What is forensic accounting? Types, techniques and uses

Q: What does a forensic accountant do?

The work involves examining financial records to answer a question for a dispute or an investigation, such as how much was taken and where it went. The work ends in a report or testimony that says whether the evidence is consistent with the elements of fraud, while the trier of fact, a judge or jury, decides whether fraud happened.

Q: Can forensic accountants testify in court?

Yes, as expert witnesses. Since 1 December 2023, US federal courts admit the testimony only if its proponent shows it is more likely than not based on sufficient facts or data and a reliable method (Rule 702), and in England and Wales the expert's duty to help the court overrides any obligation to the client who pays (CPR 35.3).

Q: What goes into a forensic accountant's report?

The answer to the question the accountant was engaged for, such as how much was taken and where it went, built on records whose extraction is logged: who extracted which ledger and bank file, when and how. An AICPA member's report may say the evidence is consistent with the elements of fraud, but it never states the ultimate conclusion that fraud occurred, because that belongs to the trier of fact.

Q: When is forensic accounting needed?

When a dispute, a regulator's inquiry or a prosecution is likely, when a loss needs a figure someone will contest, or when staff may be implicated in the wrongdoing. Bringing one in early protects the evidence: the originals stay untouched, the analysis runs on copies and every extraction is logged.

Q: What software do forensic accountants use?

Data analytics, case management and electronic discovery tools, used to test whole populations, such as a first digit test of every expense claim, and to read email and accounting systems. The record of how each file was extracted matters as much as the tool, because evidence copied without a record can be challenged.

Q: How much does a forensic accountant cost?

SSFS No. 1 sets no fee, but it limits one kind: an AICPA member engaged as an expert witness may not give opinions under a contingent fee arrangement unless the AICPA's contingent fee rule allows it. Outside that exception, what the expert is paid for an opinion cannot depend on how the case ends.

Whether a forensic accountant's report can say that the finance director committed fraud has a short answer under the AICPA's Statement on Standards for Forensic Services No. 1 (SSFS No. 1): it cannot. Members are "prohibited from opining regarding the ultimate conclusion of fraud", which the trier of fact decides (para 10). Fraud detection and prevention finds the anomaly; forensic accounting turns it into evidence that holds up when contested.

What is forensic accounting?

Forensic accounting means accounting done for a dispute or an investigation. SSFS No. 1 names two engagements: litigation, for "an actual or potential legal or regulatory proceeding before a trier of fact", and investigation, "in response to specific concerns of wrongdoing" (paras 1 and 2). The standard binds AICPA members; in the UK the same work is often called forensic accountancy.

An audit gives an opinion on whether the accounts are fairly presented; a forensic engagement answers one question for whoever must decide it, such as how much was taken and where it went.

So the report never reads "this was fraud". It says whether the evidence is consistent with the elements of fraud, and since 1 December 2023 US federal courts admit that opinion only if its proponent shows it is more likely than not based on "sufficient facts or data" (Federal Rule of Evidence 702). That makes the log of who extracted which ledger and bank file, when and how, part of the evidence from day one.

Watch: Forensic accounting explained in 75 seconds

What are the types of forensic accounting?

Fraud examination. Tests an allegation of theft, corruption or false reporting and records who did what.
Litigation support and expert witness work. Prepares the numbers for one side or for the court and defends them in testimony. In England and Wales the expert's duty to help the court "overrides any obligation" to the client who pays (Civil Procedure Rules, Part 35, r35.3). An AICPA member acting as an expert witness may not give opinions under a contingent fee arrangement unless the AICPA's contingent fee rule allows it (SSFS para 9).
Disputes and damages. Puts a figure on lost profits, a contract claim or a shareholder or divorce dispute, in court or in other dispute resolution.
Bankruptcy and insolvency. Rebuilds the books of a failed company and finds assets moved out before the collapse, the evidence a bankruptcy fraud claim rests on.
Asset tracing and proceeds of crime. Follows money through accounts and companies so that a court can freeze, confiscate or return it.

Which techniques and tools do forensic accountants use?

Among the techniques used, the first digit test, an application of Benford's law, shows how one step of the investigation process can start. In many large sets of naturally occurring amounts, about 30.1 percent of values begin with 1 (log10 of 2).

Picture a distributor (illustrative) whose 2,000 expense claims for one year are tested:

Expected claims starting with 1: about 602, which is 30.1 percent of 2,000.
Observed: 380.
Claims starting with 4 bunch between 460 and 499 dollars, just under a 500 dollar approval limit.
Most of that bunch traces to one approver's team in one quarter, which becomes the sample tested against receipts.

A deviation is a reason to look, never proof: fixed fees, price lists and limits skew digits honestly. In the ACFE's Occupational Fraud 2026: A Report to the Nations, expense reimbursement schemes "typically lasted 18 months before being detected" (p. 18). So the test runs across the full history: slow embezzlement rarely shows in one month's data.

Funds tracing, net worth analysis, interviews and digital evidence from email and accounting systems follow the lead, on data analytics, case management and electronic discovery tools. Of the challenges, chain of custody touches all of them: evidence copied without a record can be challenged.

How does forensic accounting differ from auditing and traditional accounting?

Table 1. Features of forensic accounting against neighboring disciplines (as of October 2026).

Discipline	Purpose	Trigger	Standard	Output	Who relies on it
Traditional accounting	Record and report transactions	The reporting cycle	GAAP or IFRS	Accounts and management reports	Managers, lenders, tax authorities
Financial statement audit	Opinion on whether the accounts are fairly presented	The annual cycle	Auditing standards (ISA, PCAOB, AICPA)	Audit opinion	Shareholders, regulators
Internal audit	Assurance on controls and risk	The audit plan	IIA standards	Findings and recommendations	Board and audit committee
Fraud examination	Resolve an allegation of fraud	A tip, an anomaly or a complaint	ACFE body of knowledge	Report of the facts found	Management, counsel, police
Forensic accounting	Answer a question for a dispute or an investigation	Litigation, a regulator's inquiry or specific concerns of wrongdoing	SSFS No. 1 for AICPA members	Expert report or findings, with no conclusion of fraud	Court, counsel, regulator, board

What decides the label is the engagement, not the method. SSFS No. 1 looks at "the purpose for which the member was engaged (for example, litigation or investigation) as opposed to the skill set employed" (para 3), and its own example is data analysis done for a client with no litigation or investigation behind it, which falls outside the standard.

How do you become a forensic accountant?

The AICPA's route to a forensic accounting career, with its knowledge, skills and abilities, runs through qualification, experience and an exam:

Qualify as an accountant. A CPA license in the US or a chartered accountancy qualification elsewhere.
Build forensic experience. Litigation support, investigations or insolvency work.
Earn a credential. The AICPA's Certified in Financial Forensics (CFF) goes only to CPAs and AICPA qualified equivalents. Its Global Standard pathway asks for 1,000 forensic related business hours, 75 hours of continuing professional development within five years and a 175 question exam in one four hour sitting (AICPA and CIMA, 12 September 2025).
Add an investigation credential if the work needs it. The Certified Fraud Examiner (CFE) from the ACFE covers fraud investigation; the CFCS certification covers financial crime more widely.

What are the applications of forensic accounting, and who needs it?

Picture a bank's fraud team (illustrative) that finds customers of one relationship manager paying a supplier the bank never vetted. With a dismissal claim and a police report likely, the bank brings in a forensic accountant to put a number on the loss. That report is only as good as the alert record a financial crime analyst works from, where each match carries its evidence and each decision can be followed by another reviewer.

Forensic accounting applications run from commercial litigation to criminal cases: law firms use forensic accountants in disputes, insolvency practitioners on failed companies, and the case teams of the Serious Fraud Office include them. Financial statement fraud, a form of financial fraud, was the rarest scheme in the ACFE's cases (6 percent) and the most costly, with a median loss of 1,000,000 dollars (p. 12). For an AML team, the same methods trace proceeds through accounts and front companies so that a court can confiscate them.

A compliance or fraud lead therefore decides when to stop an internal review and bring a forensic accountant in: when a dispute, a regulator or a prosecution is likely, when a loss needs a figure someone will contest, or when staff may be implicated. On day one, leave the originals untouched, work from copies and log every extraction.

Follow the money past the first account.

Trace a customer's network up to six hops by default with the connections graph in complead, formerly Sanction Scanner. Each path it finds to a sanctioned, PEP or adverse media entity is sourced hop by hop and kept as case evidence.

Trace a customer's network

800+companies use complead

80+countries served

What changed for forensic accounting in 2026?

The ACFE's 2026 report. Occupational Fraud 2026 is the newest edition of the report behind the figures on pages 12 and 18 above.
No rule change. As of October 2026, SSFS No. 1 remains the version for engagements accepted on or after 1 January 2020, and FRE 702 reads as amended on 1 December 2023.

Related terms

Certified Fraud Examiner (CFE). The ACFE credential for preventing, detecting and investigating fraud.
Financial fraud. Deception for financial gain, including false financial statements.
Embezzlement. Theft of money or property by someone trusted to manage it.
Serious Fraud Office. The UK authority that investigates and prosecutes serious or complex fraud, bribery and corruption.
CFCS certification. The ACFCS credential for financial crime specialists.
Financial crime risk analyst. The analyst who measures where a firm is exposed to financial crime and how well its controls hold.

Lead on compliance.

Join 800+ companies that trust complead to detect risk, prevent fraud and stay compliant.

Talk to an expert

One Platformall compliance, risk & fraud requirements in a platform

How this entry was checked. Each quotation and figure here was traced by Fatih Coşkun, Founder and CEO, after Minhac Celik (Marketing Advisor, complead) drafted it, to the text it comes from: the AICPA's SSFS No. 1 (effective 1 January 2020), the AICPA and CIMA CFF pathways page (12 September 2025), Federal Rule of Evidence 702 with the Supreme Court's order of 24 April 2023, Part 35 of the Civil Procedure Rules and the ACFE's Occupational Fraud 2026. The definition follows SSFS No. 1; the distributor and the bank's fraud team are illustrative. Read on 29 October 2026. Last reviewed: 30 October 2026.