CFE study plan
CFE · Give each week a clear focus.
8 weeks · About 8 hours per week
Financial Transactions and Fraud Schemes
Map the full fraud tree from memory, distinguishing asset misappropriation, corruption, and financial statement fraud by their defining characteristics
Trace the mechanics of skimming, cash larceny, and register disbursement schemes, including how each is concealed in the accounting records
Differentiate check tampering, billing, expense reimbursement, and payroll schemes by the false document or claim each relies on
Identify the specific red flags, ratio anomalies, and internal control gaps that signal each cash scheme
Your checkpoint
Hand-drawn fraud tree with every sub-branch labeled, plus a 40-question cash-schemes quiz scored at 80% or higher
Financial Transactions and Fraud Schemes
Distinguish bribery, illegal gratuity, economic extortion, and conflict of interest using the element that separates each
Classify financial statement fraud schemes by whether they overstate assets/revenue or understate liabilities/expenses
Compute gross margin, asset turnover, and receivables/ inventory trend ratios and explain how each shifts under revenue and asset overstatement
Explain how concealment works in financial statement fraud, including journal entry manipulation, related-party transactions, and disclosure omissions
Match each inventory, payables, and revenue scheme to the audit procedure most likely to detect it
Your checkpoint
A 25-row comparative table listing scheme, mechanics, concealment method, and detection technique, plus a 60-question domain-2 quiz scored at 80% or higher
Fraud Investigation
Sequence the phases of a fraud examination from predication through disposition and state what must be true before each phase begins
Distinguish witness, subject, and expert interviews and select the correct questioning approach for each
Apply cognitive interviewing and admission-seeking techniques, including the Reid-style behavioral symptom progression
Classify evidence as testimonial, documentary, physical, or observational and describe how each is authenticated
Apply Benford's law, gap testing, duplicate testing, and vertical/horizontal analysis to a data set to surface anomalies
Your checkpoint
A written interview plan and script for a hypothetical subject, plus an evidence matrix classifying 15 items by type, source, and custody requirement
Fraud Investigation & Law and the Legal Elements of Fraud
Draft an investigation report that states predication, scope, procedures, findings, and recommended action per professional standards
Explain chain-of-custody, documentation, and confidentiality requirements for retaining and transmitting evidence
Define the elements of fraud and identify what the examiner must prove for each element
Distinguish the sources of law-constitutional, statutory, regulatory, and common law-and give an example of each affecting a fraud examination
Your checkpoint
Midpoint 100-question timed mock exam scored at 75% or higher, with a written error log tagging every miss to a domain and sub-topic
Law and the Legal Elements of Fraud
Contrast civil and criminal proceedings on burden of proof, parties, remedies, and consequences for the subject
Apply the Fourth, Fifth, and Sixth Amendment rights of the accused to interview, search, and detention scenarios
Determine when attorney-client, marital, clergy, and physician-patient privileges attach and how they limit testimony
Apply the rules of relevance, hearsay and its exceptions, and the best evidence rule to admissibility questions
Explain the anti-fraud statutes most tested on the exam, including their prohibited conduct and jurisdictional triggers
Your checkpoint
A one-page legal-elements cheat sheet covering burdens of proof, privileges, hearsay exceptions, and key statutes, plus 50 domain-4 questions scored at 80% or higher
Fraud Prevention and Deterrence
Apply the fraud triangle, fraud diamond, and ACFE fraud scale to fact patterns and predict where deterrence should be targeted
Design a fraud risk assessment that identifies, scores, and prioritizes inherent risks and maps them to controls
Distinguish preventive, detective, and deterrent controls and give concrete examples of each
Describe the elements of an effective ethics and compliance program, including tone at the top, hotlines, and whistleblower protections
Explain corporate governance structures-board, audit committee, internal audit, and external audit-and each one's fraud oversight role
Your checkpoint
A written fraud risk assessment for a hypothetical mid-sized company, with a risk register of at least 10 risks scored and mapped to specific controls
Fraud Prevention and Deterrence & Financial Transactions and Fraud Schemes
Re-drill the three weakest sub-topics identified in the midpoint error log until accuracy exceeds 85%
Explain the auditor's and examiner's responsibilities for fraud detection under professional standards and how those differ from management's
Reconcile overlapping concepts across domains-for example, how a control gap in domain 1 becomes a scheme in domain 2 and evidence in domain 3
Apply professional ethics and independence requirements to gray-area scenarios
Your checkpoint
A rewritten, condensed error log with every previously missed concept restated in the learner's own words, plus a second 100-question mock scored at 80% or higher
Fraud Prevention and Deterrence & Financial Transactions and Fraud Schemes & Fraud Investigation & Law and the Legal Elements of Fraud
Sit two full-length timed mock exams under test-day conditions and review every miss the same day
Recall the fraud tree, legal-elements sheet, and ratio formulas from memory without notes
Practice pacing and flag-and-return strategy across a four-section exam format
Confirm exam-day logistics: appointment, ID requirements, testing environment, and permitted materials
Your checkpoint
Final full-length mock scored at 85% or higher, with a one-page master recall sheet covering all four domains
Milestones
Week 2: Complete the fraud schemes comparative table and pass the domain-2 quiz at 80% or higher; if below 80%, the week-3 schedule absorbs one extra schemes review block
Week 4: Midpoint mock at 75% or higher with an error log that names a sub-topic for every miss; no domain below 65% on its own
Week 6: All four domains have been studied at least once and the fraud risk assessment deliverable is complete; confirm no domain has gone more than three weeks without review
Week 8: Final mock at 85% or higher and every item on the error log restated correctly without notes; if below 85%, reschedule the exam rather than sit unprepared