Fraud prevention and investigation work is designed both to catch abuse early in cash, inventory, purchasing, sales, payroll and access lines, and to document a suspicion once it has already arisen. The engagement is not only the collection of papers after an incident. First the whistleblowing channel, segregation of duties, limits, system logs and actual practice are read. Then suspicious transactions, relationship networks and document inconsistencies are traced. The aim is an evidenced file that management can use for defence and for repair.

The service is especially useful when there is a suspicion of internal misconduct, a dispute over partner accounts, a contract fight with a supplier or customer, a concrete report on a hotline, or an alleged compliance failure in a regulatory review. In family companies, partner tension comes first. In groups, intercompany dealings matter. In public-tender work, the document chain is decisive. The audience is not only the legal team. The board, the executive and, where needed, independent counsel must speak the same language.

We start with a scope note and an independence record. Who we work independently of, which period and accounts will be scanned, who will be interviewed and which system copy will be taken are written down. If that step is skipped, the file later looks partisan. Accounting entries, bank movements, email, contracts, warehouse notes and access logs are then cross-linked. Missing papers, deleted records and late-created documents form a risk list of their own.

Fieldwork is more than reading ledgers. Sample files, exception approvals, cash-count differences, stock losses, related-party invoices and tender files are examined. Where needed, devices and servers are imaged with forensic discipline so that original evidence is not altered. Interviews are recorded, and allegation is separated from document. Findings are ranked by severity, frequency, cash impact and legal usability. Rumour does not replace evidence in the report.

The deliverable has three layers. The board receives a short status note, the executive receives a ranked list of actions and people decisions, and counsel receives a chronology, a document index and a claim-to-evidence table. If asked, preventive control design is added to the same file: approval lines, dual signatures, supplier verification, conflicting-identity scans and a reporting channel. The report uses the organisation's own process names rather than moral generalities. The text then leaves the shelf.

Commercial-dispute support is a natural extension of the review. In collection fights, construction contracts, partnership shares, non-compete clauses, progress billings and price-difference claims, the source of the number is often unclear. We build the financial backbone of the claim: which entry, which clause, which delivery note. Without that backbone before court or arbitration, a party tells a story but cannot carry a file. The work does not replace the lawyer. It organises the financial fact the lawyer will use.

The compliance side is not limited to corruption. Sanctions lists, anti-bribery, public-tender ethics, gifts and hospitality, conflicts of interest and third-party due diligence sit on the same table. Many organisations have a policy but no training, no reporting and no sanction. That gap weakens the “we did not know” defence on the day of review. A compliance programme is therefore tested by live transaction examples, not by the thickness of the paper. The weak link is often purchasing and intermediary relationships.

Timing must follow the speed at which evidence decays. Once suspicion arises, server logs, camera footage and email archives can disappear within hours. A late start often does little more than document the remaining trace. An early start both limits loss and supports a personnel decision with less speculation. Communication is kept narrow: information is shared with those who need it and with the legal line. Managing rumour is part of the technical work.

The human side is more fragile here than the technology. An unfair accusation, a panic sale, the flight of a key person or polarisation on the shop floor can cost more than the review itself. Temporary access restrictions, suspension and the communication text are therefore discussed at the start. The presumption of innocence and the protection of the institution are carried together. The report is written to show the transaction and the control gap, not to brand a person. The disciplinary decision remains with the employer.

In short, this service joins prevention, investigation, dispute work and compliance in a single evidence language. Without an independent view, an unaltered record and a workable action plan, the sentence “the matter is closed” is not enough. We leave a defensible file, not a sentence. The file is concrete enough to be used in the next board meeting, prosecutor correspondence or commercial claim in the same language. That concreteness is the rarest form of comfort in a crisis.