CFE Part 3: Investigation Exam Blueprint

Historical CFE Part 3: Investigation Scope

The CFE Investigation exam, certified by the ACFE, covered principles of interviewing, information sources, document examination, cyber investigation, and digital forensics. This exam is officially retired as of 2026-06-02. No successor exam exists for this credential. Candidates seeking certification should consult the ACFE directly to determine the current requirements and available pathways for professional development in fraud examination. The exam was a linear, fixed-form assessment consisting of 125 multiple choice questions.

Who CFE Part 3: Investigation Was For

This exam was intended for fraud examiners and professionals tasked with conducting investigations. It required knowledge of interviewing techniques, document analysis, and digital forensic methods to identify and extract relevant evidence during the course of an investigation.

Skills You Should Be Ready to Demonstrate

• Interviewing principles
• Information source identification
• Document examination techniques
• Cyber investigation methods
• Digital forensics application

How to Reuse Your Preparation

Since this exam is retired and has no successor, do not prepare for or attempt to sit for it. Focus your efforts on current ACFE certification requirements. Any knowledge of investigative principles or digital forensics remains useful, but you must verify the current ACFE curriculum to ensure your study aligns with their updated professional standards and certification criteria. Do not rely on outdated study materials for this retired exam.

Historical Domain Guide

Principles of Interviewing: Historical Scope

This domain covers the techniques and professional principles used when conducting interviews to gather information during an investigation. It focuses on the methodology required to effectively elicit truthful responses from subjects during the investigative process.

• Interviewing principles
• Communication techniques

Sources of Information: Historical Scope

This domain focuses on identifying and utilizing various sources of information to support investigative findings. It covers the systematic approach to gathering, verifying, and documenting evidence from diverse public and private records to build a case.

• Information sources
• Evidence verification

Document Examination: Historical Scope

This domain addresses the methods for examining documents to verify authenticity and extract evidence. It involves the technical analysis of physical and electronic records to detect alterations, forgeries, or other indicators of fraud within the documentation provided.

• Document examination
• Authenticity verification

Cyber Investigation: Historical Scope

This domain covers the procedures for conducting investigations within cyber environments. It details the specific challenges and legal considerations involved when tracking fraudulent activities that occur across digital networks and online platforms during a formal investigation.

• Cyber investigation
• Network analysis

Digital Forensics: Historical Scope

This domain involves the application of digital forensic techniques to recover and analyze data from digital devices. It focuses on the preservation and examination of electronic evidence to ensure it remains admissible and reliable for legal proceedings.

• Digital forensics
• Data recovery