Financial Due Diligence Catches What’s Reported. Corporate Fraud Lives Somewhere Else.

The financials check out. Revenue is up, margins hold, the auditor signed off. None of that means the company is clean.

Financial due diligence is designed to verify what a company reports. That is its actual scope, and it performs that function reasonably well. What it does not do, and what no spreadsheet-based process can do, is surface what the company chose not to report. Fraud at the corporate level is not an accounting error. It is an omission, a misdirection, a structure built to survive scrutiny. By the time it shows up in the numbers, it is already too late for the buyer.

What Audited Financials Actually Tell You

Audited financials tell you what passed through the accounting function during a defined period. They do not tell you about side agreements, verbal commitments made outside the deal structure, related-party transactions routed through entities the auditor never examined, or revenue recognized in ways that technically comply with the standard while misrepresenting the business.

The distinction matters. A company can have clean books and dirty operations. The two are not mutually exclusive.

Consider a pattern that appears more often than buyers expect: a target firm shows strong recurring revenue, low customer churn, and clean accounts receivable aging. The audit finds nothing material. Standard diligence confirms the numbers. But the recurring revenue is anchored by three customers, two of which are entities controlled by the target’s principal. The third is real but on a contract expiring ninety days after close, with no renewal mechanism in place.

None of that shows up in a P&L review. The financials are accurate. The picture they paint is not.

This pattern extends to revenue recognition timing, intercompany eliminations that obscure true performance, and contingent liabilities that are disclosed in footnotes written to be overlooked. Auditors are not adversaries of the company they audit. They verify. They do not investigate.

The Gap Between Audited and True

Corporate fraud rarely involves falsified financial statements in the way popular accounts describe it. Outright fabrication is uncommon precisely because it requires coordination that most fraud operators lack. More common is structural manipulation: real revenue, real customers, real transactions arranged in ways that obscure the underlying risk or inflate the apparent value of the business.

The ACFE’s Report to the Nations has consistently found that the median occupational fraud scheme runs for twelve months before detection. The median. Half ran longer. The primary detection mechanism in most cases was a tip, not an audit. That means the scheme was likely ongoing at the time of the audit, survived it, and would have continued past close absent an external signal.

The audit was not designed to catch it. It was designed to verify reported figures.

This is not a criticism of the audit function. It is a description of its scope. Buyers who treat an unqualified audit opinion as a clean bill of health for the entire business are conflating two different things. One is accounting compliance. The other is whether the business is what it appears to be. Those questions require different disciplines.

Behavioral Indicators That Appear Before the Numbers Shift

Fraud at the organizational level almost always produces behavioral signals before it produces financial ones. A controller who resists documentation requests on specific items. An executive who insists on handling a particular vendor relationship personally, without delegation or backup. A CFO who treats diligence questions as operational intrusions rather than normal transaction process. An owner who can explain everything verbally but cannot produce the underlying support documents.

None of these is conclusive. Good operators also have short patience for process-heavy acquirers, and legitimate businesses sometimes have documentation gaps. But in the context of a transaction, a consistent pattern of deflection around specific areas is worth understanding before close, not after.

Insider threat research consistently finds that fraud concentrates in organizations with centralized authority, weak internal controls, and cultural tolerance for informal arrangements. A business run tightly by a single principal, minimal oversight, and a team accustomed to doing what they are told can produce strong financials and significant undisclosed liability simultaneously. The two coexist more often than buyers expect.

Key behavioral signals in diligence contexts: unexplained urgency around closing timelines, resistance to reference checks on specific counterparties, prior business relationships between the seller and the acquirer’s advisors that go undisclosed, and management teams that have been together a short time with principals who have longer histories at other entities.

Where the Investigation Has to Go

The indicators that matter most in pre-transaction fraud assessment are not in the target’s own documents. They are in the surrounding record.

Litigation history is the first place to look. A company with no disclosed litigation whose principals appear repeatedly in civil filings, judgment dockets, or state court records is not a company with no litigation history. It is a company whose litigation has been deliberately separated from the entity being sold. Shell structures, nominee ownership arrangements, and parallel entities serving the same principals are standard tools for this kind of separation.

Regulatory history follows. Prior disciplinary actions at FINRA-registered firms, licensing records across states, state regulatory databases, and professional board records frequently tell a story that the company’s materials do not. A principal who lost a professional license in one state and then operates in another under a slightly different entity name is not a hypothetical. It is a documented pattern across multiple sectors.

Ownership structure requires its own examination. Related-party transactions routed through entities with shared registered agents, corporate officers who appear on filings without functional roles, and holding structures in opacity-friendly jurisdictions all warrant scrutiny that a secretary of state search does not provide. FinCEN’s beneficial ownership registry adds a layer of useful data for transactions involving US entities, though its coverage remains incomplete.

Ghost directorships, where individuals appear on corporate filings without any knowledge of or involvement in the company, are a documented indicator of fraud infrastructure. Their presence signals that the entity exists for a purpose other than the one described in the transaction documents.

For additional context on investigative methodology in corporate contexts, see where legitimate corporate intelligence ends and what lies beyond it, and how background intelligence applies to executive and partner vetting.

The Timing Problem That Buyers Consistently Underestimate

The pressure in any deal is to close. Speed favors the seller. Diligence timelines compress, scope gets negotiated, and financial review absorbs most of the bandwidth because that is where the quantifiable risk appears to live.

Investigative diligence does not compress well. Mapping corporate relationships, pulling litigation records across jurisdictions, verifying operational claims against third-party sources, and running principal backgrounds through public record and source inquiry takes time that deal timelines rarely accommodate voluntarily.

But the cost of an undisclosed fraud is not bounded by the purchase price. Post-close liability, regulatory exposure, customer defection built into the book of business, and litigation flowing from misrepresented conditions can exceed the deal value. The expense of a thorough pre-close investigation is modest by comparison. Deloitte and EY both document cases where pre-transaction diligence failures in M&A led to losses exceeding five times the transaction cost, and those are the ones that become public.

The investigation that catches a problem before close is invisible. Nobody writes about the deal that did not happen because the buyer learned in time. The deals that generate litigation, bankruptcy filings, and regulatory action are the ones that closed with an undisclosed problem embedded in the structure. The difference between those two outcomes is usually not the sophistication of the financial review. It is whether someone looked at the right things before the ink dried.

Pre-transaction intelligence work is not adversarial toward the deal. Most investigations confirm that the target is what it appears to be. But the ones that do not, the ones that surface a judgment the principal never disclosed, a prior entity that failed under circumstances worth understanding, a customer relationship that is not what it appears, those findings exist in the record. They do not require invention. They require someone to look.

Brett Maternowski works with buyers, attorneys, and executive teams through Farsight Intelligence to surface what needs to be known before a transaction closes, and through Florida Man Innovations to build revenue systems built for sustained performance. Schedule a conversation at meet.brettfl.com or reach out at [email protected].