Illegal and Unethical Conduct

5 minutes 5 Questions

In the CFE Code of Professional Ethics, the prohibition against illegal and unethical conduct is foundational. The ACFE Code states that a Certified Fraud Examiner 'shall not engage in any illegal or unethical conduct, or any activity which would constitute a conflict of interest.' Because fraud examiners are entrusted to uncover dishonesty in others, any personal lapse in legality or ethics undermines their credibility, the admissibility of their work, and the reputation of the profession as a whole. Illegal conduct refers to any violation of criminal or civil law, whether or not it relates directly to a fraud examination. Examples include theft, bribery, tax evasion, perjury, unauthorized access to computer systems, illegal wiretapping, or pretexting to obtain confidential financial records. A CFE must never commit a crime to solve a crime; evidence obtained illegally may be excluded in court and can expose the examiner and client to liability. Unethical conduct is broader and includes behavior that, while perhaps technically legal, violates moral standards or the spirit of the Code. Examples are misrepresenting credentials, exaggerating findings, accepting gifts from parties under investigation, disclosing confidential information, failing to disclose a conflict of interest, or offering opinions on guilt or innocence. Fraud examiners are expected to exhibit the highest level of integrity in both professional and personal matters, because personal misconduct can be used to impeach their testimony or discredit their findings. The ACFE enforces this standard through its Board of Regents and disciplinary process. Violations can result in censure, suspension, or revocation of the CFE credential. Importantly, the rule covers conduct that reflects adversely on the member even outside professional work, such as a conviction for a felony or a crime involving dishonesty. In essence, this principle demands that CFEs lead by example: their authority to expose wrongdoing rests on their own unwavering commitment to lawful, honest behavior at all times.

Illegal and Unethical Conduct: A Complete Guide for the CFE Exam (Ethics for Fraud Examiners)

1. Why This Topic Matters

Fraud examiners occupy a position of unusual trust. They investigate allegations of dishonesty, gather evidence that may end careers or lead to prosecution, and testify under oath about what they found. If the examiner is personally dishonest, breaks the law, or cuts ethical corners, three things happen at once: the evidence becomes vulnerable to attack in court, the client or employer is exposed to liability, and the credibility of the entire anti-fraud profession is damaged. This is why the ACFE Code of Professional Ethics devotes one of its core provisions to this subject: A Certified Fraud Examiner shall not engage in any illegal or unethical conduct, or any activity which would constitute a conflict of interest.

On the CFE Exam, this topic sits within the Fraud Prevention and Deterrence section under Ethics for Fraud Examiners. It is heavily tested because it is foundational: nearly every other ethical rule (confidentiality, truthful testimony, professional competence, avoiding conflicts) can be viewed as a specific application of the broader duty not to act illegally or unethically. Candidates who understand the reasoning behind the rule, rather than memorising a sentence, consistently score well on these questions.

2. What It Is: Defining Illegal and Unethical Conduct

Illegal conduct is any act or omission that violates a statute, regulation, ordinance, or court order. It is defined by the law of the relevant jurisdiction, is written down, and carries formal sanctions such as fines, imprisonment, injunctions, or civil damages. Examples relevant to fraud examiners include unlawful wiretapping, accessing a computer without authorisation, obtaining financial records through false pretences, trespass, bribery of a witness, obstruction of justice, perjury, and violating data protection or privacy laws.

Unethical conduct is behaviour that violates accepted moral principles or professional standards, whether or not the law prohibits it. Ethics is broader than law. It asks not Can I legally do this? but Should I do this, given my duties of honesty, fairness, integrity, and respect for others? Examples include lying to a subject when not legally prohibited, exaggerating credentials, taking an assignment one is not competent to perform, padding a bill, revealing information that is not legally confidential but was shared in trust, or exploiting a loophole to the detriment of someone who relied on you.

The key relationship: The two categories overlap but are not identical. The Fraud Examiners Manual stresses that not everything that is legal is ethical, and in rare cases something technically illegal may be ethically defensible (for example, a minor regulatory breach committed to prevent serious harm). For a CFE, however, the practical rule is simple: the professional is held to the higher of the two standards. Complying with the law is the minimum; ethical conduct is the expectation.

A useful mental model is a two-by-two grid:
• Legal and ethical – the zone in which a CFE should operate.
• Illegal and unethical – clearly prohibited (e.g., bribing a witness).
• Legal but unethical – prohibited for a CFE even though no law is broken (e.g., deceptively implying you are a law enforcement officer in a jurisdiction where that is not itself a crime, or taking a case you know you cannot handle competently).
• Illegal but arguably ethical – rare, and the Code still expects the CFE to obey the law; a fraud examiner is not entitled to break the law because the cause seems just.

3. How It Works: The Standard in Practice

3.1 Scope of the standard
The provision applies to both professional and personal conduct. The ACFE position is that a member's private misconduct, such as a conviction for a crime involving dishonesty, reflects on the credential and the profession. A CFE cannot argue that off-duty illegal conduct is irrelevant to certification. Likewise, the standard is not limited to fraud-related laws; any illegal conduct is a potential violation.

3.2 Knowledge of the law
Fraud examiners are expected to know, or to find out, the laws governing their investigative methods in each jurisdiction where they operate. Ignorance is not a defence. Areas most commonly implicated include: electronic surveillance and recording consent rules; pretexting (particularly obtaining financial information from institutions under false pretences, which is a federal offence in the United States under the Gramm-Leach-Bliley Act); unauthorised computer access; privacy and data protection law; employment and labour law in interviews; defamation; false imprisonment during interviews; and trespass. When the law is unclear, the examiner should seek legal counsel before acting.

3.3 Following instructions is not a defence
A CFE may not engage in illegal or unethical conduct simply because a client, employer, or supervisor requests or instructs it. The duty runs to the law and the profession, not merely to the person paying the fee. If a client insists on an unlawful technique, the correct response is to refuse, explain why, propose lawful alternatives, and if necessary withdraw from the engagement.

3.4 Ethics goes beyond rules
The Manual discusses ethical decision-making in terms of moral philosophies (such as utilitarianism and duty-based ethics) and emphasises that professional codes cannot anticipate every situation. When no specific rule applies, the examiner should ask: Is this honest? Is it fair to all affected parties? Would I be comfortable if my action were publicly disclosed? Does it harm the reputation of the profession? Rationalisations such as everyone does it, no one will know, the client authorised it, or the end justifies the means are red flags, and the exam frequently builds questions around them. Notably, these are the same rationalisations fraud examiners are trained to recognise in fraudsters.

3.5 Consequences
Violations expose the CFE to criminal or civil liability, loss of licences, dismissal, and exclusion of evidence or loss of a case. Within the ACFE, members may be investigated by the Board of Regents or the Professional Standards and Practices Committee and may be censured, suspended, or expelled, with loss of the CFE credential. A felony conviction, or discipline by another professional body for dishonest conduct, is grounds for action against membership.

3.6 Interaction with other Code provisions
Think of the illegal and unethical conduct provision as an umbrella. Beneath it sit the more specific duties: commitment to professionalism and diligence; integrity and acceptance of only assignments where there is a reasonable expectation of completing them with professional competence; obeying lawful orders of the courts and testifying truthfully; obtaining evidence to establish a reasonable basis for opinions and never expressing opinions on guilt or innocence; maintaining confidentiality; revealing all material matters discovered; and continually improving professional competence. A breach of any of these is also, in a sense, unethical conduct.

4. Common Scenarios Tested on the Exam

• Recording a conversation in a jurisdiction that requires all-party consent without obtaining consent: illegal and unethical. The CFE must comply with the stricter applicable law.
• Posing as a bank customer to obtain account information: illegal pretexting. Not permitted even if it is the fastest route to evidence.
• Using a legal but deceptive technique that the examiner knows would humiliate or exploit a vulnerable individual: legal does not mean ethical; the CFE should refrain.
• Client instructs the CFE to destroy a document that may be relevant to litigation: obstruction; refuse and advise counsel.
• A CFE is convicted of a crime unrelated to work, such as tax evasion: still a violation of the Code because the standard covers personal conduct.
• Accepting a gift from a subject of an investigation: unethical even if no bribery statute is triggered, because it compromises objectivity and creates a conflict of interest.
• Billing for hours not worked: fraud by the fraud examiner; both illegal and unethical.
• Reporting a colleague: a CFE who becomes aware of another member's serious violation should not conceal it; cooperation with ACFE disciplinary processes is expected.

5. Exam Tips: Answering Questions on Illegal and Unethical Conduct

Tip 1 – Know the exact wording. The provision reads: A Certified Fraud Examiner shall not engage in any illegal or unethical conduct, or any activity which would constitute a conflict of interest. Questions may quote it with a word changed (for example, substituting professional for any) to see whether you notice that the standard is comprehensive and includes personal conduct.

Tip 2 – Remember that ethics is broader than law. If a question asks whether conduct that is legal can still violate the Code, the answer is yes. If it asks whether all unethical acts are illegal, the answer is no. If it asks whether a CFE may do something illegal because it is for a good cause or at a client's request, the answer is no.

Tip 3 – Apply the higher standard. When two standards could apply (the law of two jurisdictions, or law versus the Code), the CFE follows the more restrictive one.

Tip 4 – Instructions never excuse misconduct. Any answer choice that justifies illegal or unethical behaviour because a client, employer, attorney, or supervisor approved it is wrong. The correct response pattern is: refuse, explain, propose a lawful alternative, document, and withdraw if necessary.

Tip 5 – Watch for rationalisations in the answer choices. Phrases such as since no one would be harmed, because it is common practice, because the subject is clearly guilty, or as long as the evidence is reliable signal a distractor.

Tip 6 – Personal conduct counts. If a scenario describes a CFE's off-duty crime or dishonesty, recognise that it is still a Code violation. Do not pick answers that limit the standard to work performed for clients.

Tip 7 – Be careful with absolutes. Statements such as illegal conduct is always unethical or unethical conduct is always illegal are generally false as philosophical propositions. However, statements that a CFE must always comply with the law and with the Code are true. Read whether the question is about ethics in general or about the CFE's duty.

Tip 8 – Connect to investigative methods. Many questions disguise an ethics issue as an investigation question: recording consent, pretexting, computer access, surveillance, interview coercion. Ask yourself first, Is this legal in the jurisdiction? and second, Even if legal, is it consistent with integrity and professional standards?

Tip 9 – Know the consequences and process. Expect questions on who hears complaints (the ACFE Board of Regents and the Professional Standards and Practices Committee), what sanctions exist (admonishment, suspension, expulsion), and the fact that felony convictions or discipline by other professional bodies are grounds for action.

Tip 10 – When in doubt, choose the most conservative, transparent, and lawful option. The exam rewards the answer that protects the integrity of the evidence, the rights of the subject, the interests of the client, and the reputation of the profession simultaneously.

6. Practice Questions

Question 1. A client asks a CFE to obtain a suspect's bank statements by calling the bank and pretending to be the account holder. The CFE knows the information would greatly assist the investigation. What should the CFE do?
A. Comply, because the client authorised the action.
B. Comply, but document that the client requested it.
C. Refuse, because pretexting financial institutions is illegal and unethical, and suggest lawful alternatives such as a subpoena.
D. Comply only if the suspect is clearly guilty.
Answer: C. Client authorisation and the suspect's apparent guilt never justify illegal conduct.

Question 2. Which statement best describes the relationship between illegal and unethical conduct under the CFE Code?
A. All unethical conduct is illegal.
B. The Code prohibits only illegal conduct.
C. Conduct can be legal yet still violate the Code because ethical standards exceed legal minimums.
D. The Code applies only to conduct performed during professional engagements.
Answer: C.

Question 3. A CFE is convicted of felony tax evasion unrelated to any fraud examination work. Does this implicate the Code of Professional Ethics?
A. No, because it is a personal matter.
B. No, because tax law is outside the scope of fraud examination.
C. Yes, because the standard against illegal conduct applies to personal as well as professional conduct and a felony conviction is grounds for disciplinary action.
D. Only if the client complains.
Answer: C.

Question 4. A CFE operates in a jurisdiction permitting one-party consent recording but interviews a subject located in an all-party consent jurisdiction. The CFE should:
A. Record without consent because the CFE's home jurisdiction permits it.
B. Apply the stricter standard and obtain consent from all parties, or not record.
C. Record and later ask for consent.
D. Let the client decide.
Answer: B.

7. Key Takeaways

• The CFE must not engage in any illegal or unethical conduct, in professional or personal life.
• Legal is the floor, ethical is the standard. Legal conduct may still be unethical and therefore prohibited.
• No instruction from a client, employer, or attorney justifies illegal or unethical conduct.
• Know the laws governing investigative techniques in every jurisdiction where you work, and consult counsel when unsure.
• Recognise rationalisations in yourself as readily as you recognise them in fraudsters.
• Violations carry legal, professional, and ACFE disciplinary consequences, including loss of the credential.
• On the exam, select the answer that is lawful, honest, conservative, protective of all stakeholders, and consistent with the exact wording of the Code.
Test mode:

CFE - Illegal and Unethical Conduct Example Questions

Test your knowledge of Illegal and Unethical Conduct

Question 1

Which of the following investigative actions by a fraud examiner would MOST likely constitute engaging in illegal conduct, in breach of the professional ethics standard?

Question 2

A fraud examiner who obtains a subject's bank account records by posing as the account holder when contacting the bank is engaging in illegal or unethical conduct.

Question 3

Which of the following BEST describes how the professional prohibition on illegal or unethical conduct applies to a fraud examiner's behavior?

More Illegal and Unethical Conduct questions
16 questions (total)