forensic audit services

What Forensic Audit Services Actually Do (And When You Need One)

The CFO called me three weeks before their Series B close. "We think there's something wrong with the books, but we can't find it."

Their auditor had signed off. Their controller swore everything reconciled. But the numbers felt wrong to her, the kind of wrong you can't point to in a single line item but that shows up as a pattern when you step back. Revenue was steady, costs were predictable, but cash was draining faster than either figure explained.

Took me four days to find it. They had been recognising revenue on annual contracts upfront while paying supplier costs monthly, creating a timing mismatch that made every quarter look profitable on paper while the bank account told a different story. The accounting was technically correct under their policy. The policy was destroying the business.

This is what forensic audit services exist to catch: not the obvious fraud, not the missing invoice, but the structural problem that survives a standard audit because a standard audit checks compliance, not coherence.

What Forensic Audit Actually Means

Forensic audit is investigative accounting. It goes deeper than a financial statement audit, which verifies that your books follow the rules and present a fair view. A forensic audit asks whether the transactions themselves make sense, whether the patterns hold up under scrutiny, and whether the numbers you're seeing reflect the economic reality of what actually happened.

Standard audits test controls and sample transactions to confirm compliance with accounting standards. Forensic audits test the transactions themselves for internal consistency, look for anomalies that suggest error or manipulation, and reconstruct financial events when the records are incomplete or contradictory.

The difference matters. A clean audit opinion tells you the financials are presented fairly under the applicable framework. It does not tell you whether someone has been siphoning cash through fake vendors, whether your revenue recognition policy is hiding a structural cash problem, or whether the subsidiary in Lagos has been inflating its asset values to hit performance targets.

Forensic work finds those things because it starts with suspicion, not assumption. It treats every number as a claim that needs proving.

The Four Situations That Call For Forensic Work

Pre-Transaction Due Diligence

You are buying a company, or raising capital, or merging with a competitor. The target has provided financials. Their auditor has signed off. Your lawyers are reviewing contracts. But you need to know what the numbers actually mean, not just whether they comply with IFRS.

This is where forensic audit earns its cost. A standard due diligence review will check that revenue is recognised in line with policy and that major liabilities are disclosed. A forensic pass will check whether the revenue is real, whether the customer contracts support the amounts recorded, whether the working capital cycle matches what the financials imply, and whether the cash flow timing makes sense given the P&L.

I worked on a deal two years ago where the target's financials showed consistent 20% gross margins and healthy EBITDA. Forensic review found that they had been capitalising costs that should have been expensed, inflating both assets and profit. The margins were closer to 12%, and half the EBITDA disappeared when you reclassified the expenses correctly. The deal still closed, but the price dropped by nearly 30% once the real economics were clear.

The cost of the forensic work was a small fraction of the value it protected.

Suspected Fraud or Misappropriation

Something is missing. Cash is lower than it should be, inventory counts don't match the ledger, or payments are going to vendors no one recognises. You suspect fraud but you need proof, and you need it documented in a way that will hold up under legal scrutiny.

Forensic audit builds that proof. It traces transactions through the full accounting cycle, reconstructs missing records, identifies patterns that indicate manipulation, and quantifies the loss. The output is not just a number, it is a defensible case with supporting evidence that can be used in court, in arbitration, or in settlement negotiations.

The method is straightforward but time-intensive. You pull the full transaction file, not a sample. You test every payment over a threshold, trace every journal entry that lacks a clear source document, and run statistical tests to flag anomalies. Benford's Law is the simplest: the first digit of naturally occurring numbers follows a predictable distribution, and deviations from that distribution often indicate fabricated data.

Where $$d$$ is the first digit (1 through 9), and $$P(d)$$ is the expected frequency. If your payment file shows too many transactions starting with 5 or 7, that is a signal worth investigating.

But Benford's Law is a flag, not proof. The forensic work is in the manual trace that follows: matching payments to invoices, invoices to purchase orders, purchase orders to approvals, and approvals to the people who supposedly authorised them. That is where you find the fake vendor, the duplicate payment, or the employee who has been writing cheques to themselves for eighteen months.

Litigation Support and Dispute Resolution

You are in court, or arbitration, or a shareholder dispute, and the financial facts are contested. One party claims the business was profitable and the other claims it was insolvent. One party says the contract was breached and the other says performance was complete. The accounting records exist but they do not settle the question because both sides are interpreting them differently.

Forensic audit provides the independent analysis that resolves the dispute. It reconstructs the financial position as of the relevant date, tests the competing claims against the underlying records, and calculates the quantum of loss or damages in a way that stands up to cross-examination.

This work requires precision. You are not building a model for internal planning, you are building a case that will be challenged by the other side's expert. Every assumption must be documented, every calculation must be replicable, and every conclusion must be tied directly to source evidence. If you adjust a figure, you explain why. If you exclude a transaction, you show the basis. If you estimate, you disclose the range and the methodology.

The standard is not reasonable assurance, it is proof beyond reasonable rebuttal.

Regulatory or Compliance Investigation

A regulator has asked questions, or a whistleblower has made allegations, or an internal audit has found something that needs external verification. You need an independent review that can satisfy the regulator, protect the board, and establish the facts without bias.

Forensic audit provides that independence. It is not management investigating itself, it is an external expert with no stake in the outcome, conducting a review that can be shared with regulators, auditors, or shareholders as needed.

The scope varies. Sometimes it is narrow: did this specific transaction comply with the relevant regulation? Sometimes it is broad: review all related-party transactions over the past three years and assess whether they were conducted at arm's length. Either way, the output is a report that documents what was found, what was tested, and what the evidence supports.

How Forensic Audit Works in Practice

The process is methodical. You define the scope, gather the records, test the data, trace the anomalies, and document the findings. Each step builds on the last.

Scoping the Engagement

Forensic work is expensive because it is manual and time-intensive. A clear scope keeps it focused and cost-effective. You agree upfront what questions need answering, what period will be covered, what records will be reviewed, and what the output will look like.

A poorly scoped engagement becomes a fishing expedition that burns budget without delivering clarity. A well-scoped engagement answers the specific question at the centre of the problem and stops.

Data Gathering and Validation

You need the full transaction file, not a summary. General ledger, subledgers, bank statements, contracts, invoices, approvals, emails, anything that documents a financial decision or transaction. If the records are incomplete, you document the gap and work with what exists.

The first test is internal consistency. Do the subledgers reconcile to the general ledger? Do the bank statements match the cash book? Do the invoices match the payments? If they do not, that is the first finding.

Pattern Analysis and Anomaly Detection

This is where statistical tools earn their place. You run Benford's Law on the full payment file. You test for duplicate transactions, round-number bias, and timing patterns that suggest manipulation. You calculate key ratios and look for sudden changes that lack explanation.

If DSO jumps from 45 days to 90 days in a single quarter, that is a signal. Either the customer base changed, the credit policy changed, or revenue is being recognised on sales that have not yet been collected. You trace the change to find out which.

Manual Trace and Verification

The statistical tests flag anomalies. The manual trace proves what happened. You take the flagged transactions and trace them back to source: who authorised it, who recorded it, who received the payment, and whether the underlying event actually occurred.

This is slow work. A single suspicious payment can take an hour to fully trace if the documentation is scattered across systems. But it is the only way to build a defensible case. You are not guessing, you are proving.

Quantification and Reporting

Once you know what happened, you quantify it. How much was lost, over what period, through which mechanism. You calculate the figure using the most conservative assumptions that the evidence supports, because the number will be challenged and you need to defend it.

The report documents everything: the scope, the methodology, the evidence reviewed, the findings, and the quantum. It is written for a non-technical audience but supported by technical appendices that show the working. If it goes to court, the report becomes an exhibit and you become a witness, so every word must be accurate and every claim must be provable.

What Forensic Audit Does Not Do

It does not fix the problem. It finds it, documents it, and quantifies it. The remediation, the control changes, the personnel decisions, those are management's job. Forensic audit provides the facts. What you do with the facts is a separate question.

It does not replace a financial statement audit. A forensic review is investigative, not assurance. It answers a specific question or tests a specific suspicion. It does not provide an opinion on whether the financial statements as a whole are fairly presented.

It does not guarantee you will find everything. If someone is determined to hide a transaction and has destroyed the records, forensic audit can only find what the remaining evidence reveals. It is thorough, not omniscient.

When to Bring in Forensic Expertise

You bring in forensic audit when the standard review process is not enough. When something feels wrong but you cannot point to the line item. When the auditor has signed off but the cash position does not match the profit. When you are about to commit capital based on financials you do not fully trust.

You bring it in early, before the problem compounds. A small misstatement caught in month three is a correcting entry. The same misstatement caught two years later, after it has been embedded in forecasts, board reports, and financing documents, is a crisis.

You bring it in with a clear question. Not "check everything", but "we think revenue recognition is overstated, prove or disprove it" or "payments to this vendor class look wrong, trace them and tell us what happened". Specificity keeps the work focused and the cost contained.

The Real Cost of Not Knowing

The cost of forensic audit is visible and easy to resist. The cost of not having it done is hidden until it is catastrophic. You close a deal based on financials that turn out to be misstated, and the value you thought you were buying does not exist. You let a fraud run for another year because you did not want to spend the money to investigate, and the loss doubles. You go into a funding round with accounts that do not hold up under investor due diligence, and the round falls apart.

Forensic audit is insurance that pays out in certainty. You spend the money, you get the facts, and you make the decision with full information. That is worth more than the fee.

A shorter version of this piece appears on LinkedIn: [LINKEDIN_POST_URL].

If your books feel wrong but you cannot find the problem, or you are about to make a decision that depends on numbers you do not fully trust, take thirty minutes to walk through it: calendly.com/muhammed-adediran/30min.