Free and Premium ACFE CFE- Fraud-Schemes-and-Financial-Crimes Dumps Questions Answers

Detailed Explanation:

Rationale for Correct Answer:

Renee’s scam is a mobile payment scheme because it uses a QR code scanned by a mobile device to direct victims to a fraudulent payment destination. The fraud depends on mobile-device interaction and the victim’s belief that the payment is going to a legitimate charity. Tokenization is a security process that substitutes sensitive payment data with a token; it is not the fraud being described. Electronic presentment generally relates to electronic billing or payment presentation systems, not a fake charity donation page. Business email compromise involves impersonating executives, vendors, or trusted parties to induce business payments, but Renee is conducting a mass QR-code donation scam. The ACFE materials treat online, mobile, and payment-system abuses as key payment fraud and cyberfraud risks.

================

Detailed Explanation:

Rationale for Correct Answer: Filing a claim shortly after a policy begins is a classic red flag of potential insurance fraud, as it may indicate the loss occurred before coverage or is fabricated.

Analysis of Incorrect Options:

B. One prior claim in five years – Not unusual by itself.

C. Small electronics/jewelry – Common theft items, not automatically suspicious.

D. Recently purchased items with receipts – Strong documentation actually supports legitimacy.

Key Concept: Insurance fraud red flags .

Detailed Explanation:

Rationale for Correct Answer: For fraud to exist, several legal elements must be established. These include: (1) a material false statement made by the perpetrator, (2) knowledge of the falsity of that statement (scienter or intent to deceive), and (3) reliance on the false statement by the victim, resulting in harm or damages. The Fraud Examiners Manual (2020 International Edition) explains that all elements must be present for a fraud case to be sustained. Thus, the correct answer is D. All of the above .

Analysis of Incorrect Options (Distractors):

A. A material false statement – A false statement alone is insufficient unless there is intent to deceive and victim reliance.

B. Knowledge that the statement was false when it was uttered – Intent is critical, but without the victim’s reliance and damages, fraud is incomplete.

C. Reliance on the false statement by the victim – Victim reliance is necessary, but without a knowingly false statement and intent, fraud cannot be proven.

Key Concept: The essential legal elements of fraud.

Detailed Explanation:

Rationale for Correct Answer: In the procurement cycle, the post-award and administration phase involves the actual performance of contractual duties by the awarded contractor(s) and monitoring by the procuring entity. This is consistent with procurement process descriptions in the Fraud Examiners Manual (2020) .

Analysis of Incorrect Options:

B – Needs identification occurs in the presolicitation phase , not solicitation.

C – In presolicitation, the entity defines needs; contractors submit bids during the solicitation phase.

D – The solicitation document is issued during the solicitation phase , not evaluation.

Key Concept: Understanding procurement phases to detect fraud opportunities (e.g., bid rigging, kickbacks).

The correct answer is D. Self-regulatory organizations are industry-based bodies that perform certain oversight functions under the supervision of securities regulators in some jurisdictions. Their duties can include monitoring member firms, examining trading operations, enforcing industry rules, and supporting market integrity. Option A is inaccurate because SROs are not simply governmental entities, although they may operate under statutory recognition or regulatory oversight. Option B is too absolute because SROs may participate in dispute resolution or arbitration in some jurisdictions. Option C is also overstated because SRO authority generally focuses on members and regulated market participants, not securities-related allegations within all private companies. The ACFE materials recognize self-regulation as part of the securities regulatory framework, subject to oversight and standards of fairness and confidentiality.

The correct answer is A because the FATF Recommendations provide that financial institutions and designated nonfinancial businesses and professions should report covered cash transactions that exceed the jurisdiction’s designated threshold. Dealers in precious metals and stones, such as businesses selling gold jewelry, are commonly treated as higher-risk entities for anti-money laundering purposes. A domestic cash purchase above the threshold would therefore require reporting. Options B and C are below the designated threshold, so they do not meet the reporting requirement based on amount. Option D involves a food purchase, which is not the type of covered high-risk transaction described in the FATF large cash transaction guidance. The key issue is both the covered business type and the threshold amount.

================

Option D is correct because analytical review can reveal inventory theft when cost of goods sold changes disproportionately compared with sales. If inventory is stolen, the organization may experience higher inventory shrinkage or cost of goods sold without a corresponding increase in sales revenue. The ACFE material identifies analytical review, physical inventory counts, perpetual inventory records, and shipping-document review as methods for detecting inventory schemes. Option A is incorrect because analytical review can help identify unusual relationships or trends. Option B is weak because unchanged sales and unchanged cost of goods sold do not indicate a loss pattern. Option C is too absolute; changes in cost of goods sold must be evaluated in relation to sales, business conditions, and other explanations.

================

Detailed Explanation:

Rationale for Correct Answer: The accounts receivable journal (also called the sales journal) records all sales transactions, whether on credit or cash. It provides a detailed subsidiary record of customer accounts and sales activity.

Analysis of Incorrect Options:

A. Disbursement journal – Records cash outflows, not sales.

C. Accounts payable journal – Records amounts owed to vendors, not sales.

D. General journal – Records miscellaneous entries not suited to specialized journals.

Key Concept: Special journals — sales activity recorded in the accounts receivable journal.

The correct answer is D. Bid tailoring occurs when procurement specifications are drafted to favor a particular contractor or to allow an otherwise unsuitable contractor to qualify. The ACFE material identifies overly broad specifications as one form of bid tailoring because they can be designed to include a favored vendor even though the vendor does not meet the organization’s actual operational needs. Bid splitting involves dividing purchases to avoid competitive thresholds. Bid suppression involves preventing or discouraging competitors from submitting bids. Bid manipulation is broader, but the facts specifically focus on drafting specifications in a way that favors the winning contractor. Therefore, bid tailoring is the most precise classification for Hondo’s finding.

================

Detailed Explanation:

Rationale for Correct Answer: Loan fraud often involves suspicious or unusual documentation patterns. A change order submitted at the same time as a draw request is a red flag, because it suggests manipulation of project costs to justify larger draws from lenders.

Analysis of Incorrect Options:

A. Missing documents – Could indicate sloppy recordkeeping, not necessarily fraud.

B. Low turnover – Not a fraud indicator.

D. Increasing change orders – Could be suspicious, but not as strong a fraud red flag as simultaneous change order and draw request.

Key Concept: Loan fraud indicators .

The correct answer is C. Electronic payment tampering occurs when an employee improperly alters or creates electronic payments, such as ACH payments, wire transfers, or online banking payments. Reviewing non-payroll payments made to employees is highly effective because employees generally should not receive vendor-style electronic disbursements outside normal payroll or approved reimbursement channels. Such payments can indicate that an employee inserted their own bank account, created an unauthorized payee, or diverted electronic funds. Vendor duplicate confirmations are more relevant to duplicate-payment issues. Customer complaints about late account postings relate more to cash receipts or accounts receivable. Quarterly reconciliations are too infrequent for timely detection. The ACFE materials identify electronic payment tampering as a fraudulent disbursement risk requiring strong monitoring and bank controls.

================

Detailed Explanation:

Rationale for Correct Answer: Cash larceny is the theft of cash after it has been recorded in the company’s books. Skimming, in contrast, is theft of cash before recording .

Analysis of Incorrect Options:

B & D – Both describe forms of skimming (unrecorded or understated sales).

C – Kickback scheme is corruption, not cash theft.

Key Concept: Distinguishing cash larceny (on-book theft) from skimming (off-book theft).

Detailed Explanation:

Rationale for Correct Answer: This statement is False . Every bribe involves two willing parties : one who offers and one who accepts the illicit payment. If one party is not making or accepting the payment, the transaction cannot be classified as a bribe.

Analysis of Incorrect Options:

A. True – Incorrect because both sides are complicit in bribery.

Key Concept: Bribery requires two-sided participation.

Detailed Explanation:

Rationale for Correct Answer: The Fraud Examiners Manual (2020) highlights document reviews, audit tracing, financial analysis, and inside witnesses as the primary methods of proving corrupt payments. Secret infiltration is not a standard fraud examination technique; it is more aligned with law enforcement undercover operations.

Analysis of Incorrect Options:

A. Taxation inquiries – A valid method to confirm payment sources.

C. Inside witness – Valuable evidence in corruption cases.

D. Tracing payments – Fundamental audit step in proving illicit payments.

Key Concept: Proving corrupt payments — standard audit and investigative methods.

Detailed Explanation:

Rationale for Correct Answer: Management may overstate financial statements to (B) meet performance criteria, (C) trigger bonuses/compensation, or (D) show growth to enhance valuation for sale. However, when seeking to comply with debt covenants , management typically understates liabilities or expenses — not overstates performance. Thus, A is not aligned with overstatement motives.

Analysis of Incorrect Options:

B, C, D – All are recognized motives for overstating business performance.

A. Comply with debt covenants – More linked to manipulation of liabilities (often understatement), not overstatement of revenue.

Key Concept: Motives for overstatement in financial statement fraud.

Detailed Explanation:

Rationale for Correct Answer: Expense reimbursement schemes are a common type of fraudulent disbursement. Requiring employees to submit receipts electronically improves controls by ensuring legibility, reducing the chance of altered or duplicate submissions, and creating a digital audit trail. This measure is recommended in the Fraud Examiners Manual as part of strengthening internal controls over reimbursement processes.

Analysis of Incorrect Option:

B. False – Incorrect because electronic receipt submission is indeed a recognized anti-fraud measure.

Key Concept: Fraudulent disbursements prevention through documentation controls.

The correct answer is C. A code of business ethics and conduct is most effective when it clearly communicates the organization’s values, expected behavior, and major compliance risks, including bribery, conflicts of interest, gifts, hospitality, facilitation payments, and dealings with third parties. Its purpose is not merely to impose management’s expectations, but to guide ethical decision-making across the organization. Option A is too one-sided and does not reflect tone at the top or mutual accountability. Option B is too narrow because anti-corruption obligations extend beyond shareholders to regulators, customers, employees, business partners, and the public. Option D is unrealistic because no code can address every possible ethical situation; it should provide principles, reporting channels, and escalation guidance.

================

The correct answer is C because the World Bank Principles recommend that a bankruptcy administrator have broad powers, including the right to cancel fraudulent contracts or transactions entered into by the debtor. The ACFE material states that administrators, trustees, receivers, examiners, or similar insolvency representatives may be granted powers to collect, preserve, and dispose of debtor property, interfere with contracts when necessary to meet insolvency objectives, and compel relevant information from the debtor or other knowledgeable parties. Therefore, options A, B, and D incorrectly restrict the administrator’s recommended authority. Madison’s power is not limited to collection only, and she may compel information or intervene in contracts where the insolvency process requires it.

================

Detailed Explanation:

Rationale for Correct Answer: The ACFE emphasizes four cornerstone internal controls to prevent inventory fraud:

Proper documentation (accurate, prenumbered records),

Segregation of duties (custody, recordkeeping, and authorization separated),

Independent checks (reconciliations and audits), and

Physical safeguards (locks, cameras, restricted access).

Analysis of Incorrect Options:

B. Inventory control – Too general; physical safeguards are the key preventive measure.

C. Physical padding – Not a recognized control.

D. Prenumbered affiliations – Misworded; prenumbered documents are part of proper documentation.

Key Concept: Internal control framework for preventing inventory fraud.

John is engaging in tax evasion because he intentionally adds false deductions to reduce the amount of tax he owes. The ACFE material distinguishes tax evasion from tax avoidance. Tax avoidance involves legal planning, such as legitimate deductions, credits, or shelters. Tax evasion involves fraudulent actions taken to avoid reporting or paying taxes. Fake deductions are not legitimate tax planning because they misrepresent facts on the return. This conduct can also be described as falsifying tax deductions, a specific type of tax evasion scheme. Tax sheltering is not the best answer because the facts do not describe a lawful or abusive shelter arrangement. Tax misappropriation is not the correct classification. Because John knowingly uses false deductions, option B is correct.

================

The correct answer is B. Under cash-basis accounting, revenues and expenses are recorded based on the movement of cash. Revenue is recorded when cash is received, and expenses are recorded when cash is paid, regardless of when goods are delivered, services are performed, or obligations are incurred. Options A and C describe accrual-basis concepts. Accrual accounting records revenue when earned and matches related expenses to the same accounting period. Option D is incorrect because cash-basis accounting is generally simpler than accrual-basis accounting, although it can provide a less complete picture of financial performance. The ACFE materials emphasize that accrual accounting gives a truer financial picture and is required under GAAP.

================

Detailed Explanation:

Rationale for Correct Answer: Fraudulent financial statements (or “fraudulent statement”) refer to the intentional misrepresentation of financial condition, typically through overstating revenues, understating expenses, inflating assets, or concealing liabilities. The intent is to mislead stakeholders such as investors, creditors, or regulators.

Analysis of Incorrect Options:

B. Corruption – Refers to abuses of influence and conflicts of interest, not misreporting financial information.

C. Asset misappropriations – Involve theft of assets, not misrepresentation of reports.

D. None of the above – Incorrect since option A is correct.

Key Concept: Financial Statement Fraud — misrepresentation of organizational performance and position.

Detailed Explanation:

Rationale for Correct Answer: The accounting framework a company must follow depends on the jurisdiction in which it is publicly traded . For example, U.S.-listed companies must follow GAAP, while companies in the EU must use IFRS. Some countries allow or require IFRS, others mandate local GAAP.

Analysis of Incorrect Options:

B – Incorrect; some jurisdictions have their own national GAAP not tied to U.S. GAAP or IFRS.

C – Incorrect; international operations do not mandate IFRS—jurisdictional rules apply.

D – Incorrect; U.S. GAAP is rules-based, IFRS is principles-based (the reverse of what’s stated).

Key Concept: Financial reporting standards are jurisdiction-driven.

Detailed Explanation:

Rationale for Correct Answer: Hollinger and Clark’s research emphasized that management policy should focus on: (1) developing a clear understanding of theft behavior and its causes, and (2) enforcing sanctions consistently. Both are necessary to reduce employee deviance and occupational fraud. Thus, C. Both A & B is correct.

Key Concept: Hollinger-Clark Study — policy implications for managing employee theft.

The ACFE Fraud Examiners Manual includes a specific subsection titled “Departures from Generally Accepted Accounting Principles” within Accounting Concepts .

Under the Manual’s discussion of GAAP, the focus is on proper financial reporting so that transactions are recorded in their appropriate classifications and reported fairly in the financial statements. The Manual explains that GAAP are the standardized financial reporting practices used to ensure accurate and reliable reporting.

Based on this framework, a departure from GAAP can be justified only in limited circumstances, such as when strict compliance would make the financial statements misleading or when a different treatment is necessary to better reflect the substance of the transaction rather than only its form. Likewise, avoiding the overstatement of assets or income is consistent with fair presentation and conservative reporting principles. These are accounting-based justifications tied to faithful financial reporting.

By contrast, cost is not a valid reason to depart from GAAP. The fact that reporting a transaction in a GAAP-compliant manner would be more expensive does not justify noncompliance. Financial statements must be prepared in accordance with the applicable standards, not according to whichever treatment is cheaper or easier for management. Therefore, this option is the one that is NOT justifiable.

Why the other options are not the correct choice

A. To avoid overstating assets and/or income

This is consistent with fair presentation. The Manual’s discussion of GAAP is aimed at proper classification and reporting of transactions so that financial statements are not distorted.

C. To better reflect the substance of a transaction

This is a recognized accounting rationale. Financial reporting should reflect the economic reality of a transaction, not merely its legal form. This is consistent with the Manual’s discussion of proper reporting under GAAP.

D. Following GAAP would produce misleading results on financial statements

This is one of the classic reasons a departure can be justified, because the objective of financial reporting is fair presentation rather than mechanical compliance that misleads users.

References

ACFE Fraud Examiners Manual, 2020 International Edition

Accounting Concepts — Generally Accepted Accounting Principles

Accounting Concepts — Departures from Generally Accepted Accounting Principles (1.122)

Detailed Explanation:

Rationale for Correct Answer: This is a false sale scheme , in which an employee processes fictitious transactions (such as false refunds, voids, or no-sales) to conceal theft of merchandise. Here, Brenda pretends to conduct a sale but records no payment.

Analysis of Incorrect Options:

A. Register disbursement scheme – Involves fraudulent refunds or disbursements of cash, not merchandise theft.

C. Purchasing and receiving scheme – Refers to inventory fraud during procurement, not point-of-sale theft.

D. Skimming scheme – Involves theft of cash before it enters accounting records, not merchandise theft.

Key Concept: Cash receipts and register manipulation schemes.

The correct answer is D. A fraudulent conveyance occurs when a debtor transfers property to another party, often an insider or related party, for little or no consideration before or during insolvency to place assets beyond the reach of creditors. Brad’s transfer of valuable marble slabs to his son’s construction business at no charge shortly before bankruptcy is a strong indicator of such a scheme. Option A, concealed transfer, is less precise because the key issue is not merely hiding a transfer but transferring assets for inadequate value to impair creditors. Option B is overly broad and does not identify the scheme type. Option C, planned bustout, usually involves obtaining goods or credit with the intent to dispose of assets and then file bankruptcy.

================

Detailed Explanation:

Rationale for Correct Answer: W. Steve Albrecht’s Fraud Scale introduced the relationship between pressure, opportunity, and integrity. He and his colleagues identified 81 red flags or behavioral indicators of occupational fraud and abuse based on these three dimensions. Therefore, the correct answer is A. 81 .

Analysis of Incorrect Options:

B. 82 / C. 83 / D. 84 – Distractors; none match the number identified in the fraud scale research.

Key Concept: Fraud Scale — Red Flags of occupational fraud.

Detailed Explanation:

Rationale for Correct Answer: According to ACFE’s Report to the Nations and the Fraud Examiners Manual, tips are the most common method of detecting corruption cases. Employees, vendors, or customers often report suspicious activity via hotlines or whistleblowing mechanisms.

Analysis of Incorrect Options:

A. Internal audits – Helpful but less common as the initial detection method.

B. Internal controls – Preventive, not the primary detection source.

D. By accident – Can occur, but far less common than tips.

Key Concept: Tips/whistleblowing as the primary detection method for corruption.

Detailed Explanation:

Rationale for Correct Answer: This is True . When an employee has significant authority or discretion in the procurement process (e.g., drafting specifications, approving vendors, or evaluating bids), they are more capable of steering contracts toward favored suppliers. This increases the risk of corruption schemes like kickbacks or bid-rigging .

Analysis of Incorrect Options:

B. False – Incorrect; influence grows with authority over procurement.

Key Concept: Procurement authority is a key risk factor for corruption.

Maria and Annie’s actions are a fraudulent death claim scheme. In life insurance fraud, a fraudulent death claim occurs when a person falsely represents that the insured has died to obtain policy proceeds. The scheme can involve a fabricated death, a phony death certificate, staged disappearance, or collusion between the insured and beneficiary. Here, Annie is alive, and Maria submits a false claim supported by a phony death certificate. A tombstone policy claim generally involves policies or claims connected to deceased persons or fraudulent use of death information, but the facts here involve a living insured falsely reported as dead. Premium theft concerns misappropriation of premiums, and beneficiary extortion is not the scheme described.

================

Detailed Explanation:

Rationale for Correct Answer: Accruals represent expenses that have been incurred but not yet paid. Under the accrual basis of accounting, these must be recognized in the same period as the related revenues or obligations. Common examples include accrued wages and accrued interest.

Analysis of Incorrect Options:

B. Depreciations – Allocation of asset cost, not unpaid expenses.

C. Expenses – A broader term, but not specific to unpaid obligations.

D. Financial record – Too vague.

Key Concept: Accruals under the accrual basis of accounting.

Detailed Explanation:

Rationale for Correct Answer: One of the key red flags of fictitious revenues is sales to related parties, shell companies, or entities with unknown substance and ownership . Such transactions are often used to inflate revenue artificially.

Analysis of Incorrect Options:

A. Slow growth/unusual profitability – Incorrect, fictitious revenue often results in rapid or unrealistic growth.

B. Growth in days’ purchases in receivables – Misstated phrase; correct indicator would be growth in days’ sales in receivables .

D. Surge in purchases – Relates more to inventory fraud than fictitious revenues.

Key Concept: Red flags of fictitious revenue — questionable counterparties and unrealistic sales growth.

Shoulder surfing is the practice of obtaining personal or confidential information by watching or listening while a victim uses or discloses it. Common examples include observing someone enter a PIN, password, access code, or account number, or overhearing a person provide sensitive details during a conversation. Option A is inaccurate because impersonating a bank or financial institution to obtain confidential information is closer to phishing or vishing, not baiting. Option B is inaccurate because pharming redirects users to fraudulent websites, while searching used devices is a discarded-device or data-recovery risk. Option D describes dumpster diving, not phishing. The ACFE identity theft materials distinguish these methods because recognizing the specific technique is important for prevention, investigation, and victim response.

================

Detailed Explanation:

Rationale for Correct Answer: Tangible assets are those that can be physically perceived (touched, seen, etc.) and appraised (assigned a measurable value). Examples include buildings, land, equipment, and inventory. Both characteristics are correct, making C the best choice.

Analysis of Incorrect Options:

A. Capable of being perceived – True, but incomplete.

B. Capable of being appraised – True, but incomplete.

D. Neither A nor B – Incorrect since both statements are accurate.

Key Concept: Tangible Assets — physical and measurable property owned by a business.

Detailed Explanation:

Rationale for Correct Answer: Under GAAP, revenue is recognized when it is realized or realizable and earned . This requires that the earnings process be substantially complete, and payment be reasonably assured.

Analysis of Incorrect Options:

B. Fictitious and Earned – Fictitious revenues are fraud, not recognized revenue.

C. Realized and Evidenced – Evidence supports recognition, but “earned” is the proper standard.

D. All of the above – Incorrect, since only option A is correct.

Key Concept: Revenue recognition principle — realized/realizable and earned.

The correct answer is C because periodic audits of expense reports help deter and detect reimbursement fraud. Expense reimbursement schemes can involve mischaracterized expenses, overstated expenses, fictitious expenses, altered receipts, multiple reimbursements, or claims for another employee’s expenses. Telling employees that expense reports are subject to audit reinforces accountability and increases the perceived risk of detection. Option A weakens controls because all reimbursement claims should require adequate support, not only selected categories. Option B can increase risk because cash advances create another source of funds requiring control and reconciliation. Option D removes supervisory review, which is a key preventive control. The ACFE material identifies detailed expense reports, supporting documentation, review, and audit procedures as important controls.

================

Detailed Explanation:

Rationale for Correct Answer: Fraudsters typically change the contact information (e.g., phone number, email) to prevent the true account holder from receiving alerts about suspicious activity. Leaving the contact information unchanged would risk detection. Thus, option B is NOT a common fraudster tactic.

Analysis of Incorrect Options:

A – True; fraudsters steal funds or make purchases.

C – True; known as “credential stuffing” or account chaining.

D – True; phishing is a primary way to obtain credentials.

Key Concept: Cyber-enabled fraud – account takeover schemes.

Detailed Explanation:

Rationale for Correct Answer: Ponzi schemes differ from pyramid schemes. In Ponzi schemes, investors are paid returns from funds contributed by later investors, not based on recruiting new investors. Recruiting-based payouts are a characteristic of pyramid schemes , not Ponzi schemes.

Analysis of Incorrect Options:

A. Legitimate investment belief – True; victims believe the investment is genuine.

B. High returns promised – Classic Ponzi hallmark.

D. Minimal valid commerce – Ponzi promoters often fake or exaggerate legitimate investments.

Key Concept: Difference between Ponzi schemes and pyramid schemes .

Detailed Explanation:

Rationale for Correct Answer: Properly shredded documents using a cross-cut shredder are very difficult to reconstruct, making them not a common medium for information leaks. By contrast, shareholder reports, executive speeches, and workstation displays often contain sensitive data that can be exploited by competitors or fraudsters.

Analysis of Incorrect Options:

A – Shareholder reports can reveal strategy and financial vulnerabilities.

C – Executive speeches sometimes unintentionally disclose sensitive plans.

D – Information left visible at workstations is a known security risk.

Key Concept: Protection of proprietary information against espionage and fraud.

The correct answer is D. Front businesses are attractive for money laundering because they allow illegal proceeds to be mixed with legitimate revenue, especially where cash sales are common and expenses are variable. Bars, restaurants, nightclubs, and similar businesses can make it difficult to reconcile actual customer activity with reported revenue and operating costs. This makes it easier to overstate revenues, inflate expenses, or insert illicit funds into the business records. Option A is inaccurate because money launderers might pay taxes on falsely reported income to make the funds appear legitimate. Option B is incorrect because a front may show high income despite low visible customer activity. Option C is too narrow and inaccurate because these businesses often involve variable purchases and pricing.

================

The correct answer is C. Multifactor authentication is an effective preventive control for electronic funds transfer fraud because it requires users to verify their identity through more than one authentication factor before initiating or approving payments. This reduces the risk that stolen usernames, passwords, or account credentials alone will allow unauthorized transfers through EBPP or P2P systems. Option A is unsafe because sending PINs, usernames, and passwords together increases exposure if the communication is intercepted. Option B is also poor practice because sensitive credentials should be encrypted. Option D weakens segregation of duties by allowing one employee to control both PIN issuance and access device information. The ACFE materials emphasize authentication, access controls, and segregation of duties in preventing EFT fraud.

================

The correct answer is B. Register disbursement schemes usually involve false refunds or false voids that cause cash to be removed from the register while the records appear to justify the disbursement. An unusually high number of refunds on the register log is a red flag because it might indicate that employees are creating fictitious refund transactions to conceal cash theft. Option A is not suspicious by itself because no gaps in transaction numbers suggests record continuity. Option C is less suspicious because supervisory approval exists, although approvals should still be reviewed. Option D is generally a positive control because supporting documents should exist for voided transactions. The ACFE materials identify refund and void activity as key areas for detecting register disbursement schemes.

================

Detailed Explanation:

Rationale for Correct Answer: In a need recognition scheme , an employee creates or exaggerates a need for goods or services to benefit a favored supplier. One red flag is that materials are ordered prematurely or not at the optimal reorder point , suggesting that purchases are being manipulated to benefit a corrupt vendor rather than based on actual business needs.

Analysis of Incorrect Options:

A – A large list of suppliers suggests competition, not fraud.

C – A need met by various suppliers does not indicate fraud.

D – Low requirements for stock may reflect lean inventory management, not fraud.

Key Concept: Corruption – need recognition schemes and red flags.

The correct answer is C. A Trojan horse is malware that appears to be legitimate, useful, or harmless software but contains hidden malicious code. Once installed or executed, it can damage systems, steal information, create unauthorized access, or perform other harmful actions. Option A describes ransomware, not a worm; ransomware restricts access to systems or files and demands payment. A worm is self-replicating malware that spreads across networks. Option B describes adware more closely than spyware. Spyware secretly monitors and reports user activity or information. Option D also describes spyware rather than ransomware. Professionally, the key distinction is the malware’s function: concealment and deception for Trojan horses, self-replication for worms, surveillance for spyware, and restriction or encryption for ransomware.

================

Detailed Explanation:

Rationale for Correct Answer: Disclosure is required whenever individuals in positions of trust are indicted or otherwise compromised. Transparency ensures stakeholders are aware of potential conflicts or risks.

Analysis of Incorrect Options:

A. Conflict of interest – A scheme, not the corrective measure.

B. Turnaround sale or flip – Specific scheme, irrelevant here.

D. Resource diversion – A fraud method, not a governance requirement.

Key Concept: Importance of Disclosure in preventing or responding to conflicts of interest.

Detailed Explanation:

Rationale for Correct Answer: Failing to write off obsolete inventory inflates reported inventory, overstating assets and potentially net income. Fraudsters may leave unusable goods on the books to make financial statements appear stronger.

Analysis of Incorrect Options:

A – An allowance for sales returns relates to revenue recognition, not inventory overstatement.

B – Relates to accounts receivable, not inventory.

C – Applying lower of cost or NRV reduces inventory to fair value, not overstates it.

Key Concept: Overstating assets through improper inventory valuation.

Detailed Explanation:

Rationale for Correct Answer: Being prompted to install unfamiliar software is a red flag for malware or unauthorized access, often indicating that attackers are attempting to establish persistence in the system. This is a classic indicator of a compromised network.

Analysis of Incorrect Options:

A – Standard security measure, not a red flag.

C – Data from supplier countries is normal if consistent with business operations.

D – Access denial to files outside a user’s role is a normal access control, not an intrusion sign.

Key Concept: Cyberfraud detection – identifying intrusion indicators.

Why the correct answer is Human Intelligence

The ACFE Fraud Examiners Manual , in the section on fraud examination tools and intelligence gathering , discusses methods of obtaining information from individuals. One of the recognized methods is Human Intelligence (HUMINT) .

The Manual explains that human intelligence gathering involves:

Collecting information directly from people—often through conversation, elicitation, or interviews—sometimes while using a pretext to encourage the target to disclose information.

In this scenario:

Georgina poses as a customer (a pretext),

Contacts an employee of ERO Corp., and

Elicits sensitive information directly from that individual.

This aligns perfectly with the definition of human intelligence gathering —information obtained directly from human sources , often under false pretenses.

Why the other options are incorrect

B. Scavenging – Incorrect

The Manual describes scavenging as:

Obtaining information by searching for discarded documents or materials, such as in trash or recycling bins.

Georgina is not going through discarded materials; she is speaking directly with an employee.

C. Baiting – Incorrect

Baiting typically refers to:

Enticing someone with something of value to trick them into taking an action, often involving malware-infected media or fraudulent offers.

Georgina is not offering anything or luring the employee with incentives.

D. Open-source intelligence – Incorrect

Open-source intelligence (OSINT) refers to gathering information from:

Publicly available sources such as websites, publications, databases, or social media.

Georgina is not using public sources; she is actively eliciting confidential information from a person under false pretenses.

ACFE Manual References

The concepts used in this answer derive from the Fraud Examiners Manual (2020 International Edition), including:

Human intelligence and data collection techniques

Scavenging as an investigative method

Baiting schemes

Open-source intelligence descriptions

Detailed Explanation:

Rationale for Correct Answer: Physical inventory counts involve actually counting items on hand and comparing them to book records. These counts can reveal theft, errors, or shrinkage when discrepancies are identified.

Analysis of Incorrect Options:

A. Perpetual inventory counts – The system tracks expected balances but cannot independently confirm theft.

C. Concealment inventory counts – Not a recognized term.

D. None of the above – Incorrect, since physical counts do aid detection.

Key Concept: Physical inventory counts as a fraud detection tool.

Detailed Explanation:

Rationale for Correct Answer: Corporate spies do use social engineering, but their primary methods include surveillance, infiltration (e.g., posing as employees), and technical monitoring. The statement in option C is false because searching desks/workstations is a tactic, but it is not the primary method.

Analysis of Incorrect Options:

A – True; fake badges are a common infiltration tactic.

B – True; low-level jobs provide physical access.

D – True; technical surveillance is a recognized method.

Key Concept: Methods of corporate espionage.

Detailed Explanation:

Rationale for Correct Answer: The balance sheet summarizes account balances from the ledger at a specific date, presenting assets, liabilities, and equity. It reflects the organization’s financial position and is derived from ledger balances.

Analysis of Incorrect Options:

B. Income statement – Summarizes revenues and expenses, not all ledger balances.

C. Financial statement – A general term, but the specific answer here is balance sheet.

D. General journal – Book of original entry, not a summary.

Key Concept: Balance sheet as a summary of ledger accounts.

Detailed Explanation:

Rationale for Correct Answer: According to the Fraud Examiners Manual (2020 International Edition) , offenders can be categorized into types. Absconders are individuals who commit fraud and immediately flee with the proceeds (“take the money and run”). They differ from long-term violators who maintain their frauds for extended periods while concealing them. Thus, the correct answer is A. Absconders .

Analysis of Incorrect Options:

B. Long-term violators – These offenders commit frauds over a long period and often maintain their positions of trust while continuing the scheme.

C. Offender types – Too vague; not a specific classification.

D. None of the above – Incorrect, since “Absconders” directly matches.

Key Concept: Offender Typologies — distinguishing between absconders and long-term violators in occupational fraud.

Detailed Explanation:

Rationale for Correct Answer: This description reflects asymmetrical accounting , which is based on the conservatism principle. Possible losses are recorded, but potential gains are omitted until realized. This creates an asymmetry in recognizing losses versus gains.

Analysis of Incorrect Options:

B. Symmetrical accounting – Would recognize gains and losses equally, contrary to conservatism.

C. Playing accounting – Fraud scheme, not a principle.

D. Bearing accounting – Not a recognized concept.

Key Concept: Asymmetry in accounting — conservative recognition of losses versus gains.

Detailed Explanation:

Rationale for Correct Answer: Bribes to purchasing employees often aim to:

Ensure late bids are accepted,

Extend deadlines unfairly,

Or falsify bid logs. Bid-splitting , however, is a scheme performed to avoid approval thresholds and does not require bribery of purchasing employees.

Analysis of Incorrect Options:

A. Receipt of late bid – Real reason to bribe.

B. Extend opening date – Real reason to bribe.

D. Falsify bid log – Real reason to bribe.

C. Ensure bid-splitting – Not a bribery motivation.

Key Concept: Bribery motivations in procurement fraud.

Detailed Explanation:

Rationale for Correct Answer: Administrative security controls involve policies, procedures, and practices designed to manage the overall security environment—such as awareness training, audits, data classification, and enforcement of policies. These controls focus on governance rather than direct system configuration.

Analysis of Incorrect Options:

A. Technical security controls – These are automated safeguards (e.g., firewalls, encryption).

B. Logical access controls – Restrict access to systems through passwords, tokens, or biometrics.

D. Physical access controls – Restrict physical access (e.g., locks, guards, CCTV).

Key Concept: Layers of security controls (administrative, technical, physical).

Detailed Explanation:

Rationale for Correct Answer: Departures from GAAP may be justified if compliance produces misleading results, if the transaction is immaterial, or if the costs exceed benefits. However, simply departing from GAAP because assets would be understated and liabilities overstated is not an acceptable reason ; GAAP requires faithful representation even if results are unfavorable.

Analysis of Incorrect Options:

A – Cost-benefit considerations are valid grounds in practice.

C – Materiality is a recognized exception to strict GAAP application.

D – Preventing misleading statements is a valid justification.

Key Concept: GAAP exceptions are limited to cost-benefit, immateriality, and preventing misleading reporting .

Detailed Explanation:

Rationale for Correct Answer: Social engineering involves manipulating or deceiving people into revealing confidential information or taking actions that aid the attacker (e.g., clicking malicious links, sharing credentials). It targets human weaknesses rather than technical vulnerabilities.

Analysis of Incorrect Options:

A. IP spoofing – Forging an IP address to disguise origin.

B. Electronic piggybacking – Unauthorized use of someone else’s access connection.

C. Packet sniffing – Monitoring data traffic across a network.

Key Concept: Cyberfraud techniques – social engineering.

Detailed Explanation:

Rationale for Correct Answer: In a fraudulent purchase scheme , the company legitimately purchases assets, but the fraudster diverts or misappropriates them after acquisition. The purchase itself is real, but the use of the assets is fraudulent.

Analysis of Incorrect Options:

A. Inventory larceny scheme – Direct theft without purchase.

B. Asset receiving scheme – Not a recognized fraud scheme.

D. Falsify shipping – Involves falsifying shipment records, not post-purchase misappropriation.

Key Concept: Fraudulent purchases — assets are bought legitimately but stolen afterward.

Detailed Explanation:

Rationale for Correct Answer: When cash is stolen, the accounting equation (Assets = Liabilities + Equity) must still balance. Fraudsters may increase a liability (e.g., record fictitious payables) to cover the missing cash. This is a common concealment method.

Analysis of Incorrect Options:

A. Increasing another asset – Would require inflating assets, but this usually affects financial statement fraud, not cash theft concealment.

B. Increasing owners’ equity – Not logical without legitimate earnings or capital contributions.

D. Creating fictitious revenue – Used in financial statement fraud, not in balancing theft concealment.

Key Concept: Concealment methods for asset misappropriation — offsetting missing cash with fictitious liabilities .

Detailed Explanation:

Rationale for Correct Answer: This definition matches corruption , a broad category of occupational fraud in which employees use their influence in business transactions to gain personal benefit, in violation of their duties. Corruption schemes include bribery, conflicts of interest, illegal gratuities, and extortion.

Analysis of Incorrect Options:

A. Conflict of interest – A subtype of corruption, but narrower in scope.

C. Bribery – Also a subtype, but the definition given covers the broader category.

D. Overbilling – A billing scheme under fraudulent disbursements, not corruption.

Key Concept: Corruption as defined in the Fraud Tree.

Detailed Explanation:

Rationale for Correct Answer: Insurer health care fraud occurs when the insurance company itself engages in deception for financial gain. Submitting inflated cost data to regulators in order to justify rate increases is a direct example of insurer fraud.

Analysis of Incorrect Options:

A. Intermediary verifying claims – Proper procedure, not fraud.

C. Passing on negotiated rates – Legitimate practice.

D. Denying incomplete claims – May be harsh, but not fraudulent.

Key Concept: Insurer fraud vs. provider or claimant fraud .

Detailed Explanation:

Rationale for Correct Answer: Net realizable value (NRV) is the estimated selling price of an asset in the ordinary course of business, minus any costs of completion, disposal, or transportation. This is often applied in valuing accounts receivable and inventory.

Analysis of Incorrect Options:

B. Going concern – Assumption of business continuity, not asset valuation.

C. Cost – Historical cost, not future realizable value.

D. Fair value – Current market-based measure, not net proceeds after costs.

Key Concept: Net realizable value — valuation method for receivables and inventory.

Detailed Explanation:

Rationale for Correct Answer: Competitive intelligence refers to the legal and ethical gathering of publicly available information about competitors. It is a legitimate business practice and differs from corporate espionage , which involves illegal or covert methods.

Analysis of Incorrect Options:

B. Government-sanctioned espionage – This describes intelligence operations, not business practice.

C. Identical to espionage – False; competitive intelligence is legal, espionage is illegal.

D. Illegal covert methods – That is espionage, not competitive intelligence.

Key Concept: Competitive intelligence vs. corporate espionage .

Detailed Explanation:

Rationale for Correct Answer: Bid-rigging occurs when an employee or official manipulates the competitive bidding process to ensure a specific vendor wins the contract. This may involve sharing confidential information, suppressing competition, or tailoring bid specifications.

Analysis of Incorrect Options:

B. Does not assist – Opposite of fraud; no scheme.

C/D. Once assists… – Bid-rigging is systemic, not limited to one occurrence.

Key Concept: Bid-rigging schemes — corruption in procurement processes.

Detailed Explanation:

Rationale for Correct Answer: Past posting occurs when an insured reinstates or purchases insurance coverage after a loss has already occurred and then submits a false claim, backdating the loss to appear covered. Joe’s scheme fits this exactly.

Analysis of Incorrect Options:

A. Staged accident – Fraudulent accidents deliberately caused, not applicable here.

B. Inflated damages – Exaggerating actual losses, not retroactive coverage.

D. Vehicle repair – General claim fraud, but not the scheme in question.

Key Concept: Insurance fraud – past posting schemes.

Detailed Explanation:

Rationale for Correct Answer: In the “playing the accounting system” approach, fraudsters manipulate legitimate accounting rules and entries to distort reported results. Examples include manipulating estimates, changing depreciation methods, or shifting expenses. They exploit the flexibility of GAAP to present misleading results while still appearing compliant.

Analysis of Incorrect Options:

A. Organized accounting – Not a recognized fraud approach.

C. Beating accounting – Refers to bypassing the system entirely, not using it as a tool.

D. All of the above – Incorrect because only option B is valid.

Key Concept: Playing the accounting system as a method of financial statement fraud.

Henrietta is engaging in a need recognition scheme. Procurement begins when the organization identifies a need for goods or services. In a fraudulent need recognition scheme, an employee creates, exaggerates, or falsely justifies a need so the organization will purchase unnecessary goods or services from a favored vendor. Henrietta fabricates beetle sightings to convince management that specialized pest control services are required. Her receipt of money from the contractor shows corrupt motivation and vendor collusion. This is not bid tailoring because the facts do not involve drafting specifications to favor a bidder. It is not nonconforming services because the issue is the false need, not defective performance. It is not bid manipulation because the bidding process itself is not the main misconduct.

================

Rationale for Correct Answer: Strong internal controls — particularly inventory controls — are essential not just to prevent theft, but also to detect errors, reduce waste, and ensure that inventory levels are appropriate. Controls such as physical counts, reconciliations, and segregation of duties protect against misappropriation and inefficiencies.

Key Concept: Internal Controls as a preventive and detective mechanism in asset safeguarding.

Detailed Explanation:

Rationale for Correct Answer: Materiality is most often associated with fraudulent financial statements because fraudsters may argue that misstatements are “immaterial.” However, deliberate misstatements of any size can be fraudulent. Materiality thus plays a critical role in assessing fraudulent statement cases .

Analysis of Incorrect Options:

B. Misappropriations – Involve theft, but materiality is less central than in reporting fraud.

C. Civil lawsuit – A possible outcome, not the core accounting issue.

D. Quality control – Not related to materiality in fraud.

Key Concept: Materiality in Financial Statement Fraud — even small misstatements may be fraudulent.

Detailed Explanation:

Rationale for Correct Answer: The matching principle under GAAP requires that revenues and the corresponding expenses incurred to generate those revenues be recorded in the same period. Failing to do so misstates income and violates accrual accounting.

Analysis of Incorrect Options:

B. Revenue and Income statement – The income statement is a report, not an item to be matched.

C. Income statement and Long-term contracts – Long-term contracts follow special rules (percentage of completion, completed contract), not the general matching principle.

D. Capitalized expenses and Liabilities – Not part of the matching principle.

Key Concept: Matching Principle — recording related revenues and expenses in the same period.

Rationale for Correct Answer: The price-level adjusted historical cost method adjusts the original purchase price of an asset for inflation, providing a more current value while still tied to historical cost principles. It addresses one of the limitations of strict historical cost accounting.

Key Concept: Inflation adjustments in asset valuation.

The correct answer is D. Liquidation bankruptcy involves identifying the debtor’s assets, selling nonexempt assets, and using the proceeds to pay creditors. After the liquidation process, the debtor may receive a discharge of eligible debts, depending on the applicable jurisdiction and the nature of the obligations. The facts state that XYZ Company must sell its properties and inventory and apply the proceeds to creditors, which is the defining feature of liquidation. Reorganization bankruptcy allows a debtor to continue operating while restructuring debts under an approved plan. Receivership is a court-supervised arrangement involving a receiver, but it is not the filing type described. “Debt forgiveness bankruptcy” is not the proper ACFE classification.

================

The correct answer is C. Trade-based money laundering uses international trade transactions to disguise or move illicit value. A common method is misinvoicing, where colluding importers and exporters overstate or understate the price, quantity, or quality of goods. When goods are invoiced above market value, value can be transferred from the importer to the exporter under the appearance of a legitimate commercial payment. Option A involves laundering through virtual or digital assets, not trade-based laundering. Option B describes use of a front business, particularly a cash-intensive business, to mix illegal proceeds with legitimate revenue. Option D describes structuring or smurfing through small transfers. The international invoice manipulation in option C is the strongest example of trade-based money laundering.

================

Comprehensive and Detailed Explanation (Based on the ACFE Fraud Examiners Manual – Financial Transactions and Fraud Schemes)

In the Identity Theft chapter of the Financial Transactions and Fraud Schemes section, the ACFE Manual explains that there are two primary methods of committing identity theft :

Traditional identity theft

Synthetic identity theft

These are listed under “Methods of Committing Identity Theft” (1.803) , immediately followed by “Types of Identity Theft Schemes” (1.804) such as financial identity theft and criminal identity theft.

1. Why the correct answer is Traditional identity theft (Option B)

In traditional identity theft , the perpetrator uses the real, complete identity of another person—such as their name, government identification number, and birthdate —to impersonate that person for fraudulent purposes. This is exactly what is happening in the question:

The fraudster uses a real victim’s name, government identification number, and birthdate to open a credit card account in the victim’s name.

This matches the Manual’s categorization where traditional identity theft involves misuse of actual personal identifying information (PII) belonging to a real individual, rather than fabricating an identity. The Manual then explains that this stolen identity is often used in financial schemes , such as obtaining credit cards, loans, or other financial benefits, which falls under financial identity theft as a type of identity theft scheme.

So, in ACFE terms, the method is traditional identity theft , and the scheme type is financial identity theft (using another person’s identity to obtain credit or other financial benefits).

2. Why the other options are incorrect

Option A – New account identity theft

“New account identity theft” is a descriptive phrase sometimes used in practice to describe opening new credit accounts in another person’s name, but the ACFE Manual’s formal categorization focuses on:

Methods of committing identity theft:

Traditional identity theft

Synthetic identity theft

Types of identity theft schemes:

Financial identity theft

Criminal identity theft

Medical identity theft

Insurance identity theft

Tax identity theft

Employment identity theft

Business identity theft

“New account identity theft” is not one of the defined method categories in the Manual; the described conduct is captured under traditional identity theft (method) and financial identity theft (scheme type). Therefore, this option does not align with the ACFE’s terminology tested on the CFE exam.

Option C – Synthetic identity theft

The Manual distinguishes synthetic identity theft as a different method. Under “Methods of Committing Identity Theft” (1.803) , it explains that synthetic identity theft involves combining real elements of identity (for example, a genuine government identification number) with fabricated or unrelated information (such as a made-up name, date of birth, or address) to create a partly fictitious identity .

In the question, the fraudster is not creating a hybrid or composite identity. They are using all of the real victim’s identifying information (name, government ID number, birthdate) and posing directly as that person. That is traditional , not synthetic.

Option D – Criminal identity theft

Under “Types of Identity Theft Schemes” (1.804–1.805) , the Manual describes criminal identity theft as a scheme where a fraudster gives someone else’s identifying information to law enforcement or in criminal justice contexts , so that the victim’s identity is attached to the criminal record or charges .

Typical examples include:

Giving another person’s name and identification details when stopped or arrested

Causing warrants or criminal records to be issued in the victim’s name

In the question scenario, the fraudster is not interacting with law enforcement or shifting criminal records to the victim. Instead, they are opening a credit card account , which is a financial use of the stolen identity. Therefore, it fits financial identity theft as a scheme type, but traditional identity theft as the method.

Detailed Explanation:

Rationale for Correct Answer: Misrepresenting income, employment, or creditworthiness on a mortgage application is a classic example of residential loan fraud . This type of fraud occurs when borrowers provide false information to qualify for loans they would not otherwise receive.

Analysis of Incorrect Options:

B. Credit data blocking – Refers to suppressing negative credit information with fraudulent disputes.

C. Double-pledging collateral – Involves using the same collateral for multiple loans.

D. Linked financing – Occurs when loans are structured with related transactions to disguise financial exposure.

Key Concept: Loan and mortgage fraud – misrepresentation of borrower information.

The correct answer is A. A forged filing scheme occurs when bankruptcy documents are filed using forged information, often through stolen identities or assumed identities. In such cases, a fraudster files for bankruptcy in another person’s name, which can damage the victim’s credit record and create serious legal and financial problems. The ACFE bankruptcy fraud materials specifically describe bankruptcy petitions filed with forged documents and stolen identities. Option B is more consistent with false billing or inventory-related fraud. Option C is closer to a planned bustout, where a debtor obtains goods on credit and then disposes of them before bankruptcy. Option D is related to money laundering or insurance fraud, not forged bankruptcy filing.

================

Detailed Explanation:

Rationale for Correct Answer: New account fraud occurs when fraudsters open accounts with false or stolen identities to exploit financial institutions before controls detect suspicious activity. Mobile deposits are particularly vulnerable because criminals can use counterfeit or altered images to deposit fraudulent checks quickly. This aligns with the Fraud Examiners Manual (2020) discussion of high-risk delivery channels for new account fraud.

Analysis of Incorrect Options:

A. Established accounts – Incorrect; fraud risk is higher in new accounts due to limited history and weaker controls.

C. Six months definition – Not an ACFE standard; there is no fixed six-month definition.

D. ATMs rarely targeted – Incorrect; ATMs are frequently exploited in new account fraud schemes.

Key Concept: New account fraud in identity theft and corruption-related schemes.

Rationale for Correct Answer: Fraud investigations can be highly costly to organizations. The process often involves external forensic examiners, legal proceedings, employee time, and disruption of operations. While necessary, investigations represent a significant resource commitment in terms of both time and financial cost.

Key Concept: Fraud Investigation Costs — deterrence vs. response strategies.

Detailed Explanation:

Rationale for Correct Answer: Cressey’s research on fraud offenders found that most had non-sharable financial problems, which fell into categories such as: (1) violation of ascribed obligations, (2) business reversals, (3) physical isolation, (4) status gaining, and (5) employer-employee relations. “Larceny by fraud” is not a category of non-sharable problem but rather a type of theft scheme. Hence, D is correct.

Analysis of Incorrect Options:

A. Violation of ascribed obligations – Correctly one type of non-sharable problem.

B. Business reversals – Correctly one type of non-sharable problem.

C. Physical isolation – Correctly one type of non-sharable problem.

D. Larceny by fraud – Not a “problem” type; it is a fraud scheme.

Key Concept: Cressey’s non-sharable problems — psychological and situational pressures that contribute to occupational fraud.

The correct answer is B. A conflict of interest occurs when an employee has an undisclosed personal, financial, or family interest that could influence decisions made on behalf of the employer. Cindy purchases supplies from a company owned by her aunt and does not disclose the relationship. This creates at least a potential conflict because Cindy’s family connection could cause her to favor the vendor over her employer’s best interests. Options A and D involve relationships or financial interests, but they have been disclosed to the employer, allowing the organization to evaluate and approve or manage the conflict. Option C might create employment or scheduling concerns, but it does not establish a conflict in a purchasing or transactional decision. Disclosure is central to proper conflict management.

================

The correct answer is A. Financial statement disclosures are required when information is necessary for users to understand the entity’s financial position and risks. Potential losses from ongoing litigation generally must be disclosed when the likelihood of loss is reasonably possible, even if the amount is not yet certain. Option B is incorrect because significant subsequent events after the reporting period might require disclosure. Option C is incorrect because changes in accounting principles must generally be disclosed to preserve comparability and transparency. Option D is too narrow because related-party transactions require disclosure when material or relevant, not only when they financially harm stakeholders. The ACFE financial statement fraud materials identify improper disclosures, concealed liabilities, subsequent events, and related-party transactions as important fraud risk areas.

Detailed Explanation:

Rationale for Correct Answer: Gross profit = Net sales – Cost of Goods Sold (COGS). This is the correct definition, as per standard accounting principles.

Analysis of Incorrect Options:

A. Gross revenue – Defined as total sales before deductions, not after.

B. Net profit – Net profit is after all expenses (operating, interest, taxes), not before.

D. Operating expenses – Appear after gross profit, not at the top.

Key Concept: Income statement structure and key definitions .

Detailed Explanation:

Rationale for Correct Answer: This statement is False . Shrinkage is a general term for unaccounted-for inventory losses, and it can indeed result from theft, errors, damage, or waste . To say shrinkage does not result from theft is misleading because theft is one of its primary causes.

Analysis of Incorrect Options:

A. True – Incorrect, as theft is often a major contributor to shrinkage.

B. False – Correct, since shrinkage can include theft.

Key Concept: Shrinkage includes theft as a cause of unexplained inventory loss.

Detailed Explanation:

Rationale for Correct Answer: Blank plastic cards are a common basis for counterfeit card production. Fraudsters encode stolen magnetic stripe or chip data onto blank cards.

Analysis of Incorrect Options:

A – False; holograms are designed to be difficult to reproduce.

B – False; high-speed printers and embossers make counterfeiting easier, not harder.

D – Incorrect, since A and B are false.

Key Concept: Counterfeit card fraud methods.

Detailed Explanation:

Rationale for Correct Answer: The accounting definition of assets , as cited by Marshall and in GAAP frameworks, is “probable future economic benefits obtained or controlled by a particular entity as a result of past transactions or events.” This definition underlies balance sheet recognition of assets.

Analysis of Incorrect Options:

B. Liabilities – Represent probable future sacrifices, not benefits.

C. Credentials – Irrelevant to financial reporting.

D. None of the above – Incorrect since “assets” directly matches.

Key Concept: Definition of Assets under financial accounting frameworks.

The correct answer is C. Cash larceny involves stealing cash after it has been recorded, so detection often depends on tracing recorded cash activity to source documents and bank deposits. Reviewing, analyzing, and tracing journal entries made to cash accounts helps identify unsupported adjustments, unusual entries, concealment entries, or discrepancies between accounting records and actual cash activity. Option A is weak because the person responsible for cash receipts should not perform independent comparisons; segregation of duties is important. Option B is incorrect because cash receipt listings should be prepared and controlled before they reach accounts receivable personnel. Option D is also improper because cashiers should not independently reconcile their own register activity. Independent review is essential for detecting cash larceny.

================

Detailed Explanation:

Rationale for Correct Answer: This scheme is a business email compromise (BEC) , also known as CEO fraud. Fraudsters impersonate high-ranking executives to trick employees into transferring money or disclosing confidential information.

Analysis of Incorrect Options:

A. Reverse social engineering – Involves the fraudster posing as a helper and then exploiting the victim, not impersonating executives.

B. Executive email attack – A generic term, but the ACFE recognizes BEC as the precise classification.

C. Electronic piggybacking – Refers to unauthorized access through another user’s session, not impersonation.

Key Concept: Social engineering and cyber-enabled fraud – BEC schemes.

Detailed Explanation:

Rationale for Correct Answer: Prepaid debit and gift cards are attractive because they allow fraudsters to convert stolen credit card funds into cash or easily launder illicit funds . They are widely available and accepted both in person and online, making option A correct.

Analysis of Incorrect Options:

B. Only from financial institutions – False; cards are sold at retail stores and online.

C. Not accepted online – False; they are accepted by most online retailers.

D. All of the above – Incorrect since B and C are false.

Key Concept: Prepaid card fraud as part of asset misappropriation and identity theft schemes.

Detailed Explanation:

Rationale for Correct Answer: Simply holding two jobs without disclosure is not inherently a conflict of interest unless the roles compete, overlap, or present divided loyalties. The other options all describe undisclosed financial or relational interests that conflict with the employer’s best interest.

Analysis of Incorrect Options:

A. Harriet’s stock ownership – Direct financial conflict.

C. Jennifer’s board positions – Competing loyalties between competitors.

D. Ernest hiring his brother – Nepotism without disclosure is a conflict.

Key Concept: Conflict of interest schemes in corruption.

Detailed Explanation:

Rationale for Correct Answer: Card skimming/shimming occurs when a fraudster captures payment card data with a hidden device. In this case, the employee secretly scans the customer’s card with a small device — a textbook example of skimming.

Analysis of Incorrect Options:

A. Server keeps the card – This is theft of the card, not skimming.

B. Imitation website – This is phishing , not skimming.

D. None of the above – Incorrect since option C is correct.

Key Concept: Payment card fraud — skimming/shimming devices.

Detailed Explanation:

Rationale for Correct Answer: The statement is false . Cressey’s fraud triangle and Albrecht’s fraud scale both emphasize that fraud is more likely when pressures are high, opportunities are present, and integrity is low . Conversely, when pressure and opportunity are low and integrity is high, the likelihood of fraud is greatly reduced.

Analysis of Incorrect Options:

A. True – Incorrect, it directly contradicts the fraud triangle and fraud scale models.

B. False – Correct, because under the conditions stated, fraud occurrence is less likely.

Key Concept: Fraud Scale Variables — Pressure, Opportunity, Integrity.

The correct answer is A. Holograms are specifically designed as anti-counterfeiting features and are among the most difficult physical card features for fraudsters to reproduce accurately. Counterfeit payment card schemes usually involve stolen account information being encoded or printed onto altered, blank, or counterfeit cards. Option B is incorrect because these schemes generally involve fraudsters, organized groups, or dishonest merchants, not collusion between card issuers and merchants. Option C is too absolute because modern technology allows counterfeit cards to be produced without traditional professional printing facilities. Option D is inaccurate because counterfeit cards usually rely on stolen or compromised active account data, not merely expired card numbers. The ACFE payment fraud materials emphasize card security features, counterfeit card production, and card-scrutiny controls.

================

Detailed Explanation:

Rationale for Correct Answer: This scheme is known as a Turnaround Sale or Flip . The employee secretly purchases an asset their employer needs and then resells it to the employer at a markup, thereby profiting at the employer’s expense.

Analysis of Incorrect Options:

A. Conflict of interest in sale – Too general; does not describe the flipping mechanism.

C. Unauthorized sale – Not an ACFE fraud category in this context.

D. Written sale of unique assets – Not a recognized scheme.

Key Concept: Conflict of Interest scheme — Turnaround Sales/Flips .

Detailed Explanation:

Rationale for Correct Answer: A high percentage of coding outliers (e.g., using higher-paying diagnosis or procedure codes more often than peers) is a red flag of upcoding or fraudulent billing. This signals possible abuse of reimbursement systems.

Analysis of Incorrect Options:

A – Fewer claims would not suggest fraud.

C – Matching documentation is expected, not suspicious.

D – Low profits may indicate inefficiency, not fraud.

Key Concept: Health care fraud detection through data analytics and coding anomalies.

Detailed Explanation:

Rationale for Correct Answer: A need recognition scheme occurs when an employee uses their influence to convince their employer to purchase unnecessary goods or services. This benefits the supplier (often paying kickbacks) but harms the employer.

Analysis of Incorrect Options:

A. Presolicitation scheme – General stage of procurement, not specific.

C. False sole-source scheme – Involves eliminating competition by claiming only one vendor can supply the good/service.

D. Submission scheme – Related to bid-rigging, not need recognition.

Key Concept: Need recognition schemes — corruption through unnecessary purchases.

The correct answer is D. For a ghost employee scheme to work, the fictitious or nonworking employee must be entered into the payroll system with sufficient payroll data to generate payment, including wage rate information. The ghost does not need to be a real person; the identity might be fabricated, stolen, or based on a former employee. Payment does not have to be made by direct deposit because checks, payroll cards, or other methods can also be used. The payment also does not need to be delivered to someone outside the victim company; insiders commonly collect or control the payments. The ACFE materials describe ghost employee schemes as payroll fraud involving adding the ghost, collecting timekeeping information, and issuing the paycheck.

================

Detailed Explanation:

Rationale for Correct Answer: Fraudsters may solicit bids from fictitious suppliers (phony vendors) to create the illusion of competition. This ensures that the favored vendor wins while maintaining the appearance of a legitimate competitive bidding process.

Analysis of Incorrect Options:

B. Solicit transactions from fictitious vendors – Incorrect phrasing; bids, not transactions, are solicited.

C. Solicit bid-splitting… – Bid-splitting is a different fraud scheme, not part of solicitation.

D. None of the above – Incorrect, since A is accurate.

Key Concept: Phony bid solicitation as a corruption tactic in procurement.

Detailed Explanation:

Rationale for Correct Answer: Irregular, low-value, or unpredictable revenue sources such as parking fees, late charges, or vending machine sales are prime skimming targets. Because they are difficult to estimate or reconcile precisely, theft of these funds is less likely to be detected quickly.

Analysis of Incorrect Options:

B. Recorded sales – These are already in the books and easier to reconcile.

C. Internal audits – A control mechanism, not a target.

D. Register manipulations – A method, not the revenue source itself.

Key Concept: Vulnerable revenue streams as skimming targets.

Detailed Explanation:

Rationale for Correct Answer: An underring occurs when an employee intentionally enters a lower sales amount into the register than what was collected from the customer. The difference is pocketed by the employee. This is a common register manipulation skimming scheme.

Analysis of Incorrect Options:

B. Recording a sale procedure – General process, not fraud.

C. Internal sales audits – Control activity, not the fraud scheme.

D. All of the above – Incorrect, since only “underring” is accurate.

Key Concept: Underring schemes in cash register fraud.

Detailed Explanation:

Rationale for Correct Answer: Cash larceny involves the theft of incoming cash after it has been recorded. Strong segregation of duties is critical to prevent concealment. By separating cash deposit responsibilities from bank reconciliation duties , one employee cannot both steal funds and cover their tracks.

Analysis of Incorrect Options:

A. Restricting substitution – Weakens controls; job rotation and cross-training help prevent fraud.

C. Same register use – Reduces accountability, making theft harder to trace.

D. Surprise cash counts – Strong detective control, but not as preventive as segregation of duties.

Key Concept: Preventing cash larceny through segregation of duties .

Detailed Explanation:

Rationale for Correct Answer: The full disclosure principle requires that all material facts and deviations from GAAP be disclosed to readers of financial statements so that they are not misled. Transparency is essential for informed decision-making by investors, creditors, and regulators.

Analysis of Incorrect Options:

B. SAS – Refers to auditing standards, not accounting standards.

C. Writer – Incorrect; disclosures are intended for readers/users.

D. None of above – Incorrect since option A is correct.

Key Concept: Full disclosure principle — providing users with all material information.

The correct answer is D. Assigning the duties of an employee who is on vacation to other employees supports mandatory vacation and job rotation controls. These controls help prevent and detect cash larceny by interrupting the fraudster’s control over cash handling and concealment procedures. If a dishonest employee must be absent and another employee performs the same duties, irregularities such as missing cash, altered records, delayed deposits, or unsupported adjustments are more likely to surface. Option A relates more to surprise cash counts, which are useful, but the stronger preventive control in this list is rotation through vacation coverage. Option B weakens accountability because employees should use separate registers or identifiers. Option C violates segregation of duties by combining custody and disbursement authority.

================

Detailed Explanation:

Rationale for Correct Answer: By definition, Equity (or net assets) represents the residual interest in the assets of an entity after deducting liabilities. This aligns with the basic accounting equation: Assets = Liabilities + Equity . Thus, the difference between assets and liabilities is Equity .

Analysis of Incorrect Options:

B. Expense – A cost incurred in earning revenue, not residual interest.

C. Revenue – Inflows from operations, not assets minus liabilities.

D. Income statement – A financial report, not a balance sheet component.

Key Concept: Equity as residual interest in the accounting equation.