ACFE CFE-Fraud-Schemes-and-Financial-Crimes Dumps

Detailed Explanation:

Rationale for Correct Answer: Address similarity reports are used to identify fraudulent disbursements by flagging payments sent to multiple vendors or payees at the same address. This helps detect fictitious payees or shell companies set up by fraudsters.

Analysis of Incorrect Options:

A. Duplicate payment lists – Detects duplicate disbursements, not necessarily fictitious payees.

C. Exception reports – Flag unusual transactions, but not specifically address similarities.

D. Electronic confirmations – Used to verify balances or transactions, not detect fictitious vendors.

Key Concept: Detection of fraudulent disbursements .

Detailed Explanation:

Rationale for Correct Answer: Finding personal checks in the cash register is unusual, but it does not specifically indicate a register disbursement scheme (such as false refunds or voids). The other options are classic red flags for such schemes.

Analysis of Incorrect Options:

A – Missing transaction numbers suggest manipulation.

C – Excessive voids near approval limits indicate fraud concealment.

D – Allowing cashiers to void their own sales creates opportunity for abuse.

Key Concept: Register disbursement schemes and their red flags.

Detailed Explanation:

Rationale for Correct Answer: Under anti-bribery laws and fraud examination principles, the offer of a payment itself may constitute a bribe, regardless of whether money changes hands. Intent to improperly influence is enough to establish bribery.

Analysis of Incorrect Options:

B. Corruption in payment – Too vague, not a legal element.

C. Kickback payment – Requires an actual payment; not just an offer.

D. Overbilling in payment – A disbursement scheme, not a bribe.

Key Concept: Bribery offense can occur upon the offer alone.

Detailed Explanation:

Rationale for Correct Answer: Fraudsters often attempt to influence or bribe employees who have access to sealed bids . Access to sealed bids provides unfair knowledge of competitors’ pricing and terms, enabling collusion or bid manipulation.

Analysis of Incorrect Options:

A. Bid-splitting – A fraud scheme, not what vendors seek access to.

C. General purchasing – Too broad; not specifically tied to vendor fraud.

D. Tailor specifications – A corruption scheme, but not the specific target of vendor bribery.

Key Concept: Sealed bid access as a key target in procurement fraud.

The correct answer is D. A fraudulent conveyance occurs when a debtor transfers property to another party, often an insider or related party, for little or no consideration before or during insolvency to place assets beyond the reach of creditors. Brad’s transfer of valuable marble slabs to his son’s construction business at no charge shortly before bankruptcy is a strong indicator of such a scheme. Option A, concealed transfer, is less precise because the key issue is not merely hiding a transfer but transferring assets for inadequate value to impair creditors. Option B is overly broad and does not identify the scheme type. Option C, planned bustout, usually involves obtaining goods or credit with the intent to dispose of assets and then file bankruptcy.

================

Detailed Explanation:

Rationale for Correct Answer: The accounting definition of assets , as cited by Marshall and in GAAP frameworks, is “probable future economic benefits obtained or controlled by a particular entity as a result of past transactions or events.” This definition underlies balance sheet recognition of assets.

Analysis of Incorrect Options:

B. Liabilities – Represent probable future sacrifices, not benefits.

C. Credentials – Irrelevant to financial reporting.

D. None of the above – Incorrect since “assets” directly matches.

Key Concept: Definition of Assets under financial accounting frameworks.

Detailed Explanation:

Rationale for Correct Answer: An underring occurs when an employee intentionally enters a lower sales amount into the register than what was collected from the customer. The difference is pocketed by the employee. This is a common register manipulation skimming scheme.

Analysis of Incorrect Options:

B. Recording a sale procedure – General process, not fraud.

C. Internal sales audits – Control activity, not the fraud scheme.

D. All of the above – Incorrect, since only “underring” is accurate.

Key Concept: Underring schemes in cash register fraud.

Detailed Explanation:

Rationale for Correct Answer: Skimming is defined as the theft of cash before it is recorded in the books . Because the stolen funds are never entered into the accounting system, this is often referred to as an “off-book” fraud. It is distinct from cash larceny , which occurs after cash has been recorded.

Analysis of Incorrect Options:

B. The addition of cash – Incorrect; skimming involves removal, not addition.

C. Removal after entry – This describes cash larceny, not skimming.

D. None of above – Incorrect since option A is correct.

Key Concept: Skimming schemes — off-book cash theft.

The correct answer is C. Reviewing insurance policy applications for irregularities, inconsistencies, and missing information before coverage is granted is an effective preventive control. Many insurance fraud schemes begin at the application or underwriting stage through false statements, omitted risk factors, fictitious policies, or misrepresentations about the insured. Careful pre-issuance review helps identify suspicious information before the insurer assumes risk. Option A is generally impractical and may raise privacy and legal concerns after claim payment. Option B is inappropriate because combining underwriting and claims processing in one person weakens segregation of duties. Option D is also poor practice because information sharing, where lawful and appropriate, can help insurers identify patterns, duplicate claims, and suspicious applicants. Strong underwriting controls are essential to fraud prevention.

================

Detailed Explanation:

Rationale for Correct Answer: By double-entry accounting rules, every accounting entry affects at least two accounts (debit and credit). Fraudulent entries must also follow this rule, meaning manipulation will show up in at least two categories on the financial statements.

Analysis of Incorrect Options:

A. One – Impossible in double-entry accounting.

C. More than two – Possible, but not always; the minimum is two.

D. None of above – Incorrect since “at least two” is correct.

Key Concept: Double-entry accounting ensures at least two accounts are affected in every transaction, including fraudulent ones.

Detailed Explanation:

Rationale for Correct Answer: Being prompted to install unfamiliar software is a red flag for malware or unauthorized access, often indicating that attackers are attempting to establish persistence in the system. This is a classic indicator of a compromised network.

Analysis of Incorrect Options:

A – Standard security measure, not a red flag.

C – Data from supplier countries is normal if consistent with business operations.

D – Access denial to files outside a user’s role is a normal access control, not an intrusion sign.

Key Concept: Cyberfraud detection – identifying intrusion indicators.

Detailed Explanation:

Rationale for Correct Answer: The Fraud Examiners Manual (2020) highlights document reviews, audit tracing, financial analysis, and inside witnesses as the primary methods of proving corrupt payments. Secret infiltration is not a standard fraud examination technique; it is more aligned with law enforcement undercover operations.

Analysis of Incorrect Options:

A. Taxation inquiries – A valid method to confirm payment sources.

C. Inside witness – Valuable evidence in corruption cases.

D. Tracing payments – Fundamental audit step in proving illicit payments.

Key Concept: Proving corrupt payments — standard audit and investigative methods.

Detailed Explanation:

Rationale for Correct Answer: In a false refund scheme , the fraudster enters a fictitious refund into the register system, making it appear that merchandise was returned. The register log reflects the fraudulent refund, so the cash on hand does balance with the adjusted log. Thus, the mismatch described in the question does not occur.

Analysis of Incorrect Option:

A. True – Incorrect because the log and cash are manipulated to match, concealing the theft.

Key Concept: Cash register fraud (false refunds vs. false voids).

The ACFE Fraud Examiners Manual includes Kickback Schemes in the corruption section and specifically identifies Diverting Business to Vendors as a type of kickback scheme.

This question states that Bob, a purchasing agent , directed business to Oak Company, and in return Oak’s sales manager agreed to pay Bob a percentage of the extra profits . That is a classic kickback arrangement : the employee steers company business to a favored vendor in exchange for a personal financial benefit. The Manual’s examples of corruption also discuss a vendor bribing or paying a purchasing agent to receive more business.

Why the other options are incorrect

A. Economic extortion scheme

The Manual defines economic extortion as obtaining money, property, or services through coercion or threatened adverse action. That is not what happened here; Bob was paid for steering business, not coercing payment through threats.

C. Illegal gratuity scheme

The Manual explains that illegal gratuities are items of value given to reward a decision, often after the recipient has already made the decision, and this concept is primarily discussed in the public-sector context. Here, the payment is part of an agreement to direct business and share in profits, which is more accurately a kickback .

D. Diversion scheme

The relevant Manual terminology is Diverting Business to Vendors , but that appears as a subtype under Kickback Schemes . Therefore, the best answer among the options is the broader and correct classification: kickback scheme .

References

ACFE Fraud Examiners Manual, 2020 International Edition

Corruption — Kickback Schemes

Corruption — Diverting Business to Vendors

Example involving a purchasing agent receiving improper payments to steer business to a vendor

Economic Extortion definition

Illegal Gratuities definition

Detailed Explanation:

Rationale for Correct Answer: The statement is false . Cressey’s fraud triangle and Albrecht’s fraud scale both emphasize that fraud is more likely when pressures are high, opportunities are present, and integrity is low . Conversely, when pressure and opportunity are low and integrity is high, the likelihood of fraud is greatly reduced.

Analysis of Incorrect Options:

A. True – Incorrect, it directly contradicts the fraud triangle and fraud scale models.

B. False – Correct, because under the conditions stated, fraud occurrence is less likely.

Key Concept: Fraud Scale Variables — Pressure, Opportunity, Integrity.

The correct answer is A because the FATF Recommendations provide that financial institutions and designated nonfinancial businesses and professions should report covered cash transactions that exceed the jurisdiction’s designated threshold. Dealers in precious metals and stones, such as businesses selling gold jewelry, are commonly treated as higher-risk entities for anti-money laundering purposes. A domestic cash purchase above the threshold would therefore require reporting. Options B and C are below the designated threshold, so they do not meet the reporting requirement based on amount. Option D involves a food purchase, which is not the type of covered high-risk transaction described in the FATF large cash transaction guidance. The key issue is both the covered business type and the threshold amount.

================

Rationale for Correct Answer: The price-level adjusted historical cost method adjusts the original purchase price of an asset for inflation, providing a more current value while still tied to historical cost principles. It addresses one of the limitations of strict historical cost accounting.

Key Concept: Inflation adjustments in asset valuation.

Detailed Explanation:

Rationale for Correct Answer: While asset misappropriation schemes are usually committed by lower-level employees, financial statement fraud is most often committed by senior management . This is because executives have the authority to override controls, direct accounting policies, and influence financial reporting for personal gain (bonuses, stock prices, or to conceal poor performance).

Analysis of Incorrect Options:

A. Organized criminals – May commit fraud, but financial statement fraud specifically requires authority over reporting.

B. Mid and lower-level employees – Lack sufficient authority to materially alter financial statements.

D. All of the above – Incorrect, as financial statement fraud is overwhelmingly associated with senior management.

Key Concept: Management override — financial statement fraud perpetrated by those with the authority to manipulate reports.

Detailed Explanation:

Rationale for Correct Answer: A conflict of interest occurs when an employee secretly has a personal or financial stake in a transaction, and that interest compromises their duty of loyalty to the employer. This is one of the four categories of corruption under the ACFE Fraud Tree.

Analysis of Incorrect Options:

B. Illegal sale – Not a fraud classification.

C. Unauthorized purchase – Could describe asset misuse, not corruption.

D. Financial disclosure – Relates to reporting, not the fraud itself.

Key Concept: Conflict of interest schemes as a category of corruption.

The correct answer is A. The income statement reports revenues and expenses for a period, and most companies present net sales or net service revenues as the first line item. Net sales means gross sales reduced by sales returns, allowances, refunds, or discounts. Option B is incorrect because gross profit is generally net sales minus cost of goods sold, not revenues minus operating expenses. Operating expenses are deducted after gross profit to help determine operating income. Option C incorrectly defines net profit; net profit reflects revenues minus all relevant expenses, not merely sales minus cost of goods sold. Option D is also incorrect because gross revenue is before deductions, while net sales are after deductions. The ACFE accounting materials explain these income statement relationships.

================

Detailed Explanation:

Rationale for Correct Answer: Skimming is difficult to detect because the stolen cash is never recorded (“off-book”). Therefore, it is often discovered by accident — such as customer complaints, discovery of missing deposits, or unexpected reconciliations — rather than through audits or routine controls.

Analysis of Incorrect Options:

A. Internal audits – Effective for many frauds but weak at uncovering skimming because records appear normal.

C. Internal controls – Preventive controls may deter but cannot detect unrecorded theft.

D. Occupational frauds – Too broad and not a detection method.

Key Concept: Detection of Skimming — most often accidental.

Option A constitutes intellectual property theft because the corporate agent improperly accesses a competitor’s computer network and obtains confidential files about future pricing strategy. Proprietary business information, trade secrets, pricing plans, research, customer lists, and strategic documents can constitute valuable intangible assets. The ACFE material distinguishes lawful competitive intelligence from corporate espionage and theft of proprietary information. Option C describes open-source research, which is generally lawful if the information is publicly available. Option B is a false billing or fraudulent disbursement-type scheme, not intellectual property theft. Option D involves recruiting an employee and does not show improper acquisition or misuse of confidential information. The defining feature in option A is unauthorized access to confidential competitor information for business advantage.

================

Detailed Explanation:

Rationale for Correct Answer: According to the ACFE Fraud Tree , corruption is divided into four classifications: bribery, illegal gratuities, economic extortion, and conflicts of interest . These cover the major ways employees misuse influence for personal gain.

Analysis of Incorrect Options:

B. Corruption… – Redundant; corruption is the main category, not a sub-classification.

C. Overbilling and bid-rigging – These are disbursement schemes, not corruption categories.

D. Corruption repeated – Incorrect for the same reason as option B.

Key Concept: Corruption classifications under the Fraud Tree.

Detailed Explanation:

Rationale for Correct Answer: The balance sheet summarizes account balances from the ledger at a specific date, presenting assets, liabilities, and equity. It reflects the organization’s financial position and is derived from ledger balances.

Analysis of Incorrect Options:

B. Income statement – Summarizes revenues and expenses, not all ledger balances.

C. Financial statement – A general term, but the specific answer here is balance sheet.

D. General journal – Book of original entry, not a summary.

Key Concept: Balance sheet as a summary of ledger accounts.

Detailed Explanation:

Rationale for Correct Answer: One of the most effective ways to protect proprietary information is educating employees about nondisclosure agreements (NDAs) at onboarding and again during exit. This ensures awareness of confidentiality obligations.

Analysis of Incorrect Options:

A. Changing locks/codes every 3–5 years – Reasonable security but insufficient for safeguarding proprietary information.

B. Classifying data by years of service – Not a sound security practice; access should be based on role and need-to-know.

D. Requiring notes/drafts – Increases risk of information leaks, not protection.

Key Concept: Proprietary information protection .

Detailed Explanation:

Rationale for Correct Answer: The balance sheet provides a snapshot of a company’s financial position at a specific date. It shows assets, liabilities, and equity, allowing stakeholders to assess book value and solvency.

Analysis of Incorrect Options:

A. Equity – A component of the balance sheet, not the full report.

C. Income statement – Shows performance over a period, not book worth at a date.

D. Financial record – Too general.

Key Concept: Balance Sheet as a tool for determining book worth at a point in time.

Detailed Explanation:

Rationale for Correct Answer: In double-entry accounting, a debit increases assets and expenses while decreasing liabilities and equity. Debits are entries on the left side of an account.

Analysis of Incorrect Options:

A. Journal Entries – General record of transactions, not the specific effect.

C. Credit – Opposite effect: increases liabilities/equity, decreases assets/expenses.

D. None of all – Incorrect because “debit” is the recognized effect.

Key Concept: Debit rules in double-entry accounting.

Detailed Explanation:

Rationale for Correct Answer: The matching principle under GAAP requires that revenues and the corresponding expenses incurred to generate those revenues be recorded in the same period. Failing to do so misstates income and violates accrual accounting.

Analysis of Incorrect Options:

B. Revenue and Income statement – The income statement is a report, not an item to be matched.

C. Income statement and Long-term contracts – Long-term contracts follow special rules (percentage of completion, completed contract), not the general matching principle.

D. Capitalized expenses and Liabilities – Not part of the matching principle.

Key Concept: Matching Principle — recording related revenues and expenses in the same period.

Detailed Explanation:

Rationale for Correct Answer: Failing to write off obsolete inventory inflates reported inventory, overstating assets and potentially net income. Fraudsters may leave unusable goods on the books to make financial statements appear stronger.

Analysis of Incorrect Options:

A – An allowance for sales returns relates to revenue recognition, not inventory overstatement.

B – Relates to accounts receivable, not inventory.

C – Applying lower of cost or NRV reduces inventory to fair value, not overstates it.

Key Concept: Overstating assets through improper inventory valuation.

Detailed Explanation:

Rationale for Correct Answer: Fraudulent bid solicitation practices include issuing requests for proposals or bid documents that contain false statements or misleading conditions to favor a particular vendor.

Analysis of Incorrect Options:

B. Employment discussions – A conflict of interest, not bid solicitation fraud.

C. Withdraw low bids – A submission phase scheme.

D. Falsify bid log – A separate manipulation method, not solicitation criterion.

Key Concept: Fraudulent bid solicitation — using false or misleading statements to limit competition.

Detailed Explanation:

Rationale for Correct Answer: Departures from GAAP may be justified if compliance produces misleading results, if the transaction is immaterial, or if the costs exceed benefits. However, simply departing from GAAP because assets would be understated and liabilities overstated is not an acceptable reason ; GAAP requires faithful representation even if results are unfavorable.

Analysis of Incorrect Options:

A – Cost-benefit considerations are valid grounds in practice.

C – Materiality is a recognized exception to strict GAAP application.

D – Preventing misleading statements is a valid justification.

Key Concept: GAAP exceptions are limited to cost-benefit, immateriality, and preventing misleading reporting .

Why the correct answer is Human Intelligence

The ACFE Fraud Examiners Manual , in the section on fraud examination tools and intelligence gathering , discusses methods of obtaining information from individuals. One of the recognized methods is Human Intelligence (HUMINT) .

The Manual explains that human intelligence gathering involves:

Collecting information directly from people—often through conversation, elicitation, or interviews—sometimes while using a pretext to encourage the target to disclose information.

In this scenario:

Georgina poses as a customer (a pretext),

Contacts an employee of ERO Corp., and

Elicits sensitive information directly from that individual.

This aligns perfectly with the definition of human intelligence gathering —information obtained directly from human sources , often under false pretenses.

Why the other options are incorrect

B. Scavenging – Incorrect

The Manual describes scavenging as:

Obtaining information by searching for discarded documents or materials, such as in trash or recycling bins.

Georgina is not going through discarded materials; she is speaking directly with an employee.

C. Baiting – Incorrect

Baiting typically refers to:

Enticing someone with something of value to trick them into taking an action, often involving malware-infected media or fraudulent offers.

Georgina is not offering anything or luring the employee with incentives.

D. Open-source intelligence – Incorrect

Open-source intelligence (OSINT) refers to gathering information from:

Publicly available sources such as websites, publications, databases, or social media.

Georgina is not using public sources; she is actively eliciting confidential information from a person under false pretenses.

ACFE Manual References

The concepts used in this answer derive from the Fraud Examiners Manual (2020 International Edition), including:

Human intelligence and data collection techniques

Scavenging as an investigative method

Baiting schemes

Open-source intelligence descriptions

Detailed Explanation:

Rationale for Correct Answer: This statement is True . Fraud examiners often analyze purchases by vendor to detect schemes where a single vendor receives disproportionately favorable treatment. This may indicate kickbacks, conflicts of interest, or vendor collusion schemes.

Analysis of Incorrect Options:

B. False – Incorrect, as vendor analysis is a valid tool to identify such schemes.

Key Concept: Purchases by vendor analysis as a fraud detection method.

Detailed Explanation:

Rationale for Correct Answer: This is False . Accounting is based on the objectivity principle , requiring that records and financial information be supported by objective, verifiable evidence (e.g., invoices, contracts, receipts). Subjective evidence would undermine reliability.

Analysis of Incorrect Options:

A. True – Incorrect, as subjectivity is discouraged in accounting.

B. False – Correct, since accounting relies on objective documentation.

Key Concept: Objectivity principle in accounting.

Detailed Explanation:

Rationale for Correct Answer: When a tangible asset is stolen (removed from the books), a debit entry would be missing its corresponding credit, leaving the books out-of-balance . Fraudsters often conceal this imbalance by falsifying entries (e.g., creating fictitious expenses or adjusting asset accounts).

Analysis of Incorrect Options:

A. Journal Entries – Too general; not the condition of the books.

C. False debits – A concealment method, but not the direct result.

D. None of all – Incorrect because “out-of-balance” is accurate.

Key Concept: Concealment of asset theft and impact on accounting records.

Detailed Explanation:

Rationale for Correct Answer: An advance-fee scheme occurs when fraudsters request upfront payments (fees, commissions, or deposits) for services or opportunities that never materialize. The broker taking the fee without providing services is a classic case.

Analysis of Incorrect Options:

A. Bait and switch – Advertising one product/service but delivering another, not applicable here.

C. Split deposit scheme – Involves diversion of payroll or deposits, not loans.

D. Scavenger scheme – Charging for unnecessary services, often debt collection or foreclosure help, not applicable.

Key Concept: Advance-fee frauds as common financial scams.

Detailed Explanation:

Rationale for Correct Answer: Bid manipulation schemes occur in the procurement process and involve altering the bidding environment (e.g., extending deadlines, prematurely opening competitor bids, or changing submitted bids). Using low-quality materials is a post-award performance fraud , not bid manipulation.

Analysis of Incorrect Options:

A, C, D – All are recognized bid manipulation tactics.

Key Concept: Procurement fraud schemes – bid manipulation vs. contract performance fraud.

Jay committed a purchasing and receiving scheme because the theft occurred during the receiving process and was concealed by falsifying receiving documentation. In this type of inventory misappropriation, an employee involved in receiving goods can steal part of an incoming shipment and manipulate records so the shortage is not detected. The ACFE material identifies purchasing and receiving schemes, falsifying incoming shipments, and altered inventory records as inventory theft methods. This is not a false sale because no fictitious customer sale is created. It is not a register disbursement scheme because no refund, void, or cash register transaction is involved. It is also not skimming because no unrecorded cash receipt is stolen.

================

Detailed Explanation:

Rationale for Correct Answer: Forced reconciliation occurs when fraudsters alter the perpetual inventory records to conceal shrinkage. By adjusting the records, they make the books appear consistent with the physical count, hiding theft or loss.

Analysis of Incorrect Options:

A – Too vague; does not specify perpetual records.

B – Incorrect; inventory is concealed, not shrinkage records.

D – Write-offs are a different concealment method.

Key Concept: Forced reconciliations as a concealment method in inventory fraud.

Detailed Explanation:

Rationale for Correct Answer: The statement of cash flows has three standard sections:

Cash flows from operating activities

Cash flows from investing activities

Cash flows from financing activities Thus, option B is correct.

Analysis of Incorrect Options:

A – No section called “purchasing activities”; such outflows fall under investing or operating.

C – No section called “earnings activities”; related cash flows are operating.

D – “Strategic activities” is not a formal category in GAAP or IFRS.

Key Concept: Structure of the statement of cash flows.

The correct answer is D. Front businesses are attractive for money laundering because they allow illegal proceeds to be mixed with legitimate revenue, especially where cash sales are common and expenses are variable. Bars, restaurants, nightclubs, and similar businesses can make it difficult to reconcile actual customer activity with reported revenue and operating costs. This makes it easier to overstate revenues, inflate expenses, or insert illicit funds into the business records. Option A is inaccurate because money launderers might pay taxes on falsely reported income to make the funds appear legitimate. Option B is incorrect because a front may show high income despite low visible customer activity. Option C is too narrow and inaccurate because these businesses often involve variable purchases and pricing.

================

The ACFE Manual treats Cash Larceny under Asset Misappropriation: Cash Receipts , and specifically identifies “Theft of Cash from the Register” as a cash larceny scheme.

Cash larceny differs from skimming because in a larceny scheme, the cash has already been recorded on the books before it is stolen. By contrast, skimming occurs before the cash is recorded. The Manual separately covers Skimming and includes schemes such as understated sales , showing that skimming involves stealing cash receipts without fully recording the transaction.

Why C is correct

In Option C, Scott performs a No-Sale transaction, opens the drawer, and removes cash directly from the register. This is the clearest example of theft of cash from the register , which the Manual classifies as cash larceny .

Why the other options are incorrect

A. Laura pretends to record a sale, steals the cash, and gives the customer the merchandise without recording the sale.

This is skimming , not cash larceny, because the sale is never recorded. The Manual treats unrecorded sales thefts under Skimming .

B. Olive records a $400 sale on a $500 purchase and steals the extra $100.

This is also skimming , specifically an understated sales type of scheme, because the full amount of the sale is not recorded. The difference is diverted before complete recording.

D. Michael records a fictitious return and takes $50 from the register.

This is not cash larceny. It is a register disbursement scheme , specifically a fictitious refund , which the Manual covers under Fraudulent Disbursements .

Conclusion

Because Option C involves taking cash directly from the register after access is obtained through a No-Sale transaction, it is the best example of cash larceny under the ACFE Manual.

References

ACFE Fraud Examiners Manual, 2020 International Edition

Asset Misappropriation: Cash Receipts — Cash Larceny / Theft of Cash from the Register

Asset Misappropriation: Cash Receipts — Skimming / Understated Sales

Fraudulent Disbursements — Register Disbursement Schemes / Fictitious Refunds

Detailed Explanation:

Rationale for Correct Answer: One of the key red flags of fictitious revenues is sales to related parties, shell companies, or entities with unknown substance and ownership . Such transactions are often used to inflate revenue artificially.

Analysis of Incorrect Options:

A. Slow growth/unusual profitability – Incorrect, fictitious revenue often results in rapid or unrealistic growth.

B. Growth in days’ purchases in receivables – Misstated phrase; correct indicator would be growth in days’ sales in receivables .

D. Surge in purchases – Relates more to inventory fraud than fictitious revenues.

Key Concept: Red flags of fictitious revenue — questionable counterparties and unrealistic sales growth.

Rationale for Correct Answer: Sampling is a fraud examination technique that enables investigators to review a subset of documents rather than all records. Properly designed sampling provides reasonable assurance and allows focus on anomalies or red flags.

Key Concept: Sampling in fraud examination and audit testing.

Detailed Explanation:

Rationale for Correct Answer: This scheme is a business email compromise (BEC) , also known as CEO fraud. Fraudsters impersonate high-ranking executives to trick employees into transferring money or disclosing confidential information.

Analysis of Incorrect Options:

A. Reverse social engineering – Involves the fraudster posing as a helper and then exploiting the victim, not impersonating executives.

B. Executive email attack – A generic term, but the ACFE recognizes BEC as the precise classification.

C. Electronic piggybacking – Refers to unauthorized access through another user’s session, not impersonation.

Key Concept: Social engineering and cyber-enabled fraud – BEC schemes.

The best practice is to identify employees leaving the company who have downloaded an unusually large number of data files. Departing employees present a heightened risk of proprietary information theft because they might take customer lists, pricing data, product designs, research, formulas, source code, or strategic plans for use with a competitor or new venture. Monitoring abnormal downloading activity is a targeted detective control that focuses on actual access and extraction of sensitive data. Options A and C rely on external competitor activity and might reveal only indirect indicators after damage occurs. Option B is too broad because permitted access alone does not show theft. The ACFE material emphasizes insider threats, safeguarding proprietary information, and monitoring unusual access or transfer of sensitive data.

================

Kara’s conduct is best classified as a consumption tax scheme because she is underreporting the taxable value of sales transactions. Consumption taxes include sales tax, value-added tax, and excise taxes collected from the sale of goods or services. The ACFE material explains that fraudsters evade consumption taxes by omitting transactions or deflating transaction values in tax records. Here, Kara does not merely hide wealth or claim false deductions; she misstates the value of goods sold so the tax authority calculates less tax than is owed. Wealth tax evasion concerns assets or net worth, while tax credit and deduction schemes involve improper reductions of tax liability through credits or expenses.

================

Detailed Explanation:

Rationale for Correct Answer: Employees involved in bribery or corruption schemes often exhibit lifestyle red flags such as gambling habits, drug/alcohol addiction, or extravagant spending . These behaviors create financial pressures that may motivate or result from corrupt activity.

Analysis of Incorrect Options:

A, B, C individually – Each is a red flag, but the most accurate answer is all of the above .

Key Concept: Behavioral red flags in corruption cases.

Detailed Explanation:

Rationale for Correct Answer: The phases of the bidding process include:

Presolicitation (need recognition/specification stage),

Solicitation (inviting bids),

Submission (vendors submit bids). There is no standard phase called Postsolicitation .

Analysis of Incorrect Options:

A. Presolicitation – Valid phase.

C. Solicitation – Valid phase.

D. Submission – Valid phase.

B. Postsolicitation – Not recognized as a formal bidding stage.

Key Concept: Bidding process phases — presolicitation, solicitation, submission.

The correct answer is C. Cash larceny involves stealing cash after it has been recorded, so detection often depends on tracing recorded cash activity to source documents and bank deposits. Reviewing, analyzing, and tracing journal entries made to cash accounts helps identify unsupported adjustments, unusual entries, concealment entries, or discrepancies between accounting records and actual cash activity. Option A is weak because the person responsible for cash receipts should not perform independent comparisons; segregation of duties is important. Option B is incorrect because cash receipt listings should be prepared and controlled before they reach accounts receivable personnel. Option D is also improper because cashiers should not independently reconcile their own register activity. Independent review is essential for detecting cash larceny.

================

The correct answer is A. Financial statement disclosures are required when information is necessary for users to understand the entity’s financial position and risks. Potential losses from ongoing litigation generally must be disclosed when the likelihood of loss is reasonably possible, even if the amount is not yet certain. Option B is incorrect because significant subsequent events after the reporting period might require disclosure. Option C is incorrect because changes in accounting principles must generally be disclosed to preserve comparability and transparency. Option D is too narrow because related-party transactions require disclosure when material or relevant, not only when they financially harm stakeholders. The ACFE financial statement fraud materials identify improper disclosures, concealed liabilities, subsequent events, and related-party transactions as important fraud risk areas.

Detailed Explanation:

Rationale for Correct Answer: Under accrual-basis accounting , revenues are generally recognized when earned (often upon delivery of goods or services), not necessarily when cash is received. Similarly, expenses are recorded when incurred, not when paid. This provides a more accurate picture of performance and financial position.

Analysis of Incorrect Options:

A – This describes cash-basis accounting , not accrual-basis.

B – Accrual accounting is more complex, not simpler.

C – Focuses on earned revenues and incurred expenses, not immediate cash flow.

Key Concept: Accrual accounting matches revenues with expenses in the period they occur.

Detailed Explanation:

Rationale for Correct Answer: Illegal pyramid schemes rely on continual recruitment of new members. Early participants are paid from the investments of later recruits, meaning later participants almost always lose money. This matches option B.

Analysis of Incorrect Options:

A – Not true; pyramid-shaped hierarchies exist in legitimate organizations.

C – The goal isn’t product sales but rather recruitment; products, if present, are often incidental.

D – Incorrect because B is true.

Key Concept: Ponzi and pyramid schemes – payment to early investors with later investors’ funds.

Detailed Explanation:

Rationale for Correct Answer: Loan fraud often involves suspicious or unusual documentation patterns. A change order submitted at the same time as a draw request is a red flag, because it suggests manipulation of project costs to justify larger draws from lenders.

Analysis of Incorrect Options:

A. Missing documents – Could indicate sloppy recordkeeping, not necessarily fraud.

B. Low turnover – Not a fraud indicator.

D. Increasing change orders – Could be suspicious, but not as strong a fraud red flag as simultaneous change order and draw request.

Key Concept: Loan fraud indicators .

Detailed Explanation:

Rationale for Correct Answer: Per generally accepted accounting principles, changes in accounting principles must be disclosed in the financial statements to ensure comparability and transparency. The ACFE notes that disclosures are critical to prevent misleading users of financial statements.

Analysis of Incorrect Options:

A. Subsequent events – Material subsequent events must be disclosed; this statement is false.

B. Contingent losses – Only probable and reasonably estimable losses must be disclosed. If unlikely, no disclosure is required.

C. All information – Only material information requires disclosure.

Key Concept: Disclosure requirements in financial reporting .

Detailed Explanation:

Rationale for Correct Answer: This statement is True . ACFE research shows that external audits, while valuable, are generally not effective at detecting fraud quickly . Organizations with only external audits often experience higher median losses and longer-lasting schemes compared to those with stronger internal controls and fraud-specific detection mechanisms. External audits are not designed to catch fraud; their focus is on financial statement accuracy.

Key Concept: Effectiveness of External Audits in fraud detection versus prevention and internal controls.

The required element is that the investment is in a common enterprise. The ACFE material explains that the investment-contract analysis parallels the Howey test, under which all required elements must exist: an investment of money or other assets, a common enterprise, an expectation of profit, and profits derived primarily from the efforts of others. Option A is incorrect because profits must come from the efforts of people other than the investor, not solely from the investor’s own management efforts. Option B is too narrow because the investment may involve money or another asset. Option C is incorrect because notarization is not an element of an investment contract. Therefore, the common-enterprise requirement makes option D correct.

================

Option A describes a card skimming or shimming scheme. Skimming involves using a hidden device to capture payment card information, often from a magnetic stripe, while shimming commonly involves a device inserted into a card reader to capture chip-card data. A small camera can also be used to record PIN entry. Automated teller machines and point-of-sale terminals are common targets because customers insert or swipe cards and enter authentication data. Option B involves theft or sale of card information but not skimming or shimming through a reader. Option C describes physical card theft or retention. Option D does not clearly show capture of card credentials. The ACFE material discusses ATM fraud, including skimming and shimming, as financial institution fraud risks.

================

Detailed Explanation:

Rationale for Correct Answer: Card skimming/shimming occurs when a fraudster captures payment card data with a hidden device. In this case, the employee secretly scans the customer’s card with a small device — a textbook example of skimming.

Analysis of Incorrect Options:

A. Server keeps the card – This is theft of the card, not skimming.

B. Imitation website – This is phishing , not skimming.

D. None of the above – Incorrect since option C is correct.

Key Concept: Payment card fraud — skimming/shimming devices.

Detailed Explanation:

Rationale for Correct Answer: Conflict of interest schemes occur when an employee, manager, or agent has an undisclosed personal interest in a transaction that is adverse to their employer. The Fraud Examiners Manual (2020) notes that one of the most common forms is when an employee has a hidden ownership or financial interest in a vendor that does business with the company. This compromises objectivity and creates self-dealing risks.

Analysis of Incorrect Options:

B. Salesman interest – Too narrow and not representative of the standard conflict scheme definition.

C. Purchaser interest – Purchasers are often involved, but the broader definition encompasses all employees.

D. Dealer interest – “Dealership interest” is not a recognized ACFE fraud scheme classification.

Key Concept: Conflict of Interest scheme under Corruption .

Detailed Explanation:

Rationale for Correct Answer: When cash is stolen, the accounting equation (Assets = Liabilities + Equity) must still balance. Fraudsters may increase a liability (e.g., record fictitious payables) to cover the missing cash. This is a common concealment method.

Analysis of Incorrect Options:

A. Increasing another asset – Would require inflating assets, but this usually affects financial statement fraud, not cash theft concealment.

B. Increasing owners’ equity – Not logical without legitimate earnings or capital contributions.

D. Creating fictitious revenue – Used in financial statement fraud, not in balancing theft concealment.

Key Concept: Concealment methods for asset misappropriation — offsetting missing cash with fictitious liabilities .

The correct answer is A. Restricting inventory access to authorized personnel is a basic preventive control against theft of inventory and other assets. Limiting physical access reduces opportunities for employees or outsiders to remove goods without authorization. Option B is weak because concentrating receiving and distribution duties in one person reduces segregation of duties and increases concealment risk. Option C is also improper because purchasing personnel should not independently perform physical inventory counts; independent counts help detect theft and manipulation. Option D is incorrect because documents should be prenumbered and controlled, not nonconsecutive, so missing or altered forms can be detected. The ACFE materials discuss inventory theft prevention through access controls, proper documentation, segregation of duties, and independent inventory counts.

================

Comprehensive and Detailed Explanation

Why the correct answer is: False accounting entry

According to the ACFE Fraud Examiners Manual – Financial Transactions and Fraud Schemes , under Financial Institution Fraud → Types of Embezzlement Schemes , the Manual provides explicit descriptions of relevant banking fraud schemes, including false accounting entries .

The Manual lists False Accounting Entries as a form of embezzlement in which an employee manipulates general ledger accounts or other accounting records to conceal a theft or unauthorized activity :

“False Accounting Entries” are specifically categorized as a type of embezzlement scheme used by dishonest bank employees to hide misappropriated funds.

In this question, the accountant:

Adjusted the bank’s general ledger

With the intent to conceal the theft of customer funds

This aligns exactly with the ACFE definition of false accounting entries , which involve altering legitimate financial records to hide fraudulent actions.

Therefore, the best ACFE-defined description of the scheme is:

→ False accounting entry (Option B)

Why the other options are incorrect

A. Unauthorized withdrawal

The Manual separately defines Unauthorized Withdrawals as a type of embezzlement in which a bank employee directly removes funds from accounts without permission:

“Unauthorized Withdrawals” are listed as a distinct embezzlement scheme involving unapproved removal of customer funds.

However, in this scenario, the defining act is manipulating ledger records , not simply withdrawing funds. The nature of the concealment technique makes false accounting entry the correct classification.

C. Moving money from inactive accounts

The Manual defines:

“Moving Money from Customers’ Dormant or Inactive Accounts” as a scheme in which employees transfer funds from inactive accounts to themselves.

In this question, the stolen funds come from an active customer account , so this option does not apply.

D. Unauthorized disbursement of funds

The Manual includes:

“Unauthorized Disbursement of Funds to Outsiders” as another type of financial institution fraud.

This refers to payments made to external parties without authorization—not to ledger manipulation to hide theft.

Again, the defining characteristic in the scenario is the use of false ledger entries , which makes Option B the most accurate according to ACFE terminology.

Detailed Explanation:

Rationale for Correct Answer: Cash larceny involves stealing cash after it has been recorded . Mark stole $50 directly from the register after recording sales, which is a cash larceny scheme.

Analysis of Incorrect Options:

A. Paul’s scheme – This is skimming (off-book theft), not larceny.

B. Emily’s scheme – This is a lapping scheme (concealing theft of receivables), not pure larceny.

C. Sarah/Jenna – This is an overstated refund scheme (fraudulent disbursement), not larceny.

Key Concept: Cash larceny vs. skimming vs. fraudulent disbursements.

Detailed Explanation:

Rationale for Correct Answer: This is a tech-support scam , in which fraudsters trick victims into believing their computers are infected and then charge fees for unnecessary or fake repairs. The scam often targets elderly victims.

Analysis of Incorrect Options:

A. Pharming – Redirects users to fake websites, not fake support calls.

B. Bait and switch – Advertising deception, not fraudulent computer support.

D. Smishing – Fraud via SMS text messages, not on-screen computer popups.

Key Concept: Consumer fraud schemes — tech-support scams.

The correct answer is C. In a fictitious refund scheme, an employee records a refund transaction even though no customer actually returned merchandise. The employee then removes cash from the register as if it had been paid to a customer. Because the register records a refund, the register log shows that cash should have decreased. When the employee steals the same amount of cash, the cash on hand can still match the register log, making the theft harder to detect through a simple register reconciliation. Option A is incorrect because fictitious refunds can cause inventory records to show returned goods that do not exist, which tends to overstate rather than understate inventory. Options B and D are incorrect because cash is removed and no real merchandise is returned.

================

Detailed Explanation:

Rationale for Correct Answer: This is unbundling , where services that should be billed under a single comprehensive code are split into multiple components to inflate reimbursement.

Analysis of Incorrect Options:

A. Fictitious services – Charging for services not performed.

B. False diagnosis – Fabricating diagnoses to justify billing.

C. Upcoding – Billing for more expensive services than provided.

Key Concept: Health care billing fraud — unbundling .

The correct answer is D because cash larceny involves stealing cash after it has already been recorded in the organization’s accounting records. Julia processes transactions as usual, meaning the sales and cash should already be reflected in the register records, and then she removes $100. Option A is closer to skimming because the payment is stolen before being reported. Option B is also skimming because Petra records only part of the sale and steals the unrecorded portion. Option C involves deleting the register log, which suggests an attempt to prevent the transactions from remaining recorded. The ACFE materials distinguish cash larceny from skimming based on whether the stolen funds were recorded before theft.

================

Detailed Explanation:

Rationale for Correct Answer: The accounting framework a company must follow depends on the jurisdiction in which it is publicly traded . For example, U.S.-listed companies must follow GAAP, while companies in the EU must use IFRS. Some countries allow or require IFRS, others mandate local GAAP.

Analysis of Incorrect Options:

B – Incorrect; some jurisdictions have their own national GAAP not tied to U.S. GAAP or IFRS.

C – Incorrect; international operations do not mandate IFRS—jurisdictional rules apply.

D – Incorrect; U.S. GAAP is rules-based, IFRS is principles-based (the reverse of what’s stated).

Key Concept: Financial reporting standards are jurisdiction-driven.

Detailed Explanation:

Rationale for Correct Answer: The ACFE emphasizes four cornerstone internal controls to prevent inventory fraud:

Proper documentation (accurate, prenumbered records),

Segregation of duties (custody, recordkeeping, and authorization separated),

Independent checks (reconciliations and audits), and

Physical safeguards (locks, cameras, restricted access).

Analysis of Incorrect Options:

B. Inventory control – Too general; physical safeguards are the key preventive measure.

C. Physical padding – Not a recognized control.

D. Prenumbered affiliations – Misworded; prenumbered documents are part of proper documentation.

Key Concept: Internal control framework for preventing inventory fraud.

Rationale for Correct Answer: Fraud investigations can be highly costly to organizations. The process often involves external forensic examiners, legal proceedings, employee time, and disruption of operations. While necessary, investigations represent a significant resource commitment in terms of both time and financial cost.

Key Concept: Fraud Investigation Costs — deterrence vs. response strategies.

Detailed Explanation:

Rationale for Correct Answer: By definition, conflict of interest fraud arises when an employee has a hidden financial or ownership interest in another entity with which the employer does business. The fraudster’s loyalty is divided because their interest lies outside of their primary employer.

Analysis of Incorrect Options:

B. False – Incorrect because the essence of conflict of interest is precisely that the fraudster’s interest lies outside their company.

Key Concept: Conflict of Interest (divided loyalty).

John is engaging in tax evasion because he intentionally adds false deductions to reduce the amount of tax he owes. The ACFE material distinguishes tax evasion from tax avoidance. Tax avoidance involves legal planning, such as legitimate deductions, credits, or shelters. Tax evasion involves fraudulent actions taken to avoid reporting or paying taxes. Fake deductions are not legitimate tax planning because they misrepresent facts on the return. This conduct can also be described as falsifying tax deductions, a specific type of tax evasion scheme. Tax sheltering is not the best answer because the facts do not describe a lawful or abusive shelter arrangement. Tax misappropriation is not the correct classification. Because John knowingly uses false deductions, option B is correct.

================

Detailed Explanation:

Rationale for Correct Answer: Studies by the ACFE consistently show that inventory and equipment are the most commonly misappropriated noncash assets. They are highly liquid, valuable, and often difficult to monitor without strong controls.

Analysis of Incorrect Options:

A. Interest & Collusion – Not physical assets.

C. Inventory & Purchase – Purchase is a process, not a physical asset.

D. Sales & Equipment – Sales are transactions, not assets.

Key Concept: Noncash asset misappropriation — inventory and equipment are the primary targets.

The correct answer is C. A suitability violation occurs when a broker-dealer recommends an investment or investment strategy without having a reasonable basis to believe it is suitable for the client. Suitability requires the broker-dealer to understand the customer’s financial profile, investment objectives, risk tolerance, liquidity needs, time horizon, and related circumstances before giving advice. Advising a client on a “promising” investment without first discussing the customer’s investment strategy fails this professional duty. Option A is not necessarily improper if the investment aligns with the client’s objectives and risk appetite. Option B reflects appropriate caution. Option D might raise a conflict-of-interest concern, but the facts state the investment aligns with the client’s objectives, so it is not the best suitability violation.

================

Detailed Explanation:

Rationale for Correct Answer: Corporate spies do use social engineering, but their primary methods include surveillance, infiltration (e.g., posing as employees), and technical monitoring. The statement in option C is false because searching desks/workstations is a tactic, but it is not the primary method.

Analysis of Incorrect Options:

A – True; fake badges are a common infiltration tactic.

B – True; low-level jobs provide physical access.

D – True; technical surveillance is a recognized method.

Key Concept: Methods of corporate espionage.

Detailed Explanation:

Rationale for Correct Answer: Trend analysis is one of the most effective ways to detect omitted credits. By analyzing patterns in revenue, expenses, or balances over time, discrepancies such as missing credits become apparent. Forensic examiners rely on comparative financial analysis to identify anomalies that suggest manipulation.

Analysis of Incorrect Options:

A. Forced Balance – Describes concealment, not detection.

C. Expense account – Accounts can be manipulated but are not detection methods.

D. None of all – Incorrect, since trend analysis is correct.

Key Concept: Analytical procedures (trend analysis) in fraud detection.

Detailed Explanation:

Rationale for Correct Answer: Fraudsters often use write-offs to remove stolen inventory or assets from the books. By recording items as obsolete, damaged, or uncollectible, they eliminate them from records, concealing theft.

Analysis of Incorrect Options:

A. Altered – Too broad, not a standard concealment term.

B. Perpetual – A system, not a concealment method.

C. False shipping slip – Used to divert assets, not write them off.

Key Concept: Write-offs as a method of concealing noncash asset theft.

Detailed Explanation:

Rationale for Correct Answer: One form of bid-rigging occurs when colluding vendors agree that one will submit a low bid and later withdraw it , allowing another conspirator to win the contract. This practice is sometimes referred to as “ complementary bidding ” or the withdrawal of low bids .

Analysis of Incorrect Options:

A. Bribery receipt – Refers to corrupt payments, not collusion.

B. Bid solicitation – The process of inviting bids, not collusion.

D. Contract acceptance – A legitimate procurement step, not fraud.

Key Concept: Bid-rigging through collusion — vendors withdrawing low bids to favor co-conspirators.

Detailed Explanation:

Rationale for Correct Answer: Human intelligence (HUMINT) involves gathering information directly from people, often through deception, elicitation, or impersonation. Georgina’s posing as a customer to obtain confidential details fits this method.

Analysis of Incorrect Options:

B. Baiting – A social engineering tactic using false promises (e.g., malware disguised as freebies).

C. Scavenging – Collecting discarded information (e.g., dumpster diving).

D. Open-source intelligence – Gathering data from public records, news, or websites, not through elicitation.

Key Concept: Methods of competitive intelligence and social engineering.

Detailed Explanation:

Rationale for Correct Answer: The described scheme is lapping , a classic accounts receivable fraud. It involves covering up stolen payments by applying subsequent receipts from other customers to hide the shortage.

Analysis of Incorrect Options:

A. Padding – Usually refers to overstating expense reimbursements, not AR fraud.

C. Substitution – Refers to replacing missing assets with others, not AR manipulation.

D. Daisy chain – Not a recognized fraud concealment method in this context.

Key Concept: Skimming concealment techniques – lapping of receivables.

Detailed Explanation:

Rationale for Correct Answer: This statement is False . Shrinkage is a general term for unaccounted-for inventory losses, and it can indeed result from theft, errors, damage, or waste . To say shrinkage does not result from theft is misleading because theft is one of its primary causes.

Analysis of Incorrect Options:

A. True – Incorrect, as theft is often a major contributor to shrinkage.

B. False – Correct, since shrinkage can include theft.

Key Concept: Shrinkage includes theft as a cause of unexplained inventory loss.

Detailed Explanation:

Rationale for Correct Answer: Cash larceny is the theft of cash after it has been recorded in the company’s books. Skimming, in contrast, is theft of cash before recording .

Analysis of Incorrect Options:

B & D – Both describe forms of skimming (unrecorded or understated sales).

C – Kickback scheme is corruption, not cash theft.

Key Concept: Distinguishing cash larceny (on-book theft) from skimming (off-book theft).

Detailed Explanation:

Rationale for Correct Answer: Administrative security controls involve policies, procedures, and practices designed to manage the overall security environment—such as awareness training, audits, data classification, and enforcement of policies. These controls focus on governance rather than direct system configuration.

Analysis of Incorrect Options:

A. Technical security controls – These are automated safeguards (e.g., firewalls, encryption).

B. Logical access controls – Restrict access to systems through passwords, tokens, or biometrics.

D. Physical access controls – Restrict physical access (e.g., locks, guards, CCTV).

Key Concept: Layers of security controls (administrative, technical, physical).

The correct answer is B. Register disbursement schemes usually involve false refunds or false voids that cause cash to be removed from the register while the records appear to justify the disbursement. An unusually high number of refunds on the register log is a red flag because it might indicate that employees are creating fictitious refund transactions to conceal cash theft. Option A is not suspicious by itself because no gaps in transaction numbers suggests record continuity. Option C is less suspicious because supervisory approval exists, although approvals should still be reviewed. Option D is generally a positive control because supporting documents should exist for voided transactions. The ACFE materials identify refund and void activity as key areas for detecting register disbursement schemes.

================

Detailed Explanation:

Rationale for Correct Answer: Expense reimbursement schemes are a common type of fraudulent disbursement. Requiring employees to submit receipts electronically improves controls by ensuring legibility, reducing the chance of altered or duplicate submissions, and creating a digital audit trail. This measure is recommended in the Fraud Examiners Manual as part of strengthening internal controls over reimbursement processes.

Analysis of Incorrect Option:

B. False – Incorrect because electronic receipt submission is indeed a recognized anti-fraud measure.

Key Concept: Fraudulent disbursements prevention through documentation controls.

The correct answer is C. Change order abuse occurs after a contract has been awarded, when a contractor improperly increases the price, expands the work, or modifies contract terms through change orders. A corrupt contractor might submit a low bid to win the award and later recover profits through unnecessary or inflated change orders. This defeats the benefit of competitive bidding because the procuring entity no longer receives the price or terms that justified the original award. Option A is incorrect because the scheme usually increases, not decreases, the amount paid. Option B is too narrow because change order abuse can occur in competitive contracts. Option D is incorrect because the scheme often involves collusion between contractor and procurement personnel, not necessarily several contractors.

================

Detailed Explanation:

Rationale for Correct Answer: The journal is the core of the bookkeeping system because it provides a chronological record of all business transactions. Each transaction is recorded as a journal entry before posting to the ledger.

Analysis of Incorrect Options:

A. Asset – A resource, not a recording system.

B. Liability – An obligation, not the recording medium.

C. Checkbook – Tracks cash disbursements, but not all transactions.

Key Concept: Journal as the primary book of original entry.

Detailed Explanation:

Rationale for Correct Answer: Horizontal analysis evaluates financial statement items over multiple periods, highlighting percentage changes from one period to another . This helps detect unusual trends or anomalies.

Analysis of Incorrect Options:

A – Describes vertical analysis (common-size statements).

B – Describes ratio analysis .

D – Describes benchmarking/comparative analysis across companies.

Key Concept: Analytical procedures – horizontal vs. vertical and ratio analysis.

The correct answer is D. Smishing is phishing conducted through SMS or text messages. Margarette sends a fraudulent text that appears to come from Arlo’s doctor’s office and includes a payment link to a fake portal she controls. The purpose is to trick Arlo into entering payment card information, which she then steals. Quishing uses QR codes to direct victims to fraudulent sites. Pharming redirects users from legitimate websites to fraudulent ones, often through technical manipulation of domain name resolution or device settings. Vishing uses voice calls or voicemail to obtain sensitive information. Because the fraudulent communication is a text message and the goal is to steal payment information, the scheme is smishing.

The correct answer is C. New account fraud often involves opening accounts with false, stolen, or synthetic identities. The most effective preventive measure listed is to verify the customer’s identity through reliable third-party credit reporting agencies and customer identification services. These sources can help confirm identity details, detect inconsistencies, identify suspicious histories, and reduce reliance on documents that might be forged. Employer recommendation letters are not standard or reliable identity controls. Small cash deposits are not automatically suspicious and might be normal for many customers. Sending communications to all previous residences is inefficient and unlikely to be the strongest verification method. The ACFE financial institution fraud materials identify new account fraud schemes and emphasize customer identification controls as a prevention method.

================

The correct answer is B. Corrupt payments are not limited to direct cash bribes; they may be disguised as gifts, meals, travel, entertainment, loans, discounts, consulting fees, or other benefits. Paying a recipient’s travel and entertainment expenses with a credit card provides something of value to the recipient and can be used to influence official or business decision-making. Option A is not the best answer because renting property from the recipient at below-market rent benefits the payer, not the recipient. Option C similarly benefits the payer if the recipient overpays. Option D is not corrupt as stated because the loan is legitimate and has a high interest rate, not favorable terms. The professional focus is whether value is transferred to influence conduct.

================

The correct answer is B. Cash register disbursement schemes commonly involve false voids, false refunds, or unauthorized register activity. Secure access codes help establish individual accountability and prevent one employee from processing fraudulent transactions under another employee’s credentials. Training employees not to share access codes strengthens this control. Option A is weak because announced cash counts reduce deterrence; surprise counts are more effective. Option C does not provide meaningful control because another non-supervising employee might not detect or challenge improper activity. Option D is inappropriate because employees should not independently reconcile their own register activity; independent review is necessary. The professional control principle is to restrict access, preserve accountability, and require supervisory or independent review of register disbursements.

================

Detailed Explanation:

Rationale for Correct Answer: This statement is True . Asset misappropriations reduce the organization’s assets. In double-entry accounting, a decrease in assets without a corresponding decrease in liabilities results in a reduction of owner’s equity. Therefore, fraud not only depletes assets but also indirectly reduces equity.

Analysis of Incorrect Options:

B. False – Incorrect because asset theft clearly reduces net assets and thereby equity.

Key Concept: Impact of Asset Misappropriation on the accounting equation: Assets = Liabilities + Equity.

Detailed Explanation:

Rationale for Correct Answer: Fair value is defined as the price an asset would fetch in an orderly transaction between willing market participants. It reflects current market conditions, not historical cost.

Analysis of Incorrect Options:

A. Absolute value – Mathematical concept, not accounting.

C. Cost value – Historical cost, not current market.

D. Material value – Not a recognized accounting term.

Key Concept: Fair Value Measurement under GAAP/IFRS.

The correct answer is A. The facts indicate a possible nonconforming goods scheme, in which a vendor provides goods that fail to meet contract specifications while charging as though compliant goods were supplied. The most effective detection measure before customer complaints would have been an inspection of the glass upon receipt, including its packaging, appearance, description, and conformity with the contract. This control helps identify substitutions, inferior materials, counterfeit goods, or products of lower quality than promised. Option B is indirect and less reliable than inspecting the goods. Option C relates to change order abuse rather than quality substitution. Option D focuses on the vendor’s internal cost data and would not directly confirm whether the delivered glass met CTR’s contract specifications.

Detailed Explanation:

Rationale for Correct Answer: Journal entries record business activity, and credits increase equity (while debits reduce equity). Thus, journal entries and credits are the mechanisms that directly affect the equity account.

Analysis of Incorrect Options:

A. Journal Entries & Debit – Debits decrease equity, not increase.

B. Journal Entries & Transactions – Transactions are general; credits specify the effect.

D. None of all – Incorrect since option C is correct.

Key Concept: Equity changes recorded through journal entries and credits.

Detailed Explanation:

Rationale for Correct Answer: This scheme is known as a Turnaround Sale or Flip . The employee secretly purchases an asset their employer needs and then resells it to the employer at a markup, thereby profiting at the employer’s expense.

Analysis of Incorrect Options:

A. Conflict of interest in sale – Too general; does not describe the flipping mechanism.

C. Unauthorized sale – Not an ACFE fraud category in this context.

D. Written sale of unique assets – Not a recognized scheme.

Key Concept: Conflict of Interest scheme — Turnaround Sales/Flips .

Detailed Explanation:

Rationale for Correct Answer: Donald Cressey’s fraud triangle identifies three conditions that lead to occupational fraud: (1) Pressure (financial or other), (2) Opportunity (ability to commit without detection), and (3) Rationalization (justification by the perpetrator to make the act acceptable in their own mind). Thus, the third leg is Rationalization .

Analysis of Incorrect Options:

A. Violation – Not part of the fraud triangle.

B. Isolation – Not a recognized component of the model.

D. None of the above – Incorrect because rationalization is explicitly the correct answer.

Key Concept: Fraud Triangle — Opportunity, Pressure, Rationalization .

Detailed Explanation:

Rationale for Correct Answer: Properly shredded documents using a cross-cut shredder are very difficult to reconstruct, making them not a common medium for information leaks. By contrast, shareholder reports, executive speeches, and workstation displays often contain sensitive data that can be exploited by competitors or fraudsters.

Analysis of Incorrect Options:

A – Shareholder reports can reveal strategy and financial vulnerabilities.

C – Executive speeches sometimes unintentionally disclose sensitive plans.

D – Information left visible at workstations is a known security risk.

Key Concept: Protection of proprietary information against espionage and fraud.

Card-not-present fraud occurs when payment card information is used without the physical card being presented, commonly in online transactions. Comparing IP addresses for internet orders with those used in previous orders by the same customer is the most effective detection measure listed because it helps identify unusual access patterns. If an order is placed from an unfamiliar or suspicious IP address inconsistent with the customer’s historical activity, it can indicate unauthorized use of stolen card data. Small orders from new accounts might be suspicious but are less reliable alone. Declining rush shipping is not a typical fraud indicator, and purchasing several unique items is not necessarily suspicious. The ACFE materials identify payment card fraud and card-not-present transactions as key payment fraud risks.

================

The correct answer is B. A fictitious payee scheme occurs when an insurance insider directs payments to a fabricated or unauthorized recipient and then misappropriates the funds. In this scenario, the agent changes the beneficiary to a made-up person and authorizes distribution of policy proceeds, enabling the agent to abscond with the money. The fraudulent feature is the creation or use of a false payee, not a false death. A false information scheme is broader and does not specifically describe the payment diversion. A fictitious death scheme would involve falsely claiming that the insured died. “False heir scheme” is not the best ACFE category. The ACFE insurance fraud materials identify fictitious payees as an agent or broker fraud method.

Detailed Explanation:

Rationale for Correct Answer: This description reflects asymmetrical accounting , which is based on the conservatism principle. Possible losses are recorded, but potential gains are omitted until realized. This creates an asymmetry in recognizing losses versus gains.

Analysis of Incorrect Options:

B. Symmetrical accounting – Would recognize gains and losses equally, contrary to conservatism.

C. Playing accounting – Fraud scheme, not a principle.

D. Bearing accounting – Not a recognized concept.

Key Concept: Asymmetry in accounting — conservative recognition of losses versus gains.

The correct answer is A, money laundering. The ACFE material defines money laundering as the process by which criminals disguise illicit assets as legitimate assets that they have a right to possess and spend. It involves concealing the existence, nature, source, control, beneficial ownership, location, or disposition of property derived from criminal activity. Cross-border financing may be a feature of laundering, but it is not the overall process described. Asset trafficking is not the best ACFE classification for disguising criminal proceeds. Concealment of assets may occur in fraud or bankruptcy matters, but it is broader and does not specifically capture the laundering of illegal proceeds into apparently legitimate funds.

================