Integrity Forensic Integrity Forensic
(855) 673-9999 Request consultation
Services Case studies About Locations Request a confidential consultation Call (855) 673-9999
Guide · Forensic accounting

How forensic accounting actually works

A forensic accountant is usually called after something has already gone wrong. The work is reconstructing what happened and putting a defensible number on it.

By Integrity Forensic 4 min read

Say a mid-sized company notices its margins slipping for no reason anyone can name. Sales are steady and prices are steady, but cash is short. That gap is the kind of thing that brings in a forensic accountant. The engagement does not start with an accusation. It starts with a question: where is the money going?

Scoping the work

Every case begins by defining what is being investigated and why. A forensic accountant needs to know whether the end point is a criminal referral, a civil suit, an insurance claim, or an internal decision, because that shapes how the evidence has to be handled. Records gathered sloppily can be useless in court even when they prove the point.

Scoping also covers what records exist and who holds them. Before any analysis, the accountant works out what can be obtained, from the company's own systems to bank records that may need a subpoena, and makes sure nothing is altered or deleted while the case is live. Evidence that cannot be shown to be intact is evidence a court can throw out.

Following the records

The core of the job is examining financial data from every source that matters: bank statements, the general ledger, invoices, payroll, contracts, emails that reference payments. A single case can cover years of transactions. The accountant looks for the pattern that does not belong. A vendor that exists only on paper. Payments that always round up. Expenses claimed twice. A bank account nobody authorized. Data tools help sort the volume, but judgment decides what matters.

Numbers are only part of it. A forensic accountant reads contracts, board minutes, and correspondence, because the paper around a transaction often explains it better than the entry itself. An email approving a payment, or the conspicuous absence of one, can matter as much as the amount. Once a pattern shows up, the accountant traces it. Where did a specific payment go, who controlled the account on the other end, and what was bought with it. This is the part that turns a suspicious number into a story a non-accountant can follow.

Quantifying and reporting

Proving that something wrong happened is only half the job. The other half is measuring it. How much was taken, over what period, and what it cost the business overall. That figure has to survive challenge, so the accountant documents how every number was reached. Independence is part of the value here. Because the accountant is brought in from outside and has no stake in the result, the conclusions carry weight that an internal review often cannot.

The written report is the main product. It lays out what was examined, what was found, and how the conclusions follow from the evidence. In many cases the accountant also testifies. That means explaining the analysis in plain terms to a judge or jury and holding to it under cross-examination.

Not every engagement ends in a courtroom. Forensic accountants also handle insurance disputes, shareholder disagreements, divorce settlements, and internal reviews a company would rather keep quiet. The method barely changes. Whatever the setting, the client is paying for the same thing: a number they can stand behind when someone challenges it.

Key takeaways
The work starts by defining the goal, since that dictates how evidence must be handled.
Examining records for the pattern that does not fit is the heart of the job.
The deliverable is a defensible number and a report that holds up under challenge.

Seeing red flags like these in your own numbers?

A confidential consultation costs nothing and tells you where you stand.

Request a consultation

What it means for your matter

Most engagements are not Enron. But the pattern is the same at every scale: a diverted vendor payment, a related party that shouldn't exist, revenue booked before it was earned, a reserve fund that never quite reconciles. The methods used to expose a multibillion-dollar fraud are the same methods that expose a bookkeeper skimming from a small business or a managing agent taking kickbacks from a co-op.

If something in your financial picture doesn't add up, the earlier a forensic accountant looks, the more of the trail survives. Documents get lost, memories fade, and money moves. The record is easiest to reconstruct while it is still fresh.

Think something's wrong with your numbers?

Talk to a forensic accountant. It's confidential, and there's no obligation.

Keep reading
Ponzi

Forensic accounting vs. forensic auditing: what's the difference?

Crypto

When you actually need a forensic accountant

Governance

When a CPA should refer a client to a forensic accountant

Call Request consultation