CFF logo
Focused certification exam prep
Start practice

CFF Jobs

TL;DR
  • CFF is AICPA's Certified in Financial Forensics credential, aimed at CPAs doing litigation support, investigations, and fraud work.
  • Domains 5 and 7 each carry 25% of the exam, mirroring the evidence and fraud-risk work employers hire for.
  • The Global Standard Pathway requires 1,000 forensic business hours and 75 CPD hours within five years.
  • You may pass the exam before finishing the experience requirement, so you can interview with a passing result in hand.

What the CFF Credential Opens Up

Certified in Financial Forensics is a specialty credential administered by the American Institute of CPAs (AICPA) through the Association of International Certified Professional Accountants. It signals that a CPA has demonstrated both experience and examined knowledge in forensic accounting: investigating financial misconduct, quantifying economic damages, and communicating findings in disputes and proceedings. If you are still orienting yourself, our explainers on what CFF certification is and what CFF stands for cover the basics.

A job search built around CFF is different from a search built around a general accounting credential. Employers hiring for CFF-relevant roles are generally looking for someone who can sit between accounting, law, and investigation. They want a person who can preserve evidence properly, build a defensible analysis, and explain it to a judge, jury, arbitrator, or audit committee. The credential is a shorthand for that combination.

A credential, not a job title: No employer posts a role called "CFF." The credential appears as a preferred or required qualification inside postings for forensic accountants, investigators, litigation consultants, and similar roles. Searching on the underlying work (forensic accounting, litigation support, fraud investigation, economic damages) will surface far more openings than searching on the acronym alone.

Who Hires CFF Holders

The employer landscape for forensic work is fairly consistent, even if the titles vary. Rather than quoting headcounts or hiring statistics, which would be speculation, here is where the work is typically done:

  • Public accounting firms with forensic or dispute advisory practices. Large and mid-size firms staff engagements involving fraud investigation, forensic data analysis, and expert testimony support.
  • Specialty forensic and litigation consulting firms. Boutique and global consultancies focused on disputes, damages, and investigations often value the credential as a differentiator when staffing expert engagements.
  • Law firms and legal departments. Counsel retain forensic accountants, and some firms and corporate legal teams hire them in-house to support complex matters.
  • Corporate internal audit, compliance, and investigations functions. Companies need people who can investigate allegations, assess fraud risk, and document findings that may later be scrutinized.
  • Government and regulatory bodies. Agencies conducting enforcement, examination, or inspector-general work employ investigators with strong accounting backgrounds.
  • Financial institutions. Banks and insurers maintain investigative units focused on fraud, financial crime, and claims disputes.
  • Independent practice. Experienced CPAs sometimes build solo or small-firm forensic practices serving attorneys and business owners.

Because the credential requires an eligible CPA certificate and AICPA membership, it sits within the CPA community. That shapes which employers recognize it most readily: firms and departments that already think in terms of CPA credentials and AICPA standards.

Matching Job Roles to Exam Domains

One practical way to understand CFF jobs is to map the exam's eight content areas to the work they represent. The exam is organized into two modules: Core Knowledge, Information, and Skills (55%) and Core Practice Areas (45%). The eight areas below are exam objectives, and they line up closely with what forensic employers actually need done.

Exam DomainWeightJob Function It Reflects
Professional Standards and Roles5%Acting as a consultant versus an expert; independence and objectivity expectations
Legal Systems, Courts, and Dispute Resolution5%Working within litigation, arbitration, and mediation settings
Laws, Regulations, and Guidance5%Applying relevant legal and regulatory frameworks to an engagement
Engagement Initiation and Planning5%Scoping, conflict checks, engagement terms, and work planning
Information Gathering, Preservation of Evidence, and Analysis25%Collecting and safeguarding evidence, then analyzing it
Reporting and Communication of Findings10%Written reports, presentations, and communicating conclusions
Investigative and Fraud Risk Management25%Fraud investigation, fraud risk assessment, and prevention and response
Litigation Services Concepts, Methodologies, and Procedures20%Damages, valuation-related analysis, and testimony support

For a deeper walk-through of every area, see our complete guide to all eight CFF content areas.

Investigation-Heavy Roles

If your target is a corporate investigations, internal audit, or fraud examination role, Domains 5 and 7 (25% each) are the center of gravity. Those two areas together account for half the exam, and they describe the daily substance of investigative work: figuring out what happened, proving it with properly preserved evidence, and managing the risk that it happens again.

Litigation-Consulting Roles

For roles at litigation consulting firms or inside law-firm engagements, Domain 8 (20%) becomes especially relevant, alongside the legal-environment domains (Domains 2 and 3). Employers here care whether you understand how your analysis will be used, challenged, and tested in a dispute process.

Roles That Reward Communication

Domain 6 carries only 10%, but in hiring terms its importance is outsized. A forensic accountant who cannot translate findings into a clear report or testimony is far less useful than one who can. Interviewers frequently probe this directly.

What the Work Actually Looks Like

The exam objectives give a reliable picture of day-to-day responsibilities. A forensic engagement typically follows a recognizable arc, and each stage corresponds to a part of the CFF body of knowledge.

Engagement Initiation and Planning

Before any analysis starts, the professional defines the scope and terms of the work.

  • Clarifying whether the role is a consulting role or a testifying role
  • Identifying conflicts and independence considerations
  • Planning the procedures and resources the matter will require

Information Gathering, Preservation of Evidence, and Analysis

This is the largest single area of the exam at 25%, and it is the technical core of most forensic jobs.

  • Identifying relevant sources of financial and non-financial information
  • Preserving evidence so that its integrity can withstand challenge
  • Analyzing records to reconstruct transactions, identify anomalies, or quantify loss

Investigative and Fraud Risk Management

Also 25%, this area reflects investigations and the broader management of fraud exposure.

  • Responding to allegations and structuring an investigation
  • Assessing fraud risk and the controls meant to address it
  • Understanding how and why financial misconduct occurs

Litigation Services Concepts, Methodologies, and Procedures

At 20%, this covers analytical work done in support of disputes.

  • Quantifying economic damages and related analyses
  • Applying accepted methodologies and documenting assumptions
  • Supporting testimony and procedural requirements

Reporting and Communication of Findings

The deliverable stage, worth 10% of the exam.

  • Structuring written reports so conclusions follow from evidence
  • Presenting complex financial matters to non-accountants
  • Understanding how communications may be used in proceedings

The exam itself is multiple-choice, so you will not write reports during testing, but the questions are designed to test whether you understand how these tasks are properly performed. Employers know this, which is part of why they treat the credential as evidence of applied competence rather than pure theory. For a realistic sense of how demanding that is, read how hard the CFF exam is.

Pathways, Eligibility, and Timing Your Job Search

Whether you can list the credential on a resume depends on which pathway you are following and how far along you are. Two pathways currently exist.

ElementGlobal Standard PathwayExperienced Pathway
ExamOne exam: 175 multiple-choice questions, four-hour limitSeparate exam: 60 questions, two-hour limit
Experience1,000 forensic-accounting business hoursAt least seven years and 10,000 forensic-accounting business hours
CPD75 relevant CPD hours within the preceding five years75 relevant CPD hours within five years
EducationCan be satisfied by completing the approved CFF Learning PathwayExperience-based route

Both pathways require AICPA membership in good standing and an eligible CPA certificate or recognized equivalent. The U.S. credential FAQ distinguishes a valid, unrevoked CPA certificate from an active license to practice, which matters for professionals who hold a certificate but are not currently licensed. Check the issuer's current wording against your own situation rather than assuming. Our CFF requirements guide goes through eligibility in detail.

Interview with a passing result in hand: Candidates may pass an examination before completing the other education and experience requirements. If you are early in a forensic career, you can pass first and finish the hours later, which lets you present a concrete, verifiable achievement during a job search instead of an intention. Be precise on your resume: describe yourself as having passed the CFF exam until the full credential is conferred.

A note on a source discrepancy worth knowing about: one copy of the credential handbook contains eligibility prose for the experienced route that conflicts with its own eligibility table and with the issuer's current pathway page. The current pathway page and table state seven years and 10,000 hours, and that is the figure to rely on. If you are planning around the Experienced Pathway, confirm directly with the issuer before making career decisions.

Testing is available year-round through Kryterion, at test centers and via remote proctoring, so there is no fixed testing season forcing your timeline. See CFF exam dates and scheduling for practical planning. That flexibility is useful if you are timing the exam around a job offer, a promotion cycle, or a transfer into a forensic group.

Fees and Keeping the Credential Current

Employers sometimes reimburse certification costs, and it helps to walk into that conversation with accurate numbers. Global exam registration is publicly priced between $300 and $500, with membership discounts applying after you log in. The public range does not assign its endpoints to specific membership categories, so do not assume which number applies to you until you check your own account. Registration provides one year of availability and includes one retake under the policy effective May 1, 2024. Separately, the initial credential application lists $199 for AICPA members.

These are the only figures to quote with confidence. For the complete picture of what a candidate typically spends, see the CFF certification cost breakdown.

Maintenance matters for employers because it signals ongoing currency. Under the 2026 handbook and the issuer's renewal badge, keeping the credential requires annual AICPA membership and credential maintenance, continued qualifying status, an annual attestation, and at least 20 relevant CPD hours each year. Older summaries describing a three-year cycle should not replace this current annual statement. If you are negotiating a development budget with an employer, the annual CPD requirement is a legitimate, specific line item.

Compensation: What You Can and Cannot Say

Candidates understandably want to know what CFF jobs pay. The honest answer is that compensation in forensic accounting varies widely with employer type, geography, seniority, and whether you are testifying or supporting. Anyone quoting a precise premium for the credential without a sourced study is guessing, and this article will not do that.

What you can reasonably do is treat the credential as one input into your negotiating position. It documents a defined level of experience (the hours requirement) and examined knowledge, and it differentiates you from CPAs who have no forensic specialization. For realistic earnings context, the CFF salary guide examines the question in more depth, and the ROI analysis helps you weigh cost against career benefit for your own situation.

Building a Profile Employers Notice

Because the credential requires forensic business hours, your resume should make those hours legible. Hiring managers reading a forensic resume look for specific things:

  • Matter types. Fraud investigations, damages analyses, disputes, regulatory inquiries. Describe categories without breaching confidentiality.
  • Your role in the engagement. Did you gather and preserve evidence, build the analysis, draft the report, or support testimony? These map to the exam domains and signal depth.
  • Tools and data skills. Forensic data analysis is central to evidence work. Name the methods you actually use.
  • Communication evidence. Reports authored, presentations delivered, and any testimony or deposition support.
  • Credential status. State clearly whether you have passed the exam, are completing hours, or hold the full credential.

Key Takeaway

Write your experience in the language of the exam domains. A bullet that says you preserved and analyzed transactional evidence for a fraud matter, then supported the written report, tells a hiring manager you operate across Domains 5, 7, and 6 without needing a lecture on it.

Scheduling Prep Around Your Target Role

If a job search is driving your timeline, sequence your preparation to match the role you want while still covering all eight areas. This is the one place where study planning belongs in this article, and it is tied directly to the weights.

Early

Foundations First

  • Cover Domains 1 through 4 (5% each): standards, legal systems, laws and regulations, and engagement planning
  • These are small individually but form the vocabulary the larger domains assume
Middle

The Heavy Hitters

  • Devote the most time to Domain 5 (evidence and analysis) and Domain 7 (investigations and fraud risk), 25% each
  • Add Domain 8 (litigation services, 20%) and align emphasis with your target role
Late

Communication and Integration

  • Review Domain 6 (reporting, 10%) and then practice mixed-domain questions
  • Take full-length timed practice, since the Global Standard exam gives you four hours for 175 questions

Practice questions that mirror the multiple-choice format help you internalize how the exam frames scenarios. You can work through realistic items on our CFF practice test site, and the full methodology is laid out in the CFF study guide. For a condensed final review, the CFF cheat sheet is useful. Remember that external calculators are prohibited and results are reported as pass or fail against a psychometrically established standard, so prepare to work without outside aids. The mechanics of scoring are covered in our passing score explainer, and if you want data-driven context on outcomes, see the pass rate analysis.

When you are ready to test your readiness against realistic questions, start a CFF practice session here and use your results to decide where to spend your remaining hours.

Frequently Asked Questions

Are there jobs titled "CFF"?

No. CFF is a credential, not a job title. It appears as a preferred or required qualification in postings for forensic accountants, fraud investigators, litigation consultants, and similar roles, so search on the work itself as well as the acronym.

Can I apply for forensic roles before I finish the CFF requirements?

Yes. Candidates may pass the exam before completing the education and experience requirements, so you can truthfully present a passed exam while still accumulating forensic hours. Describe your status accurately until the credential is conferred.

Which exam domains matter most for investigation jobs?

Information Gathering, Preservation of Evidence, and Analysis (Domain 5) and Investigative and Fraud Risk Management (Domain 7) each carry 25% of the exam and mirror the core tasks of investigative roles.

Do I need to be a CPA to qualify?

The credential requires AICPA membership in good standing and an eligible CPA certificate or recognized equivalent. The U.S. FAQ distinguishes a valid, unrevoked CPA certificate from an active license to practice, so check the issuer's current wording against your circumstances.

What does it take to keep the credential once employed?

Under the 2026 handbook, you need annual AICPA membership and credential maintenance, continued qualifying status, an annual attestation, and at least 20 relevant CPD hours each year. Employers may support this through development budgets.

For a broader foundation on the credential itself, revisit our overview of what CFF is and the page on CFF certification. If you are weighing training options as part of your career plan, see our CFF training resource as well.

Ready to pass your CFF exam?

Put this into practice with free CFF questions across every exam domain.