CFE Section 2 isn't about memorizing legal codes. It's about applying a sequence of investigative judgments where one wrong step, like asking the wrong question in an interview, can invalidate everything that follows.
CFE Section 2: Fraud Investigations and Legal Issues tests your ability to plan and conduct a fraud examination, from initial predication to testifying in court. It covers interviewing, evidence collection, legal systems, and reporting, making up 25% of the total CFE exam.
Key facts
- Section Name
- Fraud Investigations and Legal Issues
- Exam Weight
- 25% of your total CFE score
- Question Count
- Approximately 125 multiple-choice questions
- Time Allotted
- 120 minutes (approximately 58 seconds per question)
- Official Body
- Association of Certified Fraud Examiners (ACFE)
- Passing Standard
- Scaled score; the ACFE does not publish a specific passing percentage.
What Is CFE Section 2: Fraud Investigations and Legal Issues?
This section of the CFE exam is the practical heart of being a fraud examiner. It evaluates your ability to execute an investigation from the first suspicion to your final report and potential court testimony. The exam prioritizes the application of investigative theory in real-world scenarios.
While you must know key definitions and legal principles, success depends on your judgment. The ACFE blueprint organizes this section into four primary domains:
- Fraud Examination Fundamentals: Includes predication, the fraud theory approach, and planning an investigation.
- Interviewing: Covers techniques for gathering information from witnesses and obtaining confessions from subjects.
- Document Analysis: Focuses on obtaining and analyzing documentary evidence, both public and private.
- Legal Elements of Fraud: Encompasses rules of evidence, the basics of civil and criminal law, and your responsibilities in legal proceedings.
Think of each question as a decision point in a live case. Do you interview the suspect now or secure their laptop first? Is this document admissible in court? Choosing the wrong sequence can compromise the entire investigation, and that is precisely what the exam tests. Try VoraPrep's free CFE practice questions to see how these judgment calls are framed.
Studying for CFE? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
How Is the Investigations Section Formatted and Scored?
The format for Section 2 is demanding. You will face approximately 125 multiple-choice questions within a 120-minute time limit. This leaves you less than one minute per question, making time management and quick, accurate judgment essential.
The exam consists entirely of multiple-choice questions, with no essays or simulations. Your score is based on your ability to select the best answer from four options.
A critical point candidates often get wrong is the passing score. The ACFE uses a scaled scoring system, not a simple percentage. This means your raw score (number of questions you got right) is converted to a standardized scale. You will receive a Pass or Fail result for the section, not a numeric score. You must pass each of the four CFE sections independently; a high score in another area cannot make up for a failing score here.
What Are the Key Topics on the CFE Investigations Exam?
While the blueprint is broad, the exam consistently emphasizes several high-stakes topics. Mastering these areas is the key to passing.
| Blueprint Area | Key Concepts to Master | Why It's Critical |
|---|---|---|
| Interviewing | Admission-seeking vs. informational interviews, question sequencing, verbal and non-verbal cues. | This is the most nuanced and heavily weighted topic. The exam tests your judgment in dynamic, scenario-based interviews. |
| Evidence | Rules of evidence (relevance), chain of custody, obtaining documentary evidence, Fourth Amendment (search & seizure). | Mishandling evidence is the fastest way to lose a case. You must know how to collect and preserve it legally. |
| Planning & Predication | The fraud theory approach, establishing predication, designing investigative procedures, working with counsel. | A flawed plan leads to wasted resources and inadmissible evidence. This topic tests your strategic thinking from the start. |
| Legal Frameworks | Three burdens of proof, elements of fraud, differences between fact and expert witnesses, and rights of the accused. | Your investigation exists within a legal system. You must understand the rules and consequences of your actions. |
| Reporting | Writing an objective fraud report, structuring findings, and drawing conclusions based on evidence (not guilt). | The report is the final product of your investigation. The exam ensures you can communicate findings clearly and professionally. |
Candidates often fail by giving all topics equal weight. You should dedicate a significant portion of your study time to Interviewing and the Legal Elements of Fraud, as they are complex, scenario-based, and frequently appear on the exam. A complete prep course like VoraPrep uses an adaptive learning engine to automatically focus your practice on these high-value areas until you achieve mastery.
How to Think Through an Investigation: A Step-by-Step Case Study
To pass Section 2, you must think like an examiner. Let’s walk through a case to see how these concepts connect.
Step 1: Develop a Fraud Theory and Plan
Your first move is not confronting David. That's a classic error that tips off your subject. Your first move is to develop a fraud theory.
- Hypothesis: David is receiving kickbacks from Apex in exchange for approving inflated contracts.
- What needs to be proven?
- InvoTech paid inflated prices to Apex.
- David was instrumental in approving these payments.
- David received improper payments from Apex.
- There was intent and a connection between the payments to David and the inflated contracts.
- Investigative Plan: You'll start with covert, non-confrontational tests. Analyze all payments to Apex, compare their pricing to industry benchmarks, and review David's emails and system access logs related to vendor approval. You will not interview David until you have gathered sufficient documentary evidence.
Step 2: Gather and Protect Evidence
You begin by collecting documents. You pull the vendor master file, all invoices from Apex, and the corresponding payment records. You notice the invoices from Apex are sequentially numbered and lack detailed descriptions, both red flags for a potential shell company.
For each piece of evidence, you must maintain a clear chain of custody. This means logging who has handled the evidence, when, and for what purpose, ensuring it has not been altered. On the exam, a question might ask for the best way to preserve a digital file, and the answer will involve creating a forensic image (an exact copy) and working from that image to preserve the original.
Step 3: Conduct Strategic Interviews
After confirming the overpayments and finding suspicious emails between David and the owner of Apex (who turns out to be his brother-in-law), you are ready to interview. The recommended order is to interview neutral third-party witnesses first, then potential co-conspirators, and finally, the primary subject.
You sit down with David for what you frame as a "routine audit of procurement procedures." This begins as an informational interview.
- You (using an open-ended question): "David, can you walk me through the process for onboarding a new vendor like Apex?"
- David (nervously): "It's the standard process. They filled out the paperwork, and I approved them."
You then introduce documents one by one, moving from the general to the specific.
- You: "I see here you signed the sole-source justification. Can you explain why their pricing was considered competitive?"
As the evidence mounts and contradictions appear, you strategically shift the interview's purpose from informational to admission-seeking.
Step 4: Report Findings and Prepare for Testimony
After David provides a written and signed confession, you compile your findings into a formal fraud examination report. The report states the facts clearly and presents the evidence. Crucially, while it does not express a legal opinion on guilt or innocence (that is for a court to decide), it does state your professional conclusion. For example, you would write, "Based on the evidence collected, the elements of fraud are present in the relationship between InvoTech and Apex Solutions."
If the case proceeds to trial, your role may vary. You could be called as a fact witness to testify only about what you did and found during your investigation. Alternatively, you could be qualified as an expert witness to offer a professional opinion to the court, such as whether the scheme's characteristics are consistent with a typical kickback fraud. The exam requires you to know the difference.
This entire process is the core of Section 2. VoraPrep's adaptive question bank has over 2,000 CFE practice questions, with many scenarios like this one, training you to make the right call every time.
Calculate Your CFE Score & Study Hours by Domain
Adjust your practice scores across official CFE blueprint domains to predict your pass probability and generate a domain-weighted study schedule.
What's the Smartest Way to Study for CFE Section 2?
Studying for this section requires a focus on application, not just memorization.
- Prioritize Process Over Isolated Facts: Don't just memorize the definition of "hearsay." Understand why it's generally inadmissible and what the exceptions are. VoraPrep's textbook-grade lessons use visual decision trees to explain processes like evidence handling and interview sequencing, building the conceptual framework you need.
- Use Spaced Repetition for Definitions: While judgment is key, you must know foundational terms cold. Concepts like the three burdens of proof, "chain of custody," and the elements of fraud are perfect for flashcards. VoraPrep's FSRS spaced-repetition flashcards automatically schedule reviews, ensuring critical definitions stick.
- Do Hundreds of Scenario-Based Questions: There is no better way to prepare. You must see how the ACFE frames questions and sets traps. As you answer questions in the VoraPrep practice bank, our adaptive engine identifies your weak spots and gives you more practice on those topics. For every question, read the detailed rationales for both the right and wrong answers.
- Simulate Exam Conditions: Take at least two full-length, timed mock exams before your test day. VoraPrep's 1:1 test-center simulator mirrors the real exam interface and pressure, building your stamina and time management skills so there are no surprises.
A solid study plan dedicates 20-30 hours to this section over 2-3 weeks. If you get stuck on a tough concept, you can ask Vory, your 24/7 personal tutor, for a step-by-step explanation.
Best CFE Section 2 Study Method in 2026
Your choice of study material is a critical decision. Many candidates get bogged down by expensive, passive video lecture bundles that are inefficient for busy professionals.
| Feature | VoraPrep Complete Interactive Course | Passive Video Lecture Method |
|---|---|---|
| Learning Method | Active: Interactive lessons, adaptive practice, 1:1 simulation, 24/7 tutor. | Passive: Watching 100+ hours of pre-recorded video lectures. |
| Personalization | Adaptive engine targets weak areas; personalized study plan fits your schedule. | One-size-fits-all linear sequence. No real-time adaptation. |
| Practice Content | 2,000+ questions with deep rationales for every answer choice. | Often fewer questions with less detailed explanations. |
| Expert Support | Vory, your 24/7 personal tutor, provides instant, Socratic explanations. | Email support with 24-48 hour response times. |
| Pricing Model | Simple subscription: $25/month or $199/year. | Large upfront cost: $1,500 - $3,500+. |
| Guarantee | Straightforward "Access Until You Pass" for consistent users. | Complex refund policies with strict 90%+ score requirements. |
The old model of watching hours of video is outdated. Modern, interactive platforms like VoraPrep are designed for how busy professionals actually learn. Our complete 6-pillar course—including textbook-grade lessons, adaptive practice, exam simulation, FSRS flashcards, a personalized study plan, and Vory the 24/7 tutor—delivers better results in less time.