Skip to content

Expense and Liability Manipulation

How companies inflate earnings by understating costs, capitalising expenses that should flow through the income statement, and hiding liabilities off the balance sheet.

By Reviewed by Subhrant Jha

Last updated:

Expense and liability manipulation inflates reported earnings and overstates solvency by moving costs off the income statement or obligations off the balance sheet. The core techniques are capitalising operating expenses as long-lived assets (as WorldCom did with $3.8 billion in line costs), routing debt through off-balance-sheet vehicles (as Enron did via SPEs), understating provisions and contingent liabilities, and building cookie-jar reserves that can be released into income when results disappoint.

Each technique exploits the judgement permitted by accounting standards, and each leaves a characteristic footprint in cash flow ratios and provision trends that forensic analysis can detect.

Every dollar of expense that moves off the income statement adds a dollar of profit. Every liability that disappears from the balance sheet improves the debt ratios investors use to judge solvency.

These arithmetic facts explain why expense and liability manipulation are persistent features of financial-statement fraud: the accounting moves required are often small, individually defensible, and difficult to reverse-engineer without internal access. The forensic accountant's job is to find the pattern across hundreds of entries that each looked like a judgment call.

WorldCom's $3.8 billion fraud was the largest accounting scandal in US history at the time of its 2002 discovery. The mechanism was straightforward: reclassify operating costs as capital assets. Enron's collapse the previous year was structurally different but equally telling: it used elaborate off-balance-sheet vehicles to make debt invisible. Both companies had unqualified audit opinions in the years the fraud was running.

This topic covers the accounting mechanics of each main scheme type: capitalisation of operating expenses, off-balance-sheet structures, understated provisions and contingent liabilities, and cookie-jar reserves. For each, the focus is on why the accounting treatment works as camouflage, what it does to the financial ratios, and the investigation techniques that penetrate it.

By the end of this topic you will be able to:

  • Identify the accounting mechanism by which capitalising operating expenses inflates net income without affecting operating cash flow, and apply the capex-to-revenue ratio test to detect it.
  • Explain how pre-FIN 46 special-purpose entity structures allowed sponsors to exclude debt and losses from consolidated financial statements, and what the variable interest entity standard changed.
  • Distinguish understatement of provisions from cookie-jar reserve manipulation, and describe the direction of earnings distortion each produces.
  • Construct a five-year provision trend analysis and specify what documentation to request when the trend is inconsistent with underlying business risk.
  • Describe the journal-entry testing method used to identify account-code misclassification between operating expense and capital asset accounts.
Key terms
Capital expenditure (capex)
Spending that provides an economic benefit over more than one period, capitalised as an asset on the balance sheet and expensed through depreciation or amortisation over its useful life. Distinguishing capex from operating expense is the fulcrum of WorldCom-style fraud.
Operating expense (opex)
Costs consumed in the current period, expensed in full through the income statement. Reclassifying opex as capex defers the income-statement impact across many future periods, inflating current earnings.
Special-purpose entity (SPE)
A legal vehicle created by a sponsoring company for a specific purpose, such as securitising assets or financing a project. Under certain conditions, an SPE is excluded from the sponsor's consolidated financial statements, which can hide debt and losses.
Cookie-jar reserve
A liability or provision created in excess of its justified amount during a period of strong earnings, then released into income in a later weak period to smooth reported results. The name reflects the idea of saving for later.
Contingent liability
An obligation whose existence or amount depends on a future uncertain event. Under IAS 37, a provision must be made when an outflow is probable and estimable. Understatement of contingent liabilities is a common method of hiding future obligations.
Off-balance-sheet financing
Arrangements that provide funding or transfer risk without the resulting obligation appearing on the face of the balance sheet. Operating leases before IFRS 16, SPEs, and sale-and-leaseback structures are common forms.

WorldCom: capitalising what should be expensed

WorldCom's principal business cost was line costs: fees paid to local telephone companies and other carriers for access to their networks. These payments had the economic character of a rental or service fee, consumed in the period when the network was used. Under US GAAP, they should have been expensed in full as incurred.

Beginning in 2001, at the direction of CFO Scott Sullivan, WorldCom's accounting staff began transferring line-cost accruals from expense accounts to capital asset accounts. The justification offered internally was that these payments could be characterised as prepayments for future network access, and therefore had a future economic benefit that warranted capitalisation. This rationale was unsupported by the contracts and was never disclosed to auditors.

By the time the fraud was discovered by the internal audit team led by Cynthia Cooper in June 2002, the accumulated overstatement stood at $3.8 billion. The discovery was made without the cooperation of the external auditor, Arthur Andersen, which had audited WorldCom throughout the fraud period. Cooper's team found the capitalized entries by comparing general-ledger account codes against the descriptions of the underlying transactions.

Line costs (opex)Income statement: expenserecognisedBalance sheet:capitalised as assetEarnings inflated,assets overstatedfraud path
WorldCom: line costs moved from income statement to balance sheet.

Enron and off-balance-sheet vehicles

Enron created over 3,000 special-purpose entities between 1993 and 2001. The ones that mattered for the fraud were a cluster of partnerships with names like LJM Cayman, LJM2 Co-Investment, and Raptor I through IV. These were controlled, despite appearances, by Enron's own CFO Andrew Fastow, who earned over $30 million in management fees from them.

The accounting rules at the time (FAS 125 and later FAS 140, now replaced by ASC 810) allowed an SPE to be kept off a sponsor's balance sheet if an independent third-party investor held at least 3% of the SPE's equity at risk. Fastow's partnerships were constructed to appear to meet this test. The 3% investors were often indirectly controlled by Enron itself or had their investment guaranteed by Enron stock, which meant the independence condition was never genuinely satisfied.

The practical result was that Enron could transfer poorly performing investments into these vehicles, recognise a gain on the transfer, and avoid consolidating the debt the vehicles then carried. When asset prices fell, the Raptor vehicles that had been used to hedge Enron's merchant investments became insolvent. Enron had guaranteed their debts, and those guarantees materialised all at once in 2001. The November 2001 restatement revealed $591 million in previously hidden losses and added $628 million to reported debt.

Understating provisions and contingent liabilities

Provisions require judgment: a company must estimate the probability of an outflow and its likely amount. This judgment is genuine and necessary; it is also a door for manipulation. Setting a litigation reserve at the low end of the range when management knows the exposure is toward the high end, booking an asset impairment later than the evidence requires, or failing to accrue a probable warranty liability are all understatement techniques.

IAS 37 requires a provision when an obligation is probable (more likely than not) and the amount can be reliably estimated. GAAP (ASC 450) uses a similar threshold. The disclosure requirement for contingent liabilities that do not yet meet the recognition threshold is itself informative: a company with large disclosed contingencies but minimal provisions is indicating that management has set probability assessments just below the recognition threshold, which deserves scrutiny.

Manipulation techniqueAccounting standard exploitedDetection approach
Set provision at minimum of range rather than best estimateIAS 37 best-estimate requirementCompare provision to external legal or actuarial estimates
Delay impairment of clearly impaired assetIAS 36 / ASC 360Cash-flow model using management's own forecasts
Exclude probable warranty cost from accrualsIAS 37 / ASC 450-20Compare warranty expense trend to claims history
Create SPE to house bad assets off-balance-sheetASC 810 VIE consolidation rulesMap SPE guarantees and variable interests
Release excess prior-period provision into incomeIAS 37, consistency principleTrend provision balances; compare prior accruals to actual payments

Ratio analysis and journal-entry testing

Expense and liability manipulation leaves a different ratio footprint from revenue fraud. The primary signals are on the cash flow statement and the balance sheet rather than the top line.

  • Capex / revenue ratio: rising abnormally against industry peers signals that operating costs may be being capitalised. For WorldCom, capex as a percentage of revenue was dramatically above industry norms in the fraud period.
  • Operating cash flow / net income: capitalisation fraud shows as operating cash flow exceeding net income, because the capitalised amount reduces the income-statement charge but does not reduce operating cash flow.
  • Depreciation rate: assets with implausibly long useful lives or a falling depreciation charge relative to asset base suggest inflated asset values or improper classification.
  • Provision / revenue trend: provision balances that move independently of business volume or litigation outcomes warrant document-level examination.
  • Debt-to-equity on a fully consolidated basis: for off-balance-sheet structures, computing gearing using guaranteed contingent obligations and disclosed SPE liabilities often reveals the true debt load.

Journal-entry testing focuses on entries that cross the expense-to-capital boundary: debits to fixed-asset or construction-in-progress accounts supported by descriptions that read as operating costs. In a digital accounting environment, these can be extracted by keyword-searching journal descriptions against a list of operating expense terms, then sorting by the account receiving the debit.

Check your understanding
Question 1 of 4· 0 answered

WorldCom inflated earnings by reclassifying line costs. What was the effect on the cash flow statement?

Key Takeaways

  • WorldCom's fraud shows that reclassifying operating expenses as capital assets inflates net income without changing cash flows, and the divergence between reported earnings and operating cash flow is the primary detection signal.
  • Enron's SPE strategy used the pre-FIN 46 accounting rules to remove debt and losses from the consolidated balance sheet; the post-2003 variable interest entity standard closes most of that gap.
  • Understating provisions and contingent liabilities defers expense recognition and overstates equity, creating a cliff-edge restatement when the obligation eventually forces recognition.
  • Cookie-jar reserves use the same provision rules in the opposite direction: overstate the provision in strong years, release it to income in weak years, creating an illusion of earnings stability.
  • Journal-entry testing for account-code misclassification and five-year trend analysis of provision balances are the two most productive investigation starting points for expense and liability schemes.
How did WorldCom's line-cost capitalisation work?
WorldCom reclassified ordinary operating expenses, payments to other carriers for network access, as capital expenditures. Instead of flowing through the income statement as an expense, they appeared on the balance sheet as assets that would be depreciated slowly over many years. This reduced current-period expenses and inflated earnings by $3.8 billion over several years.
What is a cookie-jar reserve?
A liability or provision created in an excess amount during a strong period and then released selectively into income during a weak period to smooth earnings. The creation of the reserve is booked as an expense; the release adds to profit. The manipulation is in setting the initial provision at an inflated level to create a future smoothing tool.
What was Enron's special-purpose entity strategy?
Enron created hundreds of special-purpose entities to transfer debt and poorly performing assets off its own balance sheet. Under the accounting rules then in force, an SPE could be excluded from consolidation if an independent outside investor held at least 3% of its equity. Enron's SPEs often lacked genuinely independent investors, and when the underlying assets collapsed, Enron's guarantees forced all the debt back onto its own balance sheet.
Why do liability understatements matter if earnings still look reasonable?
Understated liabilities overstate equity and net assets, making solvency ratios look healthier than they are. They also defer expense recognition into future periods. When the understated liability eventually surfaces, it creates a cliff-edge restatement that can be larger than multiple years of reported profit.
What ratio is most sensitive to capitalisation fraud?
Capital expenditure as a percentage of revenue, compared against industry peers, often spikes when operating expenses are being capitalised. Simultaneously, operating cash flow will outpace net income, because the capitalised amount does not reduce cash from operations but does reduce reported expenses. The divergence is the key signal.

Test yourself on Forensic Accounting and Financial Forensics with free, timed mocks.

Practice Forensic Accounting and Financial Forensics questions

Found this useful? Pass it along.

Share

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.