FCIBT
FCIBT (Financial Crime Investigation / Blockchain Tracing certification)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The FCIBT credential - Financial Crime Investigation and Blockchain Tracing - is aimed at people who need to follow money that moves through public blockchains and turn those findings into something usable in an investigation, a compliance file, or a court filing. Candidates typically come from financial intelligence units, law enforcement and prosecution offices, bank and VASP compliance teams, forensic accounting practices, and consultancies that support insolvency or fraud litigation. The exam tests eight domains: blockchain and cryptocurrency fundamentals; cryptoasset typologies and illicit finance risk; on-chain analytics and transaction tracing; attribution, clustering, and wallet identification; cross-chain movement, mixers, and privacy-enhancing technology; fiat on-ramps, off-ramps, exchanges, and VASP due diligence; AML/CFT frameworks, sanctions, and Travel Rule compliance; and evidence handling, reporting, and case documentation. Tracing carries the heaviest weight, so expect the most questions there. The exam is delivered in multiple-choice, single-best-answer format. The awarding body publishes current details on question count, duration, fees, and the passing score on its own site; check there before you book, because those figures change and are not fixed here. Preparation should combine structured reading on each domain with hands-on practice on a block explorer: reconstruct a short transaction chain, label the change output, and write up the result as if for a case file. Candidates with compliance backgrounds usually need more time on UTXO mechanics and clustering heuristics; candidates with technical backgrounds usually need more time on sanctions, Travel Rule obligations, and evidential standards.
What you'll study
About FCIBT preparation
What is the exam format?
Multiple-choice questions with a single best answer, delivered in the language of the exam. Some items are scenario-based and give you a short fact pattern - a transaction, a set of addresses, or an exchange relationship - and ask you to pick the most defensible conclusion. The awarding body publishes the current question count, time limit, and delivery method on its site.
How difficult is it?
Moderately demanding. The fundamentals questions are approachable for anyone who has used a block explorer, but the tracing and attribution items require you to reason about change outputs, peel chains, and clustering heuristics rather than recall definitions. Candidates who have only read about crypto tend to find the second half harder than expected.
How long should I study?
Most candidates need several weeks of part-time study. Weight your time by domain: tracing and attribution together account for roughly a third of the exam, so they deserve the most hours. Fundamentals and typologies are broad but shallower. Finish with practice on real public-chain data, because reading alone does not build the pattern recognition the questions reward.
What is the best study order?
Start with blockchain fundamentals so transaction structure, UTXOs, and gas are not a distraction later. Then move to typologies so you know what conduct you are looking for. Study tracing and attribution next, as a pair. Finish with on/off-ramps, VASP due diligence, AML/CFT and sanctions, and evidence handling, which frame the technical work in a legal and compliance context.
What are the most common failure modes?
Three recur. First, treating a cluster as proof of identity rather than as an investigative lead. Second, ignoring the change output and following the wrong branch. Third, knowing the technical trace but not the reporting obligation that follows it - who must be told, in what form, and by when. Careless reading of scenario stems also costs marks.
Can I retake it, and how long is the credential valid?
Retake policy and validity periods are set by the awarding body and are not fixed in this guide. Check the official site for the current retake window, any waiting period between attempts, fees, and whether you need continuing education to maintain the credential. Confirm these before you schedule, since they affect how you plan a second attempt.
Do I need to know how to use tracing software?
You do not need a licence for any commercial platform, and questions are written so that a candidate with a free block explorer can answer them. What you do need is the underlying logic: how heuristics such as common-input-ownership and change detection work, where they produce false positives, and how an investigator should document a heuristic-based conclusion.
How much law and regulation is on the exam?
Enough that a purely technical candidate can lose marks. Expect questions on AML/CFT programme obligations, sanctions screening and designated addresses, and Travel Rule information-sharing between VASPs. You are not expected to recite statutes from memory, but you should understand what each framework requires an institution to do and when.
Is this an official certification page?
No. This is independent study material for candidates preparing for the FCIBT exam. It is not affiliated with, endorsed by, or approved by the awarding body, and it does not reproduce any official question bank. Always treat the awarding body's own handbook as authoritative for eligibility, registration, and exam-day rules.