CFF common mistakes
CFF · Understand the traps and how to avoid them.
Treating every fraud question as a substantive fraud-examination question and answering from investigative intuition, instead of first checking whether the stem is really testing the legal or professional-standards element of the scenario.
Candidates study the investigative techniques heavily and then pattern-match the word 'fraud' to those techniques, skipping the regulatory, engagement, or reporting element that the question actually turns on.
What to do instead
Before answering, label the question's target in one phrase: evidence, legal element, engagement/reporting, or prevention/internal control. Answer only that target; if two options fit the facts, choose the one that matches the labeled target.
Answering 'what is the fraud examiner required to do' with what a reasonable investigator would ideally do, rather than with the minimum the standards or law actually mandate.
Professional experience creates a bias toward best practice, and best practice is often a distractor designed to sound more thorough than the required minimum.
What to do instead
For any 'required', 'must', or 'minimum' stem, eliminate options that describe desirable-but-optional steps first, then choose among the remaining options using the standard's exact wording rather than your firm's policy.
Skipping the 'who is the client / who engaged you' analysis and jumping straight to the technical facts of the scenario.
Scenarios are written to be technically interesting, so attention drains into the fraud mechanics and the engagement-scope detail reads like background filler.
What to do instead
On every scenario, write down the engaging party, the intended user of the work product, and the scope limit before touching the answer choices; discard any option that would serve a party outside that scope.
Choosing an answer because it names a familiar term or framework (red flags, fraud triangle, data analytics) without verifying that the term is used correctly in the option.
Recognition memory fires faster than comprehension, and exam writers insert authoritative-sounding vocabulary into otherwise wrong options.
What to do instead
Read each option as a claim and ask 'is this claim literally true in this fact pattern?' Reject options that are true in general but not supported by the stated facts.
Ignoring the timing and sequencing of investigative steps, so answers that place interviews, evidence collection, or reporting out of order are accepted.
Candidates evaluate each action on its own merits rather than as a step in a process, so a correct action taken at the wrong stage looks acceptable.
What to do instead
For process questions, sketch the sequence (plan, gather, analyze, interview, report) and test each option's position in it; eliminate any option that reverses the order, such as interviewing a suspect before securing documentary evidence.
Over-reading the fact pattern and importing assumptions or additional facts that are not stated, then selecting the answer that fits the invented facts.
Real cases are messy and experienced candidates fill gaps automatically, which is exactly what the distractors are built to reward.
What to do instead
Underline only stated facts; when an option requires an unstated assumption, mark it wrong even if it feels realistic. If the stem is genuinely incomplete, choose the answer that is correct under the narrowest reading.
Misreading quantitative items (damages, asset misappropriation amounts, sampling or statistical evidence) by grabbing the first number that appears rather than setting up the computation.
Time pressure plus the presence of several plausible figures in the stem encourages mental arithmetic on the wrong base.
What to do instead
Write the formula and the base amount before computing, keep units consistent, and sanity-check the result against the magnitude of the facts; when two answers differ only by a factor, the error is almost always the base or the period.
Treating evidence questions as questions about whether the evidence is persuasive, when the item is actually testing admissibility, chain of custody, or the business-records exception.
Investigators are trained to weigh reliability, so the persuasive-value frame dominates and legal-threshold distinctions get blurred.
What to do instead
Classify the evidence item first: is the question asking whether it is allowed in, whether it is authentic, or whether it is convincing? Answer only that layer, and remember that reliable evidence can still be excluded.
Rushing the final third of the exam and changing correct answers on review without a fact-based reason.
Fatigue and clock anxiety peak late, and second-guessing feels like diligence while actually reflecting degraded recall.
What to do instead
Flag uncertain items and return to them only with a written reason tied to the stem; change an answer only when you can cite the specific fact or rule that makes the original choice wrong. Practice full-length timed sets to build late-exam stamina.
Studying only investigative technique and never rehearsing the ethics, independence, confidentiality, and reporting-obligation content, then guessing on those items.
Technique material is more engaging and easier to self-test, so standards content gets deferred until it is too late to internalize the distinctions.
What to do instead
Build a one-page comparison of the professional and ethical requirements (independence, objectivity, confidentiality exceptions, competence, reporting duties) and drill scenario questions that pit two duties against each other until the priority order is automatic.