Take not of this question for your CA You are a manager in the forensic auditing investigation department of the audit firm. The directors of a local manufacturing company, MSc 2 Ltd, have contacted your department regarding a suspected fraud, which has recently been discovered operating in the company, and you have been asked to look into the matter further. You have held a preliminary discussion with Segun Peter, the finance director of MSc 2 Ltd, the notes of this conversation are shown below:
Notes of discussion with Segun PeterFour month ago MSc 2 shut down one of its five factories, in response to deteriorating market conditions, with all staff employed at the factory made redundant on the date of closure.
While monitoring the monthly management accounts, Segun perform analytical procedures on salary expenses. She found that the monthly total payroll expenses has reduced by 3% in the months following the factory closure-not as much as expected jilven that 20% of the total staff of the company has been made redundant. Initial investigation performed last week by Segun revealed that many of the employees who had been made redundant had actually remained on the payroll records, and salary payments in respect of these individuals were still being made every month, with all payment going into the same bank account. As soon as she realised that there may be a fraud being conducted within the company, Segun stopped any further payments in respect of the redundant employees. He contacted our firm as she is unsure how to proceed, and would like our firm‘s specialised department to conduct an investigation.
Segun says that the senior accountant, Akeem Bello, has been absent from work since he conducted his initial investigation last week, and it has been impossible to contact him. Segun believes that he may have been involved with the suspected fraud.
Segun has asked whether your department would be able to provide a forensic investigation, but is unsure what this would involve. MSc 2 is not an audit client to your firm. As a forensic expert, what are you going to do
The Correct Answer and Explanation is:
Certainly. Below is the correct forensic expert response to Segun Peter’s request, followed by a comprehensive 1000-word explanation detailing what actions a forensic expert should take in this situation.
Correct Forensic Expert Response:
As a forensic accounting expert, my role is to carry out an independent, systematic, and evidence-based investigation into the suspected fraud. Based on the preliminary information provided, here is how we would proceed:
- Engagement and Planning:
- First, we will formally agree on the scope and objectives of the forensic investigation through an engagement letter, clarifying that MSc 2 Ltd is not an audit client and there is no conflict of interest.
- We will define the timeline, responsibilities, confidentiality clauses, and expected deliverables.
- Preservation of Evidence:
- Immediate action must be taken to preserve digital and physical evidence. This includes securing payroll records, employment records, email communications, and access logs.
- Identification and Review of Key Documents:
- We will request and analyze documents such as:
- Payroll reports for the last 6–12 months.
- Redundancy notices and termination documentation.
- Bank account details to which salaries were paid.
- Employment contracts and job status records.
- Internal emails and any correspondence regarding payroll or redundancies.
- We will request and analyze documents such as:
- Employee and Bank Analysis:
- Perform a payroll reconciliation to identify discrepancies.
- Identify the bank account receiving fraudulent payments.
- Trace the flow of funds from the company to the recipient account(s).
- Determine if Akeem Bello or other staff had access and authority over the payroll system.
- Interviews:
- Conduct structured interviews with key personnel, including HR, payroll officers, and line managers.
- If possible, interview Akeem Bello or obtain a sworn statement, if he cannot be located.
- Digital Forensics:
- Examine Akeem Bello’s workstation, email account, and system access logs to gather further evidence.
- Check for any manipulation of payroll software or unauthorized access.
- Quantification of the Fraud:
- Calculate the total financial loss incurred by MSc 2 Ltd due to continued salary payments to terminated employees.
- Establish the time frame during which the fraud occurred.
- Reporting:
- Compile a detailed forensic report including findings, methodology, supporting evidence, parties involved, financial impact, and recommendations.
- The report must be suitable for use in potential legal proceedings or disciplinary actions.
- Legal Coordination:
- Advise MSc 2 Ltd on reporting obligations to law enforcement or regulatory authorities.
- Assist legal counsel with prosecution or recovery processes if the case proceeds to litigation.
- Prevention Recommendations:
- Offer internal control improvements to prevent recurrence, such as enhanced segregation of duties, periodic audits, and access controls.
1000-Word Explanation of the Forensic Expert’s Role and Approach
Forensic accounting is a highly specialized field that blends accounting, auditing, and investigative skills. When fraud is suspected, a forensic accountant plays a pivotal role in uncovering what occurred, who was involved, how it happened, and the financial impact of the fraud.
1. Engagement and Scope Definition
Before any forensic work begins, it is essential to formally define the engagement. This is not a statutory audit but an investigative assignment. An engagement letter will be issued, outlining:
- The scope and purpose of the investigation.
- The responsibilities of both the forensic team and MSc 2 Ltd.
- Legal rights over evidence access.
- Confidentiality, fees, and deliverables.
This clarity prevents future disputes and ensures that the client understands the limitations and objectives of the investigation.
2. Preservation of Evidence
One of the first steps is to prevent the loss or tampering of evidence. Since the suspected fraud involves digital records (e.g., payroll systems, emails, and bank transactions), preserving the integrity of these records is crucial. This might involve:
- Securing backups.
- Restricting access to the payroll system.
- Taking forensic images of computers used by Akeem Bello.
If evidence is compromised, it may be inadmissible in court, and it becomes harder to prove the fraud.
3. Understanding the Background and Key Allegations
Segun Peter noticed that after a 20% reduction in workforce, payroll expenses decreased by only 3%. This discrepancy is a red flag. Initial findings suggest that:
- Redundant employees were still being paid.
- Payments went to the same bank account.
- Akeem Bello may be involved and is now absent without notice.
This pattern suggests ghost employees—fictitious or former employees kept on the payroll, with salaries diverted to a fraudulent account.
4. Detailed Payroll Review
The forensic team will analyze historical payroll data, looking for:
- List of all employees made redundant and effective termination dates.
- Salary payment records for each redundant employee post-termination.
- Bank account details used for payments.
- Any patterns in changes to payroll records.
This allows the team to quantify the total loss, establish a timeline, and link the fraudulent activities to responsible individuals.
5. Interviewing and Information Gathering
Interviews form a critical component of forensic investigations. These are not accusatory but fact-finding missions. Interviews with:
- HR personnel,
- Payroll staff,
- Finance team,
- IT staff (for system access control),
…can reveal who had system access, approval authority, and if proper protocols were followed during the redundancy process. Any inconsistencies in testimonies may help corroborate the fraud or point to collusion.
6. Bank Account Tracing
Tracing the salary payments to a single bank account raises immediate suspicion. Forensic accountants will:
- Identify the account holder.
- Analyze bank statements.
- Check for links to current or former employees.
If the account belongs to Akeem Bello or someone close to him, it strengthens the case against him. Tracing the funds further might uncover money laundering or concealment efforts.
7. Digital Forensics
Access logs, emails, and audit trails can show:
- When and by whom employee records were modified.
- Whether payroll entries were falsified.
- Any email correspondence between suspected individuals.
For example, if Akeem edited employee status records or diverted emails to himself, these would be vital pieces of evidence.
8. Quantifying the Loss
The financial damage must be calculated precisely. This includes:
- Total salaries paid post-redundancy.
- Tax or pension contributions made on behalf of those employees.
- Any bonuses or allowances they received.
This helps determine the restitution amount and guides legal or insurance claims.
9. Reporting the Findings
A forensic report is a formal, structured document. It contains:
- Executive summary.
- Background of the case.
- Methodology.
- Findings and analysis.
- Conclusions and recommendations.
The report must be factual, unbiased, and evidence-based. It may be used in legal proceedings, so it must meet standards of admissibility.
10. Legal Considerations
Although the forensic expert does not give legal advice, they work closely with legal teams to:
- Determine if there’s sufficient evidence for criminal prosecution.
- Assist in civil recovery actions.
- Comply with corporate governance or reporting requirements.
In cases involving employee fraud, companies might also need to notify regulators or law enforcement.
11. Recommendations for Internal Control Improvements
Finally, the forensic expert suggests ways to prevent recurrence, such as:
- Implementing a separation of duties in payroll processing.
- Regular reconciliation of payroll with HR records.
- Mandatory approval for changes in employee status.
- Biometric authentication or multi-level approval for salary payments.
These changes reduce the risk of internal fraud and increase overall financial transparency.
Conclusion
In this case, a forensic accountant’s role is not just to investigate and report on the suspected fraud, but also to help MSc 2 Ltd understand how the fraud occurred and what can be done to recover the lost funds and prevent future incidents. Through systematic analysis, interviews, evidence preservation, and digital tracing, the forensic team can uncover the truth, support legal action, and protect the company’s financial integrity.