ACFE CFE - Financial Transactions and Fraud Schemes (Certified Fraud Examiner - Financial Transactions and Fraud Schemes) Practice Test 78

Question 770

Two separate review files raise different issues. File A: A fraud network cultivates a victim over weeks, displays fictitious trading profits and then blocks withdrawals unless new fees are paid. File B: A victim is told that a prize has been won but must first pay a release or tax charge to an unknown account. Which pairing accurately classifies both files?

  1. File A: Pig-butchering investment scam; File B: Online romance investment grooming.
  2. File A: Advance-fee lottery fraud; File B: Pig-butchering investment scam.
  3. File A: Online romance investment grooming; File B: Pig-butchering investment scam.
  4. File A: Ponzi payout financing; File B: Advance-fee lottery fraud.
  5. File A: Pig-butchering investment scam; File B: Advance-fee lottery fraud.

Explanation

Correct Answer

E:

File A is Pig-butchering investment scam because long-form social engineering combines relationship grooming with fabricated investment performance, while File B is Advance-fee lottery fraud because the promise of future value is used to extract an immediate fee without a real award. The evidence chains differ: for File A, reviewers should verify platform licensing and wallet flows instead of trusting account screenshots; for File B, they should verify the awarding organization independently and follow payments to recipients.

Incorrect Answers

A:

File B is misidentified as Online romance investment grooming instead of Advance-fee lottery fraud. With the proposed pairing Pig-butchering investment scam / Online romance investment grooming, the distinction is substantive: File A shows that platform balances rise without verifiable custody and withdrawal attempts trigger extra demands, whereas File B shows that a surprise prize demand has no verifiable entry and requires upfront payment. For these Pig-butchering investment scam and Advance-fee lottery fraud files, choosing the pair Pig-butchering investment scam / Online romance investment grooming would misdirect the review away from at least one of these mechanisms.

B:

File A is misidentified as Advance-fee lottery fraud instead of Pig-butchering investment scam; File B is misidentified as Pig-butchering investment scam instead of Advance-fee lottery fraud. With the proposed pairing Advance-fee lottery fraud / Pig-butchering investment scam, the distinction is substantive: File A shows that platform balances rise without verifiable custody and withdrawal attempts trigger extra demands, whereas File B shows that a surprise prize demand has no verifiable entry and requires upfront payment. For these Pig-butchering investment scam and Advance-fee lottery fraud files, choosing the pair Advance-fee lottery fraud / Pig-butchering investment scam would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Online romance investment grooming instead of Pig-butchering investment scam; File B is misidentified as Pig-butchering investment scam instead of Advance-fee lottery fraud. With the proposed pairing Online romance investment grooming / Pig-butchering investment scam, the distinction is substantive: File A shows that platform balances rise without verifiable custody and withdrawal attempts trigger extra demands, whereas File B shows that a surprise prize demand has no verifiable entry and requires upfront payment. For these Pig-butchering investment scam and Advance-fee lottery fraud files, choosing the pair Online romance investment grooming / Pig-butchering investment scam would misdirect the review away from at least one of these mechanisms.

D:

File A is misidentified as Ponzi payout financing instead of Pig-butchering investment scam. With the proposed pairing Ponzi payout financing / Advance-fee lottery fraud, the distinction is substantive: File A shows that platform balances rise without verifiable custody and withdrawal attempts trigger extra demands, whereas File B shows that a surprise prize demand has no verifiable entry and requires upfront payment. For these Pig-butchering investment scam and Advance-fee lottery fraud files, choosing the pair Ponzi payout financing / Advance-fee lottery fraud would misdirect the review away from at least one of these mechanisms.

Question 771

An examination of complementary cover bidding begins with this observation: Losing bids share errors, metadata or implausible pricing unrelated to true cost. Which follow-up procedure gives the most direct evidence?

  1. Compare restricted-file access and messaging with bid timing.
  2. Analyze longitudinal award, bid spread and bidder-relationship patterns.
  3. Trace withdrawal patterns, communications and supplier compensation.
  4. Compare bid preparation artifacts, related owners and independent market estimates.

Explanation

Correct Answer

D:

For the Complementary cover bidding concern, the procedure tests source evidence behind this observation: Losing bids share errors, metadata or implausible pricing unrelated to true cost. This matters because cover bids create an illusion of competition while protecting a preselected winner; independent corroboration is necessary before accepting any conclusion.

Incorrect Answers

A:

This comparison primarily addresses Leaked confidential price estimate, in which insider disclosure removes the information parity necessary for a fair tender; because the present question instead concerns Complementary cover bidding, reviewers should compare bid preparation artifacts, related owners and independent market estimates rather than apply a check designed for Leaked confidential price estimate.

B:

This comparison primarily addresses Bid rotation agreement, in which bid rotation is an agreement to allocate wins rather than genuine independent competition; because the present question instead concerns Complementary cover bidding, reviewers should compare bid preparation artifacts, related owners and independent market estimates rather than apply a check designed for Bid rotation agreement.

C:

This comparison primarily addresses Bid suppression agreement, in which suppressing bids reduces competition by preventing otherwise viable offers; because the present question instead concerns Complementary cover bidding, reviewers should compare bid preparation artifacts, related owners and independent market estimates rather than apply a check designed for Bid suppression agreement.

Question 772

Two separate review files raise different issues. File A: A retailer pays one annual insurance premium in advance and charges all of it to the first month's expenses. File B: A wholesaler delivers goods on approved customer credit and has not yet collected the invoiced amount. Which pairing accurately classifies both files?

  1. File A: Prepaid insurance expense; File B: Accrued supplier expense.
  2. File A: Inventory cost recognition; File B: Accounts receivable from credit sales.
  3. File A: Accounts receivable from credit sales; File B: Prepaid insurance expense.
  4. File A: Prepaid insurance expense; File B: Accounts receivable from credit sales.

Explanation

Correct Answer

D:

File A is Prepaid insurance expense because an advance payment creates an asset for future economic benefit rather than immediate expense for all periods, while File B is Accounts receivable from credit sales because a legitimate credit sale can create an asset before cash arrives when revenue criteria are met. The evidence chains differ: for File A, reviewers should reconcile policy coverage dates and the prepaid-insurance amortization schedule; for File B, they should trace shipping confirmations to invoices, customer balances and subsequent collections.

Incorrect Answers

A:

File B is misidentified as Accrued supplier expense instead of Accounts receivable from credit sales. With the proposed pairing Prepaid insurance expense / Accrued supplier expense, the distinction is substantive: File A shows that coverage extends well beyond the period carrying the entire charge, whereas File B shows that the shipment and invoice are valid but no matching bank receipt exists yet. For these Prepaid insurance expense and Accounts receivable from credit sales files, choosing the pair Prepaid insurance expense / Accrued supplier expense would misdirect the review away from at least one of these mechanisms.

B:

File A is misidentified as Inventory cost recognition instead of Prepaid insurance expense. With the proposed pairing Inventory cost recognition / Accounts receivable from credit sales, the distinction is substantive: File A shows that coverage extends well beyond the period carrying the entire charge, whereas File B shows that the shipment and invoice are valid but no matching bank receipt exists yet. For these Prepaid insurance expense and Accounts receivable from credit sales files, choosing the pair Inventory cost recognition / Accounts receivable from credit sales would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Accounts receivable from credit sales instead of Prepaid insurance expense; File B is misidentified as Prepaid insurance expense instead of Accounts receivable from credit sales. With the proposed pairing Accounts receivable from credit sales / Prepaid insurance expense, the distinction is substantive: File A shows that coverage extends well beyond the period carrying the entire charge, whereas File B shows that the shipment and invoice are valid but no matching bank receipt exists yet. For these Prepaid insurance expense and Accounts receivable from credit sales files, choosing the pair Accounts receivable from credit sales / Prepaid insurance expense would misdirect the review away from at least one of these mechanisms.

Question 773

The team is assessing a potential unauthorized ach debit discrepancy. Initial observation: Debit originators lack customer authorization evidence and generate return disputes. Which verification step is most informative?

  1. Verify beneficiary changes independently and inspect message headers and login records.
  2. Match debit mandates with customer consents and originating entity identifiers.
  3. Match cleared bank images with original check issuance and beneficiary details.
  4. Analyze terminal traces and transaction authentication logs for relay characteristics.

Explanation

Correct Answer

B:

For the Unauthorized ACH debit concern, the procedure tests source evidence behind this observation: Debit originators lack customer authorization evidence and generate return disputes. This matters because the debit exploits the payment rail without the payer's required consent; independent corroboration is necessary before accepting any conclusion.

Incorrect Answers

A:

This comparison primarily addresses Business email payment diversion, in which the payment is authorized for a real invoice but settlement instructions are fraudulently replaced; because the present question instead concerns Unauthorized ACH debit, reviewers should match debit mandates with customer consents and originating entity identifiers rather than apply a check designed for Business email payment diversion.

C:

This comparison primarily addresses Check-washing alteration, in which check washing modifies a valid instrument to redirect its value; because the present question instead concerns Unauthorized ACH debit, reviewers should match debit mandates with customer consents and originating entity identifiers rather than apply a check designed for Check-washing alteration.

D:

This comparison primarily addresses Contactless payment relay, in which relay attacks extend a credential's communication path rather than physically duplicating the card; because the present question instead concerns Unauthorized ACH debit, reviewers should match debit mandates with customer consents and originating entity identifiers rather than apply a check designed for Contactless payment relay.

Question 774

A process owner is assessing safeguards for forged check-maker signature. The mechanism is: The perpetrator creates a payment instrument without the genuine drawer authorization. Which control addresses it most directly?

  1. Require tiered markdown approvals and independent discount-exception review.
  2. Secure blank check stock and segregate check preparation from signing.
  3. Secure outgoing checks and independently resolve vendor nonreceipt.
  4. Restrict refund destinations and monitor repeated beneficiary cards.

Explanation

Correct Answer

B:

The control directly addresses the failure point in Forged check-maker signature, since the perpetrator creates a payment instrument without the genuine drawer authorization. A subsequent independent review could inspect paid check images, signing authority and voucher support to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Collusive price markdown rather than Forged check-maker signature, because sale-price manipulation improperly transfers value to an accomplice through undercharging. Unlike the control for Collusive price markdown, the more direct design for Forged check-maker signature is to secure blank check stock and segregate check preparation from signing; a different safeguard cannot substitute for it.

C:

This safeguard is directed primarily at Forged check endorsement rather than Forged check-maker signature, because the authorized check is diverted at the endorsement stage, not created by a false invoice. Unlike the control for Forged check endorsement, the more direct design for Forged check-maker signature is to secure blank check stock and segregate check preparation from signing; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Manipulated return-to-gift-card rather than Forged check-maker signature, because a fabricated return transfers store value instead of extracting physical currency. Unlike the control for Manipulated return-to-gift-card, the more direct design for Forged check-maker signature is to secure blank check stock and segregate check preparation from signing; a different safeguard cannot substitute for it.

Question 775

An examination of preferential creditor payment review begins with this observation: The payment timing, relationship and insolvency condition raise preference concerns. Which follow-up procedure gives the most direct evidence?

  1. Review appointment orders, estate ledgers and independent disposal evidence.
  2. Trace asset conveyance documents, fair value and beneficial ownership.
  3. Assess the payment against applicable preference periods, defenses and creditor classes.
  4. Compare disclosed assets with bank transfers, ownership and foreign records.

Explanation

Correct Answer

C:

For the Preferential creditor payment review concern, the procedure tests source evidence behind this observation: The payment timing, relationship and insolvency condition raise preference concerns. This matters because preference rules can permit recovery of certain pre-filing payments without proving a fictitious invoice or ordinary theft; independent corroboration is necessary before accepting any conclusion.

Incorrect Answers

A:

This comparison primarily addresses Trustee and receiver accountability, in which a trustee or receiver acts within a defined legal appointment to administer assets, not as an unrestricted owner; because the present question instead concerns Preferential creditor payment review, reviewers should assess the payment against applicable preference periods, defenses and creditor classes rather than apply a check designed for Trustee and receiver accountability.

B:

This comparison primarily addresses Pre-filing fraudulent asset transfer, in which transfers intended to put assets beyond creditors may be challengeable under applicable insolvency law; because the present question instead concerns Preferential creditor payment review, reviewers should assess the payment against applicable preference periods, defenses and creditor classes rather than apply a check designed for Pre-filing fraudulent asset transfer.

D:

This comparison primarily addresses Concealed offshore insolvency asset, in which concealment deprives the estate and creditors of property that should be disclosed; because the present question instead concerns Preferential creditor payment review, reviewers should assess the payment against applicable preference periods, defenses and creditor classes rather than apply a check designed for Concealed offshore insolvency asset.

Question 776

Two separate review files raise different issues. File A: A clerk submits the same genuine invoice twice using slightly altered identifiers and captures one payment. File B: A manager approves recurring invoices for advisory work that no one can substantiate. Which pairing accurately classifies both files?

  1. File A: Duplicate vendor-invoice payment; File B: Personal purchases billed as business.
  2. File A: Phantom consulting fees; File B: Duplicate vendor-invoice payment.
  3. File A: Split procurement invoices; File B: Phantom consulting fees.
  4. File A: Duplicate vendor-invoice payment; File B: Phantom consulting fees.

Explanation

Correct Answer

D:

File A is Duplicate vendor-invoice payment because the scheme exploits duplicate settlement of one legitimate obligation, while File B is Phantom consulting fees because fabricated intangible services can be billed without the physical receiving evidence used for goods. The evidence chains differ: for File A, reviewers should run normalized duplicate-payment checks across invoice number, amount and payee; for File B, they should corroborate contract deliverables with employees and independent project evidence.

Incorrect Answers

A:

File B is misidentified as Personal purchases billed as business instead of Phantom consulting fees. With the proposed pairing Duplicate vendor-invoice payment / Personal purchases billed as business, the distinction is substantive: File A shows that similar amounts, dates and vendors appear under multiple invoice references, whereas File B shows that payments recur despite missing work products, timesheets or meeting records. For these Duplicate vendor-invoice payment and Phantom consulting fees files, choosing the pair Duplicate vendor-invoice payment / Personal purchases billed as business would misdirect the review away from at least one of these mechanisms.

B:

File A is misidentified as Phantom consulting fees instead of Duplicate vendor-invoice payment; File B is misidentified as Duplicate vendor-invoice payment instead of Phantom consulting fees. With the proposed pairing Phantom consulting fees / Duplicate vendor-invoice payment, the distinction is substantive: File A shows that similar amounts, dates and vendors appear under multiple invoice references, whereas File B shows that payments recur despite missing work products, timesheets or meeting records. For these Duplicate vendor-invoice payment and Phantom consulting fees files, choosing the pair Phantom consulting fees / Duplicate vendor-invoice payment would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Split procurement invoices instead of Duplicate vendor-invoice payment. With the proposed pairing Split procurement invoices / Phantom consulting fees, the distinction is substantive: File A shows that similar amounts, dates and vendors appear under multiple invoice references, whereas File B shows that payments recur despite missing work products, timesheets or meeting records. For these Duplicate vendor-invoice payment and Phantom consulting fees files, choosing the pair Split procurement invoices / Phantom consulting fees would misdirect the review away from at least one of these mechanisms.

Question 777

The review team observes the following: Matching receipt hashes, amounts and dates appear in multiple paid claims. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Match void timestamps with customer receipts and inventory movement; safeguard: Require documented business travel and independent review of receipts.
  2. Diagnostic: Compare normalized receipt images and merchant details across claim histories; safeguard: Restrict post-sale void rights and review exception logs with video where lawful.
  3. Diagnostic: Compare normalized receipt images and merchant details across claim histories; safeguard: Use duplicate-claim analytics and retain searchable receipt records.
  4. Diagnostic: Test cash refunds against original receipts, customer details and inventory returns; safeguard: Use duplicate-claim analytics and retain searchable receipt records.

Explanation

Correct Answer

C:

The test addresses Duplicate expense reimbursement by targeting this observation: Matching receipt hashes, amounts and dates appear in multiple paid claims. The accompanying safeguard—use duplicate-claim analytics and retain searchable receipt records—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The evidence test relates to Fraudulent sale void, whereas the proposed safeguard protects against Fictitious travel reimbursement; neither directly resolves Duplicate expense reimbursement. Unlike the Fraudulent sale void test and Fictitious travel reimbursement safeguard, the investigation of Duplicate expense reimbursement requires reviewers to compare normalized receipt images and merchant details across claim histories, followed by assessment of the matching control point.

B:

The diagnostic correctly examines Duplicate expense reimbursement by having reviewers compare normalized receipt images and merchant details across claim histories, but the safeguard is for Fraudulent sale void. That prevention step responds to a different mechanism: Voiding erases or reverses a legitimate recorded sale while the customer payment was retained.

D:

The proposed safeguard is relevant to Duplicate expense reimbursement, but the diagnostic tests Fictitious register refund rather than the identified anomaly. That test is aimed at records involving refunds lack linked original sales or physical returned goods; the specified case instead calls for reviewers to compare normalized receipt images and merchant details across claim histories.

Question 778

The organization wants to prevent occupancy-misrepresented mortgage. Its risk assessment describes: Misstated intended use can improperly obtain lending terms reserved for a primary residence. What targeted safeguard should it prioritize?

  1. Require independent income validation before underwriting approval.
  2. Perform beneficial-borrower due diligence and verify source of down payment.
  3. Strengthen onboarding checks and monitor early-life unusual account turnover.
  4. Verify occupancy representations and review high-risk investment-property indicators.

Explanation

Correct Answer

D:

The control directly addresses the failure point in Occupancy-misrepresented mortgage, since misstated intended use can improperly obtain lending terms reserved for a primary residence. A subsequent independent review could compare application occupancy statements with objective property-use evidence to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Falsified borrower income rather than Occupancy-misrepresented mortgage, because borrower misrepresentation distorts credit assessment even before any default. Unlike the control for Falsified borrower income, the more direct design for Occupancy-misrepresented mortgage is to verify occupancy representations and review high-risk investment-property indicators; a different safeguard cannot substitute for it.

B:

This safeguard is directed primarily at Mortgage straw-buyer scheme rather than Occupancy-misrepresented mortgage, because a nominal applicant conceals the real party controlling the property and borrowing transaction. Unlike the control for Mortgage straw-buyer scheme, the more direct design for Occupancy-misrepresented mortgage is to verify occupancy representations and review high-risk investment-property indicators; a different safeguard cannot substitute for it.

C:

This safeguard is directed primarily at Fraudulent new bank account rather than Occupancy-misrepresented mortgage, because the newly created account is established under false identity to receive or move illicit proceeds. Unlike the control for Fraudulent new bank account, the more direct design for Occupancy-misrepresented mortgage is to verify occupancy representations and review high-risk investment-property indicators; a different safeguard cannot substitute for it.

Question 779

Control designers are focusing on the mechanism behind fictitious creditor claim: A manufactured liability can dilute legitimate creditors' recoveries. Which measure best limits that opportunity?

  1. Review insider transactions and preserve assets for lawful creditor treatment.
  2. Apply supplier exposure controls and monitor sudden anomalous credit demand.
  3. Subject related-party creditor proofs to independent substantive verification.
  4. Require complete asset schedules and independent verification under applicable law.

Explanation

Correct Answer

C:

The control directly addresses the failure point in Fictitious creditor claim, since a manufactured liability can dilute legitimate creditors' recoveries. A subsequent independent review could confirm claim validity using contracts, bank traces and accounting history to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Pre-filing fraudulent asset transfer rather than Fictitious creditor claim, because transfers intended to put assets beyond creditors may be challengeable under applicable insolvency law. Unlike the control for Pre-filing fraudulent asset transfer, the more direct design for Fictitious creditor claim is to subject related-party creditor proofs to independent substantive verification; a different safeguard cannot substitute for it.

B:

This safeguard is directed primarily at Bankruptcy bust-out credit buying rather than Fictitious creditor claim, because a planned bust-out extracts value from vendors through deliberate nonpayment and asset diversion. Unlike the control for Bankruptcy bust-out credit buying, the more direct design for Fictitious creditor claim is to subject related-party creditor proofs to independent substantive verification; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Concealed offshore insolvency asset rather than Fictitious creditor claim, because concealment deprives the estate and creditors of property that should be disclosed. Unlike the control for Concealed offshore insolvency asset, the more direct design for Fictitious creditor claim is to subject related-party creditor proofs to independent substantive verification; a different safeguard cannot substitute for it.

Question 780

The review team observes the following: Reseller inventory and returns rise sharply while reported sales surge. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Obtain independent customer terms and inspect side letters and subsequent cancellations; safeguard: Review rights of return and whether control genuinely transferred before accepting sales.
  2. Diagnostic: Analyze quarter-end sales, return allowances and post-period credit notes; safeguard: Review rights of return and whether control genuinely transferred before accepting sales.
  3. Diagnostic: Compare recognized revenue with signed acceptance and fulfillment milestones; safeguard: Apply reviewed capitalization thresholds and expense nonqualifying costs.
  4. Diagnostic: Inspect additions to capital accounts against invoice descriptions and capitalization policies; safeguard: Require revenue-recognition review of performance obligations and cutoff.
  5. Diagnostic: Analyze quarter-end sales, return allowances and post-period credit notes; safeguard: Apply reviewed capitalization thresholds and expense nonqualifying costs.

Explanation

Correct Answer

B:

The test addresses Channel-stuffing manipulation by targeting this observation: Reseller inventory and returns rise sharply while reported sales surge. The accompanying safeguard—review rights of return and whether control genuinely transferred before accepting sales—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The proposed safeguard is relevant to Channel-stuffing manipulation, but the diagnostic tests Concealed sales-side agreement rather than the identified anomaly. That test is aimed at records involving customer correspondence conflicts with the written contract and booked revenue; the specified case instead calls for reviewers to analyze quarter-end sales, return allowances and post-period credit notes.

C:

The evidence test relates to Premature revenue recognition, whereas the proposed safeguard protects against Capitalized routine operating costs; neither directly resolves Channel-stuffing manipulation. Unlike the Premature revenue recognition test and Capitalized routine operating costs safeguard, the investigation of Channel-stuffing manipulation requires reviewers to analyze quarter-end sales, return allowances and post-period credit notes, followed by assessment of the matching control point.

D:

The evidence test relates to Capitalized routine operating costs, whereas the proposed safeguard protects against Premature revenue recognition; neither directly resolves Channel-stuffing manipulation. Unlike the Capitalized routine operating costs test and Premature revenue recognition safeguard, the investigation of Channel-stuffing manipulation requires reviewers to analyze quarter-end sales, return allowances and post-period credit notes, followed by assessment of the matching control point.

E:

The diagnostic correctly examines Channel-stuffing manipulation by having reviewers analyze quarter-end sales, return allowances and post-period credit notes, but the safeguard is for Capitalized routine operating costs. That prevention step responds to a different mechanism: Moving a period expense into assets understates expenses and overstates profit and assets.

Certified Fraud Examiner - Financial Transactions and Fraud Schemes (CFE - Financial Transactions and Fraud Schemes) Practice Tests