A practical guide to forensic due diligence and fraud / forensic accounting diligence for M&A — how PE sponsors and corp dev teams test whether the numbers and narratives are honest before capital is committed.
Deals die on integrity, not spreadsheets. Forensic due diligence asks whether reported performance can be trusted — not only whether EBITDA is clean of one-time items. It is not the same as routine financial diligence (history and bridge), quality of earnings (sustainability and add-backs), or compliance program diligence (AML / sanctions / policy design). Forensic work hunts for intentional distortion, related-party loops, control override, and fraud patterns that can make a cheap multiple expensive overnight.
| Workstream | Primary question | Typical output |
|---|---|---|
| Forensic DD | Are the numbers and stories honest? | Fraud risk map, integrity findings, related-party graph |
| Financial DD | What happened historically? | P&L, BS, cash bridge, accounting policies |
| Quality of earnings | Is earnings durable and economic? | Normalized EBITDA, add-backs, working capital |
| Compliance / FCPA | Is the program and bribery exposure managed? | Program gaps, third-party risk, investigation status |
| Legal / litigation | What disputes and entity risks exist? | Docket map, liability stack, corporate hygiene |
Start with why integrity could be thesis-critical: cash businesses, multi-jurisdiction groups, founder-controlled finance, rapid pre-sale margin improvement, opaque channel partners, government or healthcare billing complexity, or prior restatement / whistleblower noise. Scope forensic effort proportional to risk — not every mid-market deal needs a full forensic team on Day 1, but every deal needs a written integrity hypothesis list. Link early scoping to financial diligence and pre-LOI diligence.
Test whether revenue is real, timely, and collectible: bill-and-hold, channel stuffing, side letters, contingent revenue recognized early, round-tripping with related parties, and cut-off games near process launch. Compare growth to cash collections, backlog quality, returns, and credit memos. Connect findings to QoE, customer quality, and contract paper when logos look strong but economics do not convert to cash.
Map related-party revenue, costs, leases, loans, IP licenses, and shared services. Look for circular cash, below-market transfer pricing that inflates margins, personal expenses in opex, and assets used by the business but owned outside the target. Founder lifestyle leakage and undisclosed affiliates are classic PE value traps. Align with management diligence, debt / capital structure, and tax diligence.
Inventory that does not match operations, phantom fixed assets, skimming in cash collections, AP / payroll ghost entities, and bank reconciliation breaks are operational fraud vectors. Site visits, serial-number sampling, and third-party confirmations matter more than management schedules. Tie into operational diligence, working capital, and supply chain when physical flows are material to the thesis.
Segregation of duties, journal-entry governance, access to banking and payroll, culture of pressure to hit numbers, and key-person control of the books determine how easy fraud is to run. Interview finance staff off-script; read turnover and Glassdoor-style signals carefully. Connect to people diligence, board / governance, and IT access / cyber hygiene when systems enable override.
Prior investigations, self-disclosures, whistleblower claims, regulator inquiries, and private litigation about billing or accounting set the baseline. Decide what must be cleared pre-close, what becomes SPA conditions, and what needs escrow / RWI / special indemnities. See litigation diligence, FCPA diligence, R&W diligence, and escrow / holdback for packaging findings into deal protection.
DI20-WELCOME) — useful for integrity triage, not a substitute for forensic accountants or counsel.
| Stage | Forensic focus | Buyer action |
|---|---|---|
| Pre-LOI / IOI | Public integrity signals; sector fraud patterns | Price only theses that survive honesty tests |
| LOI / exclusivity | Scope forensic vs QoE; related-party list; JE access | Data request; specialist engagement if elevated |
| Confirmatory DD | Revenue/cash tests, RP graph, controls, samples | Red/amber/green; expand or kill |
| SPA / financing | Fraud reps, special indemnities, escrow, RWI | Conditions; financing integrity covenants |
| Close / Day-1 | Banking control transfer; key person access cutover | No shared wallets; monitor early anomalies |
| Signal | Severity | Why it matters |
|---|---|---|
| Revenue growth far ahead of cash collections / AR quality | Deal-Killer | Possible fictitious or pulled-forward revenue |
| Material related-party revenue or costs without clear market terms | Deal-Killer | Economics may not survive arm's-length ownership |
| Active investigation, restatement, or credible whistleblower on books | Deal-Killer | Unknown quantum of fraud risk |
| Founder sole control of banking, payroll, and reporting | High | Control override easy; hard to verify |
| Sudden margin spike or inventory build into sale process | High | Classic earnings management window |
| Large manual JEs near period-end with weak support | High | Integrity of close process compromised |
| Billing / customer complaints about phantom charges | Watch | May scale into revenue quality failure |
| No independent board or audit function in complex group | Watch | Governance gap amplifies fraud opportunity |
| Approach | Typical cost | Timeline | Best use |
|---|---|---|---|
| Full forensic accounting + counsel | $25K–$150K+ | 3–8 weeks | Elevated integrity risk, multi-entity, allegations |
| Targeted forensic module (revenue / RP / cash) | $15K–$60K | 2–4 weeks | Mid-market PE with specific red flags |
| Public first-pass integrity pack | $49 | Minutes to hours | Triage before LOI / specialist spend |
Before LOI, buyers use structured public research to pressure-test integrity theses: ownership and related-entity webs, court and regulatory dockets, news of investigations or restatements, lien and bankruptcy patterns, customer and employee signals about billing or cash culture, and whether growth stories match industries known for channel games or cash leakage. After LOI, the same hypotheses drive forensic scope — related-party schedules, journal-entry samples, revenue-to-cash bridges, and control interviews — so specialists chase what can actually kill the deal instead of running a generic checklist. The pack is screening research, not a substitute for forensic accountants, auditors, or counsel opinions.
⇧ Already delivered: Tesla (TSLA) · Alphabet (GOOGL) · Palantir (PLTR) — real orders, real SEC data, every claim source-cited.
Get a structured first-pass diligence pack on your target — useful input for fraud / forensic / related-party / revenue-integrity hypotheses, not a full forensic accounting engagement.
Order report $39.20 → Free brief Sample PDF