- What "CORCI Training" Actually Covers
- The Six Published Learning Objectives
- Thirteen Preparation Headings for the Curriculum Topics
- Instruction Hours, CPE Credits and Exam Logistics
- Eligibility Paths and Conduct Policy
- Training Bundle vs. Standalone Exam
- Sequencing Your Training Around the Hardest Material
- Where the Training Leads Professionally
- Frequently Asked Questions
- CORCI training is McAfee Institute's program for the Certified Organized Retail Crime Investigator credential, described as 40 hours of instruction and 35 CPE...
- The exam page publishes a three-hour limit, online proctoring, one attempt and a one-year exam license.
- Board certification requires at least 70% on course sections and on the final online exam.
- The standalone exam is listed at USD 450; the full training bundle at USD 1397.
What "CORCI Training" Actually Covers
When investigators search for CORCI training, they usually want to know one thing: what do you have to learn, and how does the program connect to the final exam? The Certified Organized Retail Crime Investigator credential is issued by the McAfee Institute, and its training is built around the investigative work that separates organized retail crime (ORC) from ordinary shoplifting: coordinated theft rings, online resale of stolen goods, fraud schemes and the networks that tie them together.
The issuer's current program advertises 21 modules. The public course page does not list every module title or lesson, so this article does not pretend to reproduce the full curriculum. What the public material does expose are six learning objectives and a curriculum narrative that names specific topics. Everything below is organized around those published elements. For a broader orientation, see What Is CORCI Certification? and CORCI Certification.
The Six Published Learning Objectives
The public course page embeds six learning objectives. They are the most reliable statement of what the training intends to teach, so they anchor any serious preparation plan.
1. ORC Foundations
Understanding what organized retail crime is and how it operates as a business.
- Fraud schemes common to ORC
- Operational structures of theft groups
- Business impact on retailers
2. Cyber Investigation and Evidence Collection
Using online sources to identify perpetrators and networks.
- Evidence from auction platforms
- Evidence from social media
- Linking online activity to people and groups
3. Auction and Online-Fraud Investigation
Tracking and identifying criminal operations that move stolen goods or run fraud through online marketplaces.
4. Social-Media and OSINT Investigation
Gathering open-source evidence and building cases from it.
5. Booster and Fencing Operations
Detecting and investigating the operational tactics of boosters (the thieves) and fences (those who buy and redistribute stolen goods).
6. Legal Fundamentals and Surveillance
Compliance and effective evidence gathering, so that what you collect is usable and lawfully obtained.
Notice the pattern: three of the six objectives are fundamentally about online and open-source work. A candidate who comes from a loss-prevention floor background and is comfortable with in-store surveillance should expect to spend proportionally more effort on the cyber, auction and OSINT material. The reverse is true for candidates with a technology or analyst background who have never worked a booster case.
Thirteen Preparation Headings for the Curriculum Topics
To make the named curriculum topics easier to study, this site groups them into thirteen preparation headings. These are editorial categories. They are not official McAfee Institute module titles, they are not scored exam domains, and they carry no official weights. The official exam blueprint and weighting remain unverified, so allocate your time by your own weak points rather than by an assumed percentage. Our companion piece, CORCI Exam Domains 2026: Complete Guide to All 13 Content Areas, goes deeper on each one.
| Preparation Heading | Tied to Published Objective |
|---|---|
| Organized-retail-crime structures | ORC foundations |
| Open-source intelligence (OSINT) | Social-media and OSINT investigation |
| The intelligence cycle | Case building and evidence work |
| Privacy | Legal fundamentals and compliance |
| Cyber investigations | Cyber investigation and evidence collection |
| Auction fraud | Auction and online-fraud investigation |
| Social-media research | Social-media and OSINT investigation |
| Deception analysis | Evidence evaluation and interviewing support |
| Booster operations | Booster and fencing operations |
| Fencing operations | Booster and fencing operations |
| Surveillance | Legal fundamentals and surveillance |
| Legal fundamentals | Legal fundamentals and surveillance |
| Professional ORC case development | Building cases from gathered evidence |
Where candidates typically need extra attention
Several of these headings sit at the boundary between investigation and law, and those boundaries are where scenario-style thinking matters most.
Privacy and Legal Fundamentals
These two headings protect the value of everything else. Evidence gathered improperly can be unusable, and surveillance or online collection that crosses a legal line creates risk for the investigator and the employer.
- Know why a collection method is permissible, not just that it is
- Be able to distinguish publicly available information from information that requires authorization
- Understand that compliance is part of "effective evidence gathering," as the published objective phrases it
The Intelligence Cycle
This heading frames how raw information becomes something actionable. Expect to reason about the sequence of work: defining what you need to know, collecting, processing, analyzing and sharing findings.
- Understand each stage and what output it produces
- Recognize where an investigation has stalled in the cycle
Booster and Fencing Operations
These are the operational heart of ORC. Boosters steal to order; fences convert goods to cash, increasingly through online channels.
- Recognize behavioral and logistical indicators of each role
- Connect theft activity to downstream resale to build a network picture
Instruction Hours, CPE Credits and Exam Logistics
The official program describes 40 hours of instruction and 35 CPE credits. These describe the training, not the exam: they are not an exam timer and not a question count. Confusing them is a common mistake.
For the exam itself, the current standalone CORCI exam page explicitly publishes:
- A three-hour time limit
- Online proctoring
- One attempt
- A one-year exam license
What is not verified from current public sources: the exact question count, the scored/unscored split, the live item format, official domain weights and any pass rate. Older brochure figures, such as a 65-question total, 60 scored questions or a two-hour limit, should not be treated as current specifications. If you see them quoted elsewhere, treat them with caution. Our How Hard Is the CORCI Exam? guide explains how to think about difficulty without relying on invented numbers, and CORCI Pass Rate 2026: What the Data Shows addresses why a published pass rate is not available.
The passing threshold
The current published board-certification policy requires a score of at least 70% on course sections and on the final online examination, plus eligibility documentation and payment of all fees. That 70% is a passing threshold, not an observed pass rate. For more, read CORCI Passing Score 2026: Exactly What You Need to Pass. For scheduling, see CORCI Exam Dates 2026: Testing Windows, Deadlines & Scheduling.
Eligibility Paths and Conduct Policy
Training and certification are not the same thing. Completing coursework and passing the exam are necessary, but board certification also depends on meeting eligibility requirements. The current professional program lists three qualifying education/experience paths, all requiring relevant investigative or intelligence work:
| Education | Relevant Experience |
|---|---|
| Bachelor's degree or higher | One year |
| Associate degree | Three years |
| High-school diploma or equivalent | Five years |
Candidates are also subject to the issuer's current published conduct and eligibility policy. Older brochure eligibility routes are not a substitute. If you are early in your career, the associate designation described above exists precisely because experience is what distinguishes professional status. Details are in CORCI Requirements 2026: Eligibility, Prerequisites & How to Qualify.
Training Bundle vs. Standalone Exam
The current standalone exam offer is USD 450, and the current full training bundle is USD 1397. Optional payment plans, study materials and tuition are not additional universal exam fees, so avoid adding them to the baseline exam cost unless you choose them.
| Option | Listed Price | What It Represents |
|---|---|---|
| Standalone exam | USD 450 | Exam access for candidates who have already completed the needed preparation |
| Full training bundle | USD 1397 | Training together with the path to the proctored final exam |
Prices can change, so verify them on the issuer's pages before budgeting. A full breakdown is in CORCI Certification Cost 2026: Complete Pricing Breakdown.
Sequencing Your Training Around the Hardest Material
You do not need a generic study system here. You need an order that respects how the topics depend on one another. Because the legal and privacy material governs how you may collect everything else, and because the intelligence cycle gives the other topics a shared frame, a sensible sequence runs from frame to tools to application.
Frame the problem
- ORC structures and business impact
- The intelligence cycle
- Privacy and legal fundamentals, early, so every later technique is learned with its limits attached
Build the online toolkit
- OSINT and social-media research
- Cyber investigations and evidence collection
- Auction fraud
Understand the actors
- Booster operations
- Fencing operations
- Deception analysis
Tie it together
- Surveillance, with its legal constraints
- Professional ORC case development
- Full-length timed review under three-hour conditions
Key Takeaway
Rehearse the exam's three-hour limit during your final phase, and use practice questions to find weak headings rather than to memorize answers. Practice banks, including the one on our CORCI practice test site, are editorial preparation. They do not replace the McAfee Institute training, identity checks, eligibility review or the proctored assessment.
For a consolidated plan, pair this article with the CORCI Study Guide 2026: How to Pass on Your First Attempt, and keep the CORCI Cheat Sheet 2026: One-Page Review of Must-Know Facts handy for last-minute review. When you are ready to test yourself, try the practice questions.
Where the Training Leads Professionally
The CORCI is aimed at people who investigate organized retail crime, typically in retail loss prevention and asset protection, and in law-enforcement or analyst roles that handle retail-related theft and fraud cases. The skills the training emphasizes, such as OSINT, online marketplace investigation and case development, are the same ones employers describe when they hire for ORC investigator positions.
Be realistic about outcomes. Completing the training and earning the credential does not guarantee employment, a promotion or agency endorsement, and agency catalog listings or institutional accreditation should not be read as individual credential acceptance by any employer. For market context, see CORCI Jobs, and for earnings discussion without invented figures, CORCI Salary Guide 2026: Complete Earnings Analysis. To weigh the investment, read Is the CORCI Certification Worth It?
Frequently Asked Questions
The official program describes 40 hours of instruction and 35 CPE credits across 21 modules. Those figures describe the training, not the exam. The exam has its own published three-hour limit.
The current board-certification policy requires a 70% or better on course sections and on the final online exam. The issuer sells a standalone exam (USD 450) and a full training bundle (USD 1397); confirm with McAfee Institute which route fits your situation and eligibility.
No. The issuer's current associate policy states the same training curriculum and proctored examination, with experience distinguishing professional status. Moving from associate to professional does not require retraining or retesting.
The current question count, scored/unscored split and live item format are not verified from public sources. Older brochure numbers should not be treated as current specifications, so check the issuer before test day.
No. Practice questions are editorial preparation. They cannot replace the training, identity verification, eligibility review or the proctored issuer assessment. Use them to find weak areas, then return to the course material.