Most candidates see Section 3 as the “soft skills” part of the CFE exam and dangerously underestimate it. They assume topics like ethics and corporate governance are just common sense. This is the single biggest reason smart, experienced professionals fail; they walk in ready for a conversation and get hit with a precise, framework-based exam that demands you know specific criminology theories and the exact components of the COSO framework, not just what feels right.
CFE Section 3, Fraud Prevention and Deterrence, tests proactive anti-fraud measures across four domains: Criminology & Ethics, Corporate Governance, Fraud Risk Assessment, and Fraud Prevention & Deterrence. You will have 150 minutes to answer 125 multiple-choice questions on these specific frameworks.
Key facts
- Section Name
- Fraud Prevention and Deterrence
- Official Body
- Association of Certified Fraud Examiners (ACFE)
- Question Format
- 125 multiple-choice questions
- Time Allotted
- 150 minutes (2 hours, 30 minutes)
- Key Domains
- Criminology & Ethics, Corporate Governance, Fraud Risk Assessment, Fraud Prevention & Deterrence
- Passing Score
- 75% correct is required to pass each section individually.
The median loss per occupational fraud case was $178,000, according to the ACFE's 2024 Report to the Nations (ACFE). This statistic highlights the immense financial impact of the fraud you are learning to prevent.
What Does CFE Section 3 Actually Test?
This section of the CFE exam evaluates your understanding of why people commit fraud and how to build systems to stop them. It is the proactive side of fraud examination. While other sections focus on investigating and litigating fraud after it has occurred, Section 3 is entirely about getting there first.
Studying for CFE? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
The exam questions are designed to test your judgment on building a robust anti-fraud environment. You'll be tested on your ability to:
- Understand the root causes of fraudulent behavior through specific criminology theories.
- Evaluate the effectiveness of corporate governance structures based on established principles.
- Implement a comprehensive fraud risk assessment program.
- Design and apply specific fraud prevention controls and deterrence mechanisms.
This section represents 25% of your total CFE exam score and must be passed independently. It's less about calculation and more about applying principles correctly. Candidates often find the VoraPrep adaptive question bank invaluable here, as our detailed explanations break down the subtle differences between concepts like Cressey's Fraud Triangle and the M.I.C.E. model. Try VoraPrep's free CFE practice questions to see the difference.
What Is the CFE Section 3 Exam Format and Structure?
The format for Section 3 is consistent with the other parts of the CFE exam. You will face 125 multiple-choice questions delivered electronically. You are given 150 minutes (2 hours, 30 minutes) to complete the section, which averages to 1 minute and 12 seconds per question.
There are no simulations or essay questions.
The questions are a mix of direct knowledge recall (e.g., "What are the five components of the COSO framework?") and scenario-based judgment ("A company has a weak tone at the top; which control is most needed?"). Passing requires getting at least 75% of the questions correct. There is no penalty for guessing, so you must answer every single question.
For a complete overview of the exam interface and rules, see the full CFE exam format and timing breakdown on our site.
What Key Topics Are Tested in Section 3?
The ACFE blueprint for this section is organized and predictable. Mastering these domains isn't just about reading; it's about understanding how they connect. For example, a weak corporate governance structure (Topic 2) directly increases the need for a more rigorous fraud risk assessment (Topic 3).
Criminology & Ethics (15-25% of exam)
This area covers the "why" behind fraud. You must know the foundational theories and the names associated with them.
- Donald Cressey's Fraud Triangle: The three elements are a Non-shareable Financial Problem (simplified as Pressure), Perceived Opportunity, and Rationalization. Be ready for the original terminology.
- The Fraud Diamond: Extends the triangle by adding "Capability" as a fourth element.
- W. Steve Albrecht's Fraud Scale: Views fraud as a function of situational pressures, perceived opportunities, and personal integrity.
- Sutherland's Differential Association Theory: Posits that criminal behavior is learned through social interaction in intimate groups.
- Hollinger and Clark's Research: Concluded that job dissatisfaction is a primary driver of employee deviance and theft.
- ACFE Code of Professional Ethics: Its specific standards on integrity, objectivity, confidentiality, and professional competence are directly testable.
Corporate Governance (25-35% of exam)
This is a heavily weighted topic. It focuses on the roles and responsibilities of those at the top of an organization in preventing fraud.
- Board of Directors & Audit Committee: Their independent oversight responsibilities are a major focus.
- "Tone at the Top": The single most important element of the control environment, flowing from leadership.
- COSO Internal Control – Integrated Framework (2013): You must know the five components (Control Environment, Risk Assessment, Control Activities, Information & Communication, Monitoring Activities) and the principles behind them.
- Rights and Responsibilities: Of managers, employees, and auditors within the governance structure.
Fraud Risk Assessment (25-35% of exam)
This is another huge, practical area. It's about the process of identifying, analyzing, and responding to fraud risks.
- Identifying Inherent Fraud Risks: Brainstorming potential schemes and scenarios.
- Assessing Likelihood and Significance: Evaluating the probability and potential impact of each risk.
- Responding to Risk: Deciding whether to avoid, transfer, mitigate, or accept a risk based on the entity's risk appetite.
- Residual Risk: The risk that remains after management's response and controls are implemented.
Fraud Prevention & Deterrence (15-25% of exam)
This topic covers the specific programs and controls used to combat fraud. You must be able to differentiate between prevention and deterrence.
- Prevention vs. Deterrence: Prevention involves designing systems to make fraud impossible (e.g., segregation of duties), while deterrence involves creating an environment where people fear the consequences of getting caught (e.g., surprise audits).
- Specific Controls: Background checks, mandatory vacations, job rotation, whistleblower hotlines, and anti-fraud training.
- Proactive Fraud Detection: Using techniques like data analysis and continuous monitoring to find fraud before a tip comes in.
To go deeper into these concepts, our guide on the CFE Fraud Prevention & Deterrence: Fraud Triangle, COSO, ISO 37001 & ACFE Code of Ethics is a great next step.
Calculate Your CFE Score & Study Hours by Domain
Adjust your practice scores across official CFE blueprint domains to predict your pass probability and generate a domain-weighted study schedule.
How Should I Study for Section 3 to Guarantee a Pass?
Studying for this section requires a focus on frameworks, not just facts. Your goal is to build the judgment the exam tests. A common mistake is simply re-reading the Fraud Examiners Manual. That's passive. You need an active study plan that forces recall and application.
Step 1: Build a Conceptual Foundation (Weeks 1-2)
Start with VoraPrep's textbook-grade lessons. Unlike watching hours of passive video lectures, our interactive lessons require you to answer questions as you go, ensuring you're internalizing concepts like the COSO framework's 17 principles. Focus on understanding the purpose of each governance role or criminology theory.Step 2: Apply Knowledge with Practice Questions (Weeks 3-4)
This is where the real learning happens. Begin working through VoraPrep's 2,000+ question bank. Don't just answer questions; dissect the explanations. For every question you get wrong, ask Vory, your 24/7 personal tutor, to explain the underlying principle. Our adaptive engine will automatically surface more questions on your weak areas, whether it's distinguishing between criminology theories or applying risk assessment principles.- Assess Ghost Employee Scheme:
- Likelihood: Low (2/5). Requires collusion with HR and bypassing multiple system checks. It's hard to pull off.
- Impact: High (5/5). If successful, it could result in a continuous, significant financial drain until discovered.
- Inherent Risk Score: Likelihood (2) × Impact (5) = 10.
- Assess Inflated Hours Scheme:
- Likelihood: High (4/5). Only requires a supervisor's lax approval or a simple system override. Much easier to attempt.
- Impact: Low (2/5). The financial damage from one employee adding a few hours is limited per pay period.
- Inherent Risk Score: Likelihood (4) × Impact (2) = 8.
- Determine Response:
- For the "Ghost Employee" scheme, with its high impact, the response is Mitigation. You recommend a quarterly audit comparing the payroll register to the active employee list from HR.
- For the "Inflated Hours" scheme, its high likelihood makes it a pressing concern despite the lower score. The response is also Mitigation. You recommend implementing an automated timekeeping system that flags all overtime hours for a secondary review by the department head.
- Crucial Judgment Step: You present this to management, noting that while the ghost employee scheme has a higher raw score, the company's low risk appetite for payroll errors means both risks must be actively mitigated rather than accepted. The exam tests this qualitative judgment, not just the math.
Step 3: Simulate Exam Conditions (Week 5)
Take a full, timed mock exam using VoraPrep's 1:1 exam simulator. The goal isn't just to score well, but to practice your pacing and mental stamina under pressure. After the exam, review your Calibrated Pass-Readiness Score and analyze every single question, both right and wrong.What Are the Most Common Section 3 Exam Traps?
- Treating it as "Common Sense": You cannot intuit your way through a question about the specific duties of an audit committee as defined by Sarbanes-Oxley. You must know the rules.
- Ignoring Criminology Details: Candidates often skim the theories. The exam will test your ability to differentiate them.
- The Tempting Wrong Answer: "Financial Pressure." This is a core component of the Fraud Triangle and feels intuitively correct. Many candidates pick it because it's a well-known fraud motivator.
- The Correct Answer: "Learning through interaction with others in intimate personal groups." Sutherland's theory is specifically about the social transmission of criminal techniques and attitudes. The exam is testing whether you can distinguish it from Cressey's model.
- Misclassifying Controls: The exam will present scenarios and ask you to identify a control's primary purpose. This is a classic trap.
| Control Type | Definition | Example | Exam Focus |
|---|---|---|---|
| Preventive | A control that stops a fraudulent event from occurring. | Segregation of Duties: The person who approves payments cannot also issue them. | Focuses on system design and authorization. |
| Detective | A control that identifies a fraudulent event after it has occurred. | Analytical Procedures: Reviewing expense trends to spot anomalies after month-end. | Focuses on review, reconciliation, and analysis. |
| Deterrent | A control that discourages individuals from attempting to commit fraud. | Visible Security Cameras: Creates a perception of being watched. | Focuses on psychology and consequences. |
- The Tempting Wrong Answer: "Preventive." The logic is that it prevents one person from controlling a process for too long. While it has a preventive aspect, this is not its primary function.
- The Correct Answer: "Deterrent and Detective." Its main power is deterrence (employees know a successor will review their work, creating fear of being caught) and detection (the new person is likely to uncover any irregularities from the previous person's tenure). The exam wants the best classification, and that is deterrent/detective.
Best CFE Section 3 Study Resources in 2026
Choosing your study partner is the most important decision you'll make. Many candidates get stuck with outdated, overpriced passive video-lecture bundles that lead to fatigue and poor retention.
You need a modern, interactive system.
VoraPrep is built as a complete 6-pillar interactive course, not just a supplement. For a single monthly subscription ($25/month), you get everything you need to pass:
- Complete Textbook-Grade Lessons: Step-by-step interactive lessons that are more engaging and effective than watching 100+ hours of video.
- Adaptive Practice Banks: Thousands of exam-calibrated questions that target your weak subtopics, with clear explanations for every answer choice.
- 1:1 Test-Center Exam Simulators: Authentic timed mock exams that replicate the real testing experience.
- FSRS Spaced-Repetition Flashcards: A memory-scheduled system to lock in key terms, theories, and ethical rules.
- Personalized Daily Study Plan: A dynamic calendar built around your exam date that tells you exactly what to do each day.
- Vory, Your 24/7 Personal Tutor: Instant Socratic coaching inside any lesson or question to help you understand the why.
Our platform is designed for busy working professionals who need to study efficiently. The Calibrated Pass-Readiness Score Predictor gives you a transparent, blueprint-weighted forecast of your exam score, a major upgrade over opaque "readiness" gauges. Plus, our Access Until You Pass guarantee gives you peace of mind.