skills/forensic-accounting/references/modules/M024-fraud-and-manipulation-red-flags.md

<!-- Generated loss-aware reference mirror from God_Level_Public_Company_Financial_Analyst_Job_Guide_V6_99_ALL_SUB70_FIXED.docx. Canonical source remains the bundled DOCX. -->

<!-- Module: 024 | Title: Fraud and Manipulation Red Flags -->

## PART V - FORENSIC ACCOUNTING | MODULE 024

# Fraud and Manipulation Red Flags

> Mission. Use professional skepticism, cross-statement inconsistencies, unusual transactions, and disclosure drift.

## Decision output

Objective: Use professional skepticism, cross-statement inconsistencies, unusual transactions, and disclosure drift. The completed work product must be reproducible from evidence, show the downstream financial or decision effect when material, state the strongest contrary case, and define a dated update rule.

## Explicit operating procedure

1. Do not start by alleging fraud. Build a chronology of anomalies and test benign, aggressive-accounting, control-failure, and intentional-manipulation explanations separately.

1. Cross-check revenue, receivables/contract assets, inventory, payables, reserves, cash, taxes, shares, segment data, and cash flow for inconsistencies that cannot be explained by the business model.

1. Test revenue cutoff, side agreements, channel stuffing indicators, unusual end-of-period working capital, reserve releases, capitalization, related parties, acquisitions, and non-GAAP changes where evidence warrants.

1. Read auditor changes, internal-control weaknesses, restatements, delayed filings, critical audit matters, legal/regulatory disclosures, and management departures as a connected timeline.

1. Compare disclosure wording and KPI definitions across filings for drift that coincides with deteriorating economics.

1. Escalate only after quantifying materiality and documenting what evidence remains unresolved; screening ratios are prompts for investigation, never proof.

## Required evidence and model bridge

- Primary-source set: multi-year statements, auditor reports, non-GAAP reconciliations, reserve disclosures, filing changes. Preserve exact document/version, date, period, and source location for every material factual input used in fraud and manipulation red flags.

- For each key concept - cross-statement inconsistencies, revenue cut-off, reserves, related parties, controls, auditor changes - state whether it is a reported fact, analyst calculation, management claim, external estimate, or judgment. Quantitative concepts must retain raw components and units; qualitative concepts must retain the specific evidence and counterevidence.

- Map only economically relevant findings into the model or decision record. Process-control modules such as fraud and manipulation red flags may have no direct valuation line; in that case document the downstream error or governance risk the control prevents.

## Metrics and calculation controls

| Metric / concept | Construction | Required validation |
| --- | --- | --- |
| red-flag density | Count of independent forensic red flags per reporting period or per 10 material accounting areas, weighted by severity and corroboration. | red-flag density: Reperform the count from the defined population, inspect every material exception, and confirm the denominator/universe did not change between periods. |
| restatement severity | Restated cumulative pre-tax/net-income/equity effect divided by prior reported amount, supplemented by number of periods affected and control implications. | restatement severity: Recalculate independently from cited source data; verify definition, period, units, scope, signs, and any reconciliation to reported financial or operating totals. |
| control-remediation persistence | Number of reporting periods a material weakness/significant deficiency remains unresolved, with recurrence and scope expansion separately flagged. | control-remediation persistence: Recalculate independently from cited source data; verify definition, period, units, scope, signs, and any reconciliation to reported financial or operating totals. |



## Worked application

> Case: receivables, distributor inventory, terms, and incentive pressure deteriorate together.

- Reconstruct the relevant reported fact from primary evidence before interpreting the case. For fraud and manipulation red flags, show the raw components rather than only the resulting ratio or narrative.

- Build the causal chain through cross-statement inconsistencies, revenue cut-off, reserves, related parties, then identify which link is directly observed and which link remains an assumption.

- Calculate red-flag density, restatement severity, control-remediation persistence from sourced components under the reported/base interpretation and at least one skeptical alternative interpretation.

- Translate the difference between cases into the variable that matters for fraud and manipulation red flags: evidence quality, revenue, operating profit/NOPAT, free cash flow, invested capital, financing/dilution, risk, or valuation. Mark non-applicable links instead of inventing them.

- Expert consistency test: differentiate poor controls, aggressive accounting, and fraud and keep language proportional to evidence.

- Precommit the specific future filing, KPI, customer/supplier observation, regulator action, or market input that would materially invalidate the fraud and manipulation red flags conclusion.

## Failure tests

- FAIL if cross-statement inconsistencies cannot be defined and reproduced from the source pack.

- FAIL if a fraud or manipulation conclusion is drawn from a screening ratio without primary-source evidence, competing explanations, and quantified financial effect.

- FAIL if the fraud and manipulation red flags conclusion depends on an unstated assumption, unreconciled definition, or evidence that cannot be traced to its source/version.

- FAIL if evidence materially inconsistent with the fraud and manipulation red flags conclusion is omitted, reclassified, or dismissed without a documented definition, materiality, causal, timing, and source-quality analysis.

## Completion test

A senior reviewer must be able to reproduce the fraud and manipulation red flags conclusion, vary the most sensitive assumption independently, trace the change through the model, understand the strongest opposing case, and identify the next evidence that would force an update. If any link is missing, the module remains open.