CFE Financial Transactions and Fraud Schemes: From the Legacy Section to Fraud Schemes and Financial Crimes

The Exam-Labs URL “CFE Financial Transactions and Fraud Schemes” reflects the former four-section Certified Fraud Examiner exam. The Association of Certified Fraud Examiners (ACFE) replaced that structure on June 2, 2026. The current successor area is called Fraud Schemes and Financial Crimes.

The change is more than a title edit. Current preparation should use the 2026 CFE blueprint and materials, because the revised section broadens and reorganises how occupational fraud, accounting concepts, financial statement fraud, and other financial crimes are assessed.

The legacy title is still useful for understanding older study material, but it should not be mistaken for the name of a current 2026 CFE section. The replacement section is broader than accounting transactions alone. Its published content outline spans occupational schemes and a wide range of financial crimes, so preparation should migrate useful legacy concepts into the new blueprint rather than trying to recreate the former four-section exam.

The current section asks how schemes work, not just what they are called

Fraud examiners need to recognise the mechanics of a scheme, the records or systems it affects, the red flags it may create, and the controls or investigative steps that can expose it. Memorising a taxonomy is useful for orientation, but practical understanding comes from tracing how value is diverted, concealed, or misrepresented.

For each scheme, candidates should ask who can perpetrate it, what opportunity makes it possible, what evidence it leaves, and how it could be prevented or detected. That approach carries across industries and makes unfamiliar scenarios easier to analyse.

Scheme knowledge should be operational. For any fraud type, candidates should be able to identify the actor's objective, how the transaction or representation is manipulated, what records are affected, which red flags may appear, and which control or investigative response would be relevant. That approach helps with unfamiliar scenarios because it focuses on the mechanics of deception. It also prevents study from becoming a glossary exercise in which candidates can define a scheme but cannot distinguish it from another method that produces a similar financial symptom.

Accounting knowledge supports the detection of financial statement fraud

The current section includes basic accounting concepts and financial statement fraud. Candidates need enough accounting fluency to understand how transactions flow through records and how manipulation can distort revenue, expenses, assets, liabilities, or disclosures.

The objective is not to become a financial-reporting specialist. It is to recognise when the accounting story does not fit the economic reality, identify records that could confirm or contradict the explanation, and understand the fraud risk created by estimates, timing, classification, or management override.

Financial-statement fraud requires candidates to understand how deliberate misstatement can enter the accounts and how analytical relationships can expose it. Revenue, expenses, assets, liabilities, estimates, disclosures, and timing can all be manipulated, while ratio and trend analysis may reveal inconsistencies that warrant investigation. The current outline gives accounting concepts and financial-statement fraud separate attention, which reinforces an important distinction: accounting knowledge is the language needed to recognise the manipulation, but the fraud analysis must also consider intent, concealment, incentives, and evidence.

Asset misappropriation and corruption remain core occupational-fraud areas

Cash, inventory, and other assets can be stolen through very different mechanisms. Fraudulent disbursements, theft of receipts, misuse of assets, and concealment techniques require different controls and different evidence. Candidates should understand both the perpetrator's method and the organisation's points of vulnerability.

Corruption presents another pattern: the improper influence of decisions through conflicts, bribery, kickbacks, or related conduct. The practical task is to recognise suspicious relationships, transactions, procurement behaviour, or decision patterns that indicate the normal business process may have been compromised.

Fraudulent disbursements receive substantial weight in the current blueprint, so candidates should understand billing, payroll, expense-reimbursement, check or payment tampering, and register or disbursement schemes alongside theft of cash receipts, inventory, and other assets. Corruption adds conflicts of interest, bribery, illegal gratuities, and economic extortion. Procurement can overlap both categories, particularly when bid manipulation, vendor relationships, false invoicing, or kickbacks affect pre-award and post-award activity. Studying the transaction flow makes those overlaps easier to see than memorising each scheme in isolation.

The 2026 blueprint extends beyond traditional occupational fraud

The revised Fraud Schemes and Financial Crimes section also covers areas such as theft of data and intellectual property, cyberfraud, identity theft, consumer fraud and scams, securities fraud, financial-institution fraud, money laundering, payment fraud, bankruptcy fraud, insurance fraud, healthcare fraud, tax fraud, government and public-sector fraud, and procurement fraud.

This breadth makes study by underlying mechanism more efficient than treating every crime as unrelated. Deception of identity, manipulation of documentation, misuse of payment channels, concealment of beneficial ownership, and exploitation of weak controls appear in many different contexts.

The current outline also includes money laundering, financial-institution fraud, identity theft, payment fraud, securities fraud, insurance and healthcare fraud, consumer scams, bankruptcy and tax fraud, cyberfraud, public-sector fraud, and other financial-crime contexts. Those areas differ in actors and regulation, but they share recurring analytical themes: concealment of ownership or source, false identity or representation, misuse of systems, movement of value, and exploitation of trust. Candidates should learn the distinctive mechanics of each domain while looking for those common patterns.

Detection and prevention should be connected to the scheme

A control is useful only if it addresses the way a fraud could occur. Segregation of duties, authorisation, reconciliation, access controls, monitoring, analytical review, vendor due diligence, and transaction testing each respond to different risks. Candidates should be able to explain why a control would prevent or reveal the specific scheme in the scenario.

The same principle applies to red flags. An unusual transaction is not proof of fraud. It is a reason to ask what legitimate explanations exist, what further information is needed, and what evidence could confirm or refute the concern.

A red flag is not proof. Unusual vendor addresses, round-dollar payments, duplicate transactions, unexplained journal entries, abnormal margins, rapid fund movement, or atypical access patterns can justify further inquiry, but each may have legitimate explanations. Strong fraud reasoning moves from indicator to hypothesis and then to corroborating evidence. Preventive controls should likewise target the opportunity created by the scheme: segregation of duties, approval design, access controls, reconciliations, vendor due diligence, monitoring, or exception analytics are valuable only when they interrupt the relevant fraud pathway.

This section now sits inside a three-part CFE exam

The current CFE exam has three sections. Alongside Fraud Schemes and Financial Crimes, candidates take Fraud Investigations and Legal Issues and Fraud Prevention and Deterrence. The redesign brings the exam closer to the way fraud work is actually performed: recognising schemes, investigating them within legal constraints, and managing the conditions that allow fraud to occur.

That structure also means a candidate should not prepare scheme knowledge in isolation. Detection often leads to investigation, and repeated schemes often reveal a prevention or governance weakness.

The three current sections are deliberately complementary. Fraud Schemes and Financial Crimes explains how misconduct is carried out; Fraud Investigations and Legal Issues addresses how allegations and evidence are handled; and Fraud Prevention and Deterrence focuses on governance, risk, controls, and ethical responsibilities. A scheme question can therefore draw on prevention or investigative reasoning even though the candidate is sitting one section at a time. Keeping the boundaries clear while recognising those connections produces a more coherent CFE study plan than preserving four legacy subject silos.

Current exam format for Fraud Schemes and Financial Crimes

Under the 2026 CFE structure, Fraud Schemes and Financial Crimes is a separate closed-book, closed-notes examination with 120 multiple-choice and True/False questions and a 2.5-hour time limit. ACFE requires at least 75% correct in each CFE section.

Candidates using older preparation material should be careful with four-section labels. The former Financial Transactions and Fraud Schemes section is historically important, but the current exam blueprint, section title, question distribution, and study materials are the 2026 versions.

The current Fraud Schemes and Financial Crimes section contains 120 questions and has a 2.5-hour time limit. ACFE describes the CFE sections as separate timed examinations using multiple-choice and True/False questions, with a passing requirement of at least 75% on each section. The section's breadth means pacing matters: candidates need enough familiarity with many fraud categories to identify the governing concept quickly, then use the facts in the question to distinguish between close alternatives rather than relying on recognition of a single keyword.

Candidates using pre-June 2026 materials should build a migration checklist against the current content outline. Preserve sound explanations of accounting, occupational fraud, corruption, money laundering, and other enduring topics, but add domains that the new blueprint names explicitly and retire assumptions about the old section structure. This protects useful historical notes without allowing an obsolete table of contents to determine what is studied for the examination that is actually in force.

The current outline is detailed enough to support a coverage matrix. Candidates can list its domains, record where each is explained in their study materials, and note which areas still depend on legacy terminology. That exercise is particularly valuable for newer subjects such as cyber-enabled fraud methods, identity and payment abuse, and other financial-crime categories that may have received less emphasis in an older occupational-fraud-centered course. The matrix is a gap-finding tool rather than a prediction of individual questions; every published domain remains part of the current section.