- What the CORCI Credential Actually Is
- The Curriculum and Its Six Published Learning Objectives
- Thirteen Preparation Areas Mapped to the Curriculum
- Exam Mechanics: What Is and Isn't Published
- Eligibility Paths, Fees and Access Period
- A|CORCI vs. CORCI: One Exam Family
- Where the Credential Fits in Loss Prevention and Investigations
- Sequencing Your Preparation Around the Curriculum
- Frequently Asked Questions
- CORCI means Certified Organized Retail Crime Investigator, issued by the McAfee Institute.
- The standalone exam page lists a three-hour limit, online proctoring, one attempt and a one-year exam license.
- Board certification requires at least 70% on course sections and on the final online exam.
- The standalone exam is currently USD 450; the full training bundle is currently USD 1397.
What the CORCI Credential Actually Is
CORCI stands for Certified Organized Retail Crime Investigator. It is a professional investigative credential issued by the McAfee Institute, built around the way modern organized retail crime (ORC) operates: coordinated theft rings, online resale channels, fencing networks and the digital trail those activities leave behind. If you are new to the acronym, our explainer on what CORCI certification is covers the basics, and this article goes deeper into how the credential is structured and how to prepare for it.
It is worth stating plainly what this credential is not. The same four letters are used by other credentials in unrelated fields, and information about those does not apply here. Everything below concerns the McAfee Institute's Certified Organized Retail Crime Investigator program only.
Candidates who want a hands-on feel for the kind of scenario thinking the subject demands can try the CORCI practice test on our main site while reading through the curriculum below.
The Curriculum and Its Six Published Learning Objectives
The issuer advertises a 21-module program, with roughly 40 hours of instruction and 35 CPE credits. Those figures describe the training, not the exam: neither is a timer or a question count. The public course page does not list every module title or lesson, so no responsible guide can claim to reproduce the full syllabus. What the public page does publish are six learning objectives, and these are the most reliable map of what the program expects you to know.
The Six Published Learning Objectives
Each objective carries a specific scope, and your preparation should respect it.
- ORC foundations: fraud schemes, operational structures and business impact.
- Cyber investigation and evidence collection: gathering evidence from auctions and social media to identify perpetrators and networks.
- Auction and online-fraud investigation: tracking and identifying criminal operations.
- Social-media and OSINT investigation: gathering evidence and building cases.
- Booster and fencing operations: detecting and investigating their operational tactics.
- Legal fundamentals and surveillance: compliance and effective evidence gathering.
Notice the pattern: the program is heavily investigative and evidence-oriented. Four of the six objectives involve collecting, tracing or building a case from information, and the other two give you the operational and legal context needed to do that work properly. A candidate who only knows retail loss-prevention vocabulary but has never reasoned about attributing an online seller to a theft network will find the middle objectives the steepest climb.
Thirteen Preparation Areas Mapped to the Curriculum
To make the curriculum easier to study, we organize the topics named in the official narrative into thirteen preparation headings. Be clear on what these are: editorial categories, unweighted, and not official module titles or scored exam domains. The issuer has not published an exam blueprint, so no heading below carries a verified percentage. For a fuller walk-through of each area, see our complete guide to all 13 CORCI content areas.
| Preparation Area | Related Published Objective | What to Be Able to Do |
|---|---|---|
| Organized-retail-crime structures | ORC foundations | Describe how rings are organized and the business impact of their schemes |
| Open-source intelligence (OSINT) | Social-media and OSINT investigation | Gather public-source information in a structured, defensible way |
| The intelligence cycle | OSINT / case building | Move from collection requirements to analysis and reporting |
| Privacy | Legal fundamentals | Recognize limits on what information can be collected and how |
| Cyber investigations | Cyber investigation and evidence collection | Trace digital activity and preserve evidence |
| Auction fraud | Auction and online-fraud investigation | Identify the patterns of fraudulent listings and sellers |
| Social-media research | Social-media and OSINT investigation | Identify perpetrators and networks from social platforms |
| Deception analysis | Case building | Evaluate statements and information for reliability |
| Booster operations | Booster and fencing operations | Detect and investigate theft-crew tactics |
| Fencing operations | Booster and fencing operations | Understand how stolen goods are moved and resold |
| Surveillance | Legal fundamentals and surveillance | Apply surveillance within compliance boundaries |
| Legal fundamentals | Legal fundamentals and surveillance | Know the compliance rules that govern evidence gathering |
| Professional ORC case development | Case building across objectives | Assemble findings into a coherent, usable case |
Exam Mechanics: What Is and Isn't Published
The current standalone CORCI exam page publishes four concrete facts: a three-hour time limit, online proctoring, a single attempt, and a one-year exam license. The official program also ties the curriculum to a proctored final examination. Those are the mechanics you can plan around.
Several things are not publicly verified, and you should treat any source that states them confidently with suspicion:
- The current number of questions, and the split between scored and unscored items.
- The exact live item format.
- Official domain weights.
- An observed pass rate. For what can and cannot be said, see our discussion of the CORCI pass rate.
One trap deserves a direct warning. Older brochure material has circulated with figures such as 65 total questions, 60 scored questions and a two-hour limit. Those are not current specifications and should not be used to plan your pacing. Build your timing around the published three-hour limit and stay flexible on question count until you see the exam itself.
The 70% threshold
The published board-certification policy requires a score of at least 70% on course sections and on the final online examination, along with eligibility documentation and payment of all fees. That 70% is a passing threshold, not a pass rate. It tells you the bar you must clear, not how many candidates clear it. For the detail behind that requirement, see our page on the CORCI passing score.
Because the threshold applies to course sections as well as the final exam, you cannot treat the coursework as a formality. Weak performance on a section is a certification risk before you ever reach the proctored session.
Eligibility Paths, Fees and Access Period
Qualifying experience routes
The current professional program lists three qualifying education-and-experience paths, each requiring relevant investigative or intelligence work:
| Education | Relevant Experience Required |
|---|---|
| Bachelor's degree or higher | One year |
| Associate degree | Three years |
| High-school diploma or equivalent | Five years |
Apply the current published conduct and eligibility policy rather than anything from older brochures, whose eligibility routes are not interchangeable with today's. The full picture is in our guide to CORCI requirements.
What the exam and training cost
The current standalone CORCI exam offer is USD 450, and the current full training bundle is USD 1397. Optional payment plans, study materials and tuition are not additional universal exam fees, so be careful when comparing quotes. Our CORCI certification cost breakdown explains how to separate the exam fee from the training path.
A|CORCI vs. CORCI: One Exam Family
The McAfee Institute also offers the Associate Certified Organized Retail Crime Investigator, written A|CORCI. According to the issuer's current associate policy, it uses the same training curriculum and the same proctored certification examination; what distinguishes professional status is experience. Moving from associate to professional does not require retraining or retesting.
The practical takeaway is that you are not choosing between two different exams. If you are early in your investigative career and lack the experience for the professional paths above, the associate designation lets you sit the same examination family without waiting. Study material for one is study material for the other.
Where the Credential Fits in Loss Prevention and Investigations
CORCI is aimed at people who investigate organized theft and its online resale and fraud channels: retail loss-prevention and asset-protection investigators, corporate security and fraud investigators, e-commerce and marketplace trust-and-safety analysts, and law-enforcement or intelligence personnel who work retail-crime cases. The curriculum's focus on auctions, social media, fencing and case development maps directly onto the daily work of those roles.
A few honest limits apply. Agency catalog listings and institutional accreditation do not amount to guaranteed employment, agency endorsement or acceptance of the credential by any individual employer. The certification is evidence of structured training and examination, and its value depends on how an employer weighs it. For a realistic look at roles, see our overview of CORCI jobs, and for the economics, the CORCI ROI analysis. We do not quote salary figures here because none are verified; the CORCI salary guide discusses earnings qualitatively.
Sequencing Your Preparation Around the Curriculum
Because the exam is tied to a training program, your best sequence follows the logic of an investigation: understand the target, collect information lawfully, analyze it, then build the case. Here is one way to order the thirteen areas across a six-week window. Adjust the pace to your experience; the ordering is the point.
Know the adversary
- Organized-retail-crime structures: rings, roles and business impact
- Booster operations: how theft crews operate
- Fencing operations: how stolen goods are moved and resold
Set the legal frame first
- Legal fundamentals and privacy: what you may collect and how
- Surveillance within compliance boundaries
Collection methods
- Open-source intelligence (OSINT) techniques
- Social-media research for identifying perpetrators and networks
Online fraud and cyber trails
- Auction fraud patterns and tracing listings to operations
- Cyber investigations and evidence preservation
Analysis
- The intelligence cycle, from requirements to reporting
- Deception analysis and judging information reliability
Integration
- Professional ORC case development
- Timed, mixed-topic practice against the three-hour limit
Legal fundamentals and privacy sit early on purpose: every collection technique that follows is only useful if it is lawful and defensible, and the curriculum's own legal objective stresses compliance alongside effective evidence gathering. Case development comes last because it draws on everything else. For a broader weekly framework, see our CORCI study guide, and keep the CORCI cheat sheet handy for last-week review.
Key Takeaway
Treat practice questions as a supplement, not a substitute. A question bank is editorial preparation and does not replace the training, identity checks, eligibility review, proctoring or the issuer's own assessment. Use practice tests to find weak spots across the thirteen areas, then return to the official training to close them.
Frequently Asked Questions
The McAfee Institute issues the Certified Organized Retail Crime Investigator credential. It also offers the associate version, A|CORCI, which shares the same curriculum and proctored examination.
The current standalone exam page publishes a three-hour time limit with online proctoring and one attempt. The 40 hours of instruction and 35 CPE credits describe the training program, not the exam. Older two-hour figures should not be used.
The published board-certification policy requires at least 70% on course sections and on the final online examination, plus eligibility documentation and payment of all fees. That is a passing threshold, not an observed pass rate.
The current standalone exam offer is USD 450, and the current full training bundle is USD 1397. Payment plans, study materials and tuition are not additional universal exam fees. Verify current pricing with the issuer before purchasing.
No. The one-year license is a booking and access period for taking the exam. Current renewal requirements and fees were not verified, so check directly with the McAfee Institute.