ACFE CFE - Investigation (Certified Fraud Examiner - Investigation) Practice Test 58

Question 570

An illicit payment is suspected to pass through USD, EUR, and local-currency accounts. What is the strongest investigative approach to trace funds routed through multiple currencies?

  1. Normalize transaction values using documented rates and timestamps
  2. Review available payment-message and correspondent-bank records
  3. Confirm settlement status and any bank-imposed hold before treating each transfer as final
  4. Distinguish ordering party, intermediary, and beneficiary fields

Explanation

Correct Answer

A:

Currency conversion can obscure straightforward amount matching. Recording original values and conversion assumptions supports reconciliation.

Incorrect Answers

B:

Correspondent routing explains transfer legs that may not appear in ordinary ledgers; its purpose in an investigation is to identify intermediary banks in a cross-border payment. Each hop should be distinguished from the ultimate beneficiary; it is not a substitute for a step that would trace funds routed through multiple currencies.

C:

Completion status matters when tracing actual payments, but it does not put different currencies into comparable values. The question asks for documented rates and value dates.

D:

Payment messages contain different roles; it describes an action suited to interpret a SWIFT payment reference correctly. Confusing the intermediary with the recipient creates a false trace; it would not by itself meet the stated need to trace funds routed through multiple currencies.

Question 571

A suspected fraudulent online shop receives aggregated card-processing payouts. What should be done to identify the recipient behind a merchant settlement?

  1. Seek lawful platform transaction and identity records
  2. Reconcile gateway transaction IDs against actual bank settlement
  3. Obtain processor settlement and merchant-account identifiers lawfully
  4. Compare original authorization, clearing, refund, and chargeback stages

Explanation

Correct Answer

C:

A merchant payout aggregates underlying sales and adjustments. Processor-level records connect customer charges to settled accounts.

Incorrect Answers

A:

Wallet-facing labels may not establish account ownership; it supports the separate objective to trace mobile-wallet transfers where identifiers are masked. Provider records and authorized device evidence can support attribution; it does not address the specific requirement to identify the recipient behind a merchant settlement.

B:

Retry behavior can produce duplicate payment events without intentional fraud; this concerns the distinct task of deciding how to identify duplicate settlement from payment retries. The underlying clearing records determine economic effect; it does not address the specific requirement to identify the recipient behind a merchant settlement.

D:

Payment stages may create several records for one commercial event; this is a sensible safeguard where the issue is to reconcile a disputed card refund. Understanding the lifecycle prevents double counting; this case asks for a means to identify the recipient behind a merchant settlement instead.

Question 572

A company card shows a credit but finance records treat it as a new expense. Which action would most reliably help the team to reconcile a disputed card refund?

  1. Seek lawful platform transaction and identity records
  2. Compare original authorization, clearing, refund, and chargeback stages
  3. Record the chargeback as a potential recovery or adjustment
  4. Obtain processor settlement and merchant-account identifiers lawfully
  5. Reconcile gateway transaction IDs against actual bank settlement

Explanation

Correct Answer

B:

Payment stages may create several records for one commercial event. Understanding the lifecycle prevents double counting.

Incorrect Answers

A:

Wallet-facing labels may not establish account ownership; that is the consideration when a team tries to trace mobile-wallet transfers where identifiers are masked. Provider records and authorized device evidence can support attribution; the immediate evidentiary task here is to reconcile a disputed card refund.

C:

Gross charges and net realized loss differ; that is why it can help to interpret a chargeback in loss analysis. The timing and fees of the reversal should be reflected separately; the record instead calls for an action that would reconcile a disputed card refund.

D:

A merchant payout aggregates underlying sales and adjustments; that principle applies when the team needs to identify the recipient behind a merchant settlement. Processor-level records connect customer charges to settled accounts; the priority under these facts is to reconcile a disputed card refund.

E:

Retry behavior can produce duplicate payment events without intentional fraud; that principle applies when the team needs to identify duplicate settlement from payment retries. The underlying clearing records determine economic effect; this case asks for a means to reconcile a disputed card refund instead.

Question 573

An employee moves funds through a wallet service that displays only abbreviated phone details. What would be the most defensible approach to trace mobile-wallet transfers where identifiers are masked?

  1. Compare original authorization, clearing, refund, and chargeback stages
  2. Cross-check gateway transaction IDs against actual bank settlement
  3. Obtain processor settlement and merchant-account identifiers lawfully
  4. Seek lawful platform transaction and identity records

Explanation

Correct Answer

D:

Wallet-facing labels may not establish account ownership. Provider records and authorized device evidence can support attribution.

Incorrect Answers

A:

Payment stages may create several records for one commercial event; it describes an action suited to reconcile a disputed card refund. Understanding the lifecycle prevents double counting; this case asks for a means to trace mobile-wallet transfers where identifiers are masked instead.

B:

Retry behavior can produce duplicate payment events without intentional fraud; this is primarily relevant when the objective is to identify duplicate settlement from payment retries. The underlying clearing records determine economic effect; this case asks for a means to trace mobile-wallet transfers where identifiers are masked instead.

C:

A merchant payout aggregates underlying sales and adjustments; this is primarily relevant when the objective is to identify the recipient behind a merchant settlement. Processor-level records connect customer charges to settled accounts; the priority under these facts is to trace mobile-wallet transfers where identifiers are masked.

Question 574

A gateway records two successful captures after an API timeout. Which response is most appropriate to identify duplicate settlement from payment retries?

  1. Compare original authorization, clearing, refund, and chargeback stages
  2. Obtain processor settlement and merchant-account identifiers lawfully
  3. Record the chargeback as a potential recovery or adjustment
  4. Reconcile gateway transaction IDs against actual bank settlement

Explanation

Correct Answer

D:

Retry behavior can produce duplicate payment events without intentional fraud. The underlying clearing records determine economic effect.

Incorrect Answers

A:

Payment stages may create several records for one commercial event; its purpose in an investigation is to reconcile a disputed card refund. Understanding the lifecycle prevents double counting; the record instead calls for an action that would identify duplicate settlement from payment retries.

B:

A merchant payout aggregates underlying sales and adjustments; it can be useful for efforts to identify the recipient behind a merchant settlement. Processor-level records connect customer charges to settled accounts; it would not by itself meet the stated need to identify duplicate settlement from payment retries.

C:

Gross charges and net realized loss differ; it belongs to a different stage of work: trying to interpret a chargeback in loss analysis. The timing and fees of the reversal should be reflected separately; the examiner still needs to identify duplicate settlement from payment retries.

Question 575

A processor reversed a disputed customer card payment after investigation. Which procedure would best allow investigators to interpret a chargeback in loss analysis?

  1. Compare original authorization, clearing, refund, and chargeback stages
  2. Obtain processor settlement and merchant-account identifiers lawfully
  3. Cross-check gateway transaction IDs against actual bank settlement
  4. Record the chargeback as a potential recovery or adjustment

Explanation

Correct Answer

D:

Gross charges and net realized loss differ. The timing and fees of the reversal should be reflected separately.

Incorrect Answers

A:

Payment stages may create several records for one commercial event; this distinction matters when investigators must reconcile a disputed card refund. Understanding the lifecycle prevents double counting; it serves another purpose, not the immediate need to interpret a chargeback in loss analysis.

B:

A merchant payout aggregates underlying sales and adjustments; this addresses a different question: how to identify the recipient behind a merchant settlement. Processor-level records connect customer charges to settled accounts; the investigative step being tested here is how to interpret a chargeback in loss analysis.

C:

Retry behavior can produce duplicate payment events without intentional fraud; it can be useful for efforts to identify duplicate settlement from payment retries. The underlying clearing records determine economic effect; the record instead calls for an action that would interpret a chargeback in loss analysis.

Question 576

A company-issued check payable to a contractor was deposited to an unexpected account. What is the strongest investigative approach to trace a check to the account that received the proceeds?

  1. Seek contemporaneous receipts, seller records, and corroborated witness accounts
  2. Distinguish issued, cleared, stopped, and voided instruments
  3. Compare bank image, source check, and issuance records
  4. Obtain the paid check image and deposit details lawfully
  5. Investigate endorsement, identification, and deposit records
  6. Compare full instrument and bank identifiers

Explanation

Correct Answer

D:

Endorsements and banking records can help identify collection channels. A payee name on the front does not establish ultimate deposit.

Incorrect Answers

A:

Cash leaves a weaker electronic trail than transfers; this concerns the distinct task of deciding how to trace cash after a verified bank withdrawal. Subsequent use must be independently supported rather than assumed; it does not address the specific requirement to trace a check to the account that received the proceeds.

B:

Issuance does not guarantee realized loss; that principle applies when the team needs to reconcile outstanding checks before calculating loss. Only a cleared or otherwise realized transfer should enter the confirmed outflow calculation without a documented exception; this case asks for a means to trace a check to the account that received the proceeds instead.

C:

Discrepancies may reveal alteration or processing error; this is a sensible safeguard where the issue is to identify altered check payee information. Original instruments can contain features that images omit; the required investigative decision is to trace a check to the account that received the proceeds.

E:

An endorsement may be forged or authorized through agency; this distinction matters when investigators must recognize a forged endorsement risk. The bank trail and supporting authority determine which explanation fits; this case asks for a means to trace a check to the account that received the proceeds instead.

F:

Check numbers may repeat across accounts or books; it describes an action suited to assess whether check numbers establish uniqueness. Multiple identifiers are needed before concluding duplication; that would leave unresolved the present need to trace a check to the account that received the proceeds.

Question 577

A returned check image shows a payee field inconsistent with the approved check register. Which step is most appropriate to identify altered check payee information?

  1. Distinguish issued, cleared, stopped, and voided instruments
  2. Obtain the paid check image and deposit details lawfully
  3. Compare full instrument and bank identifiers
  4. Compare bank image, source check, and issuance records

Explanation

Correct Answer

D:

Discrepancies may reveal alteration or processing error. Original instruments can contain features that images omit.

Incorrect Answers

A:

Issuance does not guarantee realized loss; this is primarily relevant when the objective is to reconcile outstanding checks before calculating loss. Only a cleared or otherwise realized transfer should enter the confirmed outflow calculation without a documented exception; the current question is about how to identify altered check payee information.

B:

Endorsements and banking records can help identify collection channels; its purpose in an investigation is to trace a check to the account that received the proceeds. A payee name on the front does not establish ultimate deposit; it is not a substitute for a step that would identify altered check payee information.

C:

Check numbers may repeat across accounts or books; its purpose in an investigation is to assess whether check numbers establish uniqueness. Multiple identifiers are needed before concluding duplication; it does not settle how to identify altered check payee information in this situation.

Question 578

A customer-refund check was deposited by someone who was not the payee. The disbursement list also includes checks that were stopped or voided before payment. Which TWO examinations identify an endorsement concern and prevent overstating loss from uncleared instruments? Choose TWO.

  1. Compare full instrument and bank identifiers
  2. Reconcile the bank-paid refund instruments separately from issued, stopped, and voided checks
  3. Investigate endorsement, identification, and deposit records
  4. Classify each issued check as a realized loss before confirming clearance status
  5. Rely solely on the issuer’s check register rather than bank-paid images and deposit information

Explanation

Correct Answers

B:

An issued refund check may be stopped, voided, or remain uncleared without becoming a realized transfer. Reconcile the bank's clearance status for each instrument before including it in a calculation of actual outflow.

C:

An endorsement may be forged or authorized through agency. The bank trail and supporting authority determine which explanation fits.

Incorrect Answers

A:

Check numbers may repeat across accounts or books; this distinction matters when investigators must assess whether check numbers establish uniqueness. Multiple identifiers are needed before concluding duplication; that would leave unresolved the present need to recognize a forged endorsement risk.

D:

Issuance alone does not establish that money left an account. Voids, stops, and uncleared items must be separated before a loss total is asserted.

E:

The issuer’s record cannot establish who negotiated a check or whether it cleared. Paid instrument images and deposit records are critical when an endorsement is questioned.

Question 579

The disbursement ledger includes several checks that were voided before cashing. What action should the investigation team take to reconcile outstanding checks before calculating loss?

  1. Investigate endorsement, identification, and deposit records
  2. Compare bank image, source check, and issuance records
  3. Distinguish issued, cleared, stopped, and voided instruments
  4. Obtain the paid check image and deposit details lawfully

Explanation

Correct Answer

C:

Issuance does not guarantee realized loss. Clearance status is critical for an accurate funds-flow schedule. Only a cleared or otherwise realized transfer should enter the confirmed outflow calculation without a documented exception.

Incorrect Answers

A:

An endorsement may be forged or authorized through agency; that is why it can help to recognize a forged endorsement risk. The bank trail and supporting authority determine which explanation fits; the required investigative decision is to reconcile outstanding checks before calculating loss.

B:

Discrepancies may reveal alteration or processing error; its purpose in an investigation is to identify altered check payee information. Original instruments can contain features that images omit; the immediate evidentiary task here is to reconcile outstanding checks before calculating loss.

D:

Endorsements and banking records can help identify collection channels; that is why it can help to trace a check to the account that received the proceeds. A payee name on the front does not establish ultimate deposit; the required investigative decision is to reconcile outstanding checks before calculating loss.

Question 580

Two bank images bear the same printed check number but different dates and account numbers. Which investigative method is best suited to assess whether check numbers establish uniqueness?

  1. Distinguish issued, cleared, stopped, and voided instruments
  2. Compare full instrument and bank identifiers
  3. Compare bank image, source check, and issuance records
  4. Obtain the paid check image and deposit details lawfully
  5. Investigate endorsement, identification, and deposit records

Explanation

Correct Answer

B:

Check numbers may repeat across accounts or books. Multiple identifiers are needed before concluding duplication.

Incorrect Answers

A:

Issuance does not guarantee realized loss; it can be useful for efforts to reconcile outstanding checks before calculating loss. Only a cleared or otherwise realized transfer should enter the confirmed outflow calculation without a documented exception; the record instead calls for an action that would assess whether check numbers establish uniqueness.

C:

Discrepancies may reveal alteration or processing error; this distinction matters when investigators must identify altered check payee information. Original instruments can contain features that images omit; it would not by itself meet the stated need to assess whether check numbers establish uniqueness.

D:

Endorsements and banking records can help identify collection channels; it belongs to a different stage of work: trying to trace a check to the account that received the proceeds. A payee name on the front does not establish ultimate deposit; the immediate evidentiary task here is to assess whether check numbers establish uniqueness.

E:

An endorsement may be forged or authorized through agency; it belongs to a different stage of work: trying to recognize a forged endorsement risk. The bank trail and supporting authority determine which explanation fits; it would not by itself meet the stated need to assess whether check numbers establish uniqueness.

Certified Fraud Examiner - Investigation (CFE - Investigation) Practice Tests