Welcome to 21st century forensic accounting

Forensic accountants are engaged for a wide variety of assignments, among them investigating fraud, auditing internal controls and quantifying damages associated with legal disputes. All of these require attention to detail and a diverse set of skills including mathematical, technological, legal and investigative. But the accounting landscape and client needs are constantly changing. Here’s how the profession has adapted to digitization in the 21st century and how it’s applying the latest technological solutions.

Embracing the digital revolution

Technology has radically changed how forensic accountants do their jobs. Businesses used to be awash in paper. Today, most companies run on a digital backbone and discourage employees from printing to save money and reduce environmental damage. Consequently, forensic accountants must be able to gather, analyze and make sense of vast amounts of electronic data.

In addition to processing company data to, for example, calculate financial ratios, build spreadsheets and determine legal damages, many experts routinely attempt to recover data that perpetrators have deliberately deleted. During an investigation, a forensic accountant might:

  • Search for and piece together deleted files,
  • Analyze suspicious user activity on company servers,
  • Identify relevant electronic files within a company’s network, and
  • View suspected perpetrators’ social media accounts.

Newer developments, such as cloud-based storage solutions and a shift from working in offices to working remotely, mean that forensic accountants now must look outside the traditional confines of a company’s IT perimeter.

Glimpse of the future

As for the future, artificial intelligence (AI) increasingly looks like it will play a significant role. Most forensic accountants must harness vast amounts of electronic data to do their jobs. Expenses associated with a forensic investigation can quickly add up.

AI and machine learning enable forensic accountants to continue to deliver cost-effective services. These tools allow experts to analyze large data sets faster and can even “make decisions” such as determine what constitutes a suspicious invoice and flag those records. Or AI might review a set of contracts, seeking certain words or features that suggest higher risk. In general, the more records an AI system reviews over time, the more it “learns” and the higher its accuracy rate.

Other tools

Other technologies predicted to play a greater role in forensic accounting in the future include predictive analytics, blockchain, robotics and bots. But whatever tools forensic accountants use, the underlying issues — fraud and legal disputes — remain basically the same. If you or your business is grappling with these issues, contact us.

© 2020 Covenant CPA

Is your business inadvertently paying a shell company?

Not all shell companies are dishonest. Despite their often-sinister reputation, these paper-only companies may be used legitimately to hold another business’s assets. Or they may be the “empty container” left after a company downsizes or is acquired. That said, some fraud perpetrators use shell companies to embezzle funds, evade taxes, dodge debts and commit other illegal acts.

For many businesses, the biggest threat posed by illegitimate shell companies is that unscrupulous employees will use them to perpetrate billing fraud. Here’s how to spot a shell scheme in your midst.

Under cover

Employee-perpetrated shell company schemes take one of two forms. In the first, an employee sets up a shell company to send out — and collect on — fictitious bills. Perpetrators don’t have to send the bills for nonexistent goods and services to the company for which they work. But it’s easier, and can help them evade detection, if they do.

Consider, for example, an accounting staffer who knows that his company rarely scrutinizes invoices for less than $3,000. He applies for a “doing business as” (DBA) certificate from his state for a fictitious business and opens a business account at a local bank. Now he can bill his employer for services that cost less than $3,000 per invoice.

In the second type of scheme, an employee sets up a shell company to sell products to his or her employer at a marked-up price. Because the employee’s shell company has no overhead or expenses, the employee can pocket the proceeds.

Invoices contain clues

Shell company schemes can go undetected for a long time, particularly if the fraudsters are savvy enough to attempt to cover their tracks and don’t get too greedy. Most perpetrators, however, leave a paper trail of invoices that, when scrutinized, is suspicious.

For example, invoices may vaguely define their products or services, arrive more than once a month and show an increased number of purchases over time. Addresses are important. Fake companies usually use a post office box as a return address. But less clever (or more arrogant) thieves may use their actual home address.

Shell company scams work only if the crooked employee can pay the invoices or get the shell company authorized as a legitimate vendor. A quick credit check on a new vendor will reveal whether it has an operating history and deserves greater scrutiny. Job rotation, mandatory vacations and a strict separation of duties in critical areas, such as your accounting department, can help prevent financial losses from shell company schemes. 

Investigating suspicions

Contact us if you think an employee is committing fraud with a shell company. We can examine invoices and other records, interview suspects and witnesses, and review your internal controls to get to the bottom of any suspicions.

© 2020 Covenant CPA

Using lifestyle analysis to find hidden income and assets

Forensic accountants have many tools to help them find evidence of hidden assets or fraud. But one of the most effective, particularly in divorce matters or legal disputes with former business partners, is a lifestyle analysis. This method involves developing a financial profile of a subject and then examining mismatches between the person’s known resources and lifestyle.

Financial profiling

Forensic accountants develop a financial profile of a subject by examining:

Bank deposits. The expert reconstructs the subject’s income by analyzing bank deposits, canceled checks and currency transactions, as well as accounts for cash payments from undeposited receipts and non-income cash sources, such as gifts and insurance proceeds.

Expenditures. Here, the expert analyzes the subject’s personal income sources and uses of cash during a given time period. If the person is spending more than he or she is taking in, the excess likely is unreported income.

Assets. Experts assume that unsubstantiated increases in a subject’s net worth reflect unreported income. To estimate net worth, an expert reviews bank and brokerage statements, real estate records, and loan and credit card applications.

Tracing income

Proving that a person has unreported income is one thing. Tracing that income to assets or accounts that can be used to support a legal claim or enforce a judgment is another story. To do this, forensic accountants may scrutinize the assets noted above, as well as insurance policies, court filings, employment applications, credit reports and tax returns.

Tax returns can be particularly useful because people have strong incentives to prepare accurate returns. For example, they may fear being charged with tax evasion if they lie to the IRS. As a result, tax return entries often reveal clues about assets or income that someone is otherwise attempting to conceal. Another potentially fruitful strategy is to interview people with knowledge about the subject’s finances, such as accountants, real estate agents and business partners.

Note that building a financial profile of someone other than a spouse in a divorce matter or a former business partner in a legal dispute can be challenging. In the case of occupational fraud suspects, experts may know the individual’s salary and have access to publicly available information such as real estate sale and purchase records and court filings. But they need a court’s authorization to request bank and tax records and other personal data.

Can’t fool the experts

The good news is that people who try to conceal income and assets usually can’t fool experienced fraud investigators. Contact us to conduct a lifestyle analysis.

© 2020 Covenant CPA

Some online sellers burnish their reputations at the expense of yours

Reports started trickling into state agricultural agencies in July: Consumers were worried about strange seed packets they had received in the mail. The unsolicited goods weren’t labeled and appeared to be sent from China. In a year already fraught with anxiety and paranoia, the story quickly made headlines.

Perhaps this was the first you’d heard of a scam known as “brushing,” in which some third-party e-commerce sellers set up fake buyer accounts and ship unordered goods (in this case, seeds) to “customers.” Why would they do this? Read on. 

A growing fraud 

Brushing scammers set up fake accounts with Amazon, eBay and other online platforms so that they can order their own merchandise, ship it to a real address and then post glowing reviews that bolster their ratings. The ultimate objective, of course, is to attract more buyers for their goods.

According to the U.S. Department of Agriculture (USDA), the seeds people received this summer seem to be part of a brushing scheme. (The USDA is continuing to investigate, but at this time, the seeds don’t appear to be dangerous or capable of producing invasive plants.) However, this isn’t the first time Americans have received unordered merchandise from unknown companies. Over the past couple of years, consumers have been surprised by gifts of everything from flashlights to hand warmers to Bluetooth speakers.

Considering that you aren’t obliged to pay for or send back merchandise you didn’t order, this may not seem like a big deal. However, it suggests that personal information has been disclosed or compromised. So if you receive one of their packages, brushers have — at the very least — your name and home address and may also have your phone number and email address. And, as the Federal Trade Commission (FTC) warns, these fraudsters may have set up fake accounts in your name on multiple websites — or even hacked your legitimate accounts.

Nip it in the bud

How can you prevent dishonest businesses from burnishing their own reputations at the possible expense of yours?

  • Report a suspicious package to the online retailer or platform (if you know what it is).
  • Check your accounts for suspicious activity and change your passwords.
  • If it appears accounts have been compromised, review your bank and credit card statements and credit reports. Consider freezing them to prevent fraud perpetrators from opening new accounts in your name.
  • File a report with the FTC at ftc.gov/complaint. 

Remember that it’s always possible a seller simply sent you something by mistake. Or a friend may have ordered a gift and forgotten to enclose a message to you. So do a little snooping before jumping to conclusions. But if it still seems your mystery package is part of a brushing scam, don’t just brush it off. Report the “gift” and make sure your accounts are secure.

© 2020 Covenant CPA

3 steps experts follow when investigating fraud

When business owners suspect that an employee is stealing assets or manipulating financial results, it’s time to call a fraud expert to investigate. Although the complexity of the incident will determine the investigation’s scope, there are three basic steps forensic accountants generally follow to build a fraud case that can stand up in court.

1. Conducting interviews 

Fraud interviewers know how to spot warning signs, detect deception and pin down suspicions when talking with suspects and their coworkers. But they usually start with management interviews, by asking owners, executives and audit committee members what they know about:

  • Possible fraud ploys,
  • The company’s fraud risks, and
  • Internal controls that have been implemented to mitigate specific fraud risks or to generally help prevent, deter and detect fraud. 

An expert may interview not only your company’s management and audit committee, but also anyone who can provide information about financial fraud risks. These interviews might include employees involved in initiating, recording or processing complex or unusual transactions, as well as operating personnel not directly involved in the financial reporting process.

When interviewing suspects and potential witnesses, experts encourage interviewees to do most of the talking and use silence as a tool to elicit information. Before concluding the interview, they confirm the information they’ve gathered.

2. Gathering evidence

Fraud experts also collect physical and digital evidence of possible fraud from the company’s internal sources. Examples include personnel files, phone and email records, security camera recordings, and physical and IT system access records.

Locating this evidence may require computer forensic examinations. Expect your expert to ask to access your accounting system to search for suspicious journal entries, credits, reversals and overridden controls. Experts may also collect external sources of evidence, such as public records, customer and vendor information, media reports and private detective reports.

3. Analyzing facts

Fraud specialists have been trained to review and categorize internal and external evidence, conduct computer-assisted data analysis and test various hypotheses. Rather than rely on gut instinct, your expert will formally document every step in the investigation and follow formal procedures to ensure a comprehensive investigation.

When experts finish conducting interviews and gathering evidence, they report their findings. You and your attorney may determine the appropriate format for a report and how distribution will be affected by the need to protect legal privileges and avoid defamation.

Avoid a botched investigation

A proper investigation is essential to building a strong fraud case. Indeed, botched investigations could prevent your company from recouping losses and prosecuting the perpetrator. Contact us if you suspect fraud in your organization. 

© 2020 Covenant CPA

Journal entries may signal financial statement fraud

With a median loss of $954,000, financial statement fraud is the costliest type of white-collar crime, according to the Association of Certified Fraud Examiners. Fortunately, auditors and forensic accountants may be able to detect inflated income and other financial manipulation by testing journal entries.

Unearthing suspicious entries 

Financial statement frauds come in many forms. For example, out-of-period revenue can be recorded to inflate revenue. Repair costs can be improperly capitalized as fixed assets to boost earnings. Accounts payable can be understated by recording post-closing journal entries to income. Or expenses can be reclassified to reserves and intercompany accounts, thereby increasing earnings.

To detect these types of scams, auditors:

  • Learn about the company’s financial reporting process and controls over journal entries, 
  •  Identify and select journal entries and other adjustments for testing, 
  •  Determine the timing of the testing, and 
  •  Interview individuals involved in the financial reporting process about inappropriate or unusual activity relating to the processing of journal entries.

Financial statement auditors may call on forensic accounting experts when they notice significant irregularities in a company’s financial records.

Testing journal entries

There generally are several common denominators among fraudulent journal entries. Experts look out for entries that are made:

  1. To unrelated, unusual or seldom-used accounts, 
  2. By individuals who typically don’t make journal entries, 
  3. At the end of the period or as post-closing entries that have little or no explanation or description, 
  4. Before or during the preparation of the financial statements without account numbers, and 
  5. To accounts that contain transactions that are complex or unusual in nature and that have significant estimates and period-end adjustments. 

Other red flags include adjustments for intercompany transfers and entries for amounts made just below the individual’s approval threshold or containing large, round-dollar amounts.

Technology tools are critical. Computerized testing enables auditors to evaluate entire datasets, thus reducing the risk of overlooking critical evidence. Such testing also allows fraud experts to devote more time to other aspects of an investigation, such as gathering information about the business and interviewing employees. Computerized testing can prove particularly helpful in situations where manual testing is largely ineffective — for example, when entries exist only in an electronic format and the desired data must be extracted.

Technology and expertise

Computer-assisted journal entry testing doesn’t replace a skilled auditor or fraud expert. Instead, these tools free up the expert’s time. Contact us about examining your company’s financial statements for signs of fraudulent activity. 

© 2020 Covenant CPA

5 ways to protect your investment accounts from fraud

Because the average investment account boasts a much larger balance that a typical checking or savings account, cybercriminals are particularly interested in hacking them. Financial institutions are largely responsible for ensuring the security of these accounts, but business customers and consumers also should adopt defensive measures. Here are five recommendations.

  1. Select two-step authentication. Most financial service providers give customers the option of using a two-step verification process to prevent unauthorized access to their accounts. A two-step approach requires you both to log in to your account with a password and to verify your identity with, for example, a one-time code sent to your mobile phone.
  2. Choose complex and unique passwords. Criminals often gain access to bank and investment accounts thanks to weak passwords — or because an accountholder uses the same password for multiple accounts. Make sure you use complex, unique passwords with upper- and lower-case letters, special characters and numbers for every investment account you maintain.
  3. Establish account alerts. In addition to reviewing your monthly account statement for unauthorized transactions, request that your investment institution notifies you via email or text of all account activity. For example, the financial company should confirm buy or sell orders or transfer requests. If you receive a message regarding a transaction or transfer you didn’t authorize, contact your investment company immediately.
  4. Consider biometrics. Certain devices, including many mobile phones and some laptops, support the use of biometrics, such as face recognition or fingerprint scans. Using biometrics can seem inconvenient at first, but criminals find it almost impossible to foil this unique form of verification.
  5. Exercise caution with emails. To prevent the installation of malware that can steal account passwords, open emails with caution. If you receive an email from a business or service provider, don’t click on any links. Instead, type in the business’s website address and log in to your account that way. If the spelling, grammar and structure of an email appears unprofessional or suspicious, delete the email and remove it from your deleted email folder. Finally, keep antivirus and malware detection software updated.

Protecting investment accounts takes a multi-layered approach — and constant vigilance. Although your financial service provider likely uses state-of-the-art security to fend off cybercriminals, you also must do your part.

© 2020 Covenant CPA

How fraud perpetrators are stealing unemployment benefits

When Congress authorized an additional $600 in monthly unemployment benefits as part of the CARES Act, out-of-work Americans weren’t the only ones it helped. Criminals have descended like locusts on state unemployment insurance agencies, using stolen identities to fraudulently claim both standard benefits and the additional funds administered by the Pandemic Unemployment Assistance (PUA) program. States have lost hundreds of millions of dollars. Individuals have also suffered, as government efforts to control fraud have clogged up benefit systems and delayed payments to the jobless.

States struggle

Washington state was the first to experience a COVID-19 outbreak and has since estimated losses of $650 million to unemployment insurance fraud. According to the Secret Service, a scam was detected when someone noticed that multiple direct deposits of benefits had been made to individuals residing out of state. These deposits were subsequently transferred overseas — likely by organized crime gangs.

But Washington is hardly alone. Many other states have discovered fraud. In May, Rhode Island’s labor agency reported that it had almost as many illegitimate unemployment insurance claims as legitimate ones. And widescale fraud in Michigan forced that state to stop payment on nearly 20% of unemployment claims pending review.

Fighting back

If you’re currently employed and receive an unemployment benefit check or debit card or a letter confirming an application for unemployment benefits, immediately contact your state. If you can’t get ahold of your state agency (a problem encountered by thousands of potential fraud victims), report your suspicions to police and the Federal Trade Commission (FTC) at identitytheft.gov. Your identity has likely been stolen and sold to criminals on the dark web. Be sure to request copies of your credit reports and review them for illegitimate activity.

Businesses can help fight unemployment insurance fraud, too. The FTC suggests that companies:

  • Ask employees to speak up if they suspect their identities are being used to perpetrate unemployment insurance fraud, 
  • Direct HR to flag state unemployment agency notices about currently employed workers,
  • Report suspected fraud to a state agency — preferably via its website,
  • Provide a copy of the documentation to affected employees and let them know if the state requires them to also make a report,
  • Bolster cybersecurity to prevent the loss of personal data that could be used to commit fraud.

This last tip is particularly important if your employees currently are working from home.

An easy target

The pandemic has probably unleashed more fraud activity than any other recent event. Even though PUA program payments were due to expire on July 25, state unemployment benefits are too easy and lucrative a target for fraudsters to pass up. But you can do your part to help disrupt these schemes.

© 2020 Covenant CPA

Skimming may sound small, but losses can be significant

Skimming isn’t the biggest fraud threat for most businesses. The theft of cash receipts represents only 11% of asset appropriation schemes, according to the Association of Certified Fraud Examiners’ 2020 Report to the Nations. But with a median loss of $47,000, your business will likely feel the pain if it becomes a victim of skimming. Here’s what you need to know to prevent it.

Usual tactics

Skimming occurs when an employee steals an incoming payment before it’s recorded. In the most basic skimming scheme, a worker sells goods or services to a customer, collects payment and pockets the money without recording the sale. If the customer receives goods but no sale is recorded, skimming will cause a discrepancy between physical inventory counts and the company’s inventory ledger.

Crooked employees can also skim receivables. This generally is harder to pull off, because overdue accounts appear on the accounts receivable aging schedule. Perpetrators may try to cover their thefts by “lapping,” or borrowing money from one account to make up for a shortage in another.

What to look for

To detect skimming, look for infrequent bank deposits and consistent bank balance fluctuations as well as frequent shortages of cash on hand. If you suspect skimming, we can help you perform physical inventory counts to check if inventory levels match recorded sales. We can also review journal entries for false credits to inventory; irregular entries to cash accounts; and write-offs of lost, stolen, or obsolete inventory.

Your business can help prevent skimming by segregating employee duties. No one person should be responsible for collecting, recording, reconciling and depositing cash receipts. Instead, split up those duties among multiple employees.

Also consider implementing these other preventive measures:

  • Monitor spaces where employees handle cash with visible video cameras,
  • Require daily bank deposits,
  • Investigate no-sale and voided transactions,
  • Reconcile cash deposits to all cash and checks received,
  • Regularly reconcile inventory records to look for shrinkage, and
  • Provide an anonymous tip hotline for employees, customers and vendors.

Vulnerable industries

Certain organizations are more vulnerable to skimming. Small companies (those with less than 100 employees) and those in the education, real estate, and transportation and warehousing fields experience higher rates of skimming and may want to take extra precautions. Whatever your industry, contact us at the first sign of fraud.

© 2020 Covenant CPA

Why you don’t need high-tech tools to find fraud

New technologies, including artificial intelligence and machine learning, increasingly are being applied to the old problem of occupational fraud. But in most circumstances, common accounting tools — “variance analysis” and “contribution margin” — remain effective in uncovering possible evidence of theft.

Gaps and absences

After your organization finalizes its annual budget, you may perform a variance analysis, reviewing differences between actual and budgeted performance. If, for example, actual wages significantly exceed budgeted wages, the difference could be due to such factors as wage increases, productivity declines or greater downtime. But it could also signal phantom employees on the payroll.

Fraud experts pay particular attention to variances related to inventory and purchase pricing. Supply-related variances could indicate the existence of kickbacks. Or they might suggest fictitious vendors — where payments go to the perpetrator and no inventory is received in exchange.

The absence of variances when they’re expected can also be cause for concern. If the cost of a critical production component has unexpectedly increased, then the actual numbers should show a variance. If no such variance is found, it could be a sign of financial reporting fraud.

Difference between price and costs

The term contribution margin generally refers to the difference between a unit’s sale price and its variable costs. It’s often used to make pricing decisions, calculate the breakeven point and evaluate profitability. But it can also be used to detect fraud.

In general, the contribution margin as a percentage of revenue should remain fairly consistent over time. If the contribution margin is dramatically lower than usual, skimming or inventory theft could be to blame. Just keep in mind that one discrepancy doesn’t equal solid evidence of fraud. It simply indicates that further investigation is warranted.

Discrepancies are just a start

You may have the in-house expertise to expose potential fraud schemes using common accounting tools. But you should take suspicious results to a financial expert. Contact us. We use everything from modern analytic techniques to old-school witness interviews to get to the bottom of financial irregularities.

© 2020 Covenant CPA