document database early in the investigation. A document database helps the examiner track what was collected, where it came from, who provided it, when it was obtained, and how it relates to issues in the case. It also supports indexing, retrieval, review, and later report preparation. Option A is poor practice because originals and working copies should be controlled carefully and not mixed in a way that risks alteration or loss. Option B may be useful for some documents, but chronological order alone is not sufficient. Option D is inefficient and not the best general practice. Therefore, establishing a document database early is the strongest answer.

The Fraud Examiners Manual and CFE Prep Guide explain that tracing loan proceeds is a key investigative tool, but its scope is limited. Specifically, it helps determine:

if proceeds were deposited into hidden accounts,

if hidden accounts were used for loan payments, and

if loans were secured by hidden assets or unknown witnesses.

However, the manuals do not state that tracing loan proceeds can identify internal control weaknesses. That is a different aspect of fraud examination, often addressed through audit procedures or control assessments.

Thus, option D is NOT true.

In civil law criminal proceedings, judges usually play a more active role than they do in common law adversarial systems, and a judge often serves as the primary fact finder. However, it is inaccurate to say that judges serve as the fact finder in every criminal case in every civil law jurisdiction. Some civil law jurisdictions use mixed panels made up of professional judges and laypersons, or other forms of lay participation, especially in more serious matters. Option B reverses the general pattern by stating that juries typically serve as fact finders. Options C and D are too absolute because fact-finding structures vary by jurisdiction. Therefore, option A is the most accurate statement.

CFE methodology stresses that fraud examinations should be conducted with the assumption that the matter could end in litigation, which directly affects evidence-handling decisions. If litigation is reasonably anticipated, organizations often must preserve potentially relevant records through measures such as litigation holds and suspension of normal record-retention/destruction practices. Disposing of evidence while litigation is likely (or while a duty to preserve could exist) can create serious consequences, including sanctions, adverse inferences, monetary penalties, and other legal repercussions for spoliation or failure to preserve evidence. Because the central risk is future legal proceedings—civil, criminal, regulatory, or employment-related—the most important consideration when deciding whether evidence can be disposed of is whether additional litigation is likely or could reasonably arise. The physical form of evidence (A) affects preservation techniques, but it is not the key decision driver for disposal. Reporting summaries (C) do not replace original evidence. Whether evidence is direct or circumstantial (D) is not the deciding factor; both can be critical depending on the case. Thus, likelihood of future litigation is the most important factor.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, common law, the question asks about MOST ACCURATE, civil trials in common law jurisdictions is MOST ACCURATE.

The correct answer is C: Jury verdicts m civil trials must always be unanimous.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The manual explains:

“After the interviewer establishes rapport through normal conversation, he must observe the respondent’s reactions. This will serve as a baseline for observing behaviour when questions that are more sensitive are asked.”

A neutral, non-threatening question such as “How long have you been in this department?” is ideal for establishing a baseline.

Fraud examiners must not opine on guilt, innocence, intent, or disposition. Reports should focus on facts and expert conclusions within their field. The Manual stresses:

“The fraud examiner should refrain from expressing opinions as to the guilt or innocence of any person or entity. Such conclusions are reserved for the trier of fact” (Fraud Examiners Manual, Reporting section).

Options A, B, and D relate to accounting and internal control assessments, which fall within an accounting expert’s scope. Only C is improper because it speculates about the suspect’s character or intent, which is outside the CFE’s role.

Wire transfer records include specific transactional details:

“The information contained on a wire transfer generally will include… the amount of the transfer, the date, the name of the sender, the routing number of the originating bank, the identity of the beneficiary, [and] the routing number of the recipient bank”.

They do not list things like the type of money order, customs port of entry, or government ID numbers (CFE Prep explicitly states that recipient government IDs are not typically included).

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about NOT.

The correct answer is A: The government relied on the false statement.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

The correct answer is C. Structuring scheme. The CFE Manual explains that structuring occurs when a person breaks up money into smaller transactions specifically designed to avoid regulatory reporting requirements or internal financial-institution controls. It notes that many countries require reporting of currency transactions above a certain threshold, such as more than $10,000, and that a common red flag is a customer making many deposits just under the reporting threshold.

That is exactly what Tammy is doing. Her repeated deposits of $9,000 to $9,900 over several weeks strongly suggest that she is intentionally keeping each transaction below the reporting threshold to avoid government scrutiny. Option D, integration, refers to a later laundering phase in which illicit money is reintroduced into the economy as apparently legitimate funds. Options A and B do not match this conduct. In money laundering cases, fraud examiners are trained to identify transaction patterns that appear deliberately calibrated to evade mandatory reporting rules. Repeated cash deposits just below a legal threshold are one of the clearest examples. Therefore, Tammy is most likely engaged in a structuring scheme, making C the correct answer.

Social media content is dynamic—posts can be edited, deleted, or moved—so fraud examiners must preserve relevant information promptly and in a manner that supports authenticity and admissibility. CFE investigative guidance emphasizes that documentary (including digital) evidence carries limited value in legal proceedings unless it can be shown to be authentic and in substantially the same condition as when collected. Simply saving a link (Option A) is weak because the underlying content can change, and a link does not preserve what was actually observed. Requesting a copy from the platform (Option B) is often impractical as a routine step and may require legal process; it also does not replace contemporaneous preservation by the examiner. A “forensic shutdown” (Option C) is not an appropriate method for preserving web-based social media content because the key evidence exists on external servers, not solely on the examiner’s machine. Proper practice is to download/capture and preserve what was observed while documenting the collection steps and maintaining a defensible chain of custody so authenticity can be established if needed in court.

This question tests your knowledge of Domain 6.

In the context of Tax Fraud, specifically relating to tax evasion, the question asks about her company ' s finances to her country ' s taxing authority, MOST LIKELY.

The correct answer is B: A falsified tax deduction scheme.

This question focuses on tax fraud concepts. The correct answer distinguishes between legal tax avoidance and illegal tax evasion, or identifies specific tax evasion schemes. Tax fraud investigations require specialized knowledge of tax laws and common evasion techniques.

The Manual emphasizes that interviews should be held where the respondent feels comfortable and secure, not threatened:

“When possible, the interview should be held in a venue where the subject will feel comfortable and secure”.

Holding it in an uncomfortable setting is counterproductive and contrary to best practices.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, trustee, bustout, the question asks about the core concepts in this area.

The correct answer is D: Purchases large quantities of goods on credit.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

The 2014 International Fraud Examiners Manual provides examples of data analysis for accounts payable:

“Examples of data analysis queries that can be performed to help detect fraud through examination of accounts payable include:

• Audit paid invoices for manual comparison with actual invoices.

• Summarise large invoices by amount, vendor, etc.

• Identify debits to expense accounts outside of set default accounts.

• Reconcile cheque registers to disbursements by vendor invoice.”

While other functions apply to payroll or asset management, the most effective function for accounts payable fraud detection is to summarize large invoices by amount and vendor.

Before pursuing litigation, fraud examiners are advised to consider whether nonlegal remedies (e.g., restitution agreements, settlements, insurance recovery) are possible, since legal actions can be costly, slow, and uncertain. Statutes of limitation and guilt are legal issues for attorneys and courts, but examiners must weigh recovery options first.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about TRUE.

The correct answer is D: The purpose of authentication is to ensure that hearsay is not admitted into evidence.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Link analysis is described as a visual analytic tool that:

“Tracks the movement of money,”

“Demonstrates complex networks,”

“Helps identify indirect relationships with several degrees of separation,” and

“Discovers communications, patterns, and trends.”

It does not display financial ratios—that belongs to traditional financial statement/ratio analysis.

CFE interviewing guidance distinguishes among open, closed, and leading questions used during the fact-gathering portion of an interview. Closed questions require a precise, specific answer— commonly “yes/no,” but also specifics such as dates, amounts, and times. The question “What year did you start working in the accounting department?” seeks a specific date-like fact (a particular year) rather than inviting a narrative explanation. That is the hallmark of a closed question: it restricts the response to a narrow factual point and does not encourage expansive detail. By contrast, open questions (e.g., “Please describe the procedures to me”) are designed to elicit a broader, more descriptive answer. Leading questions are framed to suggest the answer and are often used to confirm information already known, whereas Quincy’s question does not embed a suggested response—he is simply requesting a specific historical fact. Therefore, under CFE definitions, this question is most accurately classified as closed.

The calibration (or norming) process in interviews is meant to establish a baseline of the subject’s normal verbal and nonverbal behavior. This is done by asking noncritical background questions so that later deviations can be more reliably identified.

From the CFE Prep guide:

“The proper way an interviewer should start the calibration (norming) of a witness is through the use of: Noncritical questions on background information. … Examples of noncritical questions include ‘When did you start with the company?’ and ‘How long is your commute?’”.

Thus, the correct answer is D. “How many jobs have you had before this one?” since it is a nonthreatening background question.

The Fraud Examiners Manual explains:

“A Certified Fraud Examiner should not promise confidentiality or leniency to an informant to obtain testimony… the confidentiality relationship runs first to the client or employer”.

Thus, Lisa cannot guarantee full confidentiality but may state she will do her best.

The correct answer is C. The CFE Manual states that in most jurisdictions, a duty to cooperate exists in every employer-employee relationship, although the precise scope of that duty can vary. In a private-company internal investigation, an employee who is asked to participate will therefore likely have a duty to cooperate as part of the employment relationship.

Option D is incorrect because the Manual specifically explains that the right to remain silent generally applies when a person is being questioned by government authorities or someone acting on the government’s behalf, not when the questioning is conducted by a private employer acting on its own. As a result, the right to remain silent generally does not apply in internal investigations by private companies, and employers can often discipline or even terminate employees who refuse to cooperate. Option B is too broad because, although employees may have some privacy rights, those rights do not generally allow them to categorically refuse all cooperation in a private internal investigation. Option A is also inaccurate because employee duties are not unlimited; requests still must be evaluated in context and can vary by jurisdiction. Therefore, the most accurate statement is that Payne likely has a duty to cooperate as part of the employer-employee relationship.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, the question asks about the core concepts in this area.

The correct answer is A: True.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to front business, the question asks about MOST ACCURATE, using front businesses as a method of laundering money is MOST ACCURATE.

The correct answer is D: A front business that conducts legitimate business can provide cover for delivery and transportation related to illegal activity..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

“Once a suspect utters a denial, it becomes extremely difficult… therefore, the interviewer must prevent an outright denial. Fraud examiners can use several techniques to stop or interrupt denials, including delays, repeated interruptions, and reasoning”.

Thus, the correct answer is D.

During admission-seeking interviews, when suspects persist with denials or alibis, examiners are trained to diffuse them. Accepted techniques include:

Discussing testimony of witnesses,

Displaying physical evidence, and

Downplaying the strength of evidence.

However, manuals caution that discussing a suspect’s prior deceptions is not an effective or recommended method to diffuse alibis. It risks confrontation and may damage rapport, reducing chances of confession.

Therefore, option C is the exception.

The correct answer is A. The CFE Manual explains that to recover for intentional infliction of emotional distress, the plaintiff must prove that the defendant engaged in extreme and outrageous conduct, that the defendant acted intentionally or recklessly, and that the victim actually suffered emotional or mental distress as a result of the defendant’s conduct. These core elements match options B, C, and D.

There is no general requirement that the distress must have lasted for at least two years. That time-based condition is not one of the recognized elements listed in the CFE Law section. The Manual instead focuses on the nature of the conduct and the causal connection between that conduct and the victim’s injury. It also notes that the conduct must be sufficiently outrageous to exceed the bounds tolerated by civilized society and that mere insults or ordinary upset are not enough. Additionally, the Manual emphasizes that actionable claims require proof of serious, visible, and provable harm. Still, none of those requirements impose a fixed minimum duration such as two years. Accordingly, A is the only choice that is not a required element of this common law tort.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, the question asks about the core concepts in this area.

The correct answer is D: An independent insolvency representative.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is D: Counterclaim.

This question tests your understanding of key fraud examination concepts and legal principles.

Admission-seeking interviews are designed:

“to obtain a legal admission of wrongdoing… also to distinguish innocent individuals from culpable ones and to secure a signed written statement”.

The primary purpose is obtaining a valid confession.

The CFE Prep – Investigations explains:

“Metadata is a type of computer-generated data that can be helpful in a fraud investigation. Metadata information can help determine who wrote a document; who received, opened, copied, edited, moved, or printed the document; and when these events occurred” .

Thus, metadata is the most useful for identifying who created a document.

When preparing to interview subjects across jurisdictions, fraud examiners must consider both legal rights and cultural differences. The Manual advises examiners to:

Research local laws governing the right to counsel during interviews.

Understand cultural norms (e.g., greetings, eye contact).Failing to observe these can damage credibility. Thus, it is most accurate that an examiner must determine whether the subject can legally insist on a lawyer’s presence .

The Fraud Examiners Manual stresses that interview notes should be kept separately for each interview, even if the session is electronically recorded, because recordings can fail or be challenged. Verbatim transcripts are not expected, and impressions of guilt should never be included. Best practice is to keep clear, accurate, separate records for every interview .

From the 2014 International Fraud Examiners Manual, under the section related to tracing financial transactions, specifically tracing the disposition of loan proceeds, the following objectives of tracing activities are explicitly outlined:

“Tracing the disposition of loan proceeds can help fraud examiners:

Determine whether loan proceeds were deposited into hidden or unknown accounts

Determine whether loan proceeds were used to pay off other loans

Identify the involvement of previously unknown individuals (potential witnesses)

Determine whether payments were made from hidden accounts

Identify undisclosed related-party transactions”

There is no mention that tracing loan proceeds can uncover previous civil offenses committed by the subject. Civil offenses refer to non-criminal violations (e.g., breach of contract, torts), which tracing of financial transactions like loan proceeds is not directly designed to uncover.

This is not a recognized purpose of tracing as taught in the CFE Investigation section. The core objectives revolve around uncovering hidden assets, hidden accounts, payments, and potential witnesses — not prior legal infractions.

Therefore, the correct answer is A, as it is the only option that is NOT true according to official CFE investigation materials.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, the question asks about the core concepts in this area.

The correct answer is A: True.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

This is a double-negative question because it contains two forms of negation: “Didn’t” and “wasn’t.” Double-negative questions are poor interview questions because they confuse the respondent and can suggest an answer opposite to the intended meaning. Fraud examiners should avoid them because they reduce clarity and can make the resulting answer unreliable or difficult to interpret. Option A is not the best description because the issue is not the order of the words, but the presence of two negatives. Option B is incorrect because the question does not merely control the answer; it creates confusion. Option D is less precise because a complex question usually combines multiple issues, while this question is specifically defective due to double negation.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATE, digital currencies, such as bitcoin, is MOST ACCURATE.

The correct answer is B: Digital currencies are attractive to money launderers because payments often cross jurisdictional boundaries, making it difficult for authorities to pursue enforcement.

This question tests your understanding of key fraud examination concepts and legal principles.