The Forensic Accounting Engagement

Forensic accountants are not obliged to take every matter that comes their way, and they should not. The acceptance decision is a professional judgment that considers four threshold questions: Does the firm have the competence this case requires? Is there a conflict of interest? Can the engagement be resourced within the client's time constraints? And can the accountant maintain the independence that courts will scrutinize?

• Competence: A cryptocurrency fraud investigation requires skills that a career spent on straightforward embezzlement cases may not have developed. Accepting beyond one's competence and then outsourcing the technical work creates chain-of-custody and supervision problems.
• Conflicts: The firm's client-database check must cover current clients, former clients within the past several years, and the personal relationships of all team members who will touch the matter. Opposing counsel will ask about this in deposition.
• Resources: A one-week window to review ten years of financial records is a scope problem, not a work-ethic challenge. Accepting without adequate time creates a choice between a superficial investigation and a blown deadline.
• Independence: If the firm audited the entity under investigation, if a partner holds equity in it, or if a team member has a personal relationship with a key witness, independence is compromised before the engagement starts.

An initial consultation call should gather enough information to run these checks before anyone commits. Some firms use a brief intake form. The key discipline is not accepting anything verbally before the conflict screen is complete, even from a valued long-term client.

The most consequential structural decision in a forensic accounting engagement is who retains the accountant: the attorney or the client directly. The choice has significant legal consequences.

Attorney-client privilege in the context of a forensic accountant was cemented in US jurisprudence by United States v. Kovel (1961), in which the Second Circuit held that an accountant retained by counsel to help the attorney understand complex tax records was as protected as a foreign-language translator. The principle is that the privilege covers the attorney's agent when the agent's work facilitates legal advice. But the protection has limits: communications that go beyond the legal-advice function, or documents shared with the client outside the privilege setting, may lose their protected status.

A forensic engagement letter is a legal contract whose principal value is the precision it requires. Drafting it forces the accountant and client to agree on what is in scope, what is out, and what will trigger a scope-change discussion. Ambiguity that seems harmless at the start becomes the source of fee disputes, deliverable disagreements, and blame for investigative gaps once the work is underway.

• Identity of the client: The firm retaining you is not always the party whose interests you are protecting. A subsidiary, a board committee, or an individual officer may be the actual client. Naming this precisely determines to whom duties of confidentiality run.
• Scope of work: Define what periods will be covered, which entities, which transaction types, and what financial statements or records are in play. If the scope is phase-gated, state what triggers the next phase and how authorization works.
• Deliverables: Specify whether you will produce a written report, an oral briefing, a damages model, or expert witness testimony. Each deliverable has different disclosure implications and different quality standards.
• Limitations: State what you will not do. A forensic review is not an audit. A damages model assumes certain facts the accountant cannot independently verify. Articulating limitations protects the accountant from claims of professional malpractice for work that was never in the mandate.
• Fees and billing: Time-and-materials is most common; contingency fees are prohibited in most jurisdictions for expert work. State rates, retainer requirements, and the invoicing cycle.

A complex forensic accounting engagement typically involves at least three roles, and the boundaries between them matter. The engagement partner or manager bears overall responsibility for quality and independence. The forensic analysis team does the transaction-level work: reviewing records, building schedules, running analytics. And in litigation-support matters, a testifying expert may be a third, formally separate role.

The testifying-expert role deserves special attention because many jurisdictions require disclosure of everything a testifying expert relied on. In the US, Federal Rule of Civil Procedure 26(a)(2) requires disclosure of the data or other information an expert considered. If the same person who built the financial model also conducted witness interviews and reviewed counsel's strategy memos, the disclosure perimeter becomes very large. A common structural response is to separate the consulting expert (who advises counsel, sees privileged material, and does not testify) from the testifying expert (who sees only what can be disclosed and whose work product is designed to withstand scrutiny from the opposing side).

Even in smaller engagements without a formal consulting/testifying split, the engagement manager should document who reviewed which materials and in what capacity. This documentation becomes important when the other side deposes team members or requests work-product disclosures.

Organisations run routine document-retention schedules: emails auto-delete after a set period, older financial records move to off-site storage and eventual shredding. These schedules are standard practice in normal operations but can destroy critical evidence once a fraud investigation or litigation matter is underway. The forensic accountant's first tangible action at engagement acceptance is typically to recommend an immediate litigation hold.

The hold must cover: all electronic data (emails, instant messages, shared drives, accounting systems, ERP exports, backups), physical documents relevant to the matter, personal devices if employees used them for business communications, and third-party records the client controls. The scope of the hold mirrors the scope of the investigation.

Practical implementation of a hold involves notifying all custodians in writing, suspending automated deletion processes in IT systems, and confirming receipt from each custodian. Some firms send hold notices through counsel; others use a dedicated e-discovery platform that logs acknowledgments. Whatever method is used, the paper trail showing timely notification is part of the forensic record.

In forensic accounting, conflicts of interest arise in three main configurations. First, the firm may have a prior relationship with a party adverse to the current client: you audited the company you are now investigating, or you once advised the person your client alleges committed the fraud. Second, a team member may have a personal or financial interest in the outcome: they own stock in the entity, their spouse works there, or they have a prior judgment against the suspect. Third, the firm may be acting for parties whose interests are currently aligned but could diverge: representing both a company and its CFO in an investigation where the CFO may eventually become a target.

Most professional frameworks (AICPA, ICAEW, IESBA) require disclosure and, in most cases, disengagement unless all affected parties provide informed consent and the accountant genuinely can act independently. The consent must be written and specific. A general waiver signed at an earlier engagement does not cover new conflicts arising from a different matter.

The conflict screen should run at engagement acceptance and again each time the scope expands significantly or a new entity or individual is added to the matter. Firms with sophisticated conflict-management systems flag related matters automatically. Smaller practices need a manual protocol that is actually followed, not just documented.