Practice Free CFE-Fraud-Investigations-and-Legal-Issues Certified Fraud Examiner (CFE) - Fraud Investigations and Legal Issues Exam Questions Answers With Explanation

“Distractions should be kept to a minimum. Ideally, there should be no photographs, windows, or other objects in the room. Chairs should be placed about four to six feet apart, and the accused should not be permitted to sit behind any physical barriers, such as chairs, tables, or desks” .

The door should be closed (but not locked), not open .

Tables or desks should not be between interviewer and suspect .

Thus, the correct adjustment is removing distractions (pictures/posters).

The correct answer is B. False. The key issue is that the legal protection against unreasonable search and seizure generally applies to government action, not purely private conduct. In this question, Charlie is an investigator employed by Victorian Inc., a private company, and he acted at the direction of company management rather than as a government officer. Therefore, the normal constitutional requirement for a search warrant would generally not apply to his workplace search.

This conclusion is strengthened by the fact that the item searched was Lorna’s company-issued laptop, which is employer property and usually carries a lower expectation of privacy than a purely personal device. In workplace-fraud matters, private employers are often permitted to examine company systems, devices, and records, particularly when investigating suspected misconduct. The later fact that Charlie turned the evidence over to law enforcement does not automatically transform his original search into a government search requiring a warrant, unless he was acting as an agent of the government when the search occurred.

Accordingly, Charlie did not violate Lorna’s rights merely by failing to obtain a search warrant before searching the employer’s laptop. That is why the statement is false.

CFE interviewing guidance emphasizes that legal considerations can materially affect how interviews are conducted and that employee rights and obligations vary by jurisdiction and by case. In particular, whether a subject has a duty to cooperate (and the extent to which an organization can compel cooperation) can differ across jurisdictions and can also be constrained by contractual rights (e.g., union agreements, employment contracts) and local regulations. Because June’s subject is from a different jurisdiction, the most appropriate preparation step is to verify jurisdiction-specific rules that could limit compulsion or otherwise affect the interview’s legal permissibility and risk profile. Option D directly addresses this core cross-jurisdiction concern: what can legally be required of the subject. Option A is not a CFE-recommended preparatory focus; examiners should adapt to legal and procedural requirements rather than “teach” their own cultural practices to the subject. Option B is inappropriate and contrary to professional interviewing principles (the goal is cooperation, not discomfort). Option C is incorrect because consultation with counsel is not limited to “third jurisdiction” scenarios; the guidance underscores that interview-related legal risks and jurisdictional differences often warrant counsel input. Therefore, D best reflects CFE investigation knowledge for cross-jurisdiction interviewing readiness.

The best introduction is truthful but nonthreatening. The Fraud Examiners Manual explains that interviewers should introduce themselves, generally provide their name and company, avoid unnecessary titles that create fear, establish rapport, and state the interview purpose in general terms. Option A is accurate because Ralph truthfully identifies himself as an investigator hired by Pippy Inc. and asks for help gathering information about an issue. Options B and C unnecessarily use the title “Certified Fraud Examiner” and refer to “possible fraud,” which could make the employee defensive or overly cautious. Option D is inaccurate because Ralph was hired by Pippy Inc.; it states that he works for Pippy Inc., which might mislead the interviewee. Therefore, option A best follows interview theory.

The Manual says admission-seeking interviews should be conducted only when:

There is reasonable probability the subject committed the act,

All other reasonable investigative steps are complete, and

“The interviewer can reasonably control the place, time, and subject matter of the interview.”.Therefore, Erica must ensure control of time, place, and content before scheduling.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, civil, common law, the question asks about MOST ACCURATE, civil trials in common law jurisdictions is MOST ACCURATE.

The correct answer is C: Jury verdicts m civil trials must always be unanimous.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Real property records are commonly available through public or external records sources and can help fraud examiners identify assets acquired by a subject. These records may reveal ownership, purchase history, liens, mortgages, and other details useful in tracing or recovering illicit proceeds. Wage and salary records are generally maintained by the employer and are not normally available from external public sources without authority. Work email history is internal company information or electronically stored information requiring proper authorization. Personnel file documents are confidential employment records and are not public external records. Because real property records are usually maintained by government recording offices and are often publicly searchable, Maddie is most likely able to obtain information about real property assets without consent or legal order.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to adversarial, inquisitorial, the question asks about the appointment of expert witnesses at that is accurate.

The answer is not provided in the original document. Based on analysis of the question and options:

A: Generally, the court appoints the primary expert witnesses in inquisitorial jurisdictions. B: Generally, only the parties may select expert witnesses in inquisitional jurisdictions. C: Generally the court selects the primary expert witnesses in adversarial jurisdictions. D: Generally, only the parties may select experts to introduce testimony in adversarial jurisdictions

Based on CFE Law principles, the most likely correct answer would be A.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data. In inquisitorial jurisdictions, the court typically appoints expert witnesses who are considered neutral and objective, while in adversarial systems, the parties generally select their own expert witnesses to support their respective positions.

Both the Manual and CFE Prep guides emphasize that deleted files are recoverable until overwritten. Once overwritten, the original data cannot be retrieved:

“Deleted files are recoverable until they are overwritten because data is not erased… until overwritten. So, deleted files that have been overwritten generally are not recoverable.”

Other file types (deleted shortcuts, hidden files, etc.) can often be recovered, but overwritten files are lost permanently.

The correct answer is C. In a claim for fraudulent misrepresentation of material facts, the usual legal elements include a false representation of a material fact, knowledge that the representation was false or reckless disregard for its truth, an intent to induce reliance, actual reliance by the victim, and damages resulting from that reliance. Therefore, statements reflected in options A, B, and D are consistent with the basic elements that must generally be proven in a fraud-based misrepresentation claim.

Option C is not a required element. The law does not require the plaintiff to prove that the victim failed to exercise due care in relying on the statement. In fact, that concept is closer to a defense argument or comparative-fault style contention than an element of the plaintiff’s affirmative fraud claim. The claimant normally must show reliance that was legally sufficient, but the victim’s lack of due care is not itself something that must be affirmatively established to prove fraudulent misrepresentation. For CFE purposes, the focus remains on the defendant’s false statement, the victim’s reliance, and resulting harm. Accordingly, C is the only option that is not an essential legal element of fraudulent misrepresentation.

In civil law jurisdictions, the duty to take affirmative steps to preserve evidence is generally narrower than in common law jurisdictions. The Fraud Examiners Manual explains that civil law systems often rely on the court to determine what evidence must be preserved and produced. This differs from common law systems, where the preservation duty commonly arises when litigation is reasonably anticipated. Here, because the question specifically states that XYZ Company operates in a civil law jurisdiction, the company’s duty would begin when trial proceedings commence and the court instructs the parties to retain items. The earlier events might be relevant facts, but they do not automatically trigger the civil law preservation duty described in the CFE materials.

When filing a civil suit, a plaintiff must consider whether the court has authority to hear the matter and whether the case is filed in a proper location. Venue commonly concerns the proper geographic location for the case, such as where the defendant resides or where the claim originated. In fraud matters, the place where relevant transactions occurred can be an important factor. Court “availability” is not a jurisdictional requirement. A defendant’s consent might affect some personal jurisdiction issues, but it does not cure all jurisdictional defects, especially subject-matter jurisdiction. A court’s prior experience with the parties is also not a valid basis for jurisdiction. Therefore, option A is the best answer.

The organizational filings with the government of the jurisdiction in which the company is incorporated

Organizational filings (e.g., articles of incorporation) are generally public records and include ownership information, initial shareholders, and the location of the principal office.

Best practices for admission-seeking interviews emphasize building rapport, presenting a morally acceptable reason, and maintaining empathy to encourage a confession. The manual states examiners should “present a morally acceptable reason for the suspect’s behavior” and avoid creating hostility . Minimizing empathy is counterproductive and not recommended.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to bribery, the question asks about OECD.

The correct answer is B: Laws and regulations related to public subsidies licenses, and contract procurement.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

For publicly traded companies, the best source for information on officers and directors is regulatory securities records. These records typically include “identification of officers and directors, financial statements, significant owners, and accountants and attorneys”.

This question tests your knowledge of Domain 8.

In the context of Criminal Prosecutions, specifically relating to deferred prosecution, the question asks about the core concepts in this area.

The correct answer is A: To help reduce the risk of future illegal practices by an organization accused of misconduct..

This question addresses criminal prosecution concepts. The correct answer correctly identifies aspects of criminal proceedings, burdens of proof, or sentencing options. Understanding the criminal justice process is essential for fraud examiners working with law enforcement.

The correct answer is B. Sounding board. In expert-witness cross-examination, the “sounding board” method is used when counsel asks the expert to agree with a series of basic or already accepted facts so the lawyer can repeat favorable points through the witness. The technique is not mainly about exposing inconsistency or prejudice. Instead, it uses the witness to reinforce the examining party’s theory of the case by obtaining repeated agreement on foundational matters. Secondary CFE prep materials describe sounding board in this same way: the witness is used to generally agree with the questioner’s position or with favorable facts already established.

The other options do not fit as well. Contradiction would involve trying to show the witness has said something inconsistent. Bias aims to show the witness is not objective, perhaps because of fees or relationships. Myopic vision usually refers to suggesting the expert’s perspective is too narrow or one-sided. Here, Nancy is simply being led to agree with basic, favorable facts, which is the classic sounding-board approach. Therefore, B is the most accurate answer.

Corporate criminal liability often follows the doctrine of respondeat superior in common law systems. Under this doctrine, a corporation may be vicariously liable for employee misconduct when the employee acts within the scope of employment and with at least some intent to benefit the corporation. The Fraud Examiners Manual also explains that liability can arise even if senior management did not know about or participate in the wrongdoing. Therefore, option A states a typically required element. Option B is incorrect because liability is not limited to acts by management; even lower-level employees can create liability. Option C is wrong because purely personal benefit is not the key requirement. Option D is too narrow because management direction or knowledge is not always required.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, privacy, the question asks about BEST.

The correct answer is C: Public disclosure of private facts.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is A: True.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATE, judgments involving parties that are in multiple jurisdictions is MOST ACCURATE.

The correct answer is D: Whether a foreign judgment is enforceable might depend on whether the two jurisdictions have an enforcement treaty..

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, preserve evidence, the question asks about MOST LIKELY.

The correct answer is A: An employee intentionally destroys a relevant document prior to the company announcing the possibility of litigation..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

The most accurate answer is D. In many civil law jurisdictions, the standard of proof in civil proceedings is often described as the inner conviction of the judge. This reflects the inquisitorial character of many civil law systems, where judges play a more active role in gathering, evaluating, and weighing evidence than in common law adversarial systems. Rather than focusing on jury persuasion or a rigid verbal formula like “preponderance of the evidence,” civil law courts often emphasize the judge’s reasoned personal conviction based on the entire evidentiary record.

Option A is incorrect because adverse civil judgments can generally be appealed in civil law jurisdictions. Option B may sound broadly true in some comparative discussions, but it is not the most accurate statement here because the CFE materials specifically identify the civil-law formulation as the judge’s inner conviction. Option C is also inaccurate because civil trials in civil law systems are often not a single dramatic event; instead, they may develop through a series of hearings, submissions, judicial inquiries, and procedural exchanges over time.

Therefore, the statement that best captures the distinctive approach of civil law jurisdictions is that the standard of proof is often described as the inner conviction of the judge, making D the correct answer.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to misrepresentation, conspiracy, obstruction, the question asks about MOST LIKELY.

The correct answer is A: Obstruction of justice.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

Admission-seeking interviews are designed:

“to obtain a legal admission of wrongdoing… also to distinguish innocent individuals from culpable ones and to secure a signed written statement”.

The primary purpose is obtaining a valid confession.

Covert operations must be carefully planned and documented because they involve legal, safety, financial, and reputational risks. The Fraud Examiners Manual states that before conducting a covert operation, the basis for the operation should be committed to writing, preferably in a memorandum. The memorandum should identify the information upon which the operation is based, the information expected to be gained, known suspects, and operatives under the examiner’s control. Option D is therefore directly supported. Option A is too broad because all known associates are not necessarily required. Option B may be useful in planning but is not the best statement of the memorandum’s required basis. Option C is vague and less directly tied to the manual’s listed documentation points.

Isaiah is using a rationalization theme based on empathy for perceived unfair treatment. In an admission-seeking interview, the examiner develops a theme that gives the suspect a psychologically acceptable reason to confess. Here, Isaiah suggests that Ruben acted because he was mistreated by his supervisor and denied a raise. By saying he would “probably feel the same,” Isaiah reduces emotional resistance and frames the conduct as understandable, though not justified. Option B would apply if Isaiah suggested Ruben acted to help others. Option C would apply if the misconduct were presented as a one-time mistake. Option D would involve minimizing the seriousness of the offense. The statement primarily empathizes with Ruben’s perceived unfair treatment.

The correct answer is B. The CFE Manual explains that although legal professional privilege generally applies to confidential communications between a lawyer and the client, in most jurisdictions the protection extends to communications with third-party consultants hired to help provide legal advice, including fraud examiners, accountants, bankers, and other experts. Therefore, when an attorney shares privileged material with a fraud examiner who has been retained to assist in the case, that disclosure does not automatically waive the privilege.

Option A is incomplete and therefore not the most accurate. While the client does hold the privilege, the Manual also states that the privilege can be waived by the client’s attorney or a third party in some circumstances. Option C is incorrect because not every disclosure to a third party causes waiver; disclosure to a consultant working within the legal team may remain protected. Option D is also incorrect because the use of email itself does not create waiver. The more important question is whether the communication remained within the privileged relationship and was shared only with those assisting counsel. Since the fraud examiner was hired to work on the case, B is the most accurate answer.

According to the ACFE Fraud Examiners Manual, Law Section, particularly under The Criminal Justice System and Punishment , criminal forfeiture is a penalty imposed upon conviction that requires a defendant to surrender property derived from or used in the commission of a crime. Criminal forfeiture is in personam, meaning it is directed against the convicted defendant as part of the sentencing process. The objective is to deprive offenders of the proceeds and instrumentalities of their criminal conduct.

In option B, the defendant is ordered to transfer a vehicle she received as a bribe to the government. Because the vehicle constitutes proceeds or benefits obtained through criminal activity, requiring its transfer to the government is a classic example of criminal forfeiture.

By contrast, incarceration is a custodial sentence, a fine is a monetary penalty paid to the government, and restitution requires repayment to a victim. While restitution and fines are financial sanctions, they do not specifically involve forfeiture of property tied to the criminal offense.

Therefore, the scenario that best represents criminal forfeiture is the transfer of the vehicle received as a bribe to the government.

Marla cannot conclude that the suspect is being deceptive based solely on foot tapping. The ACFE materials warn that no single behavior proves anything. Behavioral observations must be evaluated against the individual’s baseline and interpreted in clusters, not in isolation. Restless behavior might indicate nervousness, discomfort, cultural habits, stress, physical conditions, or other innocent explanations. Although such behavior might be considered during an interview, it cannot safely support a conclusion of deception by itself. Option B is too absolute because restlessness can sometimes be considered a possible behavioral cue. Options C and D are incorrect because they overstate the reliability of nonverbal behavior. Therefore, the proper conclusion is that Marla should not isolate the behavior to infer dishonesty.

Limitations of online public record searches include:

Need to search multiple jurisdictions.

Records are often only abstracts.

Information must be verified for accuracy.There is no mention that online record vendors are “difficult to find.” In fact, many such vendors exist.

Data quality is important on both the inbound and outbound sides of any data transfer. Fraud examiners must ensure that the data received are complete, readable, accurate, and appropriate for the requested period and fields. They should also consider control totals, missing records, formatting issues, and whether the transfer process affected integrity. Option A is incorrect because many jurisdictions have data privacy laws governing collection, storage, disclosure, and transfer of personal data. Option B is wrong because interoperability matters even when a data sharing agreement exists; the receiving party must be able to read and use the data. Option C is not a necessary feature of every data sharing agreement. The best statement is that data quality must be ensured throughout the transfer.

Oral consent is generally not sufficient to obtain a suspect’s bank records. The CFE Prep - Investigations states:

“Accessing a subject’s bank records from financial institutions generally requires written consent. Oral consent is the least effective way to obtain permission”.

The Fraud Examiners Manual also notes that bank information can usually only be obtained with subpoena, search warrant, or written consent.

“Once a suspect utters a denial, it becomes extremely difficult… therefore, the interviewer must prevent an outright denial. Fraud examiners can use several techniques to stop or interrupt denials, including delays, repeated interruptions, and reasoning”.

Thus, the correct answer is D.

The Fraud Examiners Manual specifies:

“Fraud examinations should proceed from the general to the specific. That is, they should begin with general information that is known and then move to more specific details.”

Therefore, statement B is false, making it the correct answer.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about the core concepts in this area.

The correct answer is D: The agents working at the entity have criminal records..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

When the objective is asset recovery through civil legal action, the practical value of litigation depends heavily on collectability—whether a favorable judgment can be satisfied. CFE guidance on tracing and asset recovery highlights that tracing engagements are commonly undertaken specifically to determine whether a potential defendant can pay a court-ordered sum if judgment is entered, and to locate assets that can be used to satisfy a judgment. If the defendant is judgment-proof or has insufficient reachable assets, the legal action might be economically irrational even if liability is strong. While statute of limitations (D) is legally important, the question asks what is most important before moving forward with a recovery action; from an investigative and recovery perspective, the threshold question is whether there are assets to recover or a realistic path to enforcement. Past arrests (B) do not answer the recovery feasibility question. Option C misframes the decision: legal actions proceed based on evidence and counsel’s assessment, but recoverability often drives whether to invest in litigation. Therefore, assessing whether the defendant has sufficient money or property to satisfy a judgment is the most important preliminary question.

The best practice is to explain that the informant must be willing to sign a receipt to be paid. The ACFE materials state that if a fraud examiner pays an informant or source, the examiner should obtain a receipt, and if the informant refuses to sign one, the examiner should not pay them. A receipt helps prevent later disputes about whether payment occurred or how much was paid. Option A is poor practice because informant identities should be protected as much as possible. Option C is too broad because relevant informant information might need to be documented. Option D is improper because using a third party to hide the payment trail weakens accountability and can create legal and ethical issues.

Interview documentation should be accurate, objective, and useful, but the interviewer should avoid practices that distract the interviewee or compromise rapport. If recording is legally permitted, electronic recording equipment should not become the focus of the interview. Option B reflects the practical goal of reducing distraction. Option A is poor practice because each interview should generally be documented separately to preserve clarity and organization. Option C is improper because fraud examiners should not document opinions on guilt or innocence; that determination belongs to the fact finder. Option D is too rigid because interview notes normally need not be a verbatim transcript, though key statements may be quoted exactly when important. Proper documentation captures relevant facts without unnecessary editorializing.

The best response is to accommodate the witness’s schedule by offering to conduct the interview after work hours. Fraud examiners should seek cooperation without threats, coercion, or unnecessary pressure. Threatening to document a refusal in a personnel file can create resentment and might raise employment or legal concerns. Assuring the witness that the interview will not take long or will not be difficult might be misleading because the examiner cannot always know how long the interview will take. Mentioning coworkers’ cooperation can be manipulative and might unnecessarily disclose information about the investigation. Offering a reasonable scheduling accommodation maintains goodwill, encourages cooperation, and supports a professional interview environment while preserving the examiner’s ability to obtain relevant information.

“In jurisdictions that regulate credit information and personal data, a fraud examiner will generally need a legally acceptable reason for accessing such information from third parties… some common circumstances include when: the individual has given consent”.

Thus, with the individual’s consent, Leslie could obtain the report.

This question tests your knowledge of Domain 2.

In the context of The Law Related to Fraud, specifically relating to mail fraud, wire fraud, the question asks about US, MOST LIKELY.

The correct answer is A: Mail fraud.

This question addresses fraud-related laws. The correct answer identifies the proper legal concept or violation that applies in the described scenario. Fraud examiners must understand these legal principles to properly identify and address fraudulent activities.

The most relevant factor is whether the social media page or profile is publicly available. Fraud examiners may generally search and extract information from a subject’s page if it is open to the public. However, privacy settings and privacy laws limit what information may be accessed. Examiners should avoid pretexting, password cracking, social engineering, or other unethical means to access restricted material. Platform ownership and the likelihood of finding incriminating evidence do not determine legality. The type of content might affect relevance, but legality turns primarily on whether the information was lawfully available to the public or obtained through proper legal process. Therefore, option B is the best answer.

Cloud computing creates several difficulties for digital forensic investigations, including lack of data control, lack of information accessibility, jurisdictional issues, resource sharing, and chain-of-custody problems. The best answer is A because users and investigators often do not physically control where the data are stored, how they are preserved, who accessed them, or whether they are mixed with other users’ data. This complicates evidence identification, preservation, acquisition, and authentication. Option B is not the main forensic concern because bandwidth limitations are not the core legal or evidentiary problem. Option C is unsupported because prosecutorial interest is not identified as a cloud-forensics challenge. Option D is too absolute because legal orders can apply to cloud providers, although enforcement can be difficult across jurisdictions.

The Fraud Examiners Manual notes:

“Management of an organisation should ensure that the organisation has a proper and effective document retention policy in place… An effective policy requires clear retention protocols… and should be immobilised due to a pending investigation or foreseeable litigation.”

Thus, the existence of a document retention policy is a critical factor in deciding how to dispose of evidence.

To confirm ownership of a building, real estate and permit records are most useful. The Manual notes that real property records and related permits identify the owner, provide legal descriptions, and show improvements such as construction of commercial buildings. Court or voter registration records would not typically establish property ownership.

“The interviewer must not express disgust, outrage, or moral condemnation… the basic logic of obtaining confessions can be summed up as maximize sympathy and minimize the perception of moral wrongdoing”.

Sympathy creates an environment conducive to confession, while other options (third-party presence, emphasizing immorality, or pressuring with time) are explicitly discouraged.

When a suspect becomes withdrawn or emotional after alibis are diffused:

“The interviewer should not remain silent or discourage the accused from showing emotion. Such reactions often indicate consideration of confession. At this point, the interviewer should present an alternative question and continue reinforcing guilt with evidence”.

Thus, Scarlett should continue presenting evidence.

According to CFE Prep – Investigations:

“In most jurisdictions, income tax records are not public records and cannot be accessed for pre-employment purposes”.

Common public sources include court, property, licensing, and utility records.Thus, searching income tax filings is not a common use of public sources.

A key confidentiality practice is to warn those involved in the investigation not to transmit confidential case information through unsecured email or similar insecure channels. Fraud investigations should be handled on a need-to-know basis, and sensitive information should be protected from unnecessary disclosure. Option A is too broad because suspending all involved employees might be unnecessary, disruptive, and unfair. Option B is not required; private investigations do not automatically need government supervision. Option C is also too broad because blanket gag rules can create legal and labor-law problems in some jurisdictions. The better approach is controlled communication, secure handling of information, and limiting access to those who need the information to perform their duties. Therefore, option D is correct.

The Manual and Prep Guide state:

“Before conducting a covert operation, it is essential that the basis for the operation be committed to writing, preferably in a memo. The memorandum should clearly state: the information upon which the covert operation will be based; the information that is expected to be gained from the operation; the identities of suspects, if known; operatives under the fraud examiner’s care, custody, or control. Confidential sources’ identities should not be disclosed.”

Thus, expected information belongs, but confidential source identities must not

This question tests your knowledge of Uncategorized.

the question asks about alternative remittance systems is INCORRECT, INCORRECT.

The correct answer is A: The systems are not necessarily illegal..

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, the question asks about NOT.

The correct answer is A: The government relied on the false statement.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 11.

In the context of Testifying, specifically relating to expert witness, testimony, the question asks about the core concepts in this area.

The correct answer is D: Mya will assist the fact finder by providing specialized knowledge that will help them understand evidence..

This question relates to expert witness testimony. The correct answer accurately describes the role, qualifications, or techniques for effective expert testimony. Fraud examiners often serve as expert witnesses and must understand these principles. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

Administrative action is most appropriate when misconduct involves a regulated occupation, licensing authority, or administrative agency with authority over the individual’s professional conduct. A salesperson who submits false documentation on loan applications so customers are approved is engaging in misconduct connected to credit or lending documentation. Such conduct may justify referral to a regulator or administrative body, especially if the salesperson is licensed or subject to industry rules. Option A is primarily a criminal fraud scenario. Option B could lead to civil, criminal, or procurement-related action, but it focuses on a contractor rather than individual professional discipline. Option C involves theft or misuse of proprietary information, usually handled through civil or criminal remedies. Option D best fits potential administrative action against an individual for misconduct.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to criminal, adversarial, the question asks about TRUE, criminal proceedings and discovery in adversarial jurisdictions.

The correct answer is D: The judge is the primary driver of the discovery process in criminal proceedings..

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases.

The 2014 International Fraud Examiners Manual states:

“The information contained on a wire transfer generally will include the following items:

• The amount of the transfer

• The date of the transfer

• The name of the sender or originator

• The routing number of the originating bank or financial institution.”

Therefore, the correct answer is C.

This question tests your knowledge of Domain 8.

In the context of Criminal Prosecutions, specifically relating to deferred prosecution, the question asks about NOT.

The correct answer is A: To postpone prosecution until a company conducts an extensive internal investigation.

This question addresses criminal prosecution concepts. The correct answer correctly identifies aspects of criminal proceedings, burdens of proof, or sentencing options. Understanding the criminal justice process is essential for fraud examiners working with law enforcement.

“Electronic payment records can be valuable in tracing investigations… they can reveal, among other things, assets the subject has purchased”.

They can also reveal loans, real estate taxes, and business locations, but not directly whether Lottie is “skimming” funds.

This is a double-negative question because it contains two forms of negation: “Didn’t” and “wasn’t.” Double-negative questions are poor interview questions because they confuse the respondent and can suggest an answer opposite to the intended meaning. Fraud examiners should avoid them because they reduce clarity and can make the resulting answer unreliable or difficult to interpret. Option A is not the best description because the issue is not the order of the words, but the presence of two negatives. Option B is incorrect because the question does not merely control the answer; it creates confusion. Option D is less precise because a complex question usually combines multiple issues, while this question is specifically defective due to double negation.

“The failure to preserve the integrity of digital evidence could result in evidence being deemed inadmissible in a legal proceeding, or, even if admitted, it might not be given much weight because evidence of questionable authenticity does not provide reliable proof.”

Therefore, D is the most accurate statement.

According to the ACFE Fraud Examiners Manual, Law Section, specifically under Basic Principles of Evidence and Admissibility of Evidence , relevant evidence is defined as evidence having any tendency to make a fact that is of consequence to the determination of the action more or less probable than it would be without the evidence. This definition focuses on the logical relationship between the evidence and a disputed issue in the case.

Relevance is a foundational requirement for admissibility. If evidence does not bear on a material fact in dispute, it is generally inadmissible because it does not assist the trier of fact in resolving the matter. The threshold for relevance is relatively low; the evidence need only slightly increase or decrease the probability of a consequential fact.

Circumstantial evidence refers to indirect evidence that requires inference to connect it to a conclusion of fact, while testimonial evidence consists of statements made by a witness under oath. Demonstrative evidence includes physical objects, models, or visual aids used to illustrate testimony. Although these are types or forms of evidence, they are not definitions of the concept described in the question.

Therefore, the correct term for evidence that makes a disputed fact more or less likely is relevant evidence.

The Fraud Examiners Manual explains:

“Before running tests on the data, the fraud examiner must make certain the data being analysed are relevant and reliable for the objective of the engagement… Using the profile of potential frauds as a guide, the fraud examiner must identify the target data for analysis”.

The manuals explain that in verbal confessions, subjects often underestimate the amounts to minimize guilt, not overestimate. The process involves moving from accusation to benchmark admission, handling lies tactfully, and obtaining details by chronology, transaction, or event. Thus, option B is NOT true.

Fraud examiners can obtain documentary evidence by consent, subpoena, or other legal means. While oral consent may sometimes be sufficient, bank records from financial institutions generally require written consent. Without written consent, the bank is not required to provide access. As stated in the manual:

“Accessing a subject’s bank records from financial institutions, for instance, generally requires written consent. If no consent is given… legal action might be required, most often a subpoena or other court order”.

Thus, although the suspect gave oral consent, Alex cannot access the bank records without written authorization or legal order.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to money laundering, the question asks about money services businesses (MSBs) is INCORRECT, INCORRECT.

The correct answer is B: MSBs are generally less strictly regulated than traditional financial institutions..

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

The correct answer is D. The CFE Manual explains that when parties or assets are spread across multiple jurisdictions, a judgment obtained in one country is not automatically effective everywhere else. In fact, a domestic judgment against a foreign defendant may be useful for recovering assets located in the domestic country, but it might be worthless for reaching assets located in a foreign country. The Manual also states that some countries enforce foreign judgments, but others do not, and enforceability often depends on the internal laws of the enforcing jurisdiction and whether there is an enforcement treaty between the relevant countries.

This is why options A and C are incorrect. Enforceability is absolutely affected by the law of the place where enforcement is sought, and foreign judgments are not universally or automatically recognized worldwide. Option B is also too absolute because asset location can matter practically, but the Manual makes clear that enforceability does not always depend solely on where assets are located. The better statement is that a judgment secured in one jurisdiction might not be effective in another jurisdiction where the defendant resides or holds assets. That is the cross-border enforcement problem fraud examiners must understand when asset recovery is involved.

The 2014 International Fraud Examiners Manual provides:

“Fraud examiners can use a correlation analysis to determine the relationships between different variables in raw data… For example, there should be a strong correlation between the independent and dependent variables because there is a direct relationship between them. Hotel costs should increase as the number of days travelled increases.”

CFE Prep – Investigations echoes this:

“Using the correlation analysis function, fraud examiners can determine the relationships between different variables in the raw data. For example… Hotel costs should increase as the number of days travelled increases.”

Thus, the most useful analysis is Correlation analysis.

The tracing process begins by profiling the subject. The Fraud Examiners Manual identifies “Profile the Subject” as an early step in tracing illicit transactions, followed by reviewing information for leads, prioritizing those leads, and tracing the transactions. A proper profile includes financial information, such as assets, liabilities, income, and expenses, along with behavioral indicators such as lifestyle, habits, residences, vehicles, and spending patterns. Option A is incorrect because tracing is not a one-time collection event; it is iterative and lead-driven. Option B is incomplete because recovery considerations should influence the tracing strategy throughout the matter, not only after tracing is finished. Option D is inefficient because leads should be prioritized by relevance, reliability, and likely value, not simply handled in order received.

Social media content is dynamic—posts can be edited, deleted, or moved—so fraud examiners must preserve relevant information promptly and in a manner that supports authenticity and admissibility. CFE investigative guidance emphasizes that documentary (including digital) evidence carries limited value in legal proceedings unless it can be shown to be authentic and in substantially the same condition as when collected. Simply saving a link (Option A) is weak because the underlying content can change, and a link does not preserve what was actually observed. Requesting a copy from the platform (Option B) is often impractical as a routine step and may require legal process; it also does not replace contemporaneous preservation by the examiner. A “forensic shutdown” (Option C) is not an appropriate method for preserving web-based social media content because the key evidence exists on external servers, not solely on the examiner’s machine. Proper practice is to download/capture and preserve what was observed while documenting the collection steps and maintaining a defensible chain of custody so authenticity can be established if needed in court.

During the analysis phase of a digital forensic investigation, Emily’s primary concern should be maintaining the integrity of the data. Digital evidence is fragile, and improper handling can alter files, metadata, logs, or other information. The ACFE materials emphasize that fraud examiners must protect the integrity of digital evidence and should develop procedures to prevent allegations that the collection or analysis methodology damaged or changed the evidence. Option B is incorrect because the examiner should consider both inculpatory and exculpatory evidence objectively. Option C is too absolute because no single software guarantees full recovery of all data. Option D is also incorrect because examiners may use multiple validated tools if appropriate. Integrity, reliability, and defensibility are the key concerns.

This question tests your knowledge of Domain 6.

In the context of Tax Fraud, specifically relating to tax evasion, the question asks about the core concepts in this area.

The correct answer is B: False.

This question focuses on tax fraud concepts. The correct answer distinguishes between legal tax avoidance and illegal tax evasion, or identifies specific tax evasion schemes. Tax fraud investigations require specialized knowledge of tax laws and common evasion techniques.

The Fraud Examiners Manual makes clear that covert operations are extraordinary measures that require high skill and planning and should be used only when no other practical method is available. They carry significant risks, including embarrassment, liability, and even injury or death. Therefore, covert operations should not be the first resort but instead follow conventional evidence-gathering efforts.

Fraud examiners should generally avoid allowing unnecessary observers in interviews. Additional observers can affect the interviewee’s responses, create confidentiality concerns, increase the chance of later disputes, and potentially expose the organization or examiner to legal claims. The Fraud Examiners Manual emphasizes that interviews should be controlled and that the interviewer should avoid unnecessary third-party participation unless the law, a collective bargaining agreement, language needs, or similar requirements make an observer necessary. The HR manager’s desire to observe is not, by itself, a sufficient reason to permit attendance. Option D is still risky because silent presence can influence the interview. Option A is based on comfort rather than investigative control. Therefore, if the law permits, Ana should not allow the HR manager to witness the interview.

When dealing with potentially hostile or volatile interviewees, fraud examiners are advised not to give much advance notice. This reduces the chance that the subject will prepare evasive or combative responses. The Fraud Examiners Manual emphasizes minimizing preparation time for resistant interviewees to ensure more candid responses.

Admission-seeking interviews should be carefully planned so the examiner can control the place, time, and subject matter. The Fraud Examiners Manual states that no observers other than the subject and up to two fraud examiners should usually be present because outsiders can interfere with obtaining a confession and can create legal issues. However, exceptions can exist when law, regulation, union rights, attorney rights, or practical needs such as language interpretation require another person’s presence. Option A is weak because friends or relatives are not ideal interpreters due to bias and confidentiality concerns. Option B is incorrect because chairs should generally be four to six feet apart, not within two feet. Option D is not a best practice.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to inquisitorial, the question asks about the core concepts in this area.

The correct answer is D: The judge.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases.

“Alibis generally can be diffused by displaying physical evidence… evidence should be displayed one piece at a time, in reverse order of importance”?16:2014 International Fraud Examiners Manual.pdf†L11-L14?.

The Prep Guide warns: “The proper technique is not to lay it all out at once” .

Thus, showing everything at once is the least effective.

The manual emphasizes that interviews—especially with subjects in other jurisdictions—pose legal and cultural considerations. Fraud examiners must consider cultural norms (such as personal space, body language, and eye contact) and jurisdiction-specific laws governing the use of information from interviews. In particular, some jurisdictions limit how interview information can later be used. Therefore, the most accurate statement is that the examiner should verify such limitations before proceeding.

The Fraud Examiners Manual lists required steps before seizing evidence:

Obtain legal authority.

Review privacy issues.

Ensure software/hardware are validated.

Document surroundings, inspect for traps, image drives, etc.

There is no requirement to assemble a team exclusively of outside experts.

Before seizing evidence in a digital forensic investigation, the 2014 International Fraud Examiners Manual outlines several critical steps:

Obtain legal authority / review orders:

“Before obtaining evidence, ensure that there is legal authority to seize evidence and review the data associated with the evidence. This might require obtaining a warrant in a criminal matter or ensuring that internal policies authorise seizure for an internal investigation.”

Determine privacy issues:

“Before the fraud examiner can seize evidence, he must take certain steps to help ensure that the evidence will be admissible: He must determine whether there are any privacy interests in the item(s) to be searched… In every case where it becomes necessary to seize a computer or other device capable of storing digital evidence, the investigator should consult with legal counsel.”

Use only trained professionals/software:

“It is important to allow a trained examiner to conduct a proper seizure and examination of digital evidence to help ensure that the information can be used in a legal proceeding.”

? These are all valid required steps.

In contrast, the idea that the team must be composed only of outside digital forensic experts is NOT a required step. The Manual stresses flexibility in team composition:

“Some organisations have their own in-house personnel… while others might prefer the use of an outside examiner. Sometimes retrieving digital data is as easy as searching the target computer’s hard drive, but other times retrieval requires a thorough knowledge of computers.”

Thus, requiring only outside experts is not a standard step, since investigations may use internal, external, or a mix of specialists depending on the situation.

Probation is a criminal sentence that allows an offender to remain in the community under supervision instead of serving time in prison or jail. Juniper has already been found guilty, and the court sentenced her to supervision by a government agent for one year in place of incarceration. That is the classic structure of probation. A determinate sentence is a fixed term of incarceration or punishment. An indeterminate sentence gives a range, such as a minimum and maximum term, often with release dependent on later review. A deferred prosecution agreement generally occurs before conviction and postpones prosecution if conditions are satisfied. Because Juniper’s punishment consists of supervised release after guilt has been established, the best answer is probation.

In most adversarial jurisdictions, a person can qualify as an expert based on education, training, skill, knowledge, or experience. Therefore, experience alone may be sufficient if it gives the witness specialized knowledge that will help the fact finder understand evidence or determine a disputed fact. A professional certification can strengthen an expert’s qualifications, but it is not always required. The agreement of all parties is also not required; the judge decides whether the witness is qualified and whether the testimony is relevant and reliable. Education is important, but it is not the sole or primary basis in every case. Fraud examiners can qualify as experts when their practical experience and specialized knowledge meet the court’s standard.

“When searching for an individual, the fraud examiner should obtain a past address of the subject, and search activities should begin with that information”.

Therefore, saying a past address is “of no help” is incorrect.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to common law, the question asks about MOST ACCURATE, the litigation privilege in common law jurisdictions.

The correct answer is A: The primary purpose of the litigation privilege is to protect confidential communications between a client and the client ' s legal representative.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

“Even when a victim refers a fraud case for criminal prosecution, the government will usually not disclose the contents of nonpublic records with the victim during the investigation”.

Thus, option D is most accurate.

“Opinions or conclusions concerning the guilt or innocence of a fraud suspect is outside the scope of a fraud examination and should never be included in a report”.

Functions of a fraud examination report include presenting evidence, corroborating facts, and supporting credibility. Communicating the examiner’s qualifications to provide opinions is not a function.

Therefore, option D is not a function of a fraud examination report.

Textual analytics is described as:

“a method of using software to extract usable information from unstructured text data… to reveal patterns, sentiments, and relationships indicative of fraud… Textual analytics provides the ability to uncover additional warning signs of rogue employee behavior”.

Its purpose is not to find direct admissions but to identify indicators and patterns.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about XYZ, BEST.

The correct answer is A: Public disclosure of private facts.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Alternative dispute resolution commonly includes mediation and arbitration. In mediation, an impartial third person helps the parties reach a mutually agreeable resolution, but the mediator does not decide who wins. If the parties reach a mediation agreement, it is generally enforceable as a binding contract, making option C correct. Option A describes mediation, not arbitration. In arbitration, the dispute is submitted to an impartial third person who decides the outcome. Option B is incorrect because arbitration can be binding or nonbinding depending on the agreement and applicable rules. Option D is wrong because a mediator facilitates settlement rather than deciding the merits. Understanding these distinctions is important in civil fraud matters because many disputes are resolved outside trial.

This question tests your knowledge of Domain 10.

In the context of Basic Principles of Evidence, specifically relating to privilege, the question asks about NOT.

The correct answer is B: A lawsuit has been filed.

This question tests knowledge of evidence principles. The correct answer correctly distinguishes between types of evidence, admissibility requirements, or evidentiary privileges. Proper handling of evidence is crucial for successful fraud investigations and prosecutions.

The Fraud Examiners Manual and CFE Prep Guide both state:

“In an admission-seeking interview, the interviewer should transition to the verbal confession when the accused furnishes the first detailed information about the offence. There are three approaches to obtaining the confession: chronologically, by transaction, or by event”.

Thus, B is the true statement.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, common law, the question asks about EXCEPT.

The correct answer is C: Injunctions.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

“Credit card records… show card purchasing limits, previous payment history, account balance, when and where the subject has travelled, restaurants frequented, and assets acquired. In short, these records show the movements and habits of the person”.

Therefore, B is correct.

The Fraud Examiners Manual notes that when witnesses become hostile or argumentative, the interviewer should generally remain calm and avoid reacting to hostility. Reacting, reasoning, or arguing often escalates the situation. Instead, the interviewer should maintain control and neutrality .

In jurisdictions that allow criminal bargaining agreements, the prosecution generally has discretion to decide whether to offer a bargain. The Fraud Examiners Manual explains that bargaining agreements occur when a defendant agrees with prosecutors to plead guilty or provide a confession in exchange for lesser charges, a reduced sentence, or another negotiated resolution. Such agreements are used to make criminal justice processes more efficient by reducing the need for full trials. Judges may need to approve or accept the final agreement depending on local law, but the offer itself usually comes from the prosecution. Defense counsel may request or negotiate a bargain, but counsel does not control whether one is offered. Therefore, option B is the most accurate statement.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATE, the circumstances under which a conflict of interest claim would be actionable against an agent.

The correct answer is B: The agent must have had an undisclosed interest m a matter that could influence their professional role.

This question tests your understanding of key fraud examination concepts and legal principles.

According to the ACFE Fraud Examiners Manual, Law Section, particularly under The Criminal Justice System and Sentencing , probation is a sentencing alternative in which a convicted offender’s incarceration is suspended, and the individual is allowed to remain in the community under specified conditions. If the offender complies with the conditions—such as maintaining good behavior, reporting to a probation officer, or paying restitution—the individual may avoid serving the custodial sentence.

In this scenario, Paul has already been convicted of embezzlement. The court has imposed a sentence but suspended its execution contingent upon his promise of good behavior. This arrangement is characteristic of probation. The conviction remains in place, but incarceration is conditionally withheld. If Paul violates the terms, the court may revoke probation and require him to serve the original sentence.

A deferred prosecution agreement occurs before conviction and typically involves postponing prosecution in exchange for compliance with certain conditions. Determinate and indeterminate sentences refer to the structure or length of imprisonment, not to suspension of incarceration.

Therefore, Paul’s sentence is best described as probation.

This question tests your knowledge of Domain 3.

In the context of Bankruptcy Fraud, specifically relating to bankruptcy, bustout, the question asks about CEO, MOST LIKELY.

The correct answer is D: A concealed transfer.

This question focuses on bankruptcy fraud concepts. The correct answer correctly identifies the relevant bankruptcy process, filing type, or fraud scheme. Understanding bankruptcy proceedings and the roles of various parties is essential for fraud examiners investigating these cases.

Fraud examination is the process or methodology of resolving allegations or signs of fraud from inception to disposition. The ACFE materials describe fraud examination as a structured, legal, evidence-based process that moves from general information to specific conclusions. It includes obtaining evidence, reporting findings, testifying when necessary, and assisting in fraud prevention and detection. Fraud response is broader organizational action after suspected fraud arises. Fraud deterrence focuses on discouraging fraud through controls, ethics, governance, and consequences. Fraud management is not the precise term used for this investigative methodology. Because the question asks for the methodology that resolves fraud allegations from beginning to end and also assists with prevention and detection, the correct answer is fraud examination.

“Signs of stress do not always mean that a subject is lying… While lying and deception do cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

The Prep guide confirms: “While lying and deception do indeed cause stress, it is not necessarily true that all stress exhibited during an interview is caused by lying”.

Therefore, Carlos should not automatically conclude deception from stress behaviors.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, the question asks about the core concepts in this area.

The correct answer is A: True.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms.

The conviction intime standard, also called the inner-conviction standard, is used in many civil law systems. It requires the fact finder to be convinced on an inner, deep-seated level that the defendant is guilty. This differs from the common law “beyond a reasonable doubt” standard, which requires the fact finder to be as sure as possible but does not demand absolute certainty. Option A is incorrect because no criminal burden of proof requires philosophical absolute certainty. Option B more closely describes the common law reasonable-doubt concept, not conviction intime. Option C uses the phrase “reasonable intuition,” which is not the standard described in the legal materials. Therefore, option D accurately states the civil law burden.

The best answer is A. A personal mobile phone brought to the office from home. In the CFE Law materials, workplace privacy analysis turns on whether the employee has a reasonable expectation of privacy in the place or item searched and whether the employer’s search is justified, necessary, and proportionate. Personal items that belong to the employee, especially items brought from home and used for private communications or storing personal data, are the strongest candidates for a protected privacy interest.

By contrast, an employer-issued laptop is usually much less private because it is company property and often subject to workplace monitoring policies. A desk drawer in a communal workspace may carry some expectation of privacy in certain situations, but generally less than a personally owned phone, especially if the workspace is shared or subject to employer access. A recycling bin is the weakest option because discarded items usually carry little or no reasonable expectation of privacy. Therefore, among the listed choices, the item an employee is most likely to have a reasonable expectation of privacy in is the personal mobile phone. This answer is also consistent with the broader CFE principle that privacy protection is strongest where the item is personal, private, and not owned or controlled by the employer.

Sylvia’s expensive home, luxury jewelry, and high-end clothing are lifestyle red flags, especially because she is a purchasing manager, a role that can be vulnerable to kickbacks or conflicts of interest. However, red flags alone do not justify a direct accusation or aggressive search without proper authority. Predication means there is a reasonable basis to begin additional inquiry, not proof that fraud occurred. The appropriate next step is to conduct discreet inquiries about Sylvia’s responsibilities, vendor relationships, purchasing authority, and possible explanations for the lifestyle indicators. Searching email may require authorization and legal review. Informing executives that she might have committed fraud or confronting her directly would be premature. Therefore, option D is the proper investigative response.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to employee, cooperate, privacy, the question asks about MOST ACCURATE, CFE.

The correct answer is C: Burton likely has a duty to cooperate with the investigation as part of the employer-employee relationship.

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

Best practice for signed statements:

Fraud examiners should prepare the statement, keep it concise, and ensure voluntariness and intent are clear.

While not legally required, it is recommended that two individuals witness the signing.? Answer: C. Have two individuals witness the signing of the document when possible

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

The best answer is C. Raul must have breached the duty of fidelity that he owed to XYZ Org. In the CFE framework, a conflict of interest becomes legally actionable when the employee’s undisclosed or improper self-interest results in a breach of the duty owed to the employer. Employees are expected to act in the organization’s best interests when performing their job responsibilities. When an employee allows a personal or economic interest to interfere with that duty, the issue is no longer just an appearance problem; it can become a legal wrong.

Option B describes a common way a conflict of interest arises—failure to disclose a personal or economic interest—but that fact alone is not always the full legal basis of an actionable claim. The central legal problem is the breach of loyalty or fidelity to the employer. Option A is incorrect because disclosure to the organization generally weakens, rather than establishes, a concealed conflict-of-interest claim. Option D is also incorrect because a direct financial benefit is not always required; the actionable issue is the employee’s divided loyalty and breach of duty, not necessarily proof of a specific direct payment. Therefore, the legally necessary condition that makes the claim actionable is the breach of the duty of fidelity, making C the strongest answer.

A common method for hiding ill-gotten gains is transferring assets into another person’s name. The ACFE materials explain that fraudsters may place property, accounts, vehicles, safe-deposit boxes, or other assets in the name of a spouse, relative, friend, business partner, or nominee to disguise ownership and protect the assets from seizure, taxes, creditors, or recovery efforts. Giving funds to charity is not listed as the best general concealment method in this question. Paying taxes owed is legitimate and does not conceal illicit assets unless part of a separate scheme, such as overpayment. Purchasing a used vehicle is too ordinary and not as clearly tied to concealment. Therefore, option B is the correct answer.

This question tests your knowledge of Domain 9.

In the context of Civil Actions, specifically relating to trial, the question asks about the core concepts in this area.

The correct answer is A: Myopic vision.

This question focuses on civil action processes. The correct answer accurately describes civil litigation procedures, evidence preservation, or remedies available to fraud victims. Civil recovery is often an important component of fraud resolution. Expert witnesses provide specialized knowledge to help the fact finder understand complex issues. Their testimony must be relevant, reliable, and based on sufficient facts or data.

This question tests your knowledge of Domain 7.

In the context of Individual Rights During Examinations, specifically relating to GDPR, the question asks about EU, GDPR.

The correct answer is A: An organization must obtain a data subject ' s consent before collecting or processing personal data about that individual..

This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.

This question tests your knowledge of Uncategorized.

the question asks about US, FCPA.

The correct answer is C: A private U S company transfers $45,000 to a foreign official to influence the award of a public construction contract..

This question tests your understanding of key fraud examination concepts and legal principles.

This question tests your knowledge of Domain 4.

In the context of Securities Fraud, specifically relating to securities, SRO, the question asks about MOST ACCURATE, serf-regulatory organizations (SROs) in the securities industry.

The correct answer is D: In some jurisdictions SROs establish the standards and rules under which members of the securities industry operate.

This question tests knowledge of securities fraud and regulation. The correct answer accurately describes the role of regulatory bodies, securities laws, or fraud schemes in this context. Securities fraud is a specialized area requiring knowledge of specific regulations and oversight mechanisms. Self-regulatory organizations (SROs) play an important role in the securities industry by establishing standards and rules for their members, but they typically operate under the oversight of government regulators rather than having sole authority.

Isla is attempting to create rapport. Introductory questions should help establish trust, cooperation, and communication before the examiner moves into the fact-gathering portion of the interview. The Fraud Examiners Manual describes rapport as a harmonious relationship that fosters cooperation and trust. Asking a simple, friendly question about coffee or tea is casual conversation designed to make Doug comfortable and create common ground. Option A is too broad because the facts do not show she is structuring a questioning pattern. Option B is different; the interview theme states the general purpose of the interview. Option D is incorrect because the question is not meant to distract Doug, but to relax him and encourage open communication.

This question tests your knowledge of Domain 5.

In the context of Money Laundering, specifically relating to FATF, the question asks about COD, FATF.

The correct answer is A: True.

This question addresses money laundering concepts. The correct answer correctly identifies the stage, method, or regulatory framework related to money laundering or anti-money laundering efforts. Understanding these processes is critical for fraud examiners working to detect and prevent financial crimes.

Both the CFE Prep Guide and the Fraud Examiners Manual state that every fraud examination must be conducted under the assumption that litigation will result. This ensures that evidence is collected and preserved properly, in compliance with legal standards:

“Each fraud examination should begin with the proposition that the case will end in litigation… If the fraud examiner assumes that litigation will occur, he will conduct the examination in accordance with the proper rules of evidence”.

This principle protects the integrity of the examination and ensures admissibility of evidence if the matter proceeds to court.

The 2014 International Fraud Examiners Manual defines:

“Fraud examination is a methodology of resolving signs or allegations of fraud from inception to disposition. The fraud examination methodology establishes a uniform, legal process for resolving signs or allegations of fraud on a timely basis.”

Similarly, CFE Prep – Investigations confirms:

“The term fraud examination refers to a process of resolving allegations of fraud from inception to disposition, and it is the primary function of the anti-fraud professional.”

Thus, the correct answer is D.

Lay testimony, also called factual testimony, is based on what the witness personally saw, heard, did, or otherwise experienced. A lay witness helps the fact finder understand facts by providing firsthand observations, not specialized opinions. Expert witnesses, by contrast, may provide opinions based on specialized education, training, skill, or experience. Option A describes expert testimony. Option C is improper because witnesses generally should not express opinions on the defendant’s guilt or innocence. Option D also goes beyond the usual role of a lay witness because determining validity or evidentiary weight is generally the role of the court or fact finder, unless expert testimony is properly admitted. Therefore, Bob’s primary purpose is to provide factual observations.

Employees generally have a duty to cooperate with reasonable workplace investigations arising from the employer-employee relationship. The Fraud Examiners Manual explains that this duty commonly extends to internal investigations, provided that the employer’s requests are reasonable under the facts and circumstances. Florence is an employee of Q-22, and Virgil is conducting a private internal investigation into suspected fraudulent expense claims. Therefore, Florence likely must cooperate with reasonable interview requests, document requests, or other investigative steps related to her duties. Option B is too broad because employees are not required to comply with unreasonable demands. Options A and D incorrectly suggest that private-company status eliminates the duty to cooperate.

The correct answer is D because it is the statement that is not accurate. In adversarial jurisdictions, cross-examination is generally not used primarily to discover previously unknown information. Instead, opposing counsel usually cross-examines a witness to diminish the importance of the witness’s testimony, obtain admissions that support the opposing side, or attack the witness’s report, opinion, or credibility. The Manual makes clear that one of the major goals of cross-examination is to discredit the testimony or the witness.

Option A is accurate because the CFE Manual advises witnesses that if opposing counsel asks an overly complex, long, or imprecise question, the witness should ask for it to be rephrased into smaller components. Option B is also accurate because discrediting the witness or the witness’s opinion is a recognized goal of cross-examination. Option C is accurate as well; the Manual states that opposing counsel’s “golden rule” is to cross-examine only if it would benefit the case. Accordingly, D is the exception because cross-examination is a controlled advocacy tool, not mainly a device for open-ended information discovery.

This question tests your knowledge of Uncategorized.

the question asks about his illicit assets, James deposits $9,000 each day.

The correct answer is D: Structuring scheme.

This question tests your understanding of key fraud examination concepts and legal principles.

Guidance on reports:

“A fraud examination report should be accurate, clear, and impartial. The fraud examiner should avoid technical jargon where possible and write in plain language so that readers without specialized knowledge can understand”.

Reports should only include relevant, factual findings—not every detail or opinion.

So, the most accurate statement is that jargon should be avoided.

Websites ending in “.onion” are only accessible via specialized browsers (e.g., Tor). The Fraud Examiner prep materials note:

“.onion sites are part of the dark web, which is distinct from the surface web and deep web. Accessing requires specialized browsers” (CFE Prep – Investigations).Thus, Jade must use a dark web browser.

The recommended questioning order is:

“As a general rule, questioning should proceed from the general to the specific; that is, it is best to seek general information before seeking details”.

This ensures the respondent provides a free narrative before narrowing down to specifics.

The correct answer is D. Obstruction of justice. Obstruction-of-justice offenses commonly include conduct intended to impede, obstruct, influence, or interfere with an investigation or proceeding, including the destruction of records and documents after a defendant learns of the government’s case. The Department of Justice has repeatedly treated destruction of incriminating records during an investigation or pending proceeding as obstruction. In one recent case, DOJ stated that knowingly destroying records to impede a federal investigation constituted obstruction; in another, a former DOJ attorney admitted that destroying documents after release from custody was part of an effort to obstruct the ongoing investigation and proceedings against him.

The other options do not fit the facts. Fraudulent misrepresentation involves false statements or deceptive representations. Misappropriation of evidence is not the standard offense label here. Conspiracy to influence the court would require an agreement with others and does not match the single act described. Angel’s conduct is best understood as an effort to destroy incriminating evidence after being charged, which directly interferes with the justice process. Accordingly, the most likely additional charge would be obstruction of justice.

The manual states:

“When seizing a computer that is running, the party seizing the system should not, in most situations, search the computer for evidence because doing so might damage and taint relevant evidence.”

Thus, B is the least accurate statement.

The Fraud Examiners Manual notes:

“Companies are formed by submitting some type of organisational filing… these company records are generally public records and will include: corporate name, ownership information, location of the principal office, date of incorporation”.

The Prep guide also confirms: “A company’s organisational filing with the government generally includes information about the company’s ownership, initial shareholders, and the location of its principal office”.

Under the ACFE Fraud Examiners Manual, Law Section, particularly The Civil Justice System and Individual Rights During Examinations , individuals have legally protected privacy interests that can give rise to civil liability when violated. One recognized invasion of privacy tort is intrusion upon seclusion, which occurs when someone intentionally intrudes, physically or otherwise, into another person’s private affairs without authorization and in a manner that would be highly offensive to a reasonable person.

In this scenario, Wilson searched Garcia’s private tablet without legitimate authority or investigative basis. Garcia had a reasonable expectation of privacy in her personal device, and there was no suspicion of wrongdoing to justify the intrusion. Because the wrongful act is the unauthorized access itself, Garcia would most likely assert a claim for intrusion into private matters.

Public disclosure of private facts requires dissemination of private information to third parties, which is not indicated here. Defamation requires a false statement communicated to others that harms reputation, which is also absent. Property damage would require physical harm to the tablet.

Therefore, the most appropriate civil claim is intrusion into an individual’s private matters, as the injury arises from the unauthorized invasion of Garcia’s privacy.

This question tests your knowledge of Domain 6.

In the context of Tax Fraud, specifically relating to tax avoidance, tax evasion, the question asks about EXCEPT.

The correct answer is B: Death of the taxpayer.

This question focuses on tax fraud concepts. The correct answer distinguishes between legal tax avoidance and illegal tax evasion, or identifies specific tax evasion schemes. Tax fraud investigations require specialized knowledge of tax laws and common evasion techniques.

The Manual emphasizes that interviews should be held where the respondent feels comfortable and secure, not threatened:

“When possible, the interview should be held in a venue where the subject will feel comfortable and secure”.

Holding it in an uncomfortable setting is counterproductive and contrary to best practices.

The CFE Prep – Investigations warns against relying solely on eye contact:

“Behavioural clues are harder to read … Additionally, racial, ethnic, and economic factors should be carefully considered when observing a respondent’s behaviour. Some cultures, for example, discourage looking directly at someone. Other cultures use certain body language that might be misinterpreted.”

Therefore, lack of eye contact cannot safely be taken as proof of dishonesty.

Phone records are classified as nonpublic records. The Fraud Examiners Manual explains that personal telephone and mobile records usually require consent, subpoena, or warrant to access. Public records, by contrast, include real property ownership and corporate filings. Therefore, B is correct.

Digital evidence is more volatile than tangible evidence because electronic data can be altered, overwritten, deleted, or destroyed very easily. Even ordinary system activity can change metadata, access logs, temporary files, or other important information. This is why fraud examiners must preserve digital evidence carefully, often by using forensic imaging, write-blocking tools, and validated procedures. Option A is incorrect because once integrity is compromised, the evidence usually cannot simply be restored to its original evidentiary condition. Option B is wrong because digital evidence is also subject to spoliation concerns. Option D is false because failure to preserve integrity can affect admissibility or weight in legal proceedings. Therefore, option C is the most accurate statement.

Wire fraud is the most likely basis because Noah used electronic communications and interstate transmissions to carry out a scheme to obtain money. Phishing emails, remote account access, and electronic transfers of funds are classic uses of wires or electronic communications in furtherance of fraud. Mail fraud would require use of the postal system or covered mail services, which is not described. “Communications fraud” and “interstate fraud” are not the standard charge that best fits the facts. The key facts are that Noah targeted companies across multiple states, used phishing emails to obtain credentials, and transferred funds electronically. In U.S. fraud-law analysis, schemes involving electronic communications and fund transfers are generally prosecuted as wire fraud when the statutory elements are met.

Tree maps are a data visualization technique that display hierarchical data using rectangles divided into smaller regions. The size, color, or placement of each rectangle can help communicate relative volume, grouping, or importance within the hierarchy. Option A is incorrect because keyword size and frequency are associated more closely with word clouds, not geospatial analysis. Geospatial analysis concerns location-based data. Option C is incorrect because color-coding and compatibility may improve visual communication, but they are not the core objectives of data visualization. Option D confuses link analysis with geospatial mapping; link analysis is used to show relationships among people, entities, transactions, accounts, or events. Therefore, the statement about tree maps is the accurate description.

This question tests your knowledge of Uncategorized.

the question asks about MOST ACCURATELY.

The correct answer is B: A broker-dealer learns about a promising investment and recommends it to their new client without knowing the client ' s relevant personal and financial information..

This question tests your understanding of key fraud examination concepts and legal principles.

Explanation with Extracts = The 2014 Fraud Examiners Manual states:

“The EU Data Protection Directive … regulates the processing, using, and transferring of personal data within the European Union, and it places limits on transmitting personal data to non-EU countries”.

Therefore, a U.S.-based examiner handling HR data of an EU employee must comply with EU GDPR requirements.

This question tests your knowledge of Uncategorized.

the question asks about the core concepts in this area.

The correct answer is D: Counterclaim.

This question tests your understanding of key fraud examination concepts and legal principles.

The correct answer is D. Civil law system. A civil law system is generally characterized by reliance on codified statutes and written legal codes as the primary source of law. In these systems, courts apply legislative codes to the facts of each case, and judicial decisions from prior cases usually do not bind future courts in the same way that precedent operates in common law systems. This description matches the facts given in the question exactly.

Option B, the common law system, is incorrect because common law jurisdictions place much greater weight on judicial precedent, meaning earlier court decisions can be binding on later cases involving similar legal issues. Options A and C sound plausible, but they are not the standard legal-system labels used in comparative law. For CFE purposes, the recognized contrast is generally between civil law and common law systems. Understanding this distinction is important in fraud examinations because legal procedure, evidentiary practices, court structure, and the investigator’s interaction with attorneys and judges can differ significantly depending on the type of legal system involved. Since the question emphasizes codified law and the absence of binding precedent, civil law system is the most accurate answer.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about XYZ, BEST.

The correct answer is C: Counterclaim.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

This question tests your knowledge of Domain 1.

In the context of Overview of the Legal System, specifically relating to civil, the question asks about BEST.

The correct answer is D: The courts are bound by codified principles or statures but are not bound by previous court decisions.

This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions.

Textual analytics is used to extract investigative insight from unstructured data—communications and documents that are not stored in standard database fields—such as emails, chats, memos, and other narrative text. CFE investigative guidance explains that textual analysis applies linguistic methods and statistical techniques to identify themes, anomalies, and linkages within large volumes of text. Its purpose is not to determine truthfulness or deception with certainty (Option A), because text analytics cannot reliably “detect lies” in a definitive way. Nor is its primary objective to guarantee discovery of a confession (Option B); admissions can appear, but that is not the defining function of the approach. Option C aligns more with flow-of-funds visualization or link/relationship charting for financial movements rather than analyzing language content. Instead, textual analysis is performed to categorize and structure text so patterns, sentiments, recurring topics, and relationships between people and events become visible—helping examiners prioritize leads, identify risk indicators, and focus investigative testing on communications most indicative of potential fraud.

The correct answer is B. False. A defendant does not ordinarily file the initial lawsuit. In a civil action, the plaintiff—here, Mary—is the party who begins the case by filing a complaint or similar pleading in a court that has proper jurisdiction. The CFE Law materials explain that civil actions generally begin with the filing of a pleading by the plaintiff, usually in the jurisdiction where the defendant resides or where the claim arose. That directly contradicts the statement in the question.

The statement is also inaccurate because a lawsuit cannot simply be filed in any court in either country. A proper court must have jurisdiction over the parties and the subject matter, and venue rules must also be satisfied. In cross-border disputes, those issues can become even more complex, especially where the parties live in different countries. The core error, however, is enough to make the statement false: Keith, as the defendant, does not get to initiate the case merely because he is the defendant. Mary, as the party claiming legal relief, would normally be the one to file. Therefore, under basic civil procedure principles used in the CFE Law topics, the answer is False.

Perjury generally involves knowingly making a false statement under oath or affirmation about a material or relevant matter in an official proceeding. The best answer is C because the false statement must be relevant or material to the proceeding. Option A is too broad because statements to opposing counsel are not automatically perjury unless made under oath in an authorized proceeding, such as a deposition, and satisfy the other elements. Option B is incomplete because not every false statement in court establishes perjury; the statement must be made knowingly, under oath, and concern a relevant or material matter. Option D is incorrect because statements to one’s attorney before litigation are not perjury. Therefore, relevance to the proceeding is a required element.

This question tests your knowledge of Uncategorized.

the question asks about willfully ' , NOT.

The correct answer is A: True.

This question tests your understanding of key fraud examination concepts and legal principles.

Deferred prosecution agreements are commonly used to resolve corporate misconduct while encouraging reform. Under such an agreement, prosecution is deferred while the organization satisfies specified conditions, such as cooperating with authorities, paying penalties, improving controls, disciplining wrongdoers, and enhancing compliance programs. A central goal is to encourage the company to change its corporate culture so similar misconduct does not recur. Option B describes plea bargaining more than a deferred prosecution agreement. Option A is incorrect because the goal is usually remediation, not dissolution. Option D is too narrow because the agreement does not merely wait for an internal investigation; it typically imposes forward-looking obligations. In fraud-related legal matters, deferred prosecution agreements are designed to promote accountability while encouraging organizational correction and compliance improvements.