Planning an interview is a critical phase in the CFE Interview Theory and Application domain, because the quality of information obtained depends heavily on preparation. The fraud examiner must first clearly define the objectives of the interview: what facts need to be established, what documents must be explained, and what the interviewee's likely role is (neutral witness, corroborative witness, co-conspirator, or suspect). Interviews should generally be scheduled in a logical order, moving from neutral third parties, to corroborative witnesses, to those suspected of involvement, and finally to the primary subject, so that the examiner accumulates knowledge before confronting the target.

Preparation involves reviewing all relevant documents, financial records, and prior statements so the interviewer has a strong command of the facts and can detect inconsistencies. The examiner should learn as much as possible about the interviewee's background, position, responsibilities, and relationships within the organization. A list of key topics or questions should be developed, but the interviewer should remain flexible rather than reading from a rigid script, which can hinder rapport and the natural flow of conversation.

Logistical decisions are also part of planning. The examiner should choose a time and place that minimizes interruptions and distractions, typically a private, neutral setting where the interviewee feels comfortable yet the interviewer maintains control. Deciding whether a second interviewer or witness should attend, whether the interview will be recorded, and how notes will be taken are important considerations, as is awareness of legal issues such as employee rights, union representation, and confidentiality.

Finally, the examiner should anticipate the interviewee's likely attitude and possible defenses, and plan how to handle reluctance or hostility. Proper planning establishes professionalism, promotes rapport, reduces surprises, and increases the likelihood of obtaining complete, accurate, and legally admissible information. In short, a well-planned interview is structured in purpose and sequence, yet adaptable in execution.

In the CFE Interview Theory and Application domain, the rights of interviewees are a critical consideration because fraud examiners must gather information lawfully while avoiding civil liability and preserving the admissibility of evidence. Interviewees generally retain fundamental rights regardless of whether the interviewer is a private employer, an internal investigator, or a public law enforcement officer, though the specific protections vary by jurisdiction and the interviewer's status. First, interviewees have the right to be free from coercion, duress, or false promises. Confessions obtained through threats, physical force, intimidation, or promises of leniency that the interviewer cannot deliver may be deemed involuntary and inadmissible, and may expose the examiner to claims such as false imprisonment, assault, or intentional infliction of emotional distress. Second, interviewees have the right to leave. In private-sector interviews, the subject must not be physically restrained or led to believe they cannot exit; locked doors, blocking exits, or implied detention can constitute false imprisonment. Third, in the United States, Miranda warnings apply only when a government agent conducts a custodial interrogation; private examiners are typically not required to give them, but if they act as agents of law enforcement, constitutional protections may attach. Fourth, union employees may have Weingarten rights to request a representative when they reasonably believe discipline could result. Fifth, interviewees generally have a right to refuse to answer or to terminate the interview, and in some jurisdictions a right to counsel. Sixth, privacy rights restrict unlawful searches, recording without consent in two-party-consent jurisdictions, and improper disclosure of personal information. Finally, interviewees are protected against defamation, so examiners must avoid making or publishing unfounded accusations. Respecting these rights enhances credibility, protects the organization legally, and ensures that admissions obtained remain usable in subsequent civil or criminal proceedings.

Documenting interviews is a critical component of the fraud examination process, as the information obtained during interviews often forms the foundation of a case and may later be presented in legal proceedings. The Certified Fraud Examiner (CFE) must ensure that interview documentation is accurate, complete, and professional.

The primary method of documentation is note-taking. Examiners should take notes during the interview, but this should be done discreetly so as not to distract or intimidate the subject. Notes should focus on key facts, dates, names, amounts, and significant statements rather than attempting to transcribe every word. When sensitive or incriminating information is being disclosed, it is often advisable to pause note-taking momentarily to avoid signaling the importance of the statement, then record it afterward.

As soon as possible after the interview concludes, the examiner should prepare a formal memorandum of interview. This document should include the date, time, and location of the interview; the names of all persons present; the method of contact; whether the subject was advised of their rights or the voluntary nature of the interview; and a detailed summary of the information provided. The memorandum should be written in the third person, remain objective, and distinguish clearly between facts stated by the subject and the examiner's own observations or opinions.

If the interview is recorded electronically, the examiner must comply with applicable laws regarding consent, as some jurisdictions require all parties to agree. Recordings should be preserved as evidence and properly logged under chain-of-custody procedures.

When a subject makes an admission, the examiner should obtain a signed written statement in the subject's own words, including an acknowledgment that it was given voluntarily. Documentation should also note the demeanor of the subject and any refusals to answer. Proper documentation protects the integrity of the examination, supports the credibility of the examiner, and ensures the evidence is admissible and persuasive in court.

In the Certified Fraud Examiner (CFE) body of knowledge, Interview Theory and Application treats the introduction as a distinct, critical phase of any interview—whether of a witness, a neutral third party, or a suspect. The introduction is the interviewer's first opportunity to establish credibility, set the tone, and lay the foundation for cooperation. Its two primary objectives are to secure the respondent's agreement to participate and to establish rapport, meaning a relationship of trust and mutual understanding that encourages open communication.

The introduction typically begins with the interviewer identifying himself or herself, explaining the general purpose of the discussion, and stating the reason the respondent is being approached. CFE guidance recommends keeping this explanation general and non-accusatory; for example, describing the matter as 'reviewing procedures' or 'gathering information' rather than announcing a fraud investigation. The interviewer should avoid using emotionally charged terms such as 'investigation,' 'fraud,' 'crime,' or 'suspect,' because these words create defensiveness and reduce the likelihood of candid answers. Interviewers should also avoid sensitive questions early, since premature probing can shut down the conversation before trust is built.

Building rapport involves small talk and non-threatening conversation to put the respondent at ease. The interviewer observes the subject's baseline verbal and nonverbal behavior during this calm period, which later helps in detecting stress or deception when more pointed questions arise. Techniques include mirroring tone and posture, showing genuine interest, using the respondent's name, and demonstrating empathy and professionalism. Physical setup matters as well: the interviewer should sit at a comfortable distance without barriers such as desks, maintain appropriate eye contact, and avoid intimidating body language.

Finally, the introduction should establish the 'theme' of the interview, obtain a commitment to assist, and transition smoothly into informational questions. A well-executed introduction increases cooperation, yields more complete information, and reduces the risk that the subject will refuse to continue or become hostile later in the interview.

In the CFE Interview Theory and Application framework, questioning techniques are the structured tools a fraud examiner uses to gather accurate, complete, and legally defensible information. The Association of Certified Fraud Examiners organizes questions into five primary types, typically used in sequence during an interview.

1. Introductory questions open the interview. Their purpose is to establish rapport, state the general theme of the discussion, observe the subject's baseline (normal) verbal and nonverbal behavior, and obtain a commitment to cooperate. They should be non-threatening and avoid sensitive topics.

2. Informational questions form the core fact-gathering phase. These include open questions (encouraging narrative responses, e.g., 'Tell me about the procurement process'), closed questions (seeking specific facts such as yes/no, dates, or amounts), and leading questions (which suggest an answer and should be used sparingly, mainly to confirm known facts). Interviewers should move from general to specific and avoid double-negatives or compound questions.

3. Assessment questions are used when the interviewer suspects deception. They are hypothetical or non-accusatory in form ('Why do you think someone would do this?') and are designed to elicit verbal and nonverbal cues that can be compared against the baseline established earlier.

4. Closing questions conclude non-admission interviews. They reconfirm facts, allow the subject to add information, ask who else might have knowledge, and maintain goodwill so the witness can be re-contacted.

5. Admission-seeking questions are reserved for situations in which evidence strongly indicates the subject committed the offense. They are direct and accusatory, used to obtain a confession and a signed written statement, following a structured process of accusation, rationalization, benchmark admission, and detail development.

Effective examiners also control the interview environment, listen actively, avoid interrupting, use silence strategically, and remain neutral, ensuring information is obtained ethically and admissibly.

In the CFE curriculum on Interview Theory and Application, assessing behavior and cues refers to the interviewer's practice of observing and interpreting a subject's verbal and nonverbal responses to help evaluate credibility. The Fraud Examiners Manual stresses that no single cue proves deception; instead, examiners look for clusters of behaviors that deviate from the subject's established baseline, usually observed during the rapport-building and introductory phases when non-threatening questions are asked.

Verbal cues include changes in speech patterns such as hesitation, stammering, or a shift in pitch or speed; overly specific or vague answers; repeating the question to buy time; selective memory ('I don't recall'); making excuses or justifications before being accused; oaths and character testimony ('honestly,' 'I swear to God,' 'I'm a religious person'); and feigned unconcern or inappropriate humor. Deceptive subjects may also provide tangential or irrelevant answers, deny in weak or qualified terms, or show a lack of forcefulness in denials.

Nonverbal cues involve physiology and body language. These include fidgeting, grooming gestures, crossing arms or legs, covering the mouth, increased perspiration, changes in breathing, dry mouth, and posture shifts such as leaning away or turning the body toward an exit. Eye contact is considered unreliable on its own because it varies with culture and personality. Illustrators (hand movements emphasizing speech) often decrease when lying, while manipulators (self-touching) often increase.

The CFE approach cautions that stress-related behaviors can stem from nervousness about the interview itself, not guilt. Interviewers should therefore establish a baseline, note timing and consistency of reactions to specific topics, consider cultural and individual differences, and avoid over-reliance on any one indicator. Behavioral assessment is a tool to guide follow-up questioning and the decision to move toward admission-seeking questions, never a substitute for documentary evidence or corroboration.

In the CFE Interview Theory and Application domain, dealing with difficult and hostile interviewees is a critical skill because fraud examinations often involve individuals who are uncooperative, defensive, or openly antagonistic. The CFE must remain calm, professional, and in control of the interview without escalating conflict.

First, the examiner should recognize the source of hostility. It may stem from fear, guilt, embarrassment, resentment toward the organization, or simply a personality trait. Understanding the cause helps the interviewer choose an appropriate response rather than reacting emotionally.

Second, the interviewer should never argue, threaten, or match the interviewee's aggression. Hostility is best defused by maintaining a neutral, non-judgmental tone, using active listening, and acknowledging the person's feelings (for example, 'I understand this is frustrating'). Allowing the interviewee to vent briefly can reduce tension and often leads to a more productive exchange.

Third, the CFE should keep questions open, non-accusatory, and focused on facts rather than conclusions. Avoid words like 'fraud,' 'steal,' or 'lie,' which provoke defensiveness. Instead, use softer language such as 'shortage,' 'take,' or 'not accurate.' Repeating or rephrasing questions calmly signals persistence without confrontation.

Fourth, if the interviewee refuses to cooperate, the interviewer should not attempt to force answers. Ethically and legally, interviews must remain voluntary; coercion can taint evidence and create liability. The examiner should document the refusal, note demeanor, and consider whether a later interview or alternative evidence sources are appropriate.

Fifth, interviewers should manage the environment: use a private setting, position themselves to avoid intimidation, limit the number of people present, and consider having a second examiner as a witness in highly volatile situations.

Finally, the CFE should know when to terminate the interview. If hostility becomes abusive or threatening, ending the session preserves safety and credibility. Throughout, the goal is to gather accurate information while protecting the rights and dignity of the interviewee and maintaining the integrity of the examination.