When to Hire a Forensic Accountant, and Who to Choose

Hire a forensic accountant when a money question may end up before a court, an insurer, a regulator or a board, or when the person who could explain the numbers may be the person who moved them. A forensic accountant ties transactions to evidence that holds up under challenge, which a routine audit is not built to produce.

Warning signs that call for a forensic accountant

The warning signs are situations where you need proof, not just correct books. A suspected theft by an employee, a partner dispute over profit shares, a divorce with a business in it, an insurance claim for lost income, or a lender asking hard questions all need findings that another expert may attack later.

A few concrete triggers come up again and again:

• A cash shortfall nobody can explain. The bank balance is lower than the books say, and the difference has been growing for months.
• A tip from an employee, customer or vendor. Someone has named a person or a payee, and you need to know whether it is true without alerting them.
• Red flags in the statements. Payments to new payees, round amounts just under approval limits, transfers between accounts with no business reason. The eight bank statement red flags for embezzlement and kiting are a good self-test before you call anyone.
• Records that have gone missing. Statements, check images or the vendor file disappeared around the same time as a departure.
• A legal deadline. A lawsuit, a claim filing date or a court order that requires an expert report by a fixed day.

One trigger alone may have an innocent explanation. Two or three together, especially with a deadline, usually justify at least a first conversation with a specialist.

Forensic accountant or your existing auditor?

Your existing auditor is usually the wrong person to investigate, for two reasons. First, an audit opinion is designed to say whether financial statements are fairly presented overall, not to find every theft. Second, if the fraud happened during years the auditor signed off, the auditor's own work is part of the question, which is a conflict.

The difference in purpose is worth understanding before you brief anyone. Forensic audit versus financial audit, compared on purpose and evidence sets out how scope, materiality and reporting change when the goal is proof rather than an opinion.

There are cases where your regular CPA firm is fine. If the firm has a separate forensic group that did not work on your audit, independence may be manageable; ask how the teams are walled off. If the question is narrow, such as rebuilding one account for one year with no suspected wrongdoing, a careful bookkeeper or controller may do it at a fraction of the cost.

Counsel often hires the forensic accountant rather than the business itself. Lawyers do this so the work may be protected while the case develops. Ask your lawyer about this before you sign an engagement letter directly, because the order of hiring can matter later.

Which forensic accountant credentials are worth checking?

Two credentials come up most in the United States: the CFF and the CFE. Neither guarantees good work, but each shows the person passed an exam in the field and keeps up continuing education. Check credentials, then ask for examples of reports that have been through testimony or opposing review.

The AICPA's page on the Certified in Financial Forensics credential says a CFF must hold a valid CPA certificate, be an AICPA member in good standing, pass the CFF exam and show qualifying forensic accounting experience. So every CFF is a CPA.

The ACFE's description of the Certified Fraud Examiner credential presents CFEs as professionals trained in preventing, detecting and investigating fraud. A CFE need not be a CPA, and the credential leans toward investigation and interviewing.

Questions that matter more than letters

• Have you testified, and how many times was your work challenged by an opposing expert?
• Who on your team will actually do the transaction work, and what is their experience?
• Can you share a redacted sample report?
• Do you have any relationship with the people or firms involved?
• How do you handle and log original records?

The last question matters more than it sounds. A specialist who works on copies, logs where each file came from and can show nothing changed after collection gives your findings a better chance in a dispute.

Scoping a forensic accountant engagement letter

A forensic engagement letter should state the question to be answered, the people and accounts involved, the period, the deliverable and how fees work. A loose scope such as "look into the books" invites a large bill and a vague report. A narrow, written question keeps the work focused and the cost predictable.

Here is an example scope for a suspected vendor fraud. The details are illustrative.

A phased budget is a good habit. Phase one tests the bank data and tells you whether the concern is real. Phase two, with interviews and document requests, starts only if phase one supports it. The forensic accountant will often work from a written plan; the forensic audit checklist for bank records shows the steps a well-run engagement follows, so you can recognize them in a proposal.

Fees and expectations

Most forensic work is billed by the hour, sometimes with a cap per phase. Ask for an estimate per phase, how often you will be updated, and what happens if the scope must widen. Agree up front who receives drafts, because in a dispute draft reports may be discoverable.

Records to hand a forensic accountant in the first week

The records to hand over are the ones that let the specialist rebuild the money trail without asking the person under suspicion. Bank statements come first, because they show what actually moved. Then the ledger, the vendor and payroll files, approvals and any written policy that sets limits.

Use this checklist when you gather files:

1. Complete bank statements for every account in scope, ideally downloaded directly from the bank, for the whole period plus one year before.
2. Check images, front and back, for the same period.
3. Credit card statements for company cards.
4. The general ledger detail for cash, payables and expense accounts.
5. Monthly bank reconciliations, with who prepared and who reviewed each one.
6. The vendor master file, including date added and who added each vendor.
7. Payroll registers and employee address and bank details.
8. Approval policies and any delegation of authority.
9. Emails or messages tied to the tip, preserved without being forwarded around the office.
10. A short timeline of what you know, who knows it and when you learned it.

Item five is often revealing. If the monthly reconciliations stopped, or were signed by the same person who wrote the checks, the gap tells the specialist where to look. A reconciliation proves the bank and the books agree once timing items are explained; what a finished bank reconciliation proves covers that.

Hand over copies and keep the originals locked. Note who collected each file and when. If statements arrive as PDFs, a tool that reads every line and confirms each statement foots saves the specialist time; PreciseBankFlow does that and produces an exception list, though the conclusions remain the accountant's.

When hiring a forensic accountant is premature

Hiring a forensic accountant is premature when the problem is probably an error rather than a scheme, and a basic review has not been done. A missed month of reconciliation, a duplicate payment or a transfer booked to the wrong account looks alarming but often clears in an afternoon. Rule those out first.

Do these before you spend on a specialist, unless there is a deadline or a clear accusation:

• Reconcile every bank account for the months in question.
• Ask the bookkeeper to explain the largest unreconciled items in writing.
• Pull the vendor list and confirm the five largest new payees exist.
• Compare this year's spending by payee with last year's and note any payee whose total jumped with no change in the business.

Each of these takes hours, not weeks, and each produces a document the specialist will want anyway. If you do hire someone later, you hand over a reconciled set of accounts and a short list of open questions, and the first phase starts from there instead of from a box of statements.

If those steps leave a gap you cannot explain, or the explanations do not hold up against the documents, call the specialist. One caution runs the other way: do not let an internal review alert the person you suspect. If the tip names someone who controls the books, skip the self-review, preserve the records quietly and speak to counsel first. A self-review that tips off the subject can cost more than the fee you were trying to save.