ACFE CFE - Financial Transactions and Fraud Schemes (Certified Fraud Examiner - Financial Transactions and Fraud Schemes) Practice Test 21

Question 200

An examination of stored-value card conversion begins with this observation: Repeated card purchases and redemptions are connected across nominally unrelated buyers. Which follow-up procedure gives the most direct evidence?

  1. Link funding methods, card serials and redemption beneficiaries.
  2. Follow control and ownership links to natural persons using reliable independent evidence.
  3. Use chain analytics with exchange records and verified wallet attribution.
  4. Reconcile sender receipts, broker obligations and final beneficiary payouts.

Explanation

Correct Answer

A:

For the Stored-value card conversion concern, the procedure tests source evidence behind this observation: Repeated card purchases and redemptions are connected across nominally unrelated buyers. This matters because stored-value instruments can move purchasing power while distancing it from original cash; independent corroboration is necessary before accepting any conclusion.

Incorrect Answers

B:

This comparison primarily addresses Opaque beneficial-ownership layers, in which legal-entity layers can conceal who controls funds and defeat superficial name-only screening; because the present question instead concerns Stored-value card conversion, reviewers should link funding methods, card serials and redemption beneficiaries rather than apply a check designed for Opaque beneficial-ownership layers.

C:

This comparison primarily addresses Virtual-asset layering, in which multiple on-chain transfers can complicate attribution but do not automatically erase transaction history; because the present question instead concerns Stored-value card conversion, reviewers should link funding methods, card serials and redemption beneficiaries rather than apply a check designed for Virtual-asset layering.

D:

This comparison primarily addresses Alternative remittance settlement, in which value transfer can occur through broker-ledgers and net settlements, whether legitimate or abused; because the present question instead concerns Stored-value card conversion, reviewers should link funding methods, card serials and redemption beneficiaries rather than apply a check designed for Alternative remittance settlement.

Question 201

The case file describes the following: A program officer maintains benefit accounts for deceased or ineligible individuals and diverts payments. Which classification best explains the events?

  1. Double-charged public grant costs
  2. Fictitious disaster relief business
  3. Ghost public-assistance beneficiaries
  4. Substandard public works certification

Explanation

Correct Answer

C:

Ghost public-assistance beneficiaries fits the facts because public funds continue flowing to people who should not receive benefits; the distinguishing observation is that benefit rolls conflict with independent vital records and eligibility updates. To test this interpretation, a reviewer should cross-match beneficiary status with authorized registries and payment destinations.

Incorrect Answers

A:

Double-charged public grant costs would involve a different sequence from Ghost public-assistance beneficiaries: a real cost becomes fraudulent when recovered more than once from restricted funding sources. Unlike the rejected Double-charged public grant costs label, the evidence concerns Ghost public-assistance beneficiaries, since benefit rolls conflict with independent vital records and eligibility updates; reviewers should cross-match beneficiary status with authorized registries and payment destinations.

B:

Fictitious disaster relief business would involve a different sequence from Ghost public-assistance beneficiaries: crisis support can be abused through fictitious claimants and fabricated losses. Unlike the rejected Fictitious disaster relief business label, the evidence concerns Ghost public-assistance beneficiaries, since benefit rolls conflict with independent vital records and eligibility updates; reviewers should cross-match beneficiary status with authorized registries and payment destinations.

D:

Substandard public works certification would involve a different sequence from Ghost public-assistance beneficiaries: taxpayer money pays for specifications that were not actually met. Unlike the rejected Substandard public works certification label, the evidence concerns Ghost public-assistance beneficiaries, since benefit rolls conflict with independent vital records and eligibility updates; reviewers should cross-match beneficiary status with authorized registries and payment destinations.

Question 202

Two separate review files raise different issues. File A: A procurement official invents an emergency to bypass competition for a routine acquisition. File B: Several suppliers agree to take turns winning similar tenders and submit supporting bids when not scheduled to win. Which pairing accurately classifies both files?

  1. File A: Artificial urgency sole-source award; File B: Bid rotation agreement.
  2. File A: Complementary cover bidding; File B: Bid rotation agreement.
  3. File A: Bid rotation agreement; File B: Artificial urgency sole-source award.
  4. File A: Artificial urgency sole-source award; File B: Tender specifications tailored to one supplier.

Explanation

Correct Answer

A:

File A is Artificial urgency sole-source award because false urgency defeats normal competitive sourcing under an unjustified exception, while File B is Bid rotation agreement because bid rotation is an agreement to allocate wins rather than genuine independent competition. The evidence chains differ: for File A, reviewers should review documented emergency grounds against prior planning and demand; for File B, they should analyze longitudinal award, bid spread and bidder-relationship patterns.

Incorrect Answers

B:

File A is misidentified as Complementary cover bidding instead of Artificial urgency sole-source award. With the proposed pairing Complementary cover bidding / Bid rotation agreement, the distinction is substantive: File A shows that planning records show sufficient lead time and no genuine critical shortage, whereas File B shows that winners rotate predictably among a stable bidder group despite changing cost conditions. For these Artificial urgency sole-source award and Bid rotation agreement files, choosing the pair Complementary cover bidding / Bid rotation agreement would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Bid rotation agreement instead of Artificial urgency sole-source award; File B is misidentified as Artificial urgency sole-source award instead of Bid rotation agreement. With the proposed pairing Bid rotation agreement / Artificial urgency sole-source award, the distinction is substantive: File A shows that planning records show sufficient lead time and no genuine critical shortage, whereas File B shows that winners rotate predictably among a stable bidder group despite changing cost conditions. For these Artificial urgency sole-source award and Bid rotation agreement files, choosing the pair Bid rotation agreement / Artificial urgency sole-source award would misdirect the review away from at least one of these mechanisms.

D:

File B is misidentified as Tender specifications tailored to one supplier instead of Bid rotation agreement. With the proposed pairing Artificial urgency sole-source award / Tender specifications tailored to one supplier, the distinction is substantive: File A shows that planning records show sufficient lead time and no genuine critical shortage, whereas File B shows that winners rotate predictably among a stable bidder group despite changing cost conditions. For these Artificial urgency sole-source award and Bid rotation agreement files, choosing the pair Artificial urgency sole-source award / Tender specifications tailored to one supplier would misdirect the review away from at least one of these mechanisms.

Question 203

The review team observes the following: Cleared images show altered writing inconsistent with the drawer's retained check copy. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Match cleared bank images with original check issuance and beneficiary details; safeguard: Monitor repeated reciprocal check deposits and enforce funds-availability controls.
  2. Diagnostic: Compare cleared checks against controlled issuance files and bank exceptions; safeguard: Use secure delivery and payee-positive-pay checks where available.
  3. Diagnostic: Reconstruct check presentment and availability timelines across related accounts; safeguard: Apply applicable contactless transaction protections and device anomaly monitoring.
  4. Diagnostic: Match cleared bank images with original check issuance and beneficiary details; safeguard: Use secure delivery and payee-positive-pay checks where available.

Explanation

Correct Answer

D:

The test addresses Check-washing alteration by targeting this observation: Cleared images show altered writing inconsistent with the drawer's retained check copy. The accompanying safeguard—use secure delivery and payee-positive-pay checks where available—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The diagnostic correctly examines Check-washing alteration by having reviewers match cleared bank images with original check issuance and beneficiary details, but the safeguard is for Check-kiting float abuse. That prevention step responds to a different mechanism: Kiting exploits settlement timing to inflate apparent funds without a genuine source of money.

B:

The proposed safeguard is relevant to Check-washing alteration, but the diagnostic tests Counterfeit check creation rather than the identified anomaly. That test is aimed at records involving bank-cleared items have serials absent from the company's issued-check register; the specified case instead calls for reviewers to match cleared bank images with original check issuance and beneficiary details.

C:

The evidence test relates to Check-kiting float abuse, whereas the proposed safeguard protects against Contactless payment relay; neither directly resolves Check-washing alteration. Unlike the Check-kiting float abuse test and Contactless payment relay safeguard, the investigation of Check-washing alteration requires reviewers to match cleared bank images with original check issuance and beneficiary details, followed by assessment of the matching control point.

Question 204

The case file describes the following: A tender assessor gives a favored supplier unreleased evaluation information in return for private gifts. Which classification best explains the events?

  1. Unapproved facilitation payment
  2. Vendor-funded political favor
  3. Supplier kickback for selection
  4. Conflict through confidential specifications

Explanation

Correct Answer

D:

Conflict through confidential specifications fits the facts because disclosure of privileged tender information trades an entrusted advantage for private benefit; the distinguishing observation is that the favored bid mirrors nonpublic scoring language before tender release. To test this interpretation, a reviewer should compare access history to restricted procurement files with bidder drafts and benefits.

Incorrect Answers

A:

Unapproved facilitation payment would involve a different sequence from Conflict through confidential specifications: a privately directed payment to influence routine official action can be corrupt despite its small amount. Unlike the rejected Unapproved facilitation payment label, the evidence concerns Conflict through confidential specifications, since the favored bid mirrors nonpublic scoring language before tender release; reviewers should compare access history to restricted procurement files with bidder drafts and benefits.

B:

Vendor-funded political favor would involve a different sequence from Conflict through confidential specifications: indirect benefits can constitute corruption when used to induce improper contract decisions. Unlike the rejected Vendor-funded political favor label, the evidence concerns Conflict through confidential specifications, since the favored bid mirrors nonpublic scoring language before tender release; reviewers should compare access history to restricted procurement files with bidder drafts and benefits.

C:

Supplier kickback for selection would involve a different sequence from Conflict through confidential specifications: a kickback rewards an official for steering organizational business rather than for legitimate services. Unlike the rejected Supplier kickback for selection label, the evidence concerns Conflict through confidential specifications, since the favored bid mirrors nonpublic scoring language before tender release; reviewers should compare access history to restricted procurement files with bidder drafts and benefits.

Question 205

The review team observes the following: The shipment and invoice are valid but no matching bank receipt exists yet. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Reconcile perpetual inventory quantities to physical counts and cost-of-goods-sold postings; safeguard: Post an appropriate receivable and reconcile the subledger with the control account.
  2. Diagnostic: Reconcile customer receipts and trade-vendor payments to operating cash-flow lines; safeguard: Capitalize the unexpired coverage and expense it systematically over the protection period.
  3. Diagnostic: Trace shipping confirmations to invoices, customer balances and subsequent collections; safeguard: Classify cash from routine business activities separately from investing and financing flows.
  4. Diagnostic: Trace shipping confirmations to invoices, customer balances and subsequent collections; safeguard: Post an appropriate receivable and reconcile the subledger with the control account.

Explanation

Correct Answer

D:

The test addresses Accounts receivable from credit sales by targeting this observation: The shipment and invoice are valid but no matching bank receipt exists yet. The accompanying safeguard—post an appropriate receivable and reconcile the subledger with the control account—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The proposed safeguard is relevant to Accounts receivable from credit sales, but the diagnostic tests Inventory cost recognition rather than the identified anomaly. That test is aimed at records involving stock counts confirm unsold merchandise at the reporting date; the specified case instead calls for reviewers to trace shipping confirmations to invoices, customer balances and subsequent collections.

B:

The evidence test relates to Operating cash-flow classification, whereas the proposed safeguard protects against Prepaid insurance expense; neither directly resolves Accounts receivable from credit sales. Unlike the Operating cash-flow classification test and Prepaid insurance expense safeguard, the investigation of Accounts receivable from credit sales requires reviewers to trace shipping confirmations to invoices, customer balances and subsequent collections, followed by assessment of the matching control point.

C:

The diagnostic correctly examines Accounts receivable from credit sales by having reviewers trace shipping confirmations to invoices, customer balances and subsequent collections, but the safeguard is for Operating cash-flow classification. That prevention step responds to a different mechanism: Operating cash flows concern core activities and need not equal accrual net income.

Question 206

Two separate review files raise different issues. File A: A contractor delivers lower-grade steel while invoicing for the specified certified grade. File B: A supplier invoices one hundred units but delivers only seventy to the receiving site. Which pairing accurately classifies both files?

  1. File A: Nonconforming material substitution; File B: Contractor cost mischarging.
  2. File A: Short delivery on public contract; File B: Nonconforming material substitution.
  3. File A: Sham subcontractor pass-through; File B: Short delivery on public contract.
  4. File A: Nonconforming material substitution; File B: Short delivery on public contract.

Explanation

Correct Answer

D:

File A is Nonconforming material substitution because the vendor obtains full payment while supplying inferior goods, while File B is Short delivery on public contract because billing for undelivered quantities converts a legitimate contract into an overpayment. The evidence chains differ: for File A, reviewers should match delivered batch identifiers and tests to the contract specification; for File B, they should reconcile signed receiving logs and physical counts with invoices.

Incorrect Answers

A:

File B is misidentified as Contractor cost mischarging instead of Short delivery on public contract. With the proposed pairing Nonconforming material substitution / Contractor cost mischarging, the distinction is substantive: File A shows that independent laboratory tests conflict with certificates of conformity, whereas File B shows that receiving counts and inventory entries fall below billed quantities. For these Nonconforming material substitution and Short delivery on public contract files, choosing the pair Nonconforming material substitution / Contractor cost mischarging would misdirect the review away from at least one of these mechanisms.

B:

File A is misidentified as Short delivery on public contract instead of Nonconforming material substitution; File B is misidentified as Nonconforming material substitution instead of Short delivery on public contract. With the proposed pairing Short delivery on public contract / Nonconforming material substitution, the distinction is substantive: File A shows that independent laboratory tests conflict with certificates of conformity, whereas File B shows that receiving counts and inventory entries fall below billed quantities. For these Nonconforming material substitution and Short delivery on public contract files, choosing the pair Short delivery on public contract / Nonconforming material substitution would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Sham subcontractor pass-through instead of Nonconforming material substitution. With the proposed pairing Sham subcontractor pass-through / Short delivery on public contract, the distinction is substantive: File A shows that independent laboratory tests conflict with certificates of conformity, whereas File B shows that receiving counts and inventory entries fall below billed quantities. For these Nonconforming material substitution and Short delivery on public contract files, choosing the pair Sham subcontractor pass-through / Short delivery on public contract would misdirect the review away from at least one of these mechanisms.

Question 207

The review team observes the following: Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Reconstruct check presentment and availability timelines across related accounts; safeguard: Monitor repeated reciprocal check deposits and enforce funds-availability controls.
  2. Diagnostic: Compare compromised-card common points of purchase and inspect terminals for overlays; safeguard: Monitor repeated reciprocal check deposits and enforce funds-availability controls.
  3. Diagnostic: Reconstruct check presentment and availability timelines across related accounts; safeguard: Use tamper inspections and properly implemented EMV transaction validation.
  4. Diagnostic: Inspect card-reader slots and correlate card compromise with device servicing logs; safeguard: Use positive pay and securely protect account and check-stock details.

Explanation

Correct Answer

A:

The test addresses Check-kiting float abuse by targeting this observation: Circular deposits and withdrawals depend on unsettled checks rather than real incoming funds. The accompanying safeguard—monitor repeated reciprocal check deposits and enforce funds-availability controls—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

B:

The proposed safeguard is relevant to Check-kiting float abuse, but the diagnostic tests Magnetic-stripe card skimming rather than the identified anomaly. That test is aimed at records involving unrelated card fraud clusters around customers who used the same terminal; the specified case instead calls for reviewers to reconstruct check presentment and availability timelines across related accounts.

C:

The diagnostic correctly examines Check-kiting float abuse by having reviewers reconstruct check presentment and availability timelines across related accounts, but the safeguard is for Chip-card shimming. That prevention step responds to a different mechanism: A shim targets information in the chip-card interface; chip transaction data alone does not necessarily permit cloning a valid chip.

D:

The evidence test relates to Chip-card shimming, whereas the proposed safeguard protects against Counterfeit check creation; neither directly resolves Check-kiting float abuse. Unlike the Chip-card shimming test and Counterfeit check creation safeguard, the investigation of Check-kiting float abuse requires reviewers to reconstruct check presentment and availability timelines across related accounts, followed by assessment of the matching control point.

Question 208

Control designers are focusing on the mechanism behind nonconforming material substitution: The vendor obtains full payment while supplying inferior goods. Which measure best limits that opportunity?

  1. Require independent technical and commercial approval of material change orders.
  2. Inspect high-risk materials independently before acceptance.
  3. Enforce cost-account segregation and audit rights over reimbursable charges.
  4. Use independent quantity verification and three-way matching.

Explanation

Correct Answer

B:

The control directly addresses the failure point in Nonconforming material substitution, since the vendor obtains full payment while supplying inferior goods. A subsequent independent review could match delivered batch identifiers and tests to the contract specification to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Post-award change-order inflation rather than Nonconforming material substitution, because post-award modifications can recoup an artificially low bid or extract excessive payments. Unlike the control for Post-award change-order inflation, the more direct design for Nonconforming material substitution is to inspect high-risk materials independently before acceptance; a different safeguard cannot substitute for it.

C:

This safeguard is directed primarily at Contractor cost mischarging rather than Nonconforming material substitution, because miscoding expenses shifts ineligible work costs onto the purchasing agency. Unlike the control for Contractor cost mischarging, the more direct design for Nonconforming material substitution is to inspect high-risk materials independently before acceptance; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Short delivery on public contract rather than Nonconforming material substitution, because billing for undelivered quantities converts a legitimate contract into an overpayment. Unlike the control for Short delivery on public contract, the more direct design for Nonconforming material substitution is to inspect high-risk materials independently before acceptance; a different safeguard cannot substitute for it.

Question 209

A reviewer wants to distinguish terrorist-financing source distinction from adjacent risk patterns. Which observation is the most diagnostic indicator?

  1. A documented pattern raises a reasonable suspicion even though proof of an offense is incomplete.
  2. Closely timed deposits aggregate to an unusual total despite individual amounts being smaller.
  3. Nominal directors cannot explain operations and ownership trails end in opaque nominees.
  4. Disbursements reach concealed end users unrelated to the published charitable mission.

Explanation

Correct Answer

D:

This observation is a pertinent indicator of Terrorist-financing source distinction because terrorist financing can involve legitimately sourced money; destination and intended use are central concerns. The practical corroborating procedure is to trace source and destination of funds and the identity of ultimate recipients; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Suspicious-activity reporting decision, where a SAR or STR is a suspicion-based regulatory tool; examiners need not prove criminal guilt before considering it, rather than the particular mechanism in Terrorist-financing source distinction. Unlike the clue for Suspicious-activity reporting decision, the more directly related indicator for Terrorist-financing source distinction is this: Disbursements reach concealed end users unrelated to the published charitable mission.

B:

The proposed observation fits Cash-deposit structuring, where structuring intentionally fragments transactions to evade detection or reporting; the exact threshold is jurisdiction-dependent, rather than the particular mechanism in Terrorist-financing source distinction. Unlike the clue for Cash-deposit structuring, the more directly related indicator for Terrorist-financing source distinction is this: Disbursements reach concealed end users unrelated to the published charitable mission.

C:

The proposed observation fits Opaque beneficial-ownership layers, where legal-entity layers can conceal who controls funds and defeat superficial name-only screening, rather than the particular mechanism in Terrorist-financing source distinction. Unlike the clue for Opaque beneficial-ownership layers, the more directly related indicator for Terrorist-financing source distinction is this: Disbursements reach concealed end users unrelated to the published charitable mission.

Question 210

The review team observes the following: Export records and comparable sale prices indicate substantial underpricing. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Trace travel logistics, border declarations and linked currency seizures; safeguard: Apply trade-document and price-reasonableness screening to high-risk transactions.
  2. Diagnostic: Compare reported cash sales with independent capacity, procurement and customer evidence; safeguard: Scrutinize related-party prices and unusual deviations from comparable trade.
  3. Diagnostic: Reconcile trade invoices with shipping detail, customs declarations and market benchmarks; safeguard: Apply lawful currency-declaration controls and risk-based physical inspection.
  4. Diagnostic: Reconcile trade invoices with shipping detail, customs declarations and market benchmarks; safeguard: Scrutinize related-party prices and unusual deviations from comparable trade.

Explanation

Correct Answer

D:

The test addresses Trade under-invoicing by targeting this observation: Export records and comparable sale prices indicate substantial underpricing. The accompanying safeguard—scrutinize related-party prices and unusual deviations from comparable trade—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The evidence test relates to Bulk currency courier, whereas the proposed safeguard protects against Trade over-invoicing; neither directly resolves Trade under-invoicing. Unlike the Bulk currency courier test and Trade over-invoicing safeguard, the investigation of Trade under-invoicing requires reviewers to reconcile trade invoices with shipping detail, customs declarations and market benchmarks, followed by assessment of the matching control point.

B:

The proposed safeguard is relevant to Trade under-invoicing, but the diagnostic tests Cash-intensive front business rather than the identified anomaly. That test is aimed at records involving deposits and claimed revenue greatly exceed footfall, staffing and operating capacity; the specified case instead calls for reviewers to reconcile trade invoices with shipping detail, customs declarations and market benchmarks.

C:

The diagnostic correctly examines Trade under-invoicing by having reviewers reconcile trade invoices with shipping detail, customs declarations and market benchmarks, but the safeguard is for Bulk currency courier. That prevention step responds to a different mechanism: Physical transportation can shift criminal cash between jurisdictions outside routine bank wires.

Certified Fraud Examiner - Financial Transactions and Fraud Schemes (CFE - Financial Transactions and Fraud Schemes) Practice Tests