ACFE CFE - Financial Transactions and Fraud Schemes (Certified Fraud Examiner - Financial Transactions and Fraud Schemes) Practice Test 86

Question 850

Reviewers flag a possible undisclosed supplier ownership issue. Their preliminary finding is: Ownership records and related-party links are absent from conflict declarations. Which test would best confirm or refute the concern?

  1. Compare gift registers, travel records and award dates for decision makers.
  2. Preserve the demand trail and compare application status to statutory requirements.
  3. Compare certification dates with quality results and inspector-vendor relationships.
  4. Map beneficial owners and family relationships against employee procurement influence.

Explanation

Correct Answer

D:

For the Undisclosed supplier ownership concern, the procedure tests source evidence behind this observation: Ownership records and related-party links are absent from conflict declarations. This matters because a personal interest compromises objectivity even before a direct bribe is proven; independent corroboration is necessary before accepting any conclusion.

Incorrect Answers

A:

This comparison primarily addresses Lavish hospitality influence, in which material personal entertainment can influence purchasing discretion even without cash transfer; because the present question instead concerns Undisclosed supplier ownership, reviewers should map beneficial owners and family relationships against employee procurement influence rather than apply a check designed for Lavish hospitality influence.

B:

This comparison primarily addresses Economic extortion demand, in which extortion relies on coercive leverage over a decision or entitlement rather than a voluntary gratuity; because the present question instead concerns Undisclosed supplier ownership, reviewers should map beneficial owners and family relationships against employee procurement influence rather than apply a check designed for Economic extortion demand.

C:

This comparison primarily addresses Bribe to overlook inspections, in which a corrupt payment changes official judgment to allow nonconforming work; because the present question instead concerns Undisclosed supplier ownership, reviewers should map beneficial owners and family relationships against employee procurement influence rather than apply a check designed for Bribe to overlook inspections.

Question 851

Two separate review files raise different issues. File A: An employee voids valid completed purchases after customers leave and pockets the corresponding cash. File B: A shift manager records manual paid-out entries for alleged supplies and withdraws drawer cash without receipts. Which pairing accurately classifies both files?

  1. File A: Manipulated return-to-gift-card; File B: Unauthorized register cash payout.
  2. File A: Unauthorized register cash payout; File B: Fraudulent sale void.
  3. File A: Fraudulent sale void; File B: Unauthorized register cash payout.
  4. File A: Fraudulent sale void; File B: Fictitious register refund.

Explanation

Correct Answer

C:

File A is Fraudulent sale void because voiding erases or reverses a legitimate recorded sale while the customer payment was retained, while File B is Unauthorized register cash payout because the register balance is reduced through a purported business disbursement rather than a sale. The evidence chains differ: for File A, reviewers should match void timestamps with customer receipts and inventory movement; for File B, they should reconcile register paid-outs to approved source documents and purchases.

Incorrect Answers

A:

File A is misidentified as Manipulated return-to-gift-card instead of Fraudulent sale void. With the proposed pairing Manipulated return-to-gift-card / Unauthorized register cash payout, the distinction is substantive: File A shows that voids cluster under one cashier after high-cash transactions, whereas File B shows that paid-out entries have generic descriptions but no corresponding invoices. For these Fraudulent sale void and Unauthorized register cash payout files, choosing the pair Manipulated return-to-gift-card / Unauthorized register cash payout would misdirect the review away from at least one of these mechanisms.

B:

File A is misidentified as Unauthorized register cash payout instead of Fraudulent sale void; File B is misidentified as Fraudulent sale void instead of Unauthorized register cash payout. With the proposed pairing Unauthorized register cash payout / Fraudulent sale void, the distinction is substantive: File A shows that voids cluster under one cashier after high-cash transactions, whereas File B shows that paid-out entries have generic descriptions but no corresponding invoices. For these Fraudulent sale void and Unauthorized register cash payout files, choosing the pair Unauthorized register cash payout / Fraudulent sale void would misdirect the review away from at least one of these mechanisms.

D:

File B is misidentified as Fictitious register refund instead of Unauthorized register cash payout. With the proposed pairing Fraudulent sale void / Fictitious register refund, the distinction is substantive: File A shows that voids cluster under one cashier after high-cash transactions, whereas File B shows that paid-out entries have generic descriptions but no corresponding invoices. For these Fraudulent sale void and Unauthorized register cash payout files, choosing the pair Fraudulent sale void / Fictitious register refund would misdirect the review away from at least one of these mechanisms.

Question 852

The review team observes the following: The outflow bought a long-lived productive asset. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Reconcile borrowing and principal-repayment transactions to financing cash flows; safeguard: Classify cash purchases and disposals of qualifying long-term assets in investing activities.
  2. Diagnostic: Trace fixed-asset additions and bank settlements to the investing section of the cash-flow statement; safeguard: Reconcile assets, liabilities and equity before releasing the statement of financial position.
  3. Diagnostic: Recalculate the accounting equation and trace changes to equity transactions and results; safeguard: Classify cash from routine business activities separately from investing and financing flows.
  4. Diagnostic: Trace fixed-asset additions and bank settlements to the investing section of the cash-flow statement; safeguard: Classify cash purchases and disposals of qualifying long-term assets in investing activities.

Explanation

Correct Answer

D:

The test addresses Investing cash-flow classification by targeting this observation: The outflow bought a long-lived productive asset. The accompanying safeguard—classify cash purchases and disposals of qualifying long-term assets in investing activities—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The proposed safeguard is relevant to Investing cash-flow classification, but the diagnostic tests Financing cash-flow classification rather than the identified anomaly. That test is aimed at records involving loan agreements and bank movements show changes in borrowed capital; the specified case instead calls for reviewers to trace fixed-asset additions and bank settlements to the investing section of the cash-flow statement.

B:

The diagnostic correctly examines Investing cash-flow classification by having reviewers trace fixed-asset additions and bank settlements to the investing section of the cash-flow statement, but the safeguard is for Equity reconciliation. That prevention step responds to a different mechanism: Equity is the residual interest in assets after deducting liabilities, not a bank balance or revenue figure.

C:

The evidence test relates to Equity reconciliation, whereas the proposed safeguard protects against Operating cash-flow classification; neither directly resolves Investing cash-flow classification. Unlike the Equity reconciliation test and Operating cash-flow classification safeguard, the investigation of Investing cash-flow classification requires reviewers to trace fixed-asset additions and bank settlements to the investing section of the cash-flow statement, followed by assessment of the matching control point.

Question 853

Control designers are focusing on the mechanism behind terrorist-financing source distinction: Terrorist financing can involve legitimately sourced money; destination and intended use are central concerns. Which measure best limits that opportunity?

  1. Monitor connected cash activity rather than relying on each transaction separately.
  2. Maintain escalation, investigation and timely suspicious-activity reporting procedures.
  3. Screen relevant counterparties and monitor end-use risk under applicable sanctions and AML rules.
  4. Identify and verify beneficial owners under applicable customer-due-diligence rules.

Explanation

Correct Answer

C:

The control directly addresses the failure point in Terrorist-financing source distinction, since terrorist financing can involve legitimately sourced money; destination and intended use are central concerns. A subsequent independent review could trace source and destination of funds and the identity of ultimate recipients to identify exceptions that bypassed the safeguard.

Incorrect Answers

A:

This safeguard is directed primarily at Cash-deposit structuring rather than Terrorist-financing source distinction, because structuring intentionally fragments transactions to evade detection or reporting; the exact threshold is jurisdiction-dependent. Unlike the control for Cash-deposit structuring, the more direct design for Terrorist-financing source distinction is to screen relevant counterparties and monitor end-use risk under applicable sanctions and AML rules; a different safeguard cannot substitute for it.

B:

This safeguard is directed primarily at Suspicious-activity reporting decision rather than Terrorist-financing source distinction, because a SAR or STR is a suspicion-based regulatory tool; examiners need not prove criminal guilt before considering it. Unlike the control for Suspicious-activity reporting decision, the more direct design for Terrorist-financing source distinction is to screen relevant counterparties and monitor end-use risk under applicable sanctions and AML rules; a different safeguard cannot substitute for it.

D:

This safeguard is directed primarily at Opaque beneficial-ownership layers rather than Terrorist-financing source distinction, because legal-entity layers can conceal who controls funds and defeat superficial name-only screening. Unlike the control for Opaque beneficial-ownership layers, the more direct design for Terrorist-financing source distinction is to screen relevant counterparties and monitor end-use risk under applicable sanctions and AML rules; a different safeguard cannot substitute for it.

Question 854

The review team observes the following: Claimed yields lack verifiable trading activity and withdrawals stop during a surge in new deposits. It seeks one targeted detection step and one preventive measure that address the same underlying vulnerability. Which pairing is best?

  1. Diagnostic: Link relationship communications with payment destinations and platform authenticity; safeguard: Avoid relying on promised yields and require independent counterparty verification.
  2. Diagnostic: Verify asset custody, independent reserves and the reality of return generation; safeguard: Warn against guaranteed returns and require independent verification before funding platforms.
  3. Diagnostic: Verify platform licensing and wallet flows instead of trusting account screenshots; safeguard: Provide independent account oversight and safeguards for vulnerable account holders.
  4. Diagnostic: Verify asset custody, independent reserves and the reality of return generation; safeguard: Avoid relying on promised yields and require independent counterparty verification.
  5. Diagnostic: Review account authority, beneficiary connections and contemporaneous consent evidence; safeguard: Teach independent platform verification and warn against relationship-based investment pressure.

Explanation

Correct Answer

D:

The test addresses Guaranteed crypto yield scam by targeting this observation: Claimed yields lack verifiable trading activity and withdrawals stop during a surge in new deposits. The accompanying safeguard—avoid relying on promised yields and require independent counterparty verification—counters the same opportunity, so both checking and prevention concern one cause.

Incorrect Answers

A:

The proposed safeguard is relevant to Guaranteed crypto yield scam, but the diagnostic tests Online romance investment grooming rather than the identified anomaly. That test is aimed at records involving affectionate messaging precedes escalating transfers to unfamiliar financial or crypto accounts; the specified case instead calls for reviewers to verify asset custody, independent reserves and the reality of return generation.

B:

The diagnostic correctly examines Guaranteed crypto yield scam by having reviewers verify asset custody, independent reserves and the reality of return generation, but the safeguard is for Pig-butchering investment scam. That prevention step responds to a different mechanism: Long-form social engineering combines relationship grooming with fabricated investment performance.

C:

The evidence test relates to Pig-butchering investment scam, whereas the proposed safeguard protects against Elder caregiver financial exploitation; neither directly resolves Guaranteed crypto yield scam. Unlike the Pig-butchering investment scam test and Elder caregiver financial exploitation safeguard, the investigation of Guaranteed crypto yield scam requires reviewers to verify asset custody, independent reserves and the reality of return generation, followed by assessment of the matching control point.

E:

The evidence test relates to Elder caregiver financial exploitation, whereas the proposed safeguard protects against Online romance investment grooming; neither directly resolves Guaranteed crypto yield scam. Unlike the Elder caregiver financial exploitation test and Online romance investment grooming safeguard, the investigation of Guaranteed crypto yield scam requires reviewers to verify asset custody, independent reserves and the reality of return generation, followed by assessment of the matching control point.

Question 855

An analyst is selecting warning signs for fictitious beneficiary change. Which recorded pattern should receive focused attention?

  1. Earlier medical records contradict answers on the application.
  2. Beneficiary forms fail signature or authentication checks and appear near claim filing.
  3. Prior relationships and repeated accident participants conflict with an apparently spontaneous crash.
  4. Identical invoices and loss photos recur in separate carriers' claim files.

Explanation

Correct Answer

B:

This observation is a pertinent indicator of Fictitious beneficiary change because the scheme tampers with policy entitlement rather than misrepresenting the insured event. The practical corroborating procedure is to review policy change history, consent evidence and beneficiary identities; the indicator by itself does not establish intent or error.

Incorrect Answers

A:

The proposed observation fits Concealed preexisting condition, where material misrepresentation at policy inception differs from fabricating a later insured loss, rather than the particular mechanism in Fictitious beneficiary change. Unlike the clue for Concealed preexisting condition, the more directly related indicator for Fictitious beneficiary change is this: Beneficiary forms fail signature or authentication checks and appear near claim filing.

C:

The proposed observation fits Staged vehicle collision claim, where a staged loss creates the insured event rather than merely exaggerating a genuine accident, rather than the particular mechanism in Fictitious beneficiary change. Unlike the clue for Staged vehicle collision claim, the more directly related indicator for Fictitious beneficiary change is this: Beneficiary forms fail signature or authentication checks and appear near claim filing.

D:

The proposed observation fits Duplicate casualty claims, where multiple recoveries for one loss can exceed the legitimate indemnifiable damage, rather than the particular mechanism in Fictitious beneficiary change. Unlike the clue for Duplicate casualty claims, the more directly related indicator for Fictitious beneficiary change is this: Beneficiary forms fail signature or authentication checks and appear near claim filing.

Question 856

The case file describes the following: A buyer writes proprietary product dimensions into a public tender without functional justification so only one favored bidder qualifies. Which classification best explains the events?

  1. Artificial urgency sole-source award
  2. Unauthorized contract extension
  3. Bid rotation agreement
  4. Tender specifications tailored to one supplier
  5. Time-and-materials labor padding

Explanation

Correct Answer

D:

Tender specifications tailored to one supplier fits the facts because bid tailoring manipulates the solicitation before vendors compete; the distinguishing observation is that specifications mirror one vendor catalog while alternatives meet the operational need. To test this interpretation, a reviewer should compare requirement drafts, market alternatives and supplier communications.

Incorrect Answers

A:

Artificial urgency sole-source award would involve a different sequence from Tender specifications tailored to one supplier: false urgency defeats normal competitive sourcing under an unjustified exception. Unlike the rejected Artificial urgency sole-source award label, the evidence concerns Tender specifications tailored to one supplier, since specifications mirror one vendor catalog while alternatives meet the operational need; reviewers should compare requirement drafts, market alternatives and supplier communications.

B:

Unauthorized contract extension would involve a different sequence from Tender specifications tailored to one supplier: improper continuation can give an incumbent business without the required competition. Unlike the rejected Unauthorized contract extension label, the evidence concerns Tender specifications tailored to one supplier, since specifications mirror one vendor catalog while alternatives meet the operational need; reviewers should compare requirement drafts, market alternatives and supplier communications.

C:

Bid rotation agreement would involve a different sequence from Tender specifications tailored to one supplier: bid rotation is an agreement to allocate wins rather than genuine independent competition. Unlike the rejected Bid rotation agreement label, the evidence concerns Tender specifications tailored to one supplier, since specifications mirror one vendor catalog while alternatives meet the operational need; reviewers should compare requirement drafts, market alternatives and supplier communications.

E:

Time-and-materials labor padding would involve a different sequence from Tender specifications tailored to one supplier: misstated labor grade or effort inflates reimbursable service cost after award. Unlike the rejected Time-and-materials labor padding label, the evidence concerns Tender specifications tailored to one supplier, since specifications mirror one vendor catalog while alternatives meet the operational need; reviewers should compare requirement drafts, market alternatives and supplier communications.

Question 857

The case file describes the following: A manufacturing visitor photographs restricted machine blueprints on a shop-floor tour. Which classification best explains the events?

  1. Trade-secret client-list theft
  2. Supplier-access data theft
  3. Source-code repository exfiltration
  4. Printed blueprint removal

Explanation

Correct Answer

D:

Printed blueprint removal fits the facts because optical capture can remove trade secrets without any network download event; the distinguishing observation is that restricted-zone camera activity and later competitor designs align with visited equipment. To test this interpretation, a reviewer should correlate tour permissions, camera monitoring and design-document custody.

Incorrect Answers

A:

Trade-secret client-list theft would involve a different sequence from Printed blueprint removal: protected business information can be misappropriated even without physical property theft. Unlike the rejected Trade-secret client-list theft label, the evidence concerns Printed blueprint removal, since restricted-zone camera activity and later competitor designs align with visited equipment; reviewers should correlate tour permissions, camera monitoring and design-document custody.

B:

Supplier-access data theft would involve a different sequence from Printed blueprint removal: compromised or misused partner access can become a route for proprietary-data loss. Unlike the rejected Supplier-access data theft label, the evidence concerns Printed blueprint removal, since restricted-zone camera activity and later competitor designs align with visited equipment; reviewers should correlate tour permissions, camera monitoring and design-document custody.

C:

Source-code repository exfiltration would involve a different sequence from Printed blueprint removal: confidential software is removed through insider access, not obtained from public sources. Unlike the rejected Source-code repository exfiltration label, the evidence concerns Printed blueprint removal, since restricted-zone camera activity and later competitor designs align with visited equipment; reviewers should correlate tour permissions, camera monitoring and design-document custody.

Question 858

The case file describes the following: A broker makes frequent unnecessary trades mainly to generate commissions in a controlled customer account. Which classification best explains the events?

  1. False sustainability disclosures
  2. Unsuitable securities recommendation
  3. Excessive-account churning
  4. Unregistered brokerage solicitation

Explanation

Correct Answer

C:

Excessive-account churning fits the facts because excessive trading for broker compensation can constitute churning when control and other relevant elements are present; the distinguishing observation is that turnover and commission-to-equity ratios become excessive relative to client objectives. To test this interpretation, a reviewer should analyze account turnover, costs, broker control and trading justifications.

Incorrect Answers

A:

False sustainability disclosures would involve a different sequence from Excessive-account churning: nonfinancial representations can deceive securities investors when inaccurate or unsupported. Unlike the rejected False sustainability disclosures label, the evidence concerns Excessive-account churning, since turnover and commission-to-equity ratios become excessive relative to client objectives; reviewers should analyze account turnover, costs, broker control and trading justifications.

B:

Unsuitable securities recommendation would involve a different sequence from Excessive-account churning: a sale can be improper because the recommendation does not match the customer's circumstances, not because the product itself is inherently unlawful. Unlike the rejected Unsuitable securities recommendation label, the evidence concerns Excessive-account churning, since turnover and commission-to-equity ratios become excessive relative to client objectives; reviewers should analyze account turnover, costs, broker control and trading justifications.

D:

Unregistered brokerage solicitation would involve a different sequence from Excessive-account churning: securities-related compensation and solicitation can trigger registration obligations under relevant laws. Unlike the rejected Unregistered brokerage solicitation label, the evidence concerns Excessive-account churning, since turnover and commission-to-equity ratios become excessive relative to client objectives; reviewers should analyze account turnover, costs, broker control and trading justifications.

Question 859

Two separate review files raise different issues. File A: Management posts ordinary current-period advertising invoices to a long-lived asset account to improve earnings. File B: A company withholds received vendor invoices from the year-end payables process to make earnings look stronger. Which pairing accurately classifies both files?

  1. File A: Capitalized routine operating costs; File B: Concealed sales-side agreement.
  2. File A: Capitalized routine operating costs; File B: Unrecorded accrued liabilities.
  3. File A: Inflated year-end inventory; File B: Unrecorded accrued liabilities.
  4. File A: Unrecorded accrued liabilities; File B: Capitalized routine operating costs.

Explanation

Correct Answer

B:

File A is Capitalized routine operating costs because moving a period expense into assets understates expenses and overstates profit and assets, while File B is Unrecorded accrued liabilities because omitting obligations understates liabilities and costs rather than creating new cash resources. The evidence chains differ: for File A, reviewers should inspect additions to capital accounts against invoice descriptions and capitalization policies; for File B, they should search subsequent disbursements for missing accruals and compare receiving logs with liabilities.

Incorrect Answers

A:

File B is misidentified as Concealed sales-side agreement instead of Unrecorded accrued liabilities. With the proposed pairing Capitalized routine operating costs / Concealed sales-side agreement, the distinction is substantive: File A shows that unusual new assets have expense-like vendor descriptions and no future qualifying benefit, whereas File B shows that post-close payments relate to services delivered before the balance-sheet date. For these Capitalized routine operating costs and Unrecorded accrued liabilities files, choosing the pair Capitalized routine operating costs / Concealed sales-side agreement would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Inflated year-end inventory instead of Capitalized routine operating costs. With the proposed pairing Inflated year-end inventory / Unrecorded accrued liabilities, the distinction is substantive: File A shows that unusual new assets have expense-like vendor descriptions and no future qualifying benefit, whereas File B shows that post-close payments relate to services delivered before the balance-sheet date. For these Capitalized routine operating costs and Unrecorded accrued liabilities files, choosing the pair Inflated year-end inventory / Unrecorded accrued liabilities would misdirect the review away from at least one of these mechanisms.

D:

File A is misidentified as Unrecorded accrued liabilities instead of Capitalized routine operating costs; File B is misidentified as Capitalized routine operating costs instead of Unrecorded accrued liabilities. With the proposed pairing Unrecorded accrued liabilities / Capitalized routine operating costs, the distinction is substantive: File A shows that unusual new assets have expense-like vendor descriptions and no future qualifying benefit, whereas File B shows that post-close payments relate to services delivered before the balance-sheet date. For these Capitalized routine operating costs and Unrecorded accrued liabilities files, choosing the pair Unrecorded accrued liabilities / Capitalized routine operating costs would misdirect the review away from at least one of these mechanisms.

Question 860

Two separate review files raise different issues. File A: A claimant seeks reimbursement for the same damaged property from multiple policies without disclosing prior settlements. File B: A fraudster forges a life-policy beneficiary amendment to redirect death benefits away from the rightful recipient. Which pairing accurately classifies both files?

  1. File A: Duplicate casualty claims; File B: Fictitious beneficiary change.
  2. File A: Duplicate casualty claims; File B: Concealed preexisting condition.
  3. File A: Staged vehicle collision claim; File B: Fictitious beneficiary change.
  4. File A: Fictitious beneficiary change; File B: Duplicate casualty claims.

Explanation

Correct Answer

A:

File A is Duplicate casualty claims because multiple recoveries for one loss can exceed the legitimate indemnifiable damage, while File B is Fictitious beneficiary change because the scheme tampers with policy entitlement rather than misrepresenting the insured event. The evidence chains differ: for File A, reviewers should cross-match claim dates, asset identifiers and prior paid settlements where lawful; for File B, they should review policy change history, consent evidence and beneficiary identities.

Incorrect Answers

B:

File B is misidentified as Concealed preexisting condition instead of Fictitious beneficiary change. With the proposed pairing Duplicate casualty claims / Concealed preexisting condition, the distinction is substantive: File A shows that identical invoices and loss photos recur in separate carriers' claim files, whereas File B shows that beneficiary forms fail signature or authentication checks and appear near claim filing. For these Duplicate casualty claims and Fictitious beneficiary change files, choosing the pair Duplicate casualty claims / Concealed preexisting condition would misdirect the review away from at least one of these mechanisms.

C:

File A is misidentified as Staged vehicle collision claim instead of Duplicate casualty claims. With the proposed pairing Staged vehicle collision claim / Fictitious beneficiary change, the distinction is substantive: File A shows that identical invoices and loss photos recur in separate carriers' claim files, whereas File B shows that beneficiary forms fail signature or authentication checks and appear near claim filing. For these Duplicate casualty claims and Fictitious beneficiary change files, choosing the pair Staged vehicle collision claim / Fictitious beneficiary change would misdirect the review away from at least one of these mechanisms.

D:

File A is misidentified as Fictitious beneficiary change instead of Duplicate casualty claims; File B is misidentified as Duplicate casualty claims instead of Fictitious beneficiary change. With the proposed pairing Fictitious beneficiary change / Duplicate casualty claims, the distinction is substantive: File A shows that identical invoices and loss photos recur in separate carriers' claim files, whereas File B shows that beneficiary forms fail signature or authentication checks and appear near claim filing. For these Duplicate casualty claims and Fictitious beneficiary change files, choosing the pair Fictitious beneficiary change / Duplicate casualty claims would misdirect the review away from at least one of these mechanisms.

Certified Fraud Examiner - Financial Transactions and Fraud Schemes (CFE - Financial Transactions and Fraud Schemes) Practice Tests