CFCI study guide
CFCI · Work through your exam, one topic at a time.
The Certified Financial Crimes Investigator (CFCI) is one of three professional certifications listed by the International Association of Financial Crimes Investigators (IAFCI), alongside the CCCI and the ICIC. The IAFCI describes its certifications as designed "to recognize knowledge and expertise in financial crimes, cybercrimes, and digital forensics." That single sentence is the public description of the program, so candidates should treat the CFCI as a credential built around three knowledge areas: financial crime schemes, cybercrime, and digital forensics. The credential suits working investigators and analysts in financial institutions, payments providers, law enforcement, and corporate fraud and security teams who already handle fraud cases and want a structured way to demonstrate breadth across the financial and cyber sides of an investigation. Because IAFCI membership is classified into law and corporate categories based on a member's position in financial crimes investigative services, the certification audience is similarly practitioner-oriented rather than entry-level. The CFCI study guide has 3 sections and about 1,301 words.
01Financial Crimes: Scheme Mechanics, BSA Reporting, and the Documentary Trail
The Financial Crimes domain tests whether you can name a scheme's mechanics, attach the right statute, and build a documentary trail that survives prosecution. Expect questions on check and card fraud, identity crime, money laundering, and the Bank Secrecy Act rules that generate most of the paper an investigator works from.
443 words, about 2 min02Cybercrimes: Attack Patterns, Preservation, and Time-Critical Response
The Cybercrimes domain tests how digital intrusion and deception produce financial loss, and which investigative steps are both lawful and time-critical. Questions center on business email compromise, account takeover, phishing infrastructure, and the preservation tools that keep evidence from disappearing while you analyze.
434 words, about 2 min03Digital Forensics: Defensible Acquisition, Artifact Analysis, and Reporting
The Digital Forensics domain tests defensible acquisition, examination, and reporting. The exam cares less about tool menus than about whether your process survives a challenge: did you preserve the original, prove integrity, document every hand, and tie each conclusion to a specific artifact?
424 words, about 2 min