Credit card records are useful in tracing illicit transactions because they reveal how and where a subject spends money. The Fraud Examiners Manual explains that credit card receipts can track travel and expenditures, and charges may provide leads to hidden assets. For example, purchases at a marina might suggest boat ownership and justify further investigation. Option A is incorrect because credit card statements are not obtained primarily to review credit history. Option C is wrong because suspicious deposits are usually identified through bank records, not credit card statements. Option D overstates what credit card statements prove; they might show payments toward the card, but not automatically establish that illicit funds were used. Option B accurately captures the investigative value of these records.

The correct answer is B. Mail fraud. Mail fraud generally involves using the postal system in furtherance of a scheme to defraud. In this question, Cindi used the U.S. mail system to send fraudulent advertisements to potential victims. That use of the mail is the key jurisdictional hook that would most likely support federal prosecution. The fact that the victims are located in China does not change the central point that the U.S. mail system was used as part of the fraudulent scheme.
Option A, wire fraud, would apply more naturally if the scheme were carried out by electronic communications such as telephone calls, emails, internet transmissions, or other interstate or international wire communications. Option C, communications fraud, is not the standard offense name typically used in this context. Option D, interstate fraud, is also not the most precise legal label for prosecution under these facts. In fraud law, prosecutors often rely on statutes such as mail fraud and wire fraud because they are broad and effective tools for prosecuting deceptive schemes. Since the question specifically states that Cindi used the U.S. mail system, the most likely basis for the charges would be mail fraud, making B the correct answer.

Greg should conduct the fraud examination as though the case will result in litigation. This principle ensures that evidence is collected, preserved, documented, and analyzed in a manner consistent with legal standards. Even if the organization ultimately handles the matter internally, the examiner should assume that the evidence, report, notes, and testimony might later be examined in court, arbitration, regulatory proceedings, or employment litigation. Option A is too narrow because internal discipline is only one possible outcome. Option C is incorrect because the examiner must remain objective, not assume innocence or guilt. Option D may be possible, but media attention is not the controlling assumption. The proper investigative mindset is to prepare the matter as if legal proceedings will follow.

This question tests your knowledge of Domain 1.
In the context of Overview of the Legal System, specifically relating to criminal, adversarial, the question asks about TRUE, criminal proceedings and discovery in adversarial jurisdictions.
The correct answer is D: The judge is the primary driver of the discovery process in criminal proceedings..
This question relates to the legal system framework. Understanding the distinction between different legal systems and processes is crucial for fraud examiners. The correct answer accurately describes the relationship between different legal entities and their jurisdictions. In adversarial systems, opposing parties present their cases before a neutral judge or jury, while in inquisitorial systems, judges take a more active role in investigating cases.
References:
- CFE Exam Content Outline: Domain 1: Overview of the Legal System
- criminal
- adversarial
- Fraud Examiners Manual, Law Section

The correct answer is A. Whistleblower anti-retaliation laws protect employees from being punished because they engaged in protected reporting activity. They do not generally give the employee immunity for separate misconduct. If Amanda reported suspected false claims to the government, that report can qualify as protected whistleblowing. However, if the employer later discovers that Amanda misappropriated more than $150,000, the employer can generally terminate her for that independent misconduct, so long as the termination is based on the theft and not as retaliation for the report.
Option B is incorrect because whistleblower status does not prevent termination for legitimate, nonretaliatory reasons. Option C is incorrect because terminating Amanda for making the report would be exactly the kind of retaliatory conduct anti-retaliation rules are designed to prohibit. Option D is therefore also incorrect. In CFE terms, the key distinction is between protected activity and independent grounds for discipline.
Employers usually remain free to discipline or dismiss a whistleblower for fraud, theft, performance failures, or other valid reasons unrelated to the protected disclosure. Therefore, the legally correct statement is that the employer can terminate Amanda for misappropriating funds. General ACFE materials on whistleblower protections likewise emphasize protection from retaliation, not immunity from consequences for unrelated wrongdoing.