Forensic Audit for Business: What It Is and When You Need It

Companies usually turn to forensics at the point where the numbers in the accounts add up but the money keeps disappearing. A forensic audit is an independent investigation into a company’s finances whose goal is not to confirm the financial statements but to uncover fraud, theft and abuse — and to gather evidence that will hold up in court. Writing as a forensic economic expert, I want to explain what this tool is, how it differs from a statutory audit, and the situations in which it is worth commissioning.

What a forensic audit is

The word “forensic” comes from the Latin forensis — “belonging to the court”. A forensic audit is an examination of a company’s financial and business activity aimed at detecting and documenting fraud, theft, abuse, conflicts of interest and the deliberate distortion of accounting records.

The main difference from an ordinary review lies in the question being asked. An audit answers “do the financial statements fairly reflect the state of the company?” A forensic audit answers something else: “what actually happened to the money, and who is behind it?” The working logic is therefore reversed — not from documents toward an opinion on the statements, but from a suspicion or hypothesis toward the documents that confirm or refute it.

A forensic audit looks for specific things:

• funds siphoned off through fictitious contracts and inflated procurement;
• kickbacks and payments to related parties disguised as independent counterparties;
• theft through petty-cash advances, cash operations and “goods-less” transactions (invoices with no real delivery behind them);
• manipulation of assets ahead of a business sale or a shareholder dispute;
• deliberate distortion of the accounts to hide a loss or divert profit past co-owners.

Forensic audit vs statutory audit

The most common mistake owners make is to assume that “our auditor checked us — surely they would have seen it.” Most likely they would not have — not because the auditor is poor, but because it is a tool built for a different job. A statutory audit of financial statements is carried out for a legally defined circle of companies under the Law of Ukraine “On the Audit of Financial Statements and Auditing Activity”. The auditor works to the International Standards on Auditing, relies on materiality and sample testing, and aims to express an opinion on whether the statements are reliable as a whole. Even with the fraud-risk assessment those standards require, an audit provides reasonable rather than absolute assurance and does not entail an exhaustive review of every suspicious transaction — so a targeted search for a specific scheme falls outside its scope.

Feature	Statutory audit	Forensic audit
Purpose	Confirm the reliability of the financial statements	Detect fraud, theft and abuse
Legal basis	Law “On the Audit of Financial Statements and Auditing Activity”	Contract with the client; methodologies of financial analysis and examination
Method	Materiality, sample testing	Exhaustive study of suspicious areas, reconstruction of transactions
Starting hypothesis	Statements are reliable until material misstatement is found	There are signs of abuse to be confirmed or refuted
Result	Auditor’s report with an opinion on the statements	Report with an evidence base for specific episodes

In other words, an audit confirms that “overall everything is in order,” while a forensic audit deliberately checks “but what is wrong right here.” One does not replace the other.

When to commission a forensic audit

Suspicion of abuse inside the company

A classic situation: a mismatch between turnover and real profit, odd purchases from a single supplier, “operating costs” growing for no reason, complaints from managers or anonymous tip-offs. A forensic audit gives the owner a fact-based answer instead of guesswork — whether abuse exists, on what scale, and through whom it runs.

A corporate dispute

When co-owners no longer trust one another, a forensic audit helps establish whether assets and profit were diverted past a partner, whether funds were distributed fairly, and whether the value of the business was understated before one participant’s exit.

Due diligence before a deal

Before buying a company or a stake, or admitting an investor, a forensic element in the review reveals the real — not the “painted” — financial position: hidden liabilities, fictitious assets, related-party transactions that may turn into claims tomorrow. It is cheaper to check before the deal than to litigate after it.

Unexplained leakage of funds

When money “melts away” and the source is unclear, a forensic audit reconstructs the movement of funds and locates the leak — duplicated payments, transit through nominee counterparties, cash withdrawals against non-existent costs.

What the forensic expert’s work involves

The scope depends on the assignment, but the backbone of the investigation is stable:

1. Analysis of source documents and accounting records. Contracts, delivery notes, acceptance acts and payment orders are matched against the accounting data. A discrepancy between the primary documents and the books is the first marker of a problem.
2. Analysis of cash flow. Bank statements are examined by amount, date, payment purpose and counterparty; atypical, recurring or transit operations are flagged.
3. Checking related-party transactions. Through the Unified State Register (YeDR) and other open registries the expert establishes whether “independent” counterparties are in fact controlled, and whether company funds pass through them.
4. Reconstructing the scheme. Scattered transactions are assembled into a single picture: exactly how funds were withdrawn, through which links, for what amount and to whose benefit.
5. Documenting the result. Every conclusion is tied to a specific document, and every calculation is made reproducible so it can be independently checked.

Worth attention from the very start: completeness of the period (gaps in the statements distort the picture), the availability of originals or properly certified copies, and a record of the source of each document — without this, even a correct conclusion is easy to challenge.

From forensic audit to court: the link with forensic economic examination

This is the key point to understand. A forensic audit in itself is an out-of-court investigation commissioned by a business. It is not ordered by a court and has no automatic status as procedural evidence. But its results become the foundation for the next steps.

When a forensic audit reveals signs of a criminal offence, the material gathered can form the basis of a report to the Bureau of Economic Security (BEB) about a committed criminal offence — on the strength of which the information is entered into the Unified Register of Pre-trial Investigations (YeRDR) and a pre-trial investigation begins. In other cases the forensic findings become the evidentiary groundwork for a claim in commercial or civil proceedings. Depending on the nature of what is found, particular aspects may fall within the competence of other bodies: tax violations to the State Tax Service, and operations subject to financial monitoring to the sphere coordinated by the State Financial Monitoring Service (Derzhfinmonitoring).

Then, already within court proceedings, to establish circumstances that require specialised economic knowledge, the court or a party initiates a forensic economic examination — by court ruling or under the procedure laid down in procedural law (in particular the Criminal Procedure Code of Ukraine, the KPK) for appointing an examination.

Such an examination is conducted by a forensic expert entered in the State Register of Certified Forensic Experts, under the Law of Ukraine “On Forensic Expert Activity” and the Instruction on the Appointment and Conduct of Forensic Examinations and Expert Studies, approved by Order No. 53/5 of the Ministry of Justice of Ukraine. Economic studies are carried out under distinct expert specialties — in particular the examination of accounting, tax accounting and reporting documents (11.1), of documents on the economic activity of enterprises and organisations (11.2), and of documents on financial and credit operations (11.3). The methodology for tracing the movement of funds is shared between a forensic audit and a forensic examination — what differs is the procedural form and the set of questions posed. That is precisely why a forensic audit performed to expert standards transitions naturally into the court stage.

The deliverable: a report with an evidence base

The value of a forensic audit lies not in striking wording but in the discipline of proof. A quality report:

• gives a clear description of the facts and schemes found, rather than value judgments about anyone’s guilt;
• ties every statement to a specific document (annexes, a register of sources);
• presents verifiable calculations that can be repeated;
• separates established facts from reasoned assumptions.

Such a report is usable in court and in the work of law-enforcement bodies: it does not “decide the case,” but it gives the parties and the investigation a factual foundation. An important nuance: the legal qualification of an act is given by the investigator, the prosecutor and the court — not by an economist. The forensic expert answers economic questions (what, when, how much, through whom), not legal ones (whether the acts amount to a crime).

Independence and confidentiality — the condition for trust

Two things separate professional forensics from an “internal service check.”

Independence. The expert must not be connected to any side of the conflict or interested in a particular outcome. Only an impartial investigation — one equally ready to confirm or refute the suspicion — carries weight for the court and for the client. A conclusion produced “to order the desired result” does not survive scrutiny by the opposing side.

Confidentiality. A forensic audit almost always touches sensitive data — from trade secrets to employees’ personal data. The work is carried out under a confidential regime (usually with a non-disclosure agreement), and access to banking secrecy and personal data is granted only in the manner provided by law. This is not a formality: a leak of information during the investigation can harm the business more than the abuse that was uncovered.

Common client mistakes

• Waiting “until the last moment”. The more time passes, the harder it is to recover source documents and trace funds; traces of amounts split into smaller sums are lost.
• Destroying or “cleaning up” documents. This not only destroys the evidence base but also creates fresh risks — the work must be done on real data within the bounds of the law.
• Confusing a forensic audit with an audit. An audit report does not replace a forensic investigation, and vice versa.
• Putting legal questions to the expert. “Is the director guilty?” is not a question for an economist; the correct question sounds like “is the withdrawal of funds through the following transactions over the following period confirmed by the documents?”

If you suspect abuse, are preparing for a deal or a shareholder dispute, or simply cannot understand where the money is going, it is wise to bring in a forensic economic expert at an early stage. I will be glad to help make sense of your situation within the bounds of the law and to prepare a well-founded report with an evidence base suitable for the court and law-enforcement bodies.