ACFE CFE - Financial Transactions and Fraud Schemes (Certified Fraud Examiner - Financial Transactions and Fraud Schemes) Practice Test 56

Question 550

The case file describes the following: A fraudster applies for credit using an unrelated person's complete stolen identification details. Which classification best explains the events?

  1. Stolen-personal-data loan
  2. Synthetic identity borrowing
  3. Child identity misuse
  4. SIM-swap account takeover

Explanation

Correct Answer

A:

Stolen-personal-data loan fits the facts because an impersonator assumes a real victim's identity to obtain an unauthorized loan; the distinguishing observation is that the real person denies the application despite matching submitted personal data. To test this interpretation, a reviewer should confirm applicant control through independent identity checks and device history.

Incorrect Answers

B:

Synthetic identity borrowing would involve a different sequence from Stolen-personal-data loan: a synthetic identity blends genuine and invented attributes rather than simply impersonating one full real identity. Unlike the rejected Synthetic identity borrowing label, the evidence concerns Stolen-personal-data loan, since the real person denies the application despite matching submitted personal data; reviewers should confirm applicant control through independent identity checks and device history.

C:

Child identity misuse would involve a different sequence from Stolen-personal-data loan: children's identifiers can be exploited because misuse may remain unnoticed for years. Unlike the rejected Child identity misuse label, the evidence concerns Stolen-personal-data loan, since the real person denies the application despite matching submitted personal data; reviewers should confirm applicant control through independent identity checks and device history.

D:

SIM-swap account takeover would involve a different sequence from Stolen-personal-data loan: control of a phone number can intercept recovery codes without ownership of the underlying account. Unlike the rejected SIM-swap account takeover label, the evidence concerns Stolen-personal-data loan, since the real person denies the application despite matching submitted personal data; reviewers should confirm applicant control through independent identity checks and device history.

Question 551

Two separate review files raise different issues. File A: An investment promoter uses contributions from new investors to pay apparently consistent returns to earlier participants. File B: A seller promises participants earnings mainly for enrolling additional paying members instead of real end-user product demand. Which pairing accurately classifies both files?

  1. File A: Government-agent impersonation scam; File B: Recruitment-driven pyramid.
  2. File A: Ponzi payout financing; File B: Recruitment-driven pyramid.
  3. File A: Recruitment-driven pyramid; File B: Ponzi payout financing.
  4. File A: Ponzi payout financing; File B: Advance-fee lottery fraud.

Explanation

Correct Answer

B:

File A is Ponzi payout financing because a Ponzi structure pays old investors with new funds while misrepresenting actual returns, while File B is Recruitment-driven pyramid because recruitment dependence distinguishes a pyramid structure from ordinary retail distribution. The evidence chains differ: for File A, reviewers should trace cash sources for investor payouts and independently verify held assets; for File B, they should analyze compensation flows and genuine external customer transactions.

Incorrect Answers

A:

File A is misidentified as Government-agent impersonation scam instead of Ponzi payout financing. With the proposed pairing Government-agent impersonation scam / Recruitment-driven pyramid, the distinction is substantive: File A shows that redemptions correlate with fresh investor money instead of investment profits, whereas File B shows that compensation depends on enrollment fees and chain recruitment despite weak retail sales. For these Ponzi payout financing and Recruitment-driven pyramid files, choosing the pair Government-agent impersonation scam / Recruitment-driven pyramid would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Recruitment-driven pyramid instead of Ponzi payout financing; File B is misidentified as Ponzi payout financing instead of Recruitment-driven pyramid. With the proposed pairing Recruitment-driven pyramid / Ponzi payout financing, the distinction is substantive: File A shows that redemptions correlate with fresh investor money instead of investment profits, whereas File B shows that compensation depends on enrollment fees and chain recruitment despite weak retail sales. For these Ponzi payout financing and Recruitment-driven pyramid files, choosing the pair Recruitment-driven pyramid / Ponzi payout financing would misdirect the review away from at least one of these mechanisms.

D:

File B is misidentified as Advance-fee lottery fraud instead of Recruitment-driven pyramid. With the proposed pairing Ponzi payout financing / Advance-fee lottery fraud, the distinction is substantive: File A shows that redemptions correlate with fresh investor money instead of investment profits, whereas File B shows that compensation depends on enrollment fees and chain recruitment despite weak retail sales. For these Ponzi payout financing and Recruitment-driven pyramid files, choosing the pair Ponzi payout financing / Advance-fee lottery fraud would misdirect the review away from at least one of these mechanisms.

Question 552

The monitoring team needs an observable indicator of improper job-for-favor arrangement. Which signal aligns most closely with the risk?

  1. Invoices for advice lack outputs and coincide with favorable official actions.
  2. Winner patterns rotate while bids share unusual formatting and pricing structures.
  3. The appointment follows requests to change the supplier ranking.
  4. The charity's controllers and project decision makers overlap.

Explanation

Correct Answer

C:

This observation is a pertinent indicator of Improper job-for-favor arrangement because noncash personal advantages can function as bribes when tied to official discretion. The practical corroborating procedure is to compare hiring decisions, supplier influence and communications about procurement scoring; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Sham consulting bribe, where a fake service agreement can launder a corrupt payment as a commercial expense, rather than the particular mechanism in Improper job-for-favor arrangement. Unlike the clue for Sham consulting bribe, the more directly related indicator for Improper job-for-favor arrangement is this: The appointment follows requests to change the supplier ranking.

B:

The proposed observation fits Bid-sharing cartel, where bid rotation is collusion among bidders that undermines competitive award outcomes, rather than the particular mechanism in Improper job-for-favor arrangement. Unlike the clue for Bid-sharing cartel, the more directly related indicator for Improper job-for-favor arrangement is this: The appointment follows requests to change the supplier ranking.

D:

The proposed observation fits Inflated charitable donation conduit, where an apparent donation may disguise a benefit routed to someone able to influence business, rather than the particular mechanism in Improper job-for-favor arrangement. Unlike the clue for Inflated charitable donation conduit, the more directly related indicator for Improper job-for-favor arrangement is this: The appointment follows requests to change the supplier ranking.

Question 553

The monitoring team needs an observable indicator of medical identity misuse. Which signal aligns most closely with the risk?

  1. Referral volumes coincide with unexplained consulting payments from the pharmacy.
  2. Appointment, access and patient-confirmation records show no encounter.
  3. Claim lines repeatedly contain component codes that belong to a bundled service.
  4. Claims include care inconsistent with the member's verified history and identification.

Explanation

Correct Answer

D:

This observation is a pertinent indicator of Medical identity misuse because an unauthorized patient exploits a real person's insurance entitlement. The practical corroborating procedure is to confirm patient identity and compare provider records with genuine insured-person statements; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Prescribing referral kickback, where financial inducements can corrupt medical decisions even when treatment is actually delivered, rather than the particular mechanism in Medical identity misuse. Unlike the clue for Prescribing referral kickback, the more directly related indicator for Medical identity misuse is this: Claims include care inconsistent with the member's verified history and identification.

B:

The proposed observation fits Phantom patient encounters, where billing nonexistent visits extracts payment for services not rendered, rather than the particular mechanism in Medical identity misuse. Unlike the clue for Phantom patient encounters, the more directly related indicator for Medical identity misuse is this: Claims include care inconsistent with the member's verified history and identification.

C:

The proposed observation fits Unbundled procedure billing, where splitting a bundled service into extra claim lines can produce unjustified reimbursement, rather than the particular mechanism in Medical identity misuse. Unlike the clue for Unbundled procedure billing, the more directly related indicator for Medical identity misuse is this: Claims include care inconsistent with the member's verified history and identification.

Question 554

A process owner is assessing safeguards for cash-intensive front business. The mechanism is: Fictitious sales provide a plausible bookkeeping story for introducing criminal cash. Which control addresses it most directly?

  1. Apply lawful currency-declaration controls and risk-based physical inspection.
  2. Apply trade-document and price-reasonableness screening to high-risk transactions.
  3. Scrutinize related-party prices and unusual deviations from comparable trade.
  4. Apply enhanced customer due diligence where cash volumes contradict business economics.

Explanation

Correct Answer

D:

The control directly addresses the failure point in Cash-intensive front business, since fictitious sales provide a plausible bookkeeping story for introducing criminal cash. A subsequent independent review could compare reported cash sales with independent capacity, procurement and customer evidence to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Bulk currency courier rather than Cash-intensive front business, because physical transportation can shift criminal cash between jurisdictions outside routine bank wires. Unlike the control for Bulk currency courier, the more direct design for Cash-intensive front business is to apply enhanced customer due diligence where cash volumes contradict business economics; a different safeguard cannot substitute for it.

B:

This safeguard is directed primarily at Trade over-invoicing rather than Cash-intensive front business, because inflated trade prices can transfer value across borders under cover of legitimate commerce. Unlike the control for Trade over-invoicing, the more direct design for Cash-intensive front business is to apply enhanced customer due diligence where cash volumes contradict business economics; a different safeguard cannot substitute for it.

C:

This safeguard is directed primarily at Trade under-invoicing rather than Cash-intensive front business, because underpricing can move economic value to an offshore counterparty through an ostensibly normal sale. Unlike the control for Trade under-invoicing, the more direct design for Cash-intensive front business is to apply enhanced customer due diligence where cash volumes contradict business economics; a different safeguard cannot substitute for it.

Question 555

The review team observes the following: Disposal lists contain items with normal working condition or resale value. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Match shipment scans and carrier proof of delivery to authorized sales or transfers; safeguard: Require independent condition verification and controlled disposal logs.
  2. Diagnostic: Inspect scrap authorizations against production defects, quantities and recycler receipts; safeguard: Require independent condition verification and controlled disposal logs.
  3. Diagnostic: Inspect scrap authorizations against production defects, quantities and recycler receipts; safeguard: Maintain asset checkouts, return dates and independent periodic verification.
  4. Diagnostic: Compare asset-location audits and access logs with authorized lending records; safeguard: Separate storage custody from inventory write-offs and conduct blind counts.

Explanation

Correct Answer

B:

The test addresses False scrap classification by targeting this observation: Disposal lists contain items with normal working condition or resale value. The accompanying safeguard—require independent condition verification and controlled disposal logs—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The proposed safeguard is relevant to False scrap classification, but the diagnostic tests Fictitious outbound shipment rather than the identified anomaly. That test is aimed at records involving dispatch scans lack matching customer orders or destination acknowledgments; the specified case instead calls for reviewers to inspect scrap authorizations against production defects, quantities and recycler receipts.

C:

The diagnostic correctly examines False scrap classification by having reviewers inspect scrap authorizations against production defects, quantities and recycler receipts, but the safeguard is for Unauthorized equipment personal use. That prevention step responds to a different mechanism: Temporary unauthorized use is misuse of a noncash asset even where permanent theft is unproven.

D:

The evidence test relates to Unauthorized equipment personal use, whereas the proposed safeguard protects against Warehouse stock diversion; neither directly resolves False scrap classification. Unlike the Unauthorized equipment personal use test and Warehouse stock diversion safeguard, the investigation of False scrap classification requires reviewers to inspect scrap authorizations against production defects, quantities and recycler receipts, followed by assessment of the matching control point.

Question 556

Two separate review files raise different issues. File A: A taxpayer invents supplier invoices to reduce declared profit and taxes. File B: A trader claims value-added-tax credits based on invoices from a nonexistent supplier. Which pairing accurately classifies both files?

  1. File A: Fabricated deductible business cost; File B: Unreported cash taxable income.
  2. File A: False consumption-tax input credit; File B: Fabricated deductible business cost.
  3. File A: Unreported cash taxable income; File B: Fabricated deductible business cost.
  4. File A: Fabricated deductible business cost; File B: False consumption-tax input credit.
  5. File A: Stolen-identity tax return; File B: False consumption-tax input credit.

Explanation

Correct Answer

D:

File A is Fabricated deductible business cost because a fictitious expense reduces reported taxable income without a genuine economic cost, while File B is False consumption-tax input credit because false input credits reduce remitted VAT or generate improper refunds. The evidence chains differ: for File A, reviewers should verify claimed costs against real supplier transactions and business purpose; for File B, they should cross-match purchase invoices and tax registrations with supplier records.

Incorrect Answers

A:

File B is misidentified as Unreported cash taxable income instead of False consumption-tax input credit. With the proposed pairing Fabricated deductible business cost / Unreported cash taxable income, the distinction is substantive: File A shows that claimed deductions lack actual payments or received services, whereas File B shows that input-tax claims do not match validated purchases or supplier filings. For these Fabricated deductible business cost and False consumption-tax input credit files, choosing the pair Fabricated deductible business cost / Unreported cash taxable income would misdirect the review away from at least one of these mechanisms.

B:

File A is misidentified as False consumption-tax input credit instead of Fabricated deductible business cost; File B is misidentified as Fabricated deductible business cost instead of False consumption-tax input credit. With the proposed pairing False consumption-tax input credit / Fabricated deductible business cost, the distinction is substantive: File A shows that claimed deductions lack actual payments or received services, whereas File B shows that input-tax claims do not match validated purchases or supplier filings. For these Fabricated deductible business cost and False consumption-tax input credit files, choosing the pair False consumption-tax input credit / Fabricated deductible business cost would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Unreported cash taxable income instead of Fabricated deductible business cost; File B is misidentified as Fabricated deductible business cost instead of False consumption-tax input credit. With the proposed pairing Unreported cash taxable income / Fabricated deductible business cost, the distinction is substantive: File A shows that claimed deductions lack actual payments or received services, whereas File B shows that input-tax claims do not match validated purchases or supplier filings. For these Fabricated deductible business cost and False consumption-tax input credit files, choosing the pair Unreported cash taxable income / Fabricated deductible business cost would misdirect the review away from at least one of these mechanisms.

E:

File A is misidentified as Stolen-identity tax return instead of Fabricated deductible business cost. With the proposed pairing Stolen-identity tax return / False consumption-tax input credit, the distinction is substantive: File A shows that claimed deductions lack actual payments or received services, whereas File B shows that input-tax claims do not match validated purchases or supplier filings. For these Fabricated deductible business cost and False consumption-tax input credit files, choosing the pair Stolen-identity tax return / False consumption-tax input credit would misdirect the review away from at least one of these mechanisms.

Question 557

An analyst is selecting warning signs for deposit-bag substitution. Which recorded pattern should receive focused attention?

  1. Credits are posted repeatedly to the wrong customer or with shifting dates.
  2. The register shows sales greater than the actual till count and deposit.
  3. Surprise cash counts fall below the petty-cash ledger balance.
  4. Deposit documentation and bank-confirmed credits disagree despite correct till totals.

Explanation

Correct Answer

D:

This observation is a pertinent indicator of Deposit-bag substitution because the removal occurs after recording and before funds reach the bank. The practical corroborating procedure is to compare bank credits with sealed-bag logs, deposit preparation and independent count records; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Receivable lapping, where lapping rolls forward a shortage by applying one customer's payment to another account, rather than the particular mechanism in Deposit-bag substitution. Unlike the clue for Receivable lapping, the more directly related indicator for Deposit-bag substitution is this: Deposit documentation and bank-confirmed credits disagree despite correct till totals.

B:

The proposed observation fits Recorded-till cash larceny, where cash larceny steals receipts after they have been recorded, leaving a book-to-cash shortage, rather than the particular mechanism in Deposit-bag substitution. Unlike the clue for Recorded-till cash larceny, the more directly related indicator for Deposit-bag substitution is this: Deposit documentation and bank-confirmed credits disagree despite correct till totals.

C:

The proposed observation fits Cash-safe theft, where theft of cash on hand depletes a recorded fund without necessarily involving a sales transaction, rather than the particular mechanism in Deposit-bag substitution. Unlike the clue for Cash-safe theft, the more directly related indicator for Deposit-bag substitution is this: Deposit documentation and bank-confirmed credits disagree despite correct till totals.

Question 558

Two separate review files raise different issues. File A: An evaluator assigns inflated subjective scores to a preferred bidder in contradiction of the published evaluation criteria. File B: A contract manager prolongs a vendor's agreement without required recompetition or documented extension rights. Which pairing accurately classifies both files?

  1. File A: Unauthorized contract extension; File B: Collusive bid-evaluation scoring.
  2. File A: Collusive bid-evaluation scoring; File B: Unauthorized contract extension.
  3. File A: Collusive bid-evaluation scoring; File B: Sham subcontractor pass-through.
  4. File A: Time-and-materials labor padding; File B: Unauthorized contract extension.

Explanation

Correct Answer

B:

File A is Collusive bid-evaluation scoring because manipulated evaluation changes the award outcome after bids arrive, unlike specification tailoring, while File B is Unauthorized contract extension because improper continuation can give an incumbent business without the required competition. The evidence chains differ: for File A, reviewers should reperform score calculations and inspect evaluator conflicts and supporting notes; for File B, they should compare amendments with original contract clauses, approval authority and renewal limits.

Incorrect Answers

A:

File A is misidentified as Unauthorized contract extension instead of Collusive bid-evaluation scoring; File B is misidentified as Collusive bid-evaluation scoring instead of Unauthorized contract extension. With the proposed pairing Unauthorized contract extension / Collusive bid-evaluation scoring, the distinction is substantive: File A shows that scoring notes and objective evidence disagree while one bidder receives unexplained advantages, whereas File B shows that extensions exceed stated options and bypass mandated review dates. For these Collusive bid-evaluation scoring and Unauthorized contract extension files, choosing the pair Unauthorized contract extension / Collusive bid-evaluation scoring would misdirect the review away from at least one of these mechanisms.

C:

File B is misidentified as Sham subcontractor pass-through instead of Unauthorized contract extension. With the proposed pairing Collusive bid-evaluation scoring / Sham subcontractor pass-through, the distinction is substantive: File A shows that scoring notes and objective evidence disagree while one bidder receives unexplained advantages, whereas File B shows that extensions exceed stated options and bypass mandated review dates. For these Collusive bid-evaluation scoring and Unauthorized contract extension files, choosing the pair Collusive bid-evaluation scoring / Sham subcontractor pass-through would misdirect the review away from at least one of these mechanisms.

D:

File A is misidentified as Time-and-materials labor padding instead of Collusive bid-evaluation scoring. With the proposed pairing Time-and-materials labor padding / Unauthorized contract extension, the distinction is substantive: File A shows that scoring notes and objective evidence disagree while one bidder receives unexplained advantages, whereas File B shows that extensions exceed stated options and bypass mandated review dates. For these Collusive bid-evaluation scoring and Unauthorized contract extension files, choosing the pair Time-and-materials labor padding / Unauthorized contract extension would misdirect the review away from at least one of these mechanisms.

Question 559

The risk team has identified the following false sustainability disclosures exposure: Nonfinancial representations can deceive securities investors when inaccurate or unsupported. Which proposed prevention step is most effective?

  1. Apply documented ESG reporting controls and independent verification of material claims.
  2. Verify regulatory status and permitted functions of intermediaries before engagement.
  3. Monitor commission-driven activity and require supervisory review of high-turnover accounts.
  4. Require documented suitability assessment and independent review of high-risk recommendations.

Explanation

Correct Answer

A:

The control directly addresses the failure point in False sustainability disclosures, since nonfinancial representations can deceive securities investors when inaccurate or unsupported. A subsequent independent review could trace public environmental claims to primary data, methodology and validation evidence to identify exceptions that bypassed the safeguard.

Incorrect Answers

B:

This safeguard is directed primarily at Unregistered brokerage solicitation rather than False sustainability disclosures, because securities-related compensation and solicitation can trigger registration obligations under relevant laws. Unlike the control for Unregistered brokerage solicitation, the more direct design for False sustainability disclosures is to apply documented ESG reporting controls and independent verification of material claims; a different safeguard cannot substitute for it.

C:

This safeguard is directed primarily at Excessive-account churning rather than False sustainability disclosures, because excessive trading for broker compensation can constitute churning when control and other relevant elements are present. Unlike the control for Excessive-account churning, the more direct design for False sustainability disclosures is to apply documented ESG reporting controls and independent verification of material claims; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Unsuitable securities recommendation rather than False sustainability disclosures, because a sale can be improper because the recommendation does not match the customer's circumstances, not because the product itself is inherently unlawful. Unlike the control for Unsuitable securities recommendation, the more direct design for False sustainability disclosures is to apply documented ESG reporting controls and independent verification of material claims; a different safeguard cannot substitute for it.

Question 560

A process owner is assessing safeguards for bankruptcy bust-out credit buying. The mechanism is: A planned bust-out extracts value from vendors through deliberate nonpayment and asset diversion. Which control addresses it most directly?

  1. Review insider transactions and preserve assets for lawful creditor treatment.
  2. Apply supplier exposure controls and monitor sudden anomalous credit demand.
  3. Require sworn disclosure supported by reconciled accounting records.
  4. Subject related-party creditor proofs to independent substantive verification.

Explanation

Correct Answer

B:

The control directly addresses the failure point in Bankruptcy bust-out credit buying, since a planned bust-out extracts value from vendors through deliberate nonpayment and asset diversion. A subsequent independent review could trace inventory purchases, resale proceeds and pre-filing management communications to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Pre-filing fraudulent asset transfer rather than Bankruptcy bust-out credit buying, because transfers intended to put assets beyond creditors may be challengeable under applicable insolvency law. Unlike the control for Pre-filing fraudulent asset transfer, the more direct design for Bankruptcy bust-out credit buying is to apply supplier exposure controls and monitor sudden anomalous credit demand; a different safeguard cannot substitute for it.

C:

This safeguard is directed primarily at False insolvency schedules rather than Bankruptcy bust-out credit buying, because false asset and debt statements distort the administration of the insolvency estate. Unlike the control for False insolvency schedules, the more direct design for Bankruptcy bust-out credit buying is to apply supplier exposure controls and monitor sudden anomalous credit demand; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Fictitious creditor claim rather than Bankruptcy bust-out credit buying, because a manufactured liability can dilute legitimate creditors' recoveries. Unlike the control for Fictitious creditor claim, the more direct design for Bankruptcy bust-out credit buying is to apply supplier exposure controls and monitor sudden anomalous credit demand; a different safeguard cannot substitute for it.

Certified Fraud Examiner - Financial Transactions and Fraud Schemes (CFE - Financial Transactions and Fraud Schemes) Practice Tests