CFF logo
Focused certification exam prep
Start practice

CFF Study Guide 2026: How to Pass on Your First Attempt

TL;DR
  • The Global Standard exam has 175 multiple-choice questions in four hours; the Experienced Pathway exam has 60 questions in two hours.
  • Information gathering, evidence preservation, and analysis (25%) and investigative and fraud risk management (25%) are the two largest content areas.
  • Litigation services concepts, methodologies, and procedures carries 20%, so three domains together account for 70% of the exam.
  • Exam registration includes one year of availability and one retake under the policy effective May 1, 2024.

What You Are Actually Studying For

The Certified in Financial Forensics credential is administered by the AICPA, part of the Association of International Certified Professional Accountants (AICPA & CIMA). It signals that a CPA can combine accounting expertise with investigative and litigation skills: tracing money, preserving evidence, assessing fraud risk, and explaining findings to people who are not accountants, including judges, juries, arbitrators, and opposing counsel. If you need a refresher on the credential itself, start with what CFF certification is and the broader CFF certification overview.

This guide is written for the candidate who wants to pass on the first attempt. That means building a plan around the exam's actual structure rather than around generic accounting-exam habits. The CFF exam is not a recall test of definitions. It rewards candidates who can reason through an engagement the way a forensic practitioner does: what do I need to preserve, what is the scope, what could go wrong with this evidence, and how do I communicate the result defensibly.

Study from the objectives, not from a list of topics you find interesting: The eight content headings are exam objectives published by the issuer, not a preparation curriculum. Treat them as the boundary of what can be tested, and use your professional experience to fill in the depth within each one.

Pick Your Pathway Before You Pick Your Books

There are two current examination pathways, and they are not interchangeable. Your preparation volume, your pacing, and even your test-day stamina strategy depend on which one you are taking. Confirm your eligibility details in the CFF requirements guide before committing to a study calendar.

FeatureGlobal Standard PathwayExperienced Pathway
Exam formatOne exam, 175 multiple-choice questionsSeparate exam, 60 questions
Time limitFour hoursTwo hours
Forensic-accounting experience1,000 business hoursAt least seven years and 10,000 business hours
CPD requirement75 relevant hours within the preceding five years75 relevant hours within five years
Education routeApproved CFF Learning Pathway can satisfy the education requirementExperience-based route

Two points are worth stressing. First, the Global Standard exam is a single examination, not the older two-part format, so any study material that describes two separate parts is out of date. Second, candidates may pass an examination before completing the other education and experience requirements. That flexibility lets you sequence the exam early while you are still accumulating hours, which many candidates find reduces the risk of letting knowledge go stale.

Credential requirements also include AICPA membership in good standing and an eligible CPA certificate or recognized equivalent. The issuer's U.S. credential FAQ distinguishes a valid, unrevoked CPA certificate from an active license to practice, so read the current wording carefully rather than assuming a broader exemption applies to you.

The Weight Map: Where the Points Live

The exam content is organized into two official modules containing eight weighted content areas. The first module, Core Knowledge, Information, and Skills, accounts for 55%. The second, Core Practice Areas, accounts for 45%. The public registration page names the first group slightly differently (Core Information, Knowledge, and Skills), but the weights and eight headings are consistent across the issuer materials we reviewed. For a deeper walk-through of every heading, see the complete guide to all eight CFF content areas.

Content AreaWeight
Professional Standards and Roles5%
Legal Systems, Courts, and Dispute Resolution5%
Laws, Regulations, and Guidance5%
Engagement Initiation and Planning5%
Information Gathering, Preservation of Evidence, and Analysis25%
Reporting and Communication of Findings10%
Investigative and Fraud Risk Management25%
Litigation Services Concepts, Methodologies, and Procedures20%

The arithmetic matters for planning. The two 25% areas plus the 20% litigation area make up 70% of the exam. The remaining five areas share 30%. A candidate who is exceptional at the five smaller areas but shaky on evidence analysis and fraud risk management is in far more danger than the reverse. That said, do not read "5%" as "ignorable": with 175 questions on the Global Standard exam, even a 5% area is a meaningful cluster of questions, and a weak spot there can be the difference on a borderline result.

Mastering the Three Big Domains

Information Gathering, Preservation of Evidence, and Analysis (25%)

What candidates must understand

This area is the operational core of forensic work: how you obtain information, protect it, and turn it into analysis that holds up under scrutiny.

  • Identifying sources of evidence and deciding what to request from the client, third parties, and public records
  • Preserving evidence so that integrity and chain of custody can be demonstrated later
  • Handling electronically stored information and understanding the practical limits of what you can reliably conclude from it
  • Selecting analytical techniques appropriate to the question being asked, and documenting why
  • Recognizing when data is incomplete, altered, or unreliable and adjusting conclusions accordingly

Expect scenarios that ask what you should do first, what you should avoid doing, or what step best protects the integrity of the evidence. The preservation logic is the part candidates underestimate. Many wrong answers on this domain are tempting because they are efficient: they get the analysis moving faster but compromise the evidentiary record.

Investigative and Fraud Risk Management (25%)

What candidates must understand

This area covers how fraud and misconduct are identified, assessed, and managed, both reactively in an investigation and proactively in risk programs.

  • How fraud risk is assessed and which conditions make misconduct more likely
  • How investigations are structured, staffed, and conducted
  • How scope, objectives, and hypotheses guide an inquiry
  • How controls, monitoring, and response protocols reduce exposure
  • How to handle sensitive issues that arise mid-investigation, such as confidentiality and communications

Questions here tend to be judgment-driven. You may be given a fact pattern with an apparent red flag and asked to choose the most appropriate response. The best answers usually reflect a disciplined, documented process rather than a dramatic shortcut.

Litigation Services Concepts, Methodologies, and Procedures (20%)

What candidates must understand

This area connects accounting analysis to the dispute process: how your work functions as expert input in litigation, arbitration, and other proceedings.

  • The difference between consulting and testifying roles and what each implies for your work product
  • Quantifying damages and the methodologies that support or undermine a damages opinion
  • How assumptions, data limitations, and alternative scenarios affect the reliability of a conclusion
  • Discovery concepts and how your work interacts with the procedural timeline of a matter
  • Preparing for cross-examination and challenges to methodology
A pattern to watch for: On litigation questions, the correct answer often favors the choice that is most defensible under challenge rather than the one that is most aggressive or most convenient for the client. Ask yourself how the approach would survive scrutiny from the other side.

The Five Smaller Domains: Small Weight, Real Traps

Together, these five areas carry 30% of the exam. They are also where candidates with strong investigative instincts but limited legal exposure tend to lose easy points.

Professional Standards and Roles (5%)

Expect questions about the practitioner's obligations: objectivity, independence, competence, confidentiality, and the standards that govern forensic engagements. The recurring trap is a scenario in which a client relationship or fee arrangement creates pressure on independence or objectivity. The right answer almost always protects professional integrity over client convenience.

Legal Systems, Courts, and Dispute Resolution (5%)

This is the area most likely to feel unfamiliar to accountants. Learn the basic structure of how disputes move through courts and alternative forums such as mediation and arbitration, and how forensic practitioners fit into each. You are not expected to be an attorney, but you are expected to speak the vocabulary fluently enough to work alongside one.

Laws, Regulations, and Guidance (5%)

Focus on understanding what laws and regulatory expectations mean for the engagement you are performing, not on memorizing statutory text. Questions tend to ask how a legal or regulatory requirement should shape your approach, reporting, or communications.

Engagement Initiation and Planning (5%)

This covers everything that happens before the real work begins: conflict checks, engagement terms, scope definition, resource planning, and risk assessment of taking the engagement. Poorly scoped engagements are a classic source of professional exposure, and the exam reflects that.

Reporting and Communication of Findings (10%)

At 10%, this is the largest of the smaller areas. It tests whether you can present conclusions clearly, support them, and match the form of communication to the audience and the purpose. Pay attention to the distinction between a factual summary, an opinion, and a statement that goes beyond what the evidence supports. Overreaching conclusions are a favorite distractor.

How CFF Questions Are Built

The exam is composed of multiple-choice questions. There is no calculator allowed from outside the testing environment, so do not build a preparation routine that depends on your own device; practice doing quantitative reasoning with the tools you will actually have. Because the exam measures against a psychometrically established standard and reports pass/fail, there is no benefit to chasing a high score in one area at the expense of another. For the scoring details, see what the CFF passing score means.

Most questions fall into recognizable patterns:

  • Next-best-step questions: Given a scenario, which action should the practitioner take first? These reward process discipline.
  • Most-appropriate-response questions: Several options may be plausible; one best reflects professional standards and defensibility.
  • Identify-the-issue questions: A short fact pattern contains a problem such as an independence threat, a preservation gap, or an unsupported conclusion, and you must spot it.
  • Concept-application questions: You know the concept; the test is whether you can apply it to messy facts.

When you work practice items, do not stop at whether you got it right. For each question, articulate why the three wrong answers are wrong. That habit is the fastest way to internalize the exam's logic, and you can build it using the CFF practice test. Candidates who want a sense of relative difficulty can read how hard the CFF exam is, and those curious about outcomes data should see what the data shows on CFF pass rates.

A Domain-Sequenced Study Schedule

The schedule below is sequenced by domain rather than by a generic calendar. The logic: build the legal and professional vocabulary first so the large operational domains make sense, then spend the heaviest block on the 25% areas, then close with the litigation and reporting material and a full-length rehearsal. Adjust the length to your own experience; a practitioner with years of investigative work may compress the early weeks, while a candidate coming from audit or tax may need more time on legal systems and litigation concepts.

Weeks 1-2

Foundations: Standards, Legal Systems, Laws, and Planning

  • Cover Professional Standards and Roles, Legal Systems, Laws and Regulations, and Engagement Initiation and Planning together, since each is 5% and they share vocabulary
  • Build a glossary of legal and procedural terms you encounter
  • Take a short diagnostic to see which of these four feels least familiar
Weeks 3-5

Information Gathering, Preservation, and Analysis

  • Work through evidence sources, preservation, and analytical technique selection
  • Practice scenario questions focused on what to do first and what to avoid
  • Write short notes on why integrity of evidence changes the correct answer
Weeks 6-8

Investigative and Fraud Risk Management

  • Study fraud risk assessment, investigation structure, and response processes
  • Practice judgment questions where multiple options look reasonable
  • Revisit weak items from the evidence domain to keep it fresh
Weeks 9-10

Litigation Services and Reporting

  • Cover damages methodologies, expert roles, and defensibility of assumptions
  • Study how findings are communicated and where conclusions overreach
  • Do timed sets to build pacing for the longer Global Standard exam
Week 11-12

Integration and Rehearsal

  • Take at least one full-length timed practice session under no-calculator conditions
  • Review every miss by domain and spend remaining time on the heaviest weak area
  • Stop learning new material in the final days; consolidate instead

If you are taking the Experienced Pathway exam with its 60 questions and two-hour limit, the same domain logic applies but the calendar can usually compress, because candidates on that pathway bring substantial practice experience. Keep the weight map in mind and still prioritize evidence analysis and fraud risk management. A one-page recap is available in the CFF cheat sheet.

Key Takeaway

Allocate study time roughly in proportion to weight, then add extra time to whichever area your diagnostics show is weakest. Seventy percent of the exam sits in three domains, but a collapse in any one smaller domain can still cost you a borderline result.

Registration, Fees, and Test-Day Mechanics

Exams are delivered by Kryterion, which offers year-round testing at test centers and through remote proctoring. There is no fixed annual window to plan around, which gives you flexibility but also removes an external deadline; set your own. For timing considerations, see CFF exam dates and scheduling.

Global exam registration is publicly priced at USD $300 to $500. Membership discounts apply after login, but the public range does not tie its endpoints to specific member categories, so check your own price when you sign in rather than assuming. Registration provides one year of availability and includes one retake under the policy effective May 1, 2024. That retake is a safety net, not a plan: treat the first sitting as the real attempt, and use the retake only if you genuinely need it.

Separately from the exam, the initial credential application product lists $199 for AICPA members. Budget for both, and see the CFF certification cost breakdown for a full picture of what you will spend.

Cost ItemWhat the Issuer Lists
Global exam registrationUSD $300-$500 public range; membership discounts apply after login
Initial credential application (AICPA members)$199
Exam availability windowOne year from registration, including one retake
Test-day logistics: Whether you test at a center or remotely, confirm identification and environment rules in advance, and remember that external calculators are not allowed. Practice at the same time of day you intend to test, particularly for the four-hour Global Standard exam, where stamina and pacing matter as much as knowledge.

After You Pass: Credential Steps and Maintenance

Passing the exam is one requirement among several. You still need to satisfy the experience and CPD requirements for your pathway, hold AICPA membership in good standing, and have an eligible CPA certificate or recognized equivalent. Because you may pass the exam before completing the other requirements, there is no need to delay sitting for it while you accumulate hours.

Maintaining the credential is an annual commitment. Under the 2026 handbook and the issuer's badge, renewal requires annual membership and credential maintenance, continued qualifying status, an annual attestation, and at least 20 relevant CPD hours each year. Older summaries describing a three-year cycle should not replace this current annual statement. Many candidates also weigh the career side of the decision; the ROI analysis, the salary guide, and the overview of CFF jobs are good places to start.

Frequently Asked Questions

How many questions are on the CFF exam?

The Global Standard Pathway exam has 175 multiple-choice questions with a four-hour limit. The Experienced Pathway uses a separate 60-question exam with a two-hour limit.

Which content areas should I prioritize?

Information Gathering, Preservation of Evidence, and Analysis (25%) and Investigative and Fraud Risk Management (25%) are the largest, followed by Litigation Services Concepts, Methodologies, and Procedures at 20%. Together they make up 70% of the exam.

Do I need to finish my experience hours before taking the exam?

No. Candidates may pass an examination before completing the other education and experience requirements, though all requirements must be met to earn the credential.

What happens if I do not pass on the first try?

Global exam registration includes one retake under the policy effective May 1, 2024, and provides one year of availability. Plan as though you have one real attempt, and use the retake only as a fallback.

Can I use my own calculator?

No. External calculators are prohibited, so practice quantitative reasoning without relying on your own device, and review the current testing rules before exam day.

Ready to pass your CFF exam?

Put this into practice with free CFF questions across every exam domain.