Benford's Law Analysis
Definition
A data analytics technique based on the observed distribution of leading digits in naturally occurring financial data. Significant deviations from the expected distribution can indicate fabricated or manipulated figures and serve as an early indicator directing further investigation.
- Basis
- Expected leading-digit distribution in natural financial data
- Signal
- Significant deviation flags possible manipulation
- Use
- Early indicator directing further audit testing
- Application data
- Large, naturally occurring numeric datasets
Common questions
What kind of data is unsuitable for a Benford's Law test?+
Data with an assigned or constrained range, such as sequential invoice numbers, fixed-price items, or a dataset too small to have a natural range of magnitudes, does not follow the expected leading-digit distribution and produces false deviations if tested.
Does a Benford's Law deviation prove fraud on its own?+
No. It is a screening tool that flags accounts or transaction sets worth closer manual examination. The deviation itself has many innocent causes, such as rounding conventions or a genuinely non-random data-generating process, so it must be followed up with substantive testing before any conclusion is drawn.
Related terms
- Chain of Custody
- The documented chronological record of who collected, handled, transferred, and examined a piece of evidence. For digital evidence, chain of custody includes...
- Forensic Imaging
- The process of creating a bit-for-bit copy of a digital storage device using specialist tools that do not alter the original. The...
- Predication
- The reasonable basis that justifies opening a fraud examination. The ACFE holds that no examination should begin without adequate predication, meaning a...
- Spoliation
- The destruction, alteration, or concealment of evidence relevant to a legal proceeding. Spoliation can result in adverse inference instructions to a jury,...
- Whistleblower Statement
- An allegation or tip from an individual with inside knowledge of suspected fraud. It often constitutes the predicate for a fraud examination...