Skip to content
All posts
Forensic accountingJournal entries

Fraud hides in volume. That's why we read every transaction.

Most reviews test a sample and hope the problem is in it. The entries that matter are rarely the ones a sample picks up.

Vaanii Joshi

Vaanii Joshi

· 4 min read

A mid-sized company can post hundreds of thousands of ledger entries a year. A traditional review team, working by the hour, cannot read them all. So it samples: a few hundred entries chosen by size, by account or at random, and a judgement about the rest.

Sampling works when errors are spread evenly. Fraud is not spread evenly. It is deliberate, and it is designed to look ordinary. The entry that matters is often small, posted late on a Sunday, kept just under an approval limit, or split into three payments to the same vendor. Those are exactly the entries a sample is least likely to catch.

What changes when you test the whole population

When software reads every transaction, the question changes from "did our sample happen to include the problem?" to "which of these patterns actually appear in this ledger?" Round-amount entries, weekend postings, manual entries after period close, vendors who share a bank account with an employee: each becomes a test you run on everything, not a hope.

Coverage is what software is good at. Judgement is what people are good at. A forensic review needs both.

Where people still matter

Full-population testing produces flags, not conclusions. Many flags have innocent explanations: an approved rent deposit, a payroll run that always lands on a weekend. Someone with forensic training has to work through them, ask for documents, speak to management and decide what is a finding. That is the part of the work clients should pay for, and it is the part that should carry a name.

That is how we have built Finaley. The engine reads everything. A credentialed reviewer decides what it means, and signs.

Want this run on your books?