- CORCI stands for Certified Organized Retail Crime Investigator, issued through McAfee Institute training and a proctored final examination.
- The standalone exam page lists a three-hour limit, online proctoring, one attempt and a one-year examination license.
- Board certification requires at least 70% on course sections and on the final online examination.
- The standalone exam offer is USD 450; the full training bundle is USD 1397.
What CORCI Means (and What It Doesn't)
CORCI is the acronym for Certified Organized Retail Crime Investigator. It is a professional investigative credential built around one problem: organized retail crime (ORC), meaning coordinated theft and fraud rather than one-off shoplifting. The curriculum covers how crews operate, how stolen goods move through resale channels, and how an investigator turns scattered incident reports into a documented case.
If you have searched the acronym and landed on unrelated material, note that several credentials in other fields happen to share these four letters. This article, and everything on this site, concerns only the retail-crime investigator certification. If you want shorter definitional pages, see What Does CORCI Stand For? and CORCI Meaning. For a broader orientation to the credential itself, the CORCI Certification overview is a good companion read.
Who Issues the Credential
The credential authority is the McAfee Institute. The institute offers the instruction, the proctored final examination and the board-certification process. That matters for a practical reason: your preparation should be anchored to the issuer's published program rather than to rumor or to materials written for a different certification.
The program page describes 40 hours of instruction and 35 CPE credits, and the issuer advertises 21 modules. The public page does not expose the full list of module titles or lesson contents, so any site claiming to know every module's contents is guessing. We do not claim otherwise. What we can build on is the curriculum narrative and the six published learning objectives, covered below.
The Thirteen Preparation Areas
To make preparation manageable, we organize the topics named in the official curriculum narrative into thirteen headings. These are editorial preparation categories. They are not official module titles, not scored examination domains, and they carry no official weights. The issuer has not published an exam blueprint, and exhaustive coverage of the exam by these headings remains unverified. Our complete guide to all 13 content areas goes deeper on each one.
| Preparation Area | What You Should Be Able to Do |
|---|---|
| Organized-retail-crime structures | Describe how crews are organized, who plays which role, and how the business impact is felt |
| Open-source intelligence (OSINT) | Gather publicly available information in a structured, documentable way |
| The intelligence cycle | Move from collection through analysis to a usable product |
| Privacy | Recognize privacy limits on collection and handling of information |
| Cyber investigations | Collect digital evidence that can identify perpetrators and networks |
| Auction fraud | Track and identify criminal operations selling through online auctions |
| Social-media research | Build cases from social-media evidence |
| Deception analysis | Evaluate statements and behavior for indicators of deception |
| Booster operations | Detect and investigate the tactics of professional shoplifters |
| Fencing operations | Detect and investigate how stolen goods are converted to cash |
| Surveillance | Plan and conduct observation that yields usable evidence |
| Legal fundamentals | Stay compliant while gathering evidence |
| Professional ORC case development | Assemble findings into a coherent, defensible case |
How the Areas Connect
The areas are not isolated silos. A booster operation generates stolen merchandise; a fencing operation moves it; an auction listing or social-media post may be where the fenced goods surface. OSINT and cyber investigation techniques let you follow that trail, the intelligence cycle gives your collection discipline, and legal fundamentals and privacy keep the whole effort admissible. Case development is where those threads are finally woven together. Studying them as a connected chain, rather than as thirteen flash-card decks, matches how the curriculum frames the work.
The Six Published Learning Objectives
The issuer's public course page lists six learning objectives. These are the most authoritative statement of scope available, so they deserve close attention:
The Six Objectives
- ORC foundations: fraud schemes, operational structures and business impact
- Cyber investigation and evidence collection: using evidence from auctions and social media to identify perpetrators and networks
- Auction and online-fraud investigation: tracking and identifying criminal operations
- Social-media and OSINT investigation: gathering evidence and building cases
- Booster and fencing operations: detecting and investigating their operational tactics
- Legal fundamentals and surveillance: compliance and effective evidence gathering
Notice the verbs: identify, track, gather, build, detect, investigate. This is an applied, case-oriented credential. Expect to study not just definitions but how an investigator reasons from evidence to a conclusion about who is doing what.
How the Examination Works
The current standalone CORCI examination page publishes four concrete mechanics:
- Time limit: three hours
- Delivery: online proctoring
- Attempts: one attempt
- Access period: a one-year examination license
Just as important is what is not published: the current question count, the split between scored and unscored items, the exact live item format, official domain weights and any pass rate. Older brochures have circulated figures for total questions and a shorter time limit, but we do not treat those as current specifications. If you want to understand why we are cautious about this, read our discussion of the CORCI pass rate, where we explain why a published passing threshold is not the same thing as an observed pass rate.
The One-Attempt License
A single attempt within a one-year license changes how you should approach scheduling. There is no built-in cushion for a casual first try. The license is a booking and access period, not a verified certification-renewal cycle; current renewal requirements and fees were not verified from the reviewed sources, so confirm them with the issuer before planning long-term. For scheduling specifics, our CORCI exam dates article covers how to think about windows and deadlines.
Eligibility Paths
The current professional program lists three qualifying education-and-experience paths, each requiring relevant investigative or intelligence work:
| Education | Relevant Experience |
|---|---|
| Bachelor's degree or higher | One year |
| Associate degree | Three years |
| High-school diploma or equivalent | Five years |
Board certification also requires eligibility documentation and payment of all fees, in addition to the 70% score threshold. The issuer applies its current published conduct and eligibility policy; older brochure routes are not substituted. Our CORCI requirements guide walks through how to document your background.
What It Costs
Two price points appear on the issuer's current pages:
| Option | Current Price |
|---|---|
| Standalone CORCI exam | USD 450 |
| Full training bundle | USD 1397 |
Optional payment plans, study materials and tuition are not additional universal exam fees, so do not add them to your baseline budget unless you choose them. For a fuller breakdown of how to compare the exam-only route with the bundle, see CORCI Certification Cost. Whether either price is justified depends on your career goals, which we address in Is the CORCI Certification Worth It?
The Associate Track
The issuer also offers an Associate Certified Organized Retail Crime Investigator designation, written A|CORCI. Under its current associate policy, the training curriculum and proctored certification examination are the same; it is experience that distinguishes professional from associate status. Moving from associate to professional does not require retraining or retesting.
The practical takeaway: treat A|CORCI as part of the same examination family, not as a second, independently buildable exam. If you are early in your investigative career and short on the experience routes above, the associate designation is worth discussing with the issuer, but your study plan is identical either way.
Who Pursues This Credential
The credential is aimed at people who investigate or support investigation of coordinated retail theft and fraud. Typical audiences include retail loss-prevention and asset-protection investigators, ORC unit staff at retailers, and professionals in law-enforcement or intelligence-adjacent roles who handle retail-crime cases. The OSINT, cyber, auction-fraud and social-media topics also suit analysts who work the online side of fencing.
Sequencing Your Preparation
You do not need an elaborate system, but the order in which you tackle topics matters because the areas build on each other. One sensible sequence follows the logic of an investigation. The full method is laid out in our CORCI study guide; here is the skeleton:
Foundations first
- ORC structures, so every later topic has context
- The intelligence cycle and privacy, which govern how you collect
- Legal fundamentals early, since they constrain everything else
Collection techniques
- OSINT, social-media research and cyber investigations
- Auction fraud, applying those techniques to a specific scheme
Operations and fieldwork
- Booster operations, then fencing operations
- Surveillance and deception analysis
Integration
- Professional ORC case development, tying every thread together
- Timed practice sessions against the three-hour limit
Schedule legal fundamentals and privacy early rather than saving them for last; they shape how you interpret every collection scenario that follows. Save case development for the end because it draws on all twelve other areas. When you reach the review stage, the CORCI cheat sheet offers a compact fact check, and our guide to how hard the CORCI exam is helps you calibrate your effort.
Key Takeaway
Because the live question count and format are unverified, build understanding rather than memorizing lists. Practice explaining why an investigator would choose a technique in a given scenario. Our CORCI practice tests are editorial preparation and do not replace issuer training, identity checks, eligibility review, proctoring or the issuer's assessment.
Where Practice Questions Fit
A practice question bank can reveal gaps in your recall and reasoning, and it can get you comfortable with timed, scenario-driven thinking. The allocation of practice questions across our thirteen areas is editorial, not an official blueprint. Use them to test yourself on each area, then return to the issuer's training for anything that feels shaky. You can start with the main practice test site whenever you are ready to measure where you stand.
Frequently Asked Questions
CORCI stands for Certified Organized Retail Crime Investigator. It is a McAfee Institute credential focused on investigating coordinated retail theft and fraud. See What Is CORCI Certification? for more.
The current standalone exam page publishes a three-hour time limit, with online proctoring and a single attempt under a one-year examination license. The current question count and item format are not published, so we do not state them.
The published board-certification policy requires at least 70% on course sections and on the final online examination, plus eligibility documentation and payment of all fees. That is a threshold, not an observed pass rate.
No. They are editorial preparation categories drawn from topics named in the official curriculum narrative. The issuer has not published scored domains or weights, and the full 21-module curriculum is not publicly itemized.
They share the same training curriculum and proctored examination. Experience distinguishes professional from associate status, and moving between them does not require retraining or retesting. For definitions, see What Is A CORCI?
The one-year examination license is a booking and access period, not a verified renewal cycle. Current renewal requirements and fees were not verified from the reviewed sources, so confirm them directly with the issuer.