The typical fraud inside an organization runs for about a year before anyone notices. That’s one of the findings of the Association of Certified Fraud Examiners’ Occupational Fraud 2026: A Report to the Nations. The report studied 2,402 real cases across 143 countries and territories. The median loss per case was $104,000, and total losses passed $3.4 billion. Corporate investigations exist for exactly this reason.
The more uncomfortable finding is how those frauds came to light. A tip uncovered 43% of them, and more than half of those tips came from employees. Moreover, more than half of the cases involved a lack of internal controls or an override of existing ones.
In other words, most companies don’t find fraud through systems built to find it. They find it because someone talks. Investigations close that gap. They look for what’s hidden on purpose, and they establish the facts when something doesn’t add up.
What corporate investigations actually do
A corporate investigation is a structured, independent inquiry into a specific concern affecting a business. That concern might be suspected fraud, misconduct, a risky counterparty, or a leak of confidential information. It might also be a dispute that’s heading toward litigation.
The goal isn’t simply to confirm suspicions. Instead, it’s to establish what happened, who took part, how much is at stake, and what evidence exists. The inquiry must also hold up in front of a board, a regulator or a court.
Good corporate investigation services typically combine several disciplines:
- Financial analysis of ledgers, payments, expense claims and vendor records
- Digital forensics on laptops, phones, email and cloud accounts
- Open-source intelligence (OSINT) on people, companies and their connections
- Corporate records research across jurisdictions to identify real owners
- Interviews with employees, witnesses and, at the right time, the subject
- Discreet inquiries and, where appropriate and lawful, surveillance
Hidden risks that audits miss and corporate investigations find
Audits aim to give reasonable assurance that financial statements are accurate. However, they don’t set out to catch a determined insider who knows exactly where the controls are weak. These are the risks corporate investigations set out to uncover.
Undisclosed conflicts of interest
A procurement manager steers contracts to a supplier owned by a relative. On paper, the supplier is an independent company with a clean registration. Still, only by tracing ownership, addresses, phone numbers and directorships does the connection appear.
Ghost vendors and false invoices
Payroll and expense fraud
Ghost employees, inflated hours, duplicated claims and personal spending billed to the business. Individually small, these schemes can run for years.
Revenue and financial statement manipulation
Inflated sales, round-trip transactions and fictitious customers. These are rarer but far more damaging, and they usually involve senior people who can override controls.
Third-party and counterparty risk
Distributors, agents and joint venture partners can expose a company to bribery, sanctions and reputational risk. Many serious enforcement cases begin with a third party that nobody properly checked.
Asset misappropriation and data theft
Inventory going missing, client lists leaving with a departing employee, or confidential information appearing at a competitor.
How corporate investigations find what’s hidden
Corporate investigations work because they ask a different question from routine controls. Controls ask, “Does this transaction follow the rules?” Investigators ask, “Who benefits, and what would they need to hide?”
In practice, that means:
- Following the money. Tracing payments from the company to their final destination, through intermediaries and related parties.
- Mapping relationships. Linking employees, suppliers and customers through shared ownership, addresses, bank accounts, phone numbers and social connections.
- Testing the story. Checking whether a supplier, customer or transaction actually exists in the real world, beyond the paperwork.
- Preserving digital evidence. Collecting devices and data forensically, so evidence is complete and admissible.
- Interviewing in the right order. Speaking to witnesses before the subject, and only once the documentary evidence is understood.
Warning signs that call for corporate investigations
You don’t need proof of fraud to start a corporate investigation. These signs are usually enough:
- A tip or whistleblower report, even an anonymous one
- An employee who never takes leave or refuses to share their duties
- A supplier with no website, no staff and a residential address
- Payments just below approval thresholds
- Margins or costs that move in ways nobody can explain
- A manager living well beyond their known means
- Missing records, or records that look recreated
- Unusual resistance to an audit or review
Why independence matters in corporate investigations
When a concern involves senior people, an internal team may not be the right one to investigate. Staff may be reluctant to question their own managers. Evidence can also disappear or become contaminated, and others may later challenge the findings as biased.
External fraud investigation services bring independence, specialist tools and experience. They know what the evidence needs to look like if the matter ends up with regulators, insurers or in court. Independent corporate investigations also allow the business to keep operating while the work runs quietly in the background.
What to do if you suspect fraud
- Don’t confront anyone yet. Early confrontation is the fastest way to lose evidence.
- Preserve data. Suspend routine deletion of email and records, and secure relevant devices.
- Limit who knows. Keep the circle small and on a need-to-know basis.
- Get legal advice early, especially if employment law, privilege or regulators are involved.
- Bring in specialists before evidence is collected, not after.
How CAT Investigators can help with corporate investigations
CAT Investigators provides corporate investigation services for companies, law firms, financial institutions and investors in New York, London, Hong Kong and beyond. Our team conducts fraud investigations, corporate risk investigations, third-party and counterparty checks, asset tracing, digital forensics and OSINT. We document our findings to stand up to legal and regulatory scrutiny. Learn more about our asset tracing, digital forensics and OSINT services.
If something inside your business doesn’t add up, we can help you find out why, quietly and independently.
Speak to our corporate investigations team
This article is for general information and does not constitute legal advice.