Forensic Accounting

Financial fraud occurs when someone intentionally misrepresents or conceals important financial information to deceive another person, company, lender, investor, or anyone else relying on that information.

One major form is financial statement fraud. This involves intentionally misstating or omitting amounts or disclosures in financial reports so users are misled about the company’s true financial condition or performance. It may involve falsified accounting records, altered supporting documents, hidden liabilities, inflated revenue, understated expenses, or the intentional misuse of accounting principles to manipulate results.

Financial fraud is especially damaging because people rely on financial information to make decisions. Investors buy stock, banks make loans, boards oversee management, and employees trust leadership based in part on reported numbers. When those numbers are knowingly distorted, the harm can reach far beyond the company itself.

The Fraud Triangle is a simple but powerful framework for understanding why people commit fraud. It holds that three elements are usually present: pressure, opportunity, and rationalization.

Pressure may involve money, career problems, family issues, ego, addiction, or fear of failure or retribution from an employer. Opportunity exists where the person has access, authority, trust, and weak oversight. Rationalization is the story the person tells himself to make the misconduct feel acceptable: “I’m just borrowing it,” “I’ll pay it back,” “I deserve this,” or “the company can afford it.”

Fraud usually does not begin with a stranger breaking in from the outside. It often begins with a trusted insider who has pressure no one sees, access no one questions, and a justification that makes crossing the line feel survivable.

Remove one side of the triangle, and fraud becomes much harder to commit.

Read the full article: Fraud Triangle: How Good People Cross the Line

Forensic accounting is the use of accounting, auditing, investigative techniques, data analysis, interviews, and evidence gathering to determine what really happened in suspected financial wrongdoing.

Unlike a traditional financial statement audit, forensic accounting usually begins with a specific concern: a whistleblower complaint, missing money, suspicious payments, unexplained accounting entries, a lawsuit, a regulatory inquiry, or evidence that someone may have manipulated the books.

The financial statement auditor’s job is to determine whether the financial statements are fairly presented. The forensic accountant is engaged, usually through outside counsel, to answer deeper questions following suspicions of wrong-doing: Who did what? How did they do it? When did it happen? Why did it happen? Who else knew? How much damage was caused?

The reporting is different too. Auditors issue opinions on financial statements. Forensic accountants report findings of fact. Their reports explain the evidence reviewed, the procedures performed, the documents and interviews relied upon, the losses or damages quantified, and the conclusions supported by the evidence.

In short, auditors opine. Forensic accountants investigate. The forensic accountant presents the facts. The trier of fact determines what those facts mean to the matter in hand.

Think of the difference between a patrol officer and a detective.

A patrol officer moves through a community looking for visible signs that something may be wrong. He cannot be everywhere at once, so he uses experience, risk, judgment, and observation to decide where to focus his attention.

That is much like the financial statement auditor. The auditor examines selected areas of a company, tests transactions and controls, evaluates risk, and forms an opinion on whether the financial statements are fairly presented in all material respects.

A detective is called in after a specific crime is suspected or discovered. The detective does not patrol broadly. He investigates deeply, examines evidence, questions witnesses, tests explanations, and works to determine what happened and who was responsible. That is much like the forensic accountant.

The forensic investigator is usually called in after a concern, allegation, loss, or suspicious transaction has surfaced. The mission is to determine what happened, who was involved, how it happened, and what evidence supports the conclusion.

Both roles matter, but they are not interchangeable. Auditors patrol for signs of material misstatement. Forensic accountants investigate suspected wrongdoing. Confusing those roles creates unrealistic expectations and misunderstands the specialized nature of fraud investigation.

Most white-collar criminals do not begin by thinking of themselves as criminals. They usually see themselves as good people trapped in difficult circumstances. That is where rationalization begins.

A person may tell himself he is only borrowing the money, protecting his family, saving his job, helping the company, or taking what he believes he is owed. Once that story takes hold, the act no longer feels like stealing. It feels justified, temporary, or even necessary.

That is what makes rationalization so dangerous. It allows otherwise ordinary people to cross a line they once believed they would never cross.

The first fraudulent act is the hardest. If the person is not caught, the second one becomes easier. Over time, the person is no longer making one desperate decision. He is living inside a lie he created to survive the first one.

Read the full article: How Ordinary People Rationalize Extraordinary Crimes

An admission-seeking interview is a carefully planned conversation designed to obtain truthful admissions from a person suspected of fraud. It is not a casual interview or a checklist of questions. Done well, it is one of the most difficult, and valuable, skills in forensic accounting.

We use the word “admission” rather than “confession” because an investigator does not need a complete confession to make progress. An admission to one important fact may be enough to open the next line of inquiry… the next discovered fact.

I think of that as “pulling on the thread.” Picture a loose thread on a piece of clothing. You can ignore it, or you can pull on it to see where it leads. It may break off and lead nowhere. Or it may begin to unravel something much larger. Good forensic accountants do not ignore loose threads.

Documents, bank records, emails, invoices, journal entries, and spreadsheets may build the case, but few things are as valuable as having the person involved confirm an important fact in their own words. Once you have that admission, you build on it: What else must be true? What document should exist? Who else would know? Where does the thread lead next?

That is why the interview begins long before the subject enters the room. A skilled investigator gathers evidence, interviews people around the edges of the case, studies pressure points, and decides what questions to ask—and in what order—without revealing how much is already known.

When the interview finally occurs, preparation, timing, and silence matter. Sometimes a case turns on one carefully prepared question asked at exactly the right moment, followed by nothing. Silence makes people uncomfortable. A skilled interviewer knows when to press, when to reassure, and when to stop talking.

Obtaining meaningful admissions was a central objective in many of my investigations. A full confession is even more powerful because it can dramatically strengthen a criminal referral and give the client options that may not otherwise exist. Simply firing a suspected fraudster can leave that person free to move on to another organization and another opportunity. Criminal prosecution brings the conduct into the public record and can help break that cycle.

Evidence builds the case. A confession seals it because once obtained, there is no trial—just a sentencing hearing. Prosecutors are reluctant to take a financial crime to trial but no prosecutor would refuse a voluntary confession. Game, set and match!

A forensic accounting investigation begins long before the first formal interview or document request. And sometimes, it begins with a lie.

A good fraud investigator does not walk in announcing, “I’m here to investigate fraud.” Sometimes the better opening is quieter: “We’re here to prepare for the upcoming audit.” The purpose is not deception for its own sake. It is to avoid alerting suspected wrongdoers before evidence can be preserved and the facts understood.

The technical work comes later. Early on, the investigator is learning the people, the politics, the pressure points, and the hidden fear inside the organization. Trust is hard-won. People do not open up because of a title, a firm name, or a business card. They talk when they believe the investigator is competent, fair, respectful, and serious about finding the truth.

Receptionists, security guards, accounting clerks, assistants, and nervous witnesses may each hold one piece of the puzzle. Treating them with patience and respect is not just good manners. It is investigative strategy.

Documents tell part of the story. People often tell the rest.

Read the full article: A Forensic Accounting Investigation Starts Before Interviews

Forensic investigations are challenging because they rarely unfold in a straight line. An investigator may begin with an allegation, a suspicious transaction, or a whistleblower’s concern, then spend days or weeks pursuing leads that ultimately go nowhere. The path changes as new facts emerge.

The work is like assembling a thousand-piece jigsaw puzzle without the picture on the box. Some pieces are missing. Some do not belong. Some may have been hidden or distorted. Some dishonest people may add a few stray pieces when you are not looking.

The investigator’s job is to find the right pieces and assemble them into a fair, accurate, and defensible picture of what happened.

That matters because the consequences are enormous. Careers, reputations, companies, families, and even someone’s liberty may be at stake. In this work, close enough is not good enough.

That’s an enormous amount of stress… every day. But then… that’s the job.

Resilience matters because forensic accounting investigations rarely move in a straight line. Evidence may be missing. Witnesses may be afraid. Documents may be incomplete or misleading. Clients may grow impatient. Costs may rise. And the easy answer may be to stop, write a careful report, and say the allegations could not be proven.

But fraud often hides behind delay, confusion, fear, and convenient explanations. A good forensic accountant has to stay disciplined long enough for the truth to surface. That does not mean stubbornly clinging to a bad theory. It means testing the facts, changing direction when needed, listening to the team, and refusing to quit simply because the case has become uncomfortable.

Resilience is not motivational talk. It is investigative stamina. Sometimes the difference between an unresolved allegation and a major fraud uncovered is the investigator who stays in the fight one more day.

The expectation gap is the mismatch between what the public expects financial statement auditors to do and what auditors are actually trained and engaged to do.

Here is the raw truth: auditors are not trained to investigate suspicions of fraud. They are not required to take even one college course in fraud detection, and the CPA Exam does not test their ability to investigate fraud.

Financial statement audits serve an important function, but they are not forensic investigations. Auditors are trained to form an opinion on whether financial statements are fairly presented in all material respects. They assess risk, test selected transactions and controls, and obtain reasonable assurance. They sample transactions and form an opion on the whole based upon that testing.

That is very different from searching every corner of a company for fraud. If that became the standard, the cost of audits would be prohibitive and the financial markets would collapse.

Forensic accountants are brought in when there is a specific concern: an allegation, suspicious transaction, whistleblower complaint, unexplained loss, or other evidence of possible misconduct. They follow leads, test explanations, examine detailed evidence, study motive and concealment, interview witnesses, and report findings of fact. That is what they have been specifically trained to do. Their work may ultimately support counsel, regulators, prosecutors, or a court.

Think of it this way. You take your car to a general mechanic for a tune-up. A week later, the transmission fails. You would not automatically blame the mechanic for failing to discover a problem he was never hired to diagnose. Once there are signs pointing to a specific problem outside the scope of the tune-up, you bring in a specialist.

The same principle applies here. A financial statement auditor performs an important but defined job. When there are signs of possible fraud, that is when trained forensic accountants should be brought in.

The expectation gap becomes most visible after a major fraud discovery. The media immediately label it “An Audit Failure.” Then the public asks, “How did the auditors miss it?” Sometimes the better question is: When the warning signs appeared, did anyone bring in investigators trained to look for fraud? This is a management and board function… not the task of the independent auditor.

If we want detective work, we need detectives. See discussion under “An analogy to distinguish an auditor from a forensic accountant investigator.”

Many financial frauds continue because the person committing it believes no one is watching and no one will speak up. A properly designed whistleblower hotline changes that calculation. It gives employees, vendors, and others a safe way to report concerns before misconduct grows into a major crisis.

But the hotline has to be trusted. If employees believe reports will be traced, ignored, or quietly sent back to conflicted management, they will stay silent. An effective hotline program should be independent, anonymous where appropriate, protects the reporter from retaliation, and overseen at the board or audit committee level. The best are those administered by third-party providers reporting to the board or audit committee—not management.

Fraud prevention is not just about controls. It is also about perception. When people believe wrongdoing can be reported and will be taken seriously, it can deter misconduct before it starts.

Read the full article: Whistleblower Hotlines: The Most Effective Way to Detect Financial Fraud

“Trust but verify” means you can respect people without relying blindly on them. In fraud prevention, trust is not the enemy. Unchecked access is. The people who commit major fraud are often not strangers. They are trusted insiders who have authority, familiarity, and too little oversight.

Verification should not be personal or accusatory. It should be routine. Bank reconciliations should be reviewed. Vendor changes should be checked. Duties should be separated. Someone independent should be asking hard questions before a small problem becomes a major loss.

The Rita Crundwell fraud in Dixon, Illinois, is a powerful reminder. A trusted official was able to steal nearly $54 million over roughly two decades because basic verification failed. The lesson is simple: trust may build relationships, but verification protects them.

Read the full article: Trust But Verify: The Only Way Trust Survives

Forensic accounting requires more than technical training. Young professionals must learn how to think, act, and make decisions when the facts are incomplete, the pressure is high, and the path forward is unclear.

That mindset is built through experience, not lectures. Give people real responsibility before they feel fully ready. Let them make mistakes when the consequences are manageable. Then review what happened, correct the mistakes, and send them back out to try again.

That is also where some young professionals struggle. They may be technically strong but uncomfortable with criticism, uncertainty, or failure. In forensic accounting, those experiences are part of the learning process. Confidence does not come from avoiding mistakes. It grows when people discover they can fail, recover, learn from the experience, and perform better the next time.

The best mentors understand this. They stretch young professionals, challenge their assumptions, give them increasing responsibility, and provide honest feedback. Over time, that repeated exposure develops judgment, resilience, curiosity, and the confidence to make difficult decisions when there is no obvious answer.

Technology will continue changing the profession, especially with AI. Fraudsters will use it, and investigators will use it too. But technology will not change human nature. Fraud will still involve pressure, opportunity, rationalization, concealment, and people making choices under difficult circumstances.

The best forensic accountants understand systems and technology, but they solve cases by understanding people.

Teaching gives people knowledge. Training turns that knowledge into skill.

A young professional can be taught how to interview a witness, present findings, testify as an expert witness, lead a meeting, or develop business. But hearing someone explain those skills is not enough. They develop only when that person watches someone do them well, practices them in real situations, receives honest feedback, corrects mistakes, and tries again.

That is how judgment and discernment develop. One meeting does not create a leader. One presentation does not create a persuasive communicator. One investigation does not create a forensic accountant. Growth comes through repetition, increasing responsibility, and the willingness to be corrected.

The best leaders do more than explain. They demonstrate, create opportunities, review performance honestly, and then send them back to practice.

Technical skill matters, but it’s expected and it’s not enough.

In forensic accounting, I look for people with curiosity, resilience, character, and a willingness to be challenged. The work is demanding. Cases move fast, pressure is real, travel can be unpredictable, and mistakes are part of growth. If you have difficulty handling failure, this may not be the place to land. Under the right mentors, you will be stretched, corrected, and allowed to fail in manageable ways—and you will learn from those failures.

One of the first things I want to know is whether a candidate can talk honestly about failure. People who have never failed often have not pushed themselves hard enough. The best candidates can describe a mistake, explain what they learned, and show they are not afraid to stretch beyond their comfort zone.

I also look for people willing to push back respectfully. Forensic accountants cannot simply agree with authority. They must question assumptions, defend their reasoning, and follow the evidence. Technical skills can be taught. Judgment, courage, humility, and the willingness to grow are much harder to develop.

Start with the technical foundation. Earn your accounting degree, become a CPA, and seriously consider spending at least a couple of years in financial statement auditing. That experience teaches discipline, evidence gathering, documentation, and how financial statements are built. Then earn your CFE and begin developing the investigative mindset that separates forensic accounting from traditional auditing.

But technical skill is only the beginning. Forensic accounting is ultimately about people under pressure. You need to learn that professional skepticism is more than a sound bite. You also need sound judgment, curiosity, strong communication skills, and the ability to earn the trust of clients, employees, witnesses, lawyers, executives, and your own team.

Today, I would add one more requirement: learn how to use AI effectively. AI will increasingly handle parts of the technical work once assigned to junior professionals. The people who thrive will be those who know how to use technology while still bringing human judgment, ethical courage, and leadership to the work. And remember this: people may question AI, but they need to trust you.

Technical skills may get you into the accounting profession, but soft skills often determine how far you go. In forensic accounting, the numbers matter, but people usually hold the key to what the numbers mean.

You need to communicate clearly, earn trust, read hesitation, ask better questions, and know when to stop talking and listen. These skills are rarer than many people realize, and they must be developed over time under managers who understand their importance in investigative work.

Fraud investigations are not solved only by spreadsheets, documents, and reconciliations. They are often advanced by conversations—with clerks, managers, whistleblowers, executives, and witnesses who may know more than they realize. The professional who can make people feel respected and safe will often learn what a purely technical reviewer misses.

In a world where AI will handle more routine accounting tasks, human judgment, empathy, curiosity, and communication will become even more valuable.

Master these skills, and you become that person your boss will not start the meeting until you are in the room.

Read the full article: Beyond the Numbers: Why Soft Skills Matter in Accounting

Many forensic accountants begin their careers as auditors. I did, and I strongly recommend that path. Auditing provides an excellent foundation: you learn how financial statements are built, how transactions flow through an organization, how controls are intended to work, how to gather and document evidence, and how to recognize when something does not look right.

But becoming a strong forensic accountant requires building on that foundation with an entirely different set of skills. As I have often said:

Forensic accountants are the Navy SEALs of the accounting profession.

A technically skilled auditor can test accounts, review documents, evaluate controls, and follow an audit program. A strong forensic accountant can do those things too, but understands something more fundamental: fraud is a human problem before it becomes an accounting problem.

What sets the forensic accountant apart often comes down to curiosity, judgment, trust, and people skills.

Documents can show what happened, but people often reveal why it happened, where to look next, and what does not fit the official story. That requires more than technical credentials. It requires the ability to listen, read the room, ask one more question, recognize hesitation, and make people comfortable enough to share what they know.

In fraud work, being smart is table stakes. The real edge is becoming the person others trust when the truth is difficult, uncomfortable, or dangerous to tell.

Read the full article: Beyond the Numbers, Part 2: What Made Me Different

The Sam Halloran series of novels help readers understand fraud investigation by putting them inside the pressure, uncertainty, and human conflict that real investigators face. Each is inspired by my real-life investigations.

Textbooks can explain fraud schemes, controls, interviews, and evidence. I wrote one of those as well: A Guide to Forensic Accounting Investigation. Fiction is an entertaining way to show what those things feel like when careers, reputations, families, companies, and freedom are on the line.

Fraud investigations rarely unfold neatly. Leads go cold. Witnesses hesitate. Documents mislead. Powerful people protect themselves. Investigators must decide whom to trust, when to press, when to wait, and how to keep moving when the truth is buried under fear and deception.

The novels are inspired fiction—built from the world I lived in for more than thirty years. Sam Halloran’s cases are designed to entertain, but they also teach a deeper lesson: fraud is not just about numbers. It is about people, pressure, rationalization, concealment, courage, and the relentless search for truth.

Check out The Sam Halloran Trilogy