Most people meet a forensic accountant on their worst day. A partner notices the cash never quite matches the sales. A widow finds a bank account she'd never heard of. A lawyer needs to know exactly how much a departing employee walked off with before filing suit. The job starts with a plain question, usually some version of "where did the money go?", and ends with an answer solid enough to hand a judge.
The short version: a forensic accountant digs through financial records to work out what really happened, then puts it in a form that holds up in a fight. That's the whole trade. Everything below is what it looks like in practice.
It's an investigation, not an audit
People mix these up all the time, so it's worth being precise. A financial-statement audit asks whether a company's books are fairly stated as a whole. Auditors sample transactions, test controls, and give an opinion. They aren't hunting for a specific thief, and a clean audit opinion is not a certificate that no fraud happened.
A forensic engagement starts from suspicion or conflict. There's usually a target, a timeframe, and a question. Instead of sampling, the work often goes to the full population: every disbursement in a period, every entry to one account, every payment to one vendor. When a bookkeeper has been skimming for years, the pattern rarely shows up in a sample of thirty transactions. It shows up when you line up all of them and one name keeps appearing where it shouldn't.
That mindset shifts the moment litigation is on the table. Every document gets treated as potential evidence. Every conclusion has to trace back to a source someone can point at later.
Following the money and rebuilding the records
Tracing is the center of the work. You take a dollar and follow it: which account it left, which account it landed in, whose signature moved it, what it bought. Do that across enough transactions and a scheme takes shape.
A common one is the fake vendor. Someone with access to accounts payable sets up a company that exists only on paper, approves invoices to it, and cuts the checks to himself. On the books it looks like ordinary spending. Trace a handful of those payments and the story falls apart fast. The vendor's address is a UPS box. The bank account traces back to an employee's spouse. The invoices have no purchase orders behind them. Three questions usually crack it open: who paid it, where the money actually went, and whether any goods or services ever showed up.
Records are rarely clean when you arrive. Files go missing, QuickBooks has been "adjusted," a laptop got wiped. So part of the job is reconstruction, building a reliable picture out of whatever survives: bank and credit-card statements, deposit slips, emails, texts, third-party records subpoenaed from the other side. You're rebuilding the ledger the company should have kept, from the outside in.
Why the scheme was possible in the first place
Criminologist Donald Cressey studied embezzlers and kept finding the same three conditions behind their thefts. It's now called the fraud triangle: pressure, opportunity, and rationalization. A pressure the person can't share, like debt, a gambling problem, an underwater mortgage. An opportunity created by weak controls. And a story they tell themselves so they can live with it ("I'm only borrowing it," "they underpay me anyway").
This isn't academic. It tells you where to look. Opportunity is the practical one, and it's why a single detail draws so much attention: the bookkeeper who never takes a vacation. When one person controls the money and won't let anyone else near it, even for a week, it's often because the scheme comes apart the moment someone else opens the drawer.
The thief who never takes a day off isn't loyal. They can't afford to let anyone else sit at their desk.
Putting a number on it
Think something is off in the numbers?
A confidential consultation is the quiet first step. Bring what you have, even if it's just a hunch and a few bank statements, and we'll tell you whether there's something worth chasing.
Finding the fraud is half the job. The other half is measurement, because the case eventually turns on a figure. How much was taken. What the breach cost. What the business was worth on a particular date. A court wants a number and the method behind it, not a guess.
Two techniques come up when someone's spending doesn't match what they report. Lifestyle analysis lines up known expenses, the house, the cars, the tuition, the travel, against reported income. The net-worth method builds it out over time: if someone's assets grew by far more than their declared income could explain, and it wasn't a gift or a loan, the gap points to money nobody reported. Both show up in divorce cases where one spouse lives well beyond the income on the tax return, and in any matter where hidden income is the whole fight.
Valuing a business is its own discipline, and it leans on three approaches. You vary the mix depending on the company:
- The income approach values the business on the earnings or cash flow it's expected to produce.
- The market approach compares it to what similar businesses have actually sold for.
- The asset approach starts from what the company owns and owes.
A valuation matters in a partnership breakup, a shareholder dispute, or a divorce where a private company is the biggest asset on the table and each side has a very different idea of what it's worth.
Explaining it under oath
A report only another accountant can follow is close to useless in a courtroom. Much of the value is translation: taking two years of traced transactions and saying, in plain sentences a jury can hold onto, what happened and how you know it.
When a matter goes to trial, the forensic accountant often testifies as an expert witness. The method has to be sound enough to survive an opposing expert and a cross-examination built to pick it apart. Every number ties to a document. Every assumption gets stated out loud. The witness chair is where sloppy work gets exposed, so all the discipline back in the investigation is really preparation for that seat.
Who actually hires one
The engagements fall into a few buckets. Attorneys bring in a forensic accountant to quantify damages in a lawsuit or to trace assets in a divorce. Business owners and boards call when they suspect an insider is stealing and need to know the scope before they confront anyone or go to the police. Buyers and sellers want a hard look at the books before a deal closes. And individuals, often a spouse who senses the reported income doesn't square with how the household lives, come in wanting to know what's really there.
If any of that sounds close to home, the sensible move is a quiet conversation before you accuse anyone or file anything. The early evidence is fragile, and how you handle the first week often decides whether a case is provable later.
Think something is wrong with your numbers?
Talk to a forensic accountant. It is confidential, and there is no obligation.