CORCI Cheat Sheet 2026: One-Page Review of Must-Know Facts

The CORCI Snapshot: Facts to Memorize First

If you only have ten minutes before a study session, this section is your one-page review. Every fact below comes from current public issuer material reviewed for this site, and several "facts" circulating online are deliberately left out because they cannot be confirmed.

For deeper context on each line, the CORCI study guide walks through a full preparation plan, while the CORCI certification cost breakdown explains pricing in more detail.

What the Credential Actually Is

CORCI is a professional certification in organized retail crime investigation. It is built around the way theft rings actually operate: crews of boosters who steal merchandise, fences who move it, and online channels such as auction sites and social media where stolen goods are resold and where investigators often find their best evidence.

The program is delivered by McAfee Institute and connects its curriculum to a proctored final examination. The 40 hours of instruction and 35 CPE credits describe the training program. They are not an exam timer or a question count, which is a common point of confusion on forums and in study groups.

CORCI vs. A|CORCI

The issuer's current associate policy describes A|CORCI as using the same training curriculum and the same proctored certification examination. Experience is what distinguishes professional status from associate status. Moving from associate to professional does not require retraining or retesting. For study purposes, treat them as one examination family, not two separate exams to prepare for.

Exam Contract: Time, Proctoring, Attempts, Fees

The standalone CORCI examination page publishes four mechanics worth committing to memory:

• Time limit: three hours.
• Proctoring: online proctored delivery, meaning identity checks and monitored conditions apply.
• Attempts: one attempt.
• Access window: a one-year exam license.

The one-year license is a booking and access period. It is not a verified certification renewal cycle. Current renewal requirements and renewal fees were not verified from the reviewed sources, so do not assume a renewal schedule from another credential applies. For scheduling mechanics, see the CORCI exam dates guide.

What the Fees Mean

The current standalone exam offer is USD 450, and the current full training bundle is USD 1397. Optional payment plans, study materials, and tuition are not additional universal exam fees. If you are comparing routes, the key question is whether you need the training or only the exam, which depends on your background and eligibility documentation. The ROI analysis covers that decision.

The Thirteen Preparation Areas at a Glance

This site organizes preparation into thirteen headings drawn from topics explicitly named in the current official CORCI curriculum narrative. They are editorial preparation categories. They are not official module titles, and they are not scored examination domains with published weights. Treat all thirteen as important rather than guessing which ones count more.

1. Organized-retail-crime structures
2. Open-source intelligence (OSINT)
3. The intelligence cycle
4. Privacy
5. Cyber investigations
6. Auction fraud
7. Social-media research
8. Deception analysis
9. Booster operations
10. Fencing operations
11. Surveillance
12. Legal fundamentals
13. Professional ORC case development

The full explanation of each area lives in the complete guide to all 13 CORCI content areas. Below, the areas are grouped into the clusters that make them easiest to review.

The Six Published Learning Objectives

The public course page embeds six learning objectives. These are the closest thing to an official statement of scope, so any serious review should map back to them.

Notice the pattern: nearly every objective ends in evidence. Whether you are working an auction listing, a social profile, or a surveillance operation, the exam's underlying theme is producing information that identifies people, networks, and schemes in a way that can support a case.

Investigative Core: Structures, Cycle, Deception

Organized-Retail-Crime Structures

The Intelligence Cycle

The intelligence cycle is the framework that turns scattered observations into usable intelligence. Expect to be comfortable with the general flow: defining what you need to know, collecting information, processing and analyzing it, and delivering a product to the people who must act on it. In ORC work this means connecting a pattern of store incidents to a suspected crew, then refining the picture as new information arrives.

Deception Analysis

Deception analysis matters because subjects, sellers, and witnesses do not always tell the truth. Candidates should be able to reason about inconsistencies in statements, listings, and online personas, and understand why a claim must be corroborated rather than accepted at face value. Keep this tied to evidence: the goal is a defensible assessment, not a hunch.

Digital Evidence: OSINT, Cyber, Auctions, Social Media

Four of the thirteen areas focus on online evidence, and the published objectives mention auctions and social media by name. This is the portion of the curriculum that most separates ORC investigation from traditional loss prevention.

One practical thread runs through all four areas: evidence collection. Candidates should be able to explain not only where evidence lives online but how to collect it in a way that supports the case. That connects directly to the legal and privacy areas covered below. For a sense of how demanding this material is, see how hard the CORCI exam is.

Boosters, Fencing, and Surveillance

The published objectives call for detecting and investigating booster and fencing operational tactics, and for surveillance as an evidence-gathering tool.

Booster Operations

Boosters are the individuals who steal merchandise, often to order. Know how booster activity is typically structured and what behaviors and patterns help investigators detect it. Questions in this area reward an understanding of how a crew operates, not just a definition of the term.

Fencing Operations

Fences convert stolen goods into cash, whether through physical outlets or online channels. Understand the role a fence plays in sustaining the entire ORC cycle, and why disrupting the resale side can be as important as stopping theft at the store. This area links tightly to auction fraud, since online marketplaces are a common route for resale.

Surveillance

Surveillance appears in the objectives alongside legal fundamentals, with the emphasis on compliance and effective evidence gathering. The pairing is deliberate: surveillance that ignores legal boundaries can undermine a case. Think of the two topics as a single question, "what can I observe and record, and how do I do it properly?"

Legal Fundamentals, Privacy, and Case Development

Legal Fundamentals and Privacy

Legal fundamentals and privacy are the guardrails for everything else. The objectives frame legal fundamentals around compliance and effective evidence gathering. Privacy matters most where OSINT, social-media research, and surveillance meet: just because information is reachable does not mean every method of collecting or using it is appropriate. Be able to reason about the limits on collection and why they protect the integrity of an investigation.

Because laws vary by jurisdiction, avoid memorizing blanket rules from outside the curriculum. Anchor your preparation in the principles the course teaches, and verify jurisdiction-specific points against your own training materials.

Professional ORC Case Development

The final area is where the rest converges. Case development means assembling evidence, structure, and analysis into a coherent case that decision-makers can act on. Strong candidates can describe how information from OSINT, auction tracking, and surveillance gets organized into a narrative that identifies participants and their roles.

Eligibility Paths and Passing Threshold

The current professional program lists three qualifying paths based on education and relevant investigative or intelligence experience:

Apply the current published conduct and eligibility policy. Older brochure eligibility routes are not substituted for these. Remember that the A|CORCI route uses the same exam, with experience distinguishing professional status. The full details are in the CORCI requirements guide.

The 70% Threshold

The current published board-certification policy requires a score of at least 70% on course sections and on the final online examination, along with eligibility documentation and payment of all fees. This is a passing threshold, not an observed pass rate. No verified pass rate is published, which the CORCI pass rate article explains in more depth, and the passing score guide details how the threshold applies.

What Not to Put on Your Cheat Sheet

A good cheat sheet is as much about exclusions as inclusions. Leave these off, because they are unverified or belong to other credentials:

• A specific question count. The current count and scored/unscored split are unverified.
• Official domain weights. None are published. The thirteen areas are unweighted editorial headings.
• A two-hour time limit. The current exam page says three hours.
• A renewal schedule. The one-year license is an access window, and renewal terms were not verified.
• A pass rate. The 70% figure is a threshold, not an outcome statistic.
• Salary promises. The credential does not guarantee employment or agency endorsement, and agency catalog listings or institutional accreditation should not be read as individual credential acceptance. For realistic context, see the salary guide and CORCI jobs overview.

Sequencing Your Review Around CORCI Content

Because the exam is a single attempt with a three-hour limit, order your review so that foundations come before the evidence-heavy material. One sensible arrangement, tied to how the topics depend on each other:

Legal and privacy topics land last so they can act as a lens over everything you have already studied. Run timed practice sessions at the end using the CORCI practice tests, and revisit weaker areas using the study guide's approach. When you are ready to test yourself across all thirteen areas, return to the main practice test site.

Frequently Asked Questions