The Forensic Accounting Engagement

Forensic accountants are not obliged to take every matter that comes their way, and they should not. The acceptance decision is a professional judgment that considers four threshold questions: Does the firm have the competence this case requires? Is there a conflict of interest? Can the engagement be resourced within the client's time constraints? And can the accountant maintain the independence that courts will scrutinize?

• Competence: A cryptocurrency fraud investigation requires skills that a career spent on straightforward embezzlement cases may not have developed. Accepting beyond one's competence and then outsourcing the technical work creates chain-of-custody and supervision problems.
• Conflicts: The firm's client-database check must cover current clients, former clients within the past several years, and the personal relationships of all team members who will touch the matter. Opposing counsel will ask about this in deposition.
• Resources: A one-week window to review ten years of financial records is a scope problem, not a work-ethic challenge. Accepting without adequate time creates a choice between a superficial investigation and a blown deadline.
• Independence: If the firm audited the entity under investigation, if a partner holds equity in it, or if a team member has a personal relationship with a key witness, independence is compromised before the engagement starts.

An initial consultation call should gather enough information to run these checks before anyone commits. Some firms use a brief intake form. The key discipline is not accepting anything verbally before the conflict screen is complete, even from a valued long-term client.

The single most consequential structural decision in a forensic accounting engagement is who retains the accountant: the attorney, or the client directly. The difference is not ceremonial.

Attorney-client privilege in the context of a forensic accountant was cemented in US jurisprudence by United States v. Kovel (1961), in which the Second Circuit held that an accountant retained by counsel to help the attorney understand complex tax records was as protected as a foreign-language translator. The principle is that the privilege covers the attorney's agent when the agent's work facilitates legal advice. But the protection has limits: communications that go beyond the legal-advice function, or documents shared with the client outside the privilege setting, may lose their protected status.

A forensic engagement letter is a legal contract, but most of its practical work is the precision it forces. The process of writing it out compels the forensic accountant and the client to agree on what is in scope, what is out, and what will trigger a scope-change discussion. Ambiguity that seems harmless at the beginning becomes the source of disputes about fees, deliverables, and blame for gaps once the work is done.

• Identity of the client: The firm retaining you is not always the party whose interests you are protecting. A subsidiary, a board committee, or an individual officer may be the actual client. Naming this precisely determines to whom duties of confidentiality run.
• Scope of work: Define what periods will be covered, which entities, which transaction types, and what financial statements or records are in play. If the scope is phase-gated, state what triggers the next phase and how authorization works.
• Deliverables: Specify whether you will produce a written report, an oral briefing, a damages model, or expert witness testimony. Each deliverable has different disclosure implications and different quality standards.
• Limitations: State what you will not do. A forensic review is not an audit. A damages model assumes certain facts the accountant cannot independently verify. Articulating limitations protects the accountant from claims of professional malpractice for work that was never in the mandate.
• Fees and billing: Time-and-materials is most common; contingency fees are prohibited in most jurisdictions for expert work. State rates, retainer requirements, and the invoicing cycle.

A complex forensic accounting engagement typically involves at least three roles, and the boundaries between them matter. The engagement partner or manager bears overall responsibility for quality and independence. The forensic analysis team does the transaction-level work: reviewing records, building schedules, running analytics. And in litigation-support matters, a testifying expert may be a third, formally separate role.

The testifying-expert role deserves special attention because many jurisdictions require disclosure of everything a testifying expert relied on. In the US, Federal Rule of Evidence 26(a)(2) requires disclosure of the data or other information an expert considered. If the same person who built the financial model also conducted witness interviews and reviewed counsel's strategy memos, the disclosure perimeter becomes very large. A common structural response is to separate the consulting expert (who advises counsel, sees privileged material, and does not testify) from the testifying expert (who sees only what can be disclosed and whose work product is designed to withstand scrutiny from the opposing side).

Even in smaller engagements without a formal consulting/testifying split, the engagement manager should document who reviewed which materials and in what capacity. This documentation becomes important when the other side deposes team members or requests work-product disclosures.

Organisations run document-retention schedules. Emails over 90 days get auto-deleted. Financial reports from two years ago go to off-site storage and then to shredding. For ordinary operations, this is sensible housekeeping. For a fraud investigation or litigation matter, it is a catastrophe waiting to happen. The forensic accountant's first tangible action at engagement acceptance is often to recommend an immediate litigation hold.

The hold must cover: all electronic data (emails, instant messages, shared drives, accounting systems, ERP exports, backups), physical documents relevant to the matter, personal devices if employees used them for business communications, and third-party records the client controls. The scope of the hold mirrors the scope of the investigation.

Practical implementation of a hold involves notifying all custodians in writing, suspending automated deletion processes in IT systems, and confirming receipt from each custodian. Some firms send hold notices through counsel; others use a dedicated e-discovery platform that logs acknowledgments. Whatever method is used, the paper trail showing timely notification is part of the forensic record.

In forensic accounting, conflicts of interest arise in three main configurations. First, the firm may have a prior relationship with a party adverse to the current client: you audited the company you are now investigating, or you once advised the person your client alleges committed the fraud. Second, a team member may have a personal or financial interest in the outcome: they own stock in the entity, their spouse works there, or they have a prior judgment against the suspect. Third, the firm may be acting for parties whose interests are currently aligned but could diverge: representing both a company and its CFO in an investigation where the CFO may eventually become a target.

Most professional frameworks (AICPA, ICAEW, IESBA) require disclosure and, in most cases, disengagement unless all affected parties provide informed consent and the accountant genuinely can act independently. The consent must be written and specific. A general waiver signed at an earlier engagement does not cover new conflicts arising from a different matter.

The conflict screen should run at engagement acceptance and again each time the scope expands significantly or a new entity or individual is added to the matter. Firms with sophisticated conflict-management systems flag related matters automatically. Smaller practices need a manual protocol that is actually followed, not just documented.