Regulatory and Licensing Jurisdiction
In the CFE curriculum, 'Non-Criminal Actions' refers to the civil and administrative remedies that can be pursued against fraudsters apart from criminal prosecution. One major category is regulatory and licensing action, which depends on the concept of regulatory and licensing jurisdiction. This jurisdiction is the legal authority granted to government agencies and professional bodies to oversee, investigate, and discipline individuals or entities operating in a regulated industry or holding a professional license. Examples include securities regulators (such as the SEC), banking and insurance regulators, tax authorities, environmental agencies, medical and legal licensing boards, and accounting oversight bodies. Their authority comes from the statutes that create them and the rules they promulgate; unlike criminal prosecutors, they do not need to prove guilt beyond a reasonable doubt. Instead, they apply administrative standards of proof, usually a preponderance of the evidence or substantial evidence, which makes regulatory action an attractive and often faster route to sanction wrongdoing. Regulators typically hold broad investigative powers: they can demand records, compel testimony, conduct examinations and audits, and issue subpoenas within their field. Once a violation is found, available sanctions include fines and civil penalties, disgorgement of ill-gotten gains, cease-and-desist orders, restitution to victims, mandatory compliance programs, and, most significantly, suspension or revocation of licenses, registrations, or the right to participate in an industry. Proceedings generally occur before an administrative law judge or the agency itself, with the possibility of appeal to the courts. For a fraud examiner, understanding regulatory jurisdiction is important for several reasons. It identifies which agency has authority over a particular matter, so findings can be referred appropriately. It shapes how evidence should be gathered and documented, since regulatory inquiries often run parallel to or precede criminal referrals. Finally, it offers victims and organizations a practical remedy: even when criminal charges are impractical, a regulator can remove a fraudster's ability to continue operating, protecting the public and deterring future misconduct.
Regulatory and Licensing Jurisdiction (ACFE CFE – Non-Criminal Actions): A Complete Study Guide
Fraud is not addressed only in criminal courts. A large share of the consequences that fraudsters face come from administrative bodies: securities regulators, banking supervisors, insurance commissioners, gaming commissions, professional licensing boards and similar agencies. These bodies can fine, bar, suspend, censure and revoke the licences that allow a person or business to operate at all. For a Certified Fraud Examiner, understanding regulatory and licensing jurisdiction is essential because:
• Many fraud examinations end (or begin) with a referral to a regulator rather than a prosecutor.
• Regulatory proceedings use different rules, standards of proof and procedural protections than criminal or civil courts, and the CFE must know how evidence gathered in one forum may be used in another.
• Administrative sanctions can be faster, cheaper and often more certain than a criminal conviction, and they can run in parallel with criminal and civil actions.
• The CFE Exam Law section (Non-Criminal Actions) tests this material directly, usually through scenario questions about what an agency can and cannot do, which standard of proof applies, and what rights a respondent has.
2. What Regulatory and Licensing Jurisdiction Is
Jurisdiction is the legal authority to act over a person, entity, activity or subject matter. Regulatory jurisdiction is the authority of a government agency (or a body to which government has delegated power) to make rules, investigate, and adjudicate violations within a defined field. Licensing jurisdiction is the narrower power to grant, condition, suspend and revoke the permission needed to engage in a regulated profession or business (accountancy, law, medicine, securities broker-dealers, insurance agents, contractors, real estate brokers, financial institutions, casinos, etc.).
Key features that distinguish administrative/regulatory action from criminal and civil litigation:
• Source of power: an agency has only the authority granted to it by its enabling statute (or, in some countries, by delegated legislation or royal charter). It cannot act outside that grant (ultra vires).
• Purpose: protection of the public, markets or a profession, not punishment in the criminal sense. Remedies are described as remedial even when they feel punitive.
• Forum: hearings are held before the agency itself, a hearing officer or an administrative law judge (ALJ), not before a jury.
• Standard of proof: generally the civil standard, preponderance of the evidence (balance of probabilities). Some licence-revocation matters require clear and convincing evidence, but never beyond a reasonable doubt.
• Procedure: more flexible rules of evidence; hearsay is frequently admissible; discovery is limited; the agency is often investigator, prosecutor and adjudicator (subject to internal separation of functions).
• Sanctions: fines and civil money penalties, restitution or disgorgement, cease-and-desist orders, censure, suspension, revocation or denial of a licence, industry bars, mandatory audits or monitors, consent orders.
3. How It Works
3.1 The three powers of an administrative agency
Most agencies hold a combination of:
(a) Rulemaking (quasi-legislative) – issuing regulations that have the force of law, filling in details of the statute.
(b) Investigative – inspecting premises and records, requiring reports, compelling production of documents and testimony through administrative subpoenas, conducting examinations of licensees.
(c) Adjudicative (quasi-judicial) – holding hearings, finding facts, and imposing sanctions.
Fraud examiners most often interact with the investigative and adjudicative powers.
3.2 Scope of jurisdiction
Jurisdiction can be defined by:
• Subject matter – e.g., a securities regulator over offers and sales of securities; an insurance department over insurers and agents.
• Person or entity – licensees, registrants, and sometimes anyone who participates in the regulated activity (a regulator may pursue an unlicensed person for practising without a licence).
• Geography – federal/national, state/provincial, or local; many professions are licensed at the state level, so a professional may hold several licences and face several boards.
• Time – statutes of limitation for administrative actions are often longer, or absent, compared with criminal statutes.
If an agency exceeds its scope, its order can be set aside on judicial review. Exam questions often turn on this point: the agency can discipline licensees for conduct related to the licence; it generally cannot imprison anyone and cannot adjudicate ordinary private damages claims between two citizens.
3.3 Licensing as a privilege
A licence is legally a privilege, not an absolute right. Because the state grants the privilege, it may attach conditions (continuing education, bonding, record-keeping, cooperation with examinations) and withdraw it for cause. Typical grounds for discipline include fraud or dishonesty, conviction of a crime involving moral turpitude, gross negligence or incompetence, misappropriation of client funds, failing to cooperate with the regulator, and false statements on the licence application. Note that discipline can follow from conduct outside the profession if it reflects on fitness (e.g., a CPA convicted of tax fraud in a personal matter).
Licensees nonetheless enjoy due process: notice of the charges, an opportunity to be heard, the right to present evidence and to be represented by counsel, an impartial decision-maker and a written decision supported by the record. Emergency or summary suspension may be allowed where there is an immediate danger to the public, with a prompt post-suspension hearing.
3.4 The typical administrative enforcement sequence
1. Trigger – complaint, whistleblower tip, routine examination, referral from auditors or law enforcement, media report, or self-report by the firm.
2. Informal inquiry – requests for information, interviews, review of filings.
3. Formal investigation – issuance of administrative subpoenas; testimony under oath; document production. Refusal to comply can be enforced through the courts.
4. Charging decision – notice of hearing, order instituting proceedings, statement of charges, or a Wells-type notice allowing the respondent to respond before charges are filed.
5. Settlement – the majority of matters end in a consent order, often with the respondent neither admitting nor denying the findings.
6. Hearing – before an ALJ or hearing panel; agency staff present evidence; respondent cross-examines and presents a defence; relaxed evidentiary rules.
7. Decision – initial decision by the ALJ, then review by the commission or board, which issues a final order.
8. Judicial review – a respondent must usually exhaust administrative remedies before going to court. Courts give deference to the agency: findings of fact are upheld if supported by substantial evidence; the decision is overturned only if arbitrary, capricious, an abuse of discretion, unconstitutional, or beyond statutory authority. The court does not retry the facts.
3.5 Rights of respondents in administrative proceedings
• Privilege against self-incrimination: an individual may invoke it in a regulatory hearing if the answer could be used in a later criminal case. However, unlike in criminal trials, the fact-finder in a civil or administrative proceeding may draw an adverse inference from the refusal. Corporations and other artificial entities have no such privilege; the custodian of corporate records must produce them.
• Searches and inspections: warrant requirements are relaxed for pervasively regulated industries; licensees are usually deemed to consent to inspections as a condition of licensure. Evidence obtained in violation of constitutional rights is less likely to be excluded in administrative hearings than in criminal trials.
• Right to counsel: respondents may retain counsel, but there is normally no right to appointed counsel.
• No jury: administrative adjudication is by the agency or an ALJ.
• Discovery: limited and governed by the agency's own rules.
3.6 Interaction with criminal and civil proceedings
• Parallel proceedings are common and lawful: a securities fraud may generate a criminal prosecution, a regulatory enforcement action, and a private civil suit at the same time.
• Double jeopardy does not ordinarily bar an administrative sanction after (or before) a criminal case, because the administrative remedy is classified as civil/remedial. Only where a penalty is so punitive in purpose or effect that it is essentially criminal will double jeopardy concerns arise.
• Information sharing: regulators routinely refer matters to prosecutors and share evidence; testimony compelled under a grant of immunity, however, cannot be used in a later criminal prosecution of the witness.
• Collateral consequences: a criminal conviction often triggers automatic or near-automatic licence revocation; conversely, an administrative finding may be admissible or persuasive in a civil suit.
• Stays: a respondent may ask to stay the administrative matter pending the criminal case to avoid the self-incrimination dilemma, but the agency is not required to agree.
3.7 International perspective
The CFE Exam is international, and the same framework exists worldwide: securities and financial-conduct authorities, prudential regulators, anti-money-laundering supervisors, data-protection authorities, competition authorities and professional bodies all exercise regulatory and licensing jurisdiction under enabling legislation, apply civil standards of proof, impose administrative fines and bans, and are subject to review by courts or specialised tribunals. Terminology differs (e.g., 'balance of probabilities' versus 'preponderance of the evidence'; 'tribunal' versus 'ALJ'), but the principles tested are the same.
4. The Fraud Examiner's Role
• Identify every regulator and licensing body with jurisdiction over the subject (profession, industry, geography) early in the engagement; this affects reporting duties, confidentiality and strategy.
• Understand that a report or referral to a regulator may be mandatory for certain entities (e.g., suspicious activity/transaction reports), and that regulators may require licensees to self-report.
• Preserve evidence to the highest standard anyway (chain of custody, authentication), because regulatory evidence frequently migrates to criminal or civil proceedings.
• Be alert to the self-incrimination dilemma for individual subjects in parallel proceedings and avoid giving legal advice; coordinate with counsel.
• Recognise that cooperation with regulators can mitigate sanctions, and that false statements to a regulator can themselves constitute a crime.
• Provide expert or fact testimony in administrative hearings, remembering that hearsay and summaries are more readily accepted than in court.
5. Exam Tips: Answering Questions on Regulatory and Licensing Jurisdiction
Tip 1 – Anchor on the standard of proof. If a question asks what must be shown to revoke a licence or impose a civil fine, the answer is almost always preponderance of the evidence (occasionally clear and convincing for revocations in some jurisdictions). It is never beyond a reasonable doubt. Any option mentioning the criminal standard for an administrative sanction is wrong.
Tip 2 – Remember the limits of agency power. Agencies can only do what their enabling statute permits. They can fine, suspend, revoke, bar, order restitution or disgorgement, and issue cease-and-desist orders. They cannot impose imprisonment. If an answer choice gives an agency a power normally reserved to criminal courts, eliminate it.
Tip 3 – Licence equals privilege. Questions testing whether a licensee can be disciplined for personal misconduct, for refusing to cooperate with the regulator, or for a criminal conviction unrelated to clients: the answer is typically yes, as long as the conduct bears on fitness to hold the licence and due process (notice and hearing) is provided.
Tip 4 – Know the due process minimum. Notice of the charges, an opportunity to be heard before an impartial decision-maker, and a reasoned decision. There is no right to a jury and no right to appointed counsel. Emergency suspension without a prior hearing is permissible when public safety is at risk, provided a prompt hearing follows.
Tip 5 – Self-incrimination in administrative hearings. The privilege is available to individuals when answers could be used criminally, but the agency may draw an adverse inference from silence. Corporations cannot invoke it. These two points are classic distractors.
Tip 6 – Parallel proceedings and double jeopardy. A regulatory sanction plus a criminal conviction for the same conduct is generally not double jeopardy because the administrative remedy is civil and remedial. Expect a true/false or scenario item on this.
Tip 7 – Judicial review is deferential and comes last. Respondents must exhaust administrative remedies first; courts then review for substantial evidence and legal error (arbitrary and capricious, abuse of discretion, beyond authority) and do not re-weigh the facts de novo.
Tip 8 – Evidence rules are relaxed. Hearsay and informally obtained evidence are commonly admitted in administrative hearings. If a question contrasts criminal trials with regulatory hearings on admissibility, pick the option recognising the more flexible administrative approach.
Tip 9 – Read for the forum. Many exam items are solved simply by noticing whether the scenario is criminal, civil or administrative. Underline (mentally) the words: 'licensing board', 'commission', 'regulator', 'hearing officer', 'ALJ', 'consent order', 'cease-and-desist' – all signal the administrative framework and its rules.
Tip 10 – Watch for absolutes. Options containing 'always', 'never' or 'must' about agency power are frequently wrong, except for well-established absolutes such as agencies never imposing imprisonment and administrative actions never requiring proof beyond a reasonable doubt.
6. Practice Questions (with reasoning)
Q1. A state board of accountancy seeks to revoke the licence of a CPA accused of misappropriating client funds. What standard of proof will most likely apply?
A. Beyond a reasonable doubt B. Probable cause C. Preponderance of the evidence (or clear and convincing) D. Reasonable suspicion
Answer: C. Administrative licence actions use civil standards; the criminal standard never applies.
Q2. A broker is convicted of wire fraud and later barred from the securities industry by the regulator for the same conduct. The broker argues double jeopardy. Is the argument likely to succeed?
Answer: No. The industry bar is a civil, remedial sanction; double jeopardy applies to successive criminal punishments.
Q3. During a regulatory hearing, an insurance agent refuses to answer questions on the ground that answers might incriminate him. Which statement is most accurate?
A. He may not invoke the privilege in a non-criminal hearing. B. He may invoke it, and the panel may draw an adverse inference. C. He may invoke it, and the panel must dismiss the charges. D. Only his corporation may invoke it.
Answer: B.
Q4. A licensee receives a final order of revocation and immediately files suit in court seeking a new trial of the facts. What is the most likely outcome?
Answer: The court will review the administrative record under a deferential standard (substantial evidence/arbitrary and capricious) and will not retry the facts; if any internal appeal remained, the suit would be dismissed for failure to exhaust administrative remedies.
Q5. True or false: A regulatory agency may sentence a licensee to a term of imprisonment for fraud discovered during an examination.
Answer: False. Imprisonment is exclusively a criminal sanction imposed by courts; the agency must refer the matter to prosecutors.
7. One-Page Summary
• Regulatory jurisdiction = authority from an enabling statute to make rules, investigate and adjudicate within a defined field; licensing jurisdiction = power to grant, condition, suspend and revoke the privilege to practise.
• Agencies hold quasi-legislative, investigative and quasi-judicial powers; they cannot exceed their statutory scope and cannot imprison.
• Hearings: no jury, ALJ or panel, relaxed evidence, limited discovery, civil standard of proof (preponderance; sometimes clear and convincing).
• Due process: notice, opportunity to be heard, impartial decision-maker, written decision; emergency suspensions allowed with prompt post-deprivation hearing.
• Individuals may claim the privilege against self-incrimination but face adverse inferences; entities cannot claim it.
• Sanctions: fines/civil penalties, disgorgement, restitution, censure, suspension, revocation, bars, cease-and-desist and consent orders.
• Parallel criminal, civil and administrative actions are permitted; double jeopardy generally does not apply to administrative sanctions.
• Exhaust administrative remedies first; judicial review is deferential (substantial evidence, arbitrary and capricious, beyond authority).
• For the CFE Exam: identify the forum, apply the civil standard, respect agency limits, and remember licence = privilege subject to due process.
CFE - Regulatory and Licensing Jurisdiction Example Questions
Test your knowledge of Regulatory and Licensing Jurisdiction
Question 1
Which of the following BEST describes the source of a self-regulatory organization's disciplinary jurisdiction over persons working in a regulated industry?
Question 2
A professional licensing body can revoke a practitioner's license for fraudulent conduct independently of any criminal prosecution arising from the same conduct.
Question 3
A fraud examiner finds that a company's controller knowingly misstated inventory values. The controller holds a public accountant license and is also a member of a voluntary professional accounting association. The company's legal counsel asks which body has the authority to suspend or revoke the controller's right to practise as a licensed accountant. Which body should the fraud examiner identify?