CFE-Investigation Certified Fraud Examiner (CFE) - Investigation Questions and Answers

Writs down a detailed list of questions in advance

Avoid bringing any notes with him to the interview

Write down key points to go over with the respondent

Take only the documents he wishes to go over

A fraud response plan outlines the actions an organization will take when suspicions of fraud have arisen.

A fraud response plan should create an environment to minimize risk and maximize the potential for success

A fraud response plan must be simple to understand and administer

A fraud response plan should specify how every fraud examination should be conducted regardless of the type of fraud

Tracing loan proceeds can determine if the proceeds were deposited into hidden accounts.

Tracing loan proceeds can uncover previously hidden assets

Tracing loan proceeds can determine if hidden accounts were used for loan payments

Tracing loan proceeds can identify the presence of internal control weaknesses.

The invisible archives

The free web

The internet archives

The deep web

Commercial filings

Civil litigation records

Organizational filings

Regulatory securities records

Avoid interviewing Brianna if possible due to Brianna's potential volatility.

Conduct the interview with as little notice as possible so Brianna will be unprepared

Provide Brianna with advance notice prior to the interview to inhibit resentment.

Ask Brianna when she would prefer to be interviewed in an effort to provoke cooperation.

To access any user-posted information on social media sites, fraud examiners must obtain some type of legal order from the jurisdiction in which the user resides.

A fraud examiner cannot be held liable for violating a user's privacy rights if they hack or break into areas of a social networking site designated as private because all social media information is public.

The Privacy of Social Networks Treaty is a binding international treaty that makes it illegal for law enforcement to seek social media log-in credentials from users.

Hacking or breaking into information on social media sites that is restricted as private could result in liability for fraud examiners due to violation of users' privacy rights.

Increase sympathy while downplaying implications of wrongdoing.

Ensure that accusations are made in the presence of a third party to avoid potential liability

Emphasize a lack of morality in the subject's actions to induce them into confessing.

Use time constraints as a means to pressure the subject into making a confession.

A victim of fraud wants to facilitate the recovery of criminal proceeds.

An employer wants to know if an employee is falsifying regulatory reports

An attorney wants to evaluate an expert's financial report

An entity needs to find hidden relationships in big data that otherwise would not be discovered.

If Ginny's computer is running. Jackson should perform a graceful shutdown by turning it off using the normal shutdown process

If Ginny’s computer is off and Jackson needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer's normal interface.

If Ginny's computer is off. Jackson should not turn it on unless he plans to use an encryption device that can guarantee that the system's hard drive will not be accessed during startup.

If Ginny's computer is running. Jackson may retrieve data from the computer directly via its normal interface if the evidence that he needs exists only in the form of volatile data

Analyze the data.

Cleanse and normalize the data

Build a profile of potential frauds.

Obtain the data.

Lack of corroborating evidence

Lack of data control

Lack of trust from cloud providers

Lack of relevant data

Establish the interview theme

Condition the witness.

Establish rapport

Exhibit passive listening.

That Justine will confess to the accusation when prompted

That Justine's employer will take disciplinary action against Justine if she confesses

That the interview's time, place, and content can De controlled

That no other person was involved in the fraud n question

Credit card statements

PaystuDs

Surveillance footage

Financial institution records

Ashley should explain that Antonio may have qualified confidentiality but that she cannot make any absolute assurances

Ashley should promise Antonio unqualified confidentiality over all information provided

Ashley should explain that all information must be disclosed to management so nothing Antonio says will be confidential

Ashley should promise Antonio that his identity will not become known.

The organizational filings with the government of the jurisdiction in which the company is incorporated

The contractual documents regarding real properly owned by the corporation

The utility records in the municipality where the corporation has its principal office

The shareholder data form filed with the World Bank

To close the interview positively and maintain goodwill

To assess whether the subject is ready to confess

To confirm the credibility of the witness being interviewed

To reduce testimony to a signed, written statement

Interview Dianne and Sheila separately

Allow Sheila to be present but only if she does not speak

Interview Dianne and Sheila together by himself

Interview Dianne and Sheila together, but bring in a second interviewer

Fraud theory

Forensic investigation

Fraud management

Fraud examination

Whether the information was presented by a lay witness or an expert witness

Whether the evidence is documentary or testimonial

Whether the evidence is direct or circumstantial

Whether the organization has a general document retention policy in place

That all reasonable investigative steps have been taken

That the interview's time and location can be controlled

That no other person was involved in the fraud in question

That the interview's subject matter can be controlled