Forensic Accountant: What They Do and When to Hire One

An audit is designed to answer whether financial statements are fairly stated in all material respects. A forensic engagement is designed to answer a specific question somebody is prepared to fight about. Those two purposes produce completely different work, and the confusion between them costs business owners real money every year.

Start with materiality, because everything follows from it. An auditor sets a materiality threshold based on the size of the company, for a business with $12 million of revenue, planning materiality might land somewhere around $250,000, with a lower threshold for testing individual items. Anything below that is, by design, not the audit’s concern. A bookkeeper diverting $7,500 a month through duplicate vendor payments takes $90,000 a year and never trips a threshold set at a quarter million. The audit opinion is not wrong. It answered the question it was asked.

A forensic accountant has no materiality threshold. If the client’s question is “did our controller steal from us,” the engagement examines every disbursement to the vendors in question across the entire suspected period, one hundred percent, not a sample. That is why forensic work costs more per dollar of revenue examined and why it should be scoped narrowly. Turning a forensic accountant loose on an entire company with no hypothesis is the most expensive way to learn nothing.

The second difference is sampling versus targeting. Auditors select samples statistically or judgmentally to support an opinion on a population. Forensic accountants run targeted tests designed to surface a pattern: vendor addresses matched against employee addresses, payments just under an approval limit, journal entries posted on weekends or after fiscal close, sequential invoice numbers from a single vendor, round-dollar amounts, credits issued by the same cashier who rang the original sale. None of that is a sample. It is a search.

The third difference is the product. An audit produces an opinion letter, a standardized document a few pages long. A forensic engagement produces a report that has to survive an adversary, with every schedule tied to a source document, every assumption stated, and a methodology a second expert could rerun and reproduce. If the matter goes to court, the report also has to satisfy Federal Rule of Evidence 702, which since the December 2023 amendment requires the proponent to establish reliability by a preponderance of the evidence and requires the opinion to reflect a reliable application of the method to the facts of the case.

The fourth difference is what the practitioner will and will not say. Under the AICPA’s forensic standards, summarized in the AICPA’s forensic and valuation materials, a CPA performing a forensic engagement does not opine on the ultimate question of whether fraud occurred and does not opine on guilt. An auditor, meanwhile, is required to consider fraud risk under the audit standards but is explicitly not engaged to detect all fraud. Neither professional is going to hand you the sentence you want. One will tell you the statements are fairly stated; the other will tell you $412,000 moved to an entity with no discernible business purpose.

Here is how the difference lands in practice. A 46-employee HVAC contractor in Westchester with $14.2 million of revenue had audited financial statements for six consecutive years, all clean. A new CFO reviewing vendor spend noticed that a supply vendor billing about $19,000 a month had no delivery tickets. The forensic engagement examined 38 months of disbursements to that vendor and eleven others sharing a mailbox: total payments $684,000, against zero evidence of goods received. The bookkeeper had set up the vendors, approved the invoices under a $25,000 authorization limit she also administered, and coded them to a cost of goods account inside a line item that varied naturally by hundreds of thousands each year.

The forensic fees ran $61,000 over four months. The company’s crime insurance policy carried a $500,000 employee dishonesty limit with a $25,000 retention, and the carrier paid $500,000 against a documented proof of loss the schedules supported. The recovery net of retention was $475,000 against $61,000 of fees. Restitution through the criminal case eventually added a small fraction more. Had the company skipped the forensic work and simply fired the bookkeeper, the claim would have failed for lack of proof of loss, and the six clean audit opinions would have been worth exactly nothing in that conversation.

The common mistake is confronting the suspect first. It feels like the decisive thing to do and it is the single most damaging move available. The moment someone knows they are suspected, records disappear, emails get deleted, and the friendly vendor contact stops returning calls. Preserve first, image the systems, secure the accounting file, lock the credentials, then investigate, then confront, with counsel present. Deletion after notice creates a spoliation problem that turns a straightforward claim into a complicated one.

The second common mistake is asking your existing auditor to investigate. Independence rules constrain what the audit firm can do, the firm has an obvious interest in the answer, and any report they produce will be attacked on exactly that ground. Retain a separate practitioner, and have counsel do the retaining so the work sits inside the attorney-client relationship rather than outside it.

The third is waiting for the annual audit to catch it. It will not. The ACFE’s Report to the Nations has found consistently that tips are the leading detection method by a wide margin, ahead of internal audit, management review, and external audit combined. A hotline and a policy that anyone can use it outperforms an audit at finding this category of loss, and costs a fraction as much.

Going forward, the sensible posture is preventive rather than reactive. Separate the person who sets up vendors from the person who approves invoices from the person who signs checks, in a small company that may mean the owner personally opens the bank statement each month, which is unglamorous and effective. Run the vendor-address-to-employee-address match quarterly. Require two signatures above a threshold you actually enforce. Confirm your crime policy limit is proportionate to the cash that moves through the business, and read the proof-of-loss deadline before you need it. Our business management team helps owners put those controls in without building a bureaucracy. This is general information rather than legal or investigative advice; talk to a licensed CPA and an attorney about your specific facts before acting.

Hourly, with a replenishing retainer, and almost never on contingency. Rates in the New York market generally run $250 to $450 an hour for staff and manager-level analysis, $450 to $650 for a partner directing the work, and higher for a senior testifying expert. Deposition and trial testimony is frequently billed at a premium, some experts charge one and a half times their analysis rate for time on the stand, partly because a day in court consumes a day of everything else.

Initial retainers run $10,000 to $50,000 depending on scope, replenished as the balance draws down. Experts ask for retainers because collecting a fee from a client who lost the case is difficult, and because a testifying expert with an unpaid balance has just handed opposing counsel a bias question.

Contingency is off the table for a reason worth understanding. A fee contingent on the outcome gives the expert a financial interest in the conclusion, which destroys the independence the testimony depends on and hands the other side a devastating cross-examination. The professional standards are firm on this for opinion work, and courts have excluded experts over it. If someone offers you forensic accounting on a percentage of recovery, they are either not planning to testify or not planning to be taken seriously.

What actually drives the total is scope, and clients control more of it than they think. Volume of records is first, three years of a single bank account is a fraction of the work of eleven years across nine accounts, four entities, and two brokerage relationships. Document condition is second, and it dominates. Records delivered as organized digital files cost a fraction of the same records delivered as 14,000 scanned pages in no order. Records that must be subpoenaed from third parties add months. The number of theories to be tested is third: a client who says “check whether the controller paid herself through fake vendors” gets a $30,000 engagement, and a client who says “find everything wrong” gets a $200,000 one.

Here is a matrimonial example with numbers attached. A Manhattan divorce with a marital estate around $6.8 million, including a professional practice, a co-op, two brokerage accounts, and a $410,000 inheritance the wife claimed as separate property. The forensic engagement covered three pieces: tracing the inheritance through nine years of account activity, normalizing the practice’s income for support purposes, and valuing the practice as of the commencement date. Tracing took 46 hours at $375, $17,250. Income normalization took 38 hours, largely reconstructing personal expenses run through the practice, at $14,250. The valuation, including a report and rebuttal of the opposing expert, ran $28,000. Deposition and two days of trial testimony added $19,000. Total: $78,500.

What it produced: the tracing established that $286,000 of the $410,000 had stayed in a segregated account and never been commingled, keeping it out of the marital estate. The income analysis added roughly $135,000 a year of personal expenses back into income available for support. At a support obligation running several years, and against a marital estate of that size, the fees were a small fraction of what moved. In a $600,000 marital estate the same $78,500 would have been indefensible, and the honest advice would have been to settle.

Who pays depends on the forum. In matrimonial cases New York courts can and often do order the monied spouse to advance the non-monied spouse’s expert fees, on the principle that both sides need competent representation. In commercial litigation, each side generally pays its own experts unless a contract or statute shifts fees. In an insurance claim, some crime policies reimburse claim preparation costs up to a sublimit, read the policy, because that sublimit is often modest and often overlooked. In a corporate investigation, the company pays, and if the matter reaches indemnification questions for officers and directors, that is a separate conversation with counsel. One wrinkle worth pricing in: fees paid to investigate and recover a business loss are generally deductible ordinary and necessary business expenses, while fees tangled up with a personal matrimonial dispute largely are not, and the miscellaneous itemized deduction that used to soften that has been shut off by IRC section 67(g). Ask your expert to bill investigation, valuation, and testimony as separate line items so the deductible portion is identifiable later rather than reconstructed from a one-line invoice.

The common mistake is hiring on hourly rate rather than total cost. A $275-an-hour practitioner who has never traced a commingled account will spend 90 hours learning; a $525-an-hour practitioner who does it weekly will spend 30. The second is cheaper and produces a better report. Ask for an estimate by phase with a not-to-exceed on the first phase, and ask how many matters like yours the practitioner has handled in the last three years.

The second common mistake is retaining the expert directly rather than through counsel. When counsel retains the expert, the work is more likely to fall inside the attorney-client and work product protections, and the expert can be kept as a consulting expert under Rule 26(b)(4)(D) until the decision to disclose is made. Retain directly and you may have made that decision for yourself without meaning to.

The third is starting late. A report deadline that arrives with four years of unreviewed records generates rush work, thin analysis, and an expert who is easy to impeach. It also generates a bigger bill than the same work spread over five months.

Going forward, scope the engagement in phases and make a real decision at each gate. Phase one should be a limited assessment, a few weeks, a defined budget, and a written view on whether the numbers support the theory. If they do not, stop. If they do, phase two is the full analysis, and phase three is report and testimony. Budget the tax consequences too: an investigation that surfaces unreported income creates exposure that has to be addressed, sometimes through the procedures described on the IRS Criminal Investigation pages and always with counsel. And if theft loss deductions are in play, the rules under IRC section 165 distinguish sharply between business losses and personal ones. Our tax strategy team handles that side. This page is general information, not legal or tax advice for your matter; a licensed CPA and an attorney should review your specific situation.

Three situations justify the expense, and outside them a forensic accountant is usually an expensive way to confirm what a good matrimonial attorney already knows. Hire one when a closely held business is in the estate, when separate property has been commingled and you need it traced, or when the reported income does not match the way the household actually lives. Those three cover the overwhelming majority of worthwhile matrimonial engagements.

A closely held business. If either spouse owns an interest in a business that is not publicly traded, the interest has to be valued, and no attorney can do that credibly. Valuation in a New York divorce carries conventions that differ from a sale valuation: the standard of value, the valuation date, the treatment of personal goodwill versus enterprise goodwill, and whether appreciation during the marriage was active or passive. Active appreciation of a business owned before the marriage, growth attributable to a spouse’s efforts, can be marital. Passive appreciation driven by market forces generally is not. Distinguishing them requires an analysis of what the owner actually did and what the industry did around them.

Commingled separate property. New York is an equitable distribution state under Domestic Relations Law section 236(B). Property brought into the marriage or received by gift or inheritance is separate; property acquired during the marriage is presumptively marital. The problem is never the rule and always the history. Inheritances get deposited into joint accounts. Premarital down payments get made on houses later titled jointly. Business interests get refinanced with marital earnings. Tracing is the discipline of following a specific dollar through years of statements and demonstrating that it retained its separate character, or, from the other side, demonstrating that it did not.

Income that does not match the lifestyle. When one spouse controls a cash-intensive business or a professional practice, reported income is a starting point rather than an answer. The analysis looks for personal expenses paid by the company, family members on payroll, compensation restructured downward in the year the action was commenced, deferred compensation and carried interest timed to vest after judgment, and unreported cash. Support in New York runs off the Child Support Standards Act formula applied to combined parental income up to a statutory cap adjusted every two years, with the court free to consider income above the cap under the statutory factors. Get the current cap from the state rather than from an article, because it moves.

Here is a worked version. A Brooklyn couple, sixteen-year marriage, marital estate of roughly $4.3 million. The husband owned a construction subcontracting business reporting $210,000 of W-2 compensation and modest distributions. The wife had received a $340,000 inheritance in year seven of the marriage.

The forensic accountant did three things. First, tracing: $340,000 arrived in a joint money market account, $185,000 was moved within eleven days to a separately titled brokerage account and never touched again, and $155,000 stayed in the joint account and funded a kitchen renovation and two years of tuition. The $185,000, grown to $291,000 by the valuation date, was traced successfully and treated as separate. The $155,000 was gone as separate property.

Second, income: reconstruction of the company’s spending found $186,000 a year of personal items, two vehicles, a boat slip, a family cell phone plan, the wife’s sister on payroll at $34,000 for work nobody could describe, and the family’s health and life insurance. Adding that back moved income available for support from $210,000 to roughly $396,000.

Third, valuation: the business, valued as a going concern on the commencement date, came in at $1.44 million before discounts, with a meaningful portion of goodwill found to be personal to the husband and therefore arguably outside the marital estate, a contested point in every case of this kind.

Fees: $86,000, split across tracing, income analysis, valuation, and testimony. Against a $291,000 separate property finding and a support base nearly doubled, the arithmetic worked. In a marriage with two W-2 incomes, a house, and two retirement accounts, that same $86,000 buys nothing you could not get from account statements and a competent attorney.

The common mistake is hiring too late. Discovery deadlines govern everything in a matrimonial case, and subpoenas to banks, brokerages, and business partners take weeks to months to return. A forensic accountant retained sixty days before trial gets whatever documents already exist and no others. Retained at the start, they tell counsel exactly which accounts and which years to demand, which is worth more than any schedule they later produce.

The second common mistake is self-help. Copying a spouse’s files, accessing their email, or photographing statements from a device you do not own can violate federal and state computer access laws, can get the evidence excluded, and can hand the other side a counterclaim. Everything you want is obtainable through discovery. Get it that way.

The third is the double-dip nobody raises until it is too late. If a business is valued by capitalizing the owner’s excess earnings, and those same earnings are then counted as income available for maintenance, the same stream of dollars arguably gets divided twice. New York courts have taken the argument seriously, and the analysis differs depending on the valuation method used and the type of business. Your expert should raise it before the report is written, not during cross-examination.

Going forward, the sequence that works is: retain through counsel early, scope phase one as a document-driven assessment with a defined budget, and make the go or no-go decision on phase two once you know whether the numbers support the theory. Ask your expert at the outset which of the three triggers actually applies to your case, and be willing to hear that none of them do. Remember also that the tax consequences of the settlement outlive the case, transfers between spouses incident to divorce are generally nonrecognition events under IRC section 1041, which means the receiving spouse takes the transferor’s basis and inherits the built-in gain, and the IRS collects the filing status and dependency rules in Publication 504. A $600,000 brokerage account with a $150,000 basis is not worth the same as $600,000 of cash, and settlements get signed every year as though it is. Our individual tax return team handles that side. For context on how business interests get valued, see our business valuation guide, and for the analytical techniques used to test reported income, the IRS lays out the same methods at IRM 4.10.4. Expert work that will be testified to also has to satisfy Rule 702 where federal standards apply. This is general information rather than legal or tax advice for your divorce; work with a licensed CPA and a matrimonial attorney on your actual facts.

The short answer is that the license matters more than the letters, and which letters matter depends entirely on what you are hiring for. A fraud investigation and an expert damages opinion are different jobs, and the credential that signals competence in one signals little about the other.

The CPA license is the foundation. It is issued by a state board, in New York, the State Education Department’s Office of the Professions, and it requires 150 semester hours of education, passage of the Uniform CPA Examination, a year of qualifying experience, and continuing professional education thereafter. The part that matters for you is not the exam. It is that a license can be suspended or revoked by a public body, that the licensee is subject to professional standards with disciplinary teeth, and that there is somewhere to complain. Certifications issued by membership associations can be withdrawn by the association, which is a meaningfully weaker sanction.

The CFF, Certified in Financial Forensics, is issued by the AICPA and requires an active CPA license as a precondition, plus documented forensic experience and passage of a specialty examination. Every CFF is therefore a CPA. The credential signals that the holder works in forensics rather than dabbling. The AICPA’s forensic and valuation materials set out the standards these practitioners work under, including the rule that a member performing a forensic engagement does not opine on the ultimate question of whether fraud occurred, a constraint some clients find frustrating and every judge finds appropriate.

The CFE, Certified Fraud Examiner, comes from the Association of Certified Fraud Examiners and does not require a CPA license. Holders include accountants, auditors, former law enforcement, and investigators. The examination covers financial transactions and fraud schemes, law, investigation technique, and fraud prevention. For an investigation, interviewing, evidence handling, scheme identification. A CFE with law enforcement background may be exactly the right person and may be better at the interviews than any CPA you could hire.

For valuation work, add ABV (Accredited in Business Valuation, AICPA, requires a CPA) or CVA (Certified Valuation Analyst, NACVA). For insolvency and restructuring, CIRA. For matrimonial engagements involving both valuation and income analysis, the practical combination is CPA plus ABV or CVA, ideally with CFF.

Now the part credentials do not tell you, which is most of it. Ask how many matters like yours the practitioner handled in the last three years. Ask how many times they have been deposed and how many times they have testified at trial. Ask whether any court has ever excluded or limited their testimony, and if so what happened. An honest expert has a straightforward answer, and a defensive one has a problem. Ask whether they work for both plaintiffs and defendants, or petitioners and respondents; someone who has only ever testified for one side has a pattern opposing counsel will spend an hour on. Ask who will actually do the work, because the partner you are meeting is frequently not the person reviewing 6,000 pages of statements.

Here is what the choice looks like with money attached. A Queens distribution company suspected its warehouse manager of running a kickback arrangement with a freight vendor. Two candidates: a CFE with twelve years in a federal financial crimes unit, no CPA, at $290 an hour; and a CPA/CFF/ABV at $525 an hour who had testified in eighteen matters.

The company hired the CFE for the investigation. He identified the scheme in six weeks, freight invoices priced 22 percent above three comparable carriers, totaling $317,000 of overcharges across 29 months, with the vendor’s principal and the warehouse manager sharing a boat registration. Fees: $34,000. The company then filed an insurance claim and sued the vendor, and for the damages opinion in that litigation retained the CPA/CFF, who built the loss calculation, wrote the Rule 26 report, and testified. Fees: $52,000. Total $86,000 to recover $317,000 plus a portion of costs.

Using the CFE alone would have saved $52,000 and produced a damages opinion vulnerable to a Rule 702 challenge on qualifications. Using the CPA/CFF alone would have cost roughly $60,000 for the investigative phase instead of $34,000 and would not have produced better interviews. Two people, two jobs.

The common mistake is treating the credential as the qualification. Rule 702 asks whether a witness is qualified by knowledge, skill, experience, training, or education. The letters after a name are evidence of that, not a substitute for it. A CPA who prepares tax returns fifty weeks a year and takes one forensic matter annually is easier to disqualify than an experienced investigator with no certification at all. Case experience in the specific subject matter is the thing to buy.

The second common mistake is not checking the license. It takes two minutes on a state licensing database and it is worth doing every time. The same applies to confirming the certification is current rather than lapsed.

The third is ignoring conflicts. If the practitioner’s firm prepares tax returns for the business at the center of the dispute, prepared them for either spouse, or has any relationship with a party, that is a problem, sometimes a waivable one, sometimes not. Raise it at the first call and get the answer in the engagement letter.

Going forward, hire for the phase you are actually in. Investigation and testimony are different products, and there is no rule requiring one person to deliver both. Get the engagement letter to state the scope, the phase budget, the hourly rates of everyone who will touch the file, and whether the practitioner is being retained as a consulting or a testifying expert. That last one has consequences under Rule 26 that are difficult to unwind later. Our business management team can help you think through what the engagement needs to prove before you start paying for it. This is general information and not legal or investigative advice for your matter; consult a licensed CPA and an attorney about your specific facts.

More than most minority owners expect, and the first move is almost never accounting. It is getting access to records you have a legal right to see, because a forensic accountant with no documents is an expensive person to have on a call.

New York Business Corporation Law section 624 gives shareholders the right to inspect the minutes of shareholder proceedings and the record of shareholders, on written demand, subject to an affidavit that the demand is not for a purpose other than the business of the corporation. Section 624 is narrower than owners assume. It does not by its terms hand you the general ledger. Common law inspection rights in New York reach further, and Delaware’s General Corporation Law section 220 is broader still, permitting inspection of books and records for a proper purpose, which courts have read to include investigating suspected mismanagement. Limited liability companies operate under their operating agreement plus the LLC Law’s information provisions, and partnerships under their agreement plus the Partnership Law. What you are entitled to depends on your entity type, your state of formation, and what your agreement says, which is the first thing an attorney will ask.

This is where a forensic accountant earns their fee before running a single number: helping counsel write a demand precise enough to be enforceable. “All financial records” invites an objection. A request for the general ledger detail for specified accounts and periods, the vendor master file, the check register, officer and related-party compensation history, distributions by member, intercompany account activity, and the depreciation schedule is specific, is tied to a stated purpose, and is hard to refuse without looking like you are hiding something.

Once records arrive, the tests are predictable because the schemes are. Officer compensation set at a level that functions as a disguised distribution to the majority. Rent paid to a building entity the majority owns, above market. Family members on payroll. Personal expenses on the company card, travel, vehicles, club memberships, home improvements coded to repairs. Management fees to an affiliate with no discernible service. Below-market sales to a related party. Loans to owners that are never repaid and never imputed interest. A vendor that shares an address with somebody’s house.

When the records are incomplete or the numbers are not credible, the indirect methods come out. The source and application of funds analysis totals everything the business or the individual spent and compares it to documented available funds. The net worth method computes assets minus liabilities at two points and treats the unexplained increase plus living expenses as income from somewhere. The bank deposits method totals deposits, strips transfers and known non-income items, and treats the remainder as receipts. These are the same techniques the IRS applies in examinations, laid out at Internal Revenue Manual 4.10.4, and they are court-tested. They do not identify where money went. They establish that the reported picture cannot be complete, which shifts the burden of explanation to the person who controls the records.

Then there is value. If the dispute ends in a buyout, the standard of value matters more than the arithmetic. In a New York minority oppression proceeding under BCL 1104-a, the majority may elect under BCL 1118 to purchase the petitioner’s shares at fair value. Fair value is a statutory concept, not market value, and New York courts following Friedman v. Beway Realty have declined to apply a minority discount in these determinations, reasoning that an oppressed shareholder is entitled to a proportionate share of going-concern value. Marketability discounts have been handled differently and remain genuinely contested. An expert who applies fair market value conventions to a fair value proceeding has produced a number for the wrong question.

Here is a version with real figures. Three owners of a Long Island equipment distributor, split 50/25/25. The 25 percent owners had received no distributions in four years while the majority owner’s compensation rose from $290,000 to $640,000, the company began paying $14,000 a month in rent to an LLC he owned individually for a building appraised at a market rent closer to $8,500, and a $22,000-a-month management fee started flowing to an affiliate that appeared to do nothing.

Counsel filed a books-and-records proceeding and obtained four years of ledger detail. The forensic analysis quantified the diversions: $1.02 million of excess officer compensation over the four years measured against industry compensation surveys for a company of that size, $264,000 of above-market rent, and $1.056 million of management fees with no supporting service. Total identified: roughly $2.34 million, of which the minority’s proportionate 50 percent share was about $1.17 million. Forensic fees through report and deposition ran $94,000.

The matter settled with a buyout of both minority interests at a valuation that added the excess compensation and fees back into normalized earnings before capitalizing them, which is the mechanism by which a diversion analysis actually converts into money. Adding back $585,000 a year of normalized earnings at even a modest multiple moved the buyout price by several million dollars. The schedules did the work; the litigation threat made them matter.

The common mistake is confronting the partner before securing records. The moment a majority owner knows what you suspect, access tightens, the QuickBooks file gets a new password, and the “informal” arrangement you were relying on ends. Send the written demand first, through counsel.

The second common mistake is assuming the company’s outside accountant is neutral. That firm was engaged by, and is paid by, the entity the majority controls, and it may have prepared the very returns at issue. It is not your expert, its files may or may not be obtainable, and asking it to investigate its own client’s officers is asking for a conflict.

The third is ignoring the tax overhang. Diverted funds are frequently unreported income to somebody, and disguised distributions can recharacterize entity-level positions for everyone. An analysis that establishes $2.3 million of diversions establishes tax exposure at the same time, and the whistleblower and referral mechanisms, Form 3949-A for an information referral, the IRS Whistleblower Office for award claims under IRC section 7623, carry consequences for everybody named. That is a decision to make deliberately with counsel, not reflexively while angry.

Going forward, the durable fix is documentary rather than litigious. Buy-sell agreements with a defined valuation mechanism, mandatory tax distributions, annual financial reporting to all owners, related-party transaction approval requirements, and an information right written into the operating agreement prevent most of this. Our business succession planning guide covers the terms worth negotiating while everyone still likes each other, and our business management team works with owner groups on the reporting cadence that keeps disputes from starting. This page is general information, not legal or tax advice for your dispute; talk to a licensed CPA and an attorney about your actual entity, agreement, and facts.