MarcusWelcome back to VoraPrep Audio's Office Hours. I’m Marcus.
EmmaAnd I’m Emma. We have a classic exam scenario for you today. You’re a CFE, and a sales manager tells you commission revenue from a key distributor is way down. At the same time, 'consulting fees' to a brand-new vendor have spiked.
MarcusAnd to make it interesting, you get an anonymous tip saying the distributor's owner is related to the new vendor's owner. But here's the twist: internal audit just did a review last quarter and found nothing. So, Emma, what's the first move? Do we launch a full investigation?
EmmaThat's the million-dollar question, and it brings us to the absolute foundation of any fraud examination: a concept called predication.
MarcusPredication. I've seen that term. What does it actually mean in practice?
EmmaThink of it as the 'probable cause' for a fraud examiner. Predication is the totality of circumstances that would lead a reasonable, prudent professional to believe that a fraud has occurred, is occurring, or is about to occur.
MarcusSo it’s the official green light. You can't start an investigation without it.
EmmaExactly. It's the bedrock. Without predication, you're just on a fishing expedition, which is unethical, inefficient, and can even be illegal.
MarcusOkay, so how is this different from just having a strong hunch? The scenario we laid out feels suspicious. Is suspicion enough?
EmmaThat is the most critical distinction to make. Suspicion is a feeling, a hunch. It's subjective. Predication has to be based on objective evidence, specific facts, and rational inferences from those facts.
MarcusSo my gut feeling that something is 'off' isn't predication. What's the threshold then? When does it cross the line from one to the other?
EmmaSuspicion is not enough to launch a formal investigation. It might justify some preliminary questions or just being more vigilant. Predication is the threshold you must cross to formally allocate resources—time, people, money—to an examination.
MarcusAnd I imagine the risk is different, too. If I act on a hunch, I could be accusing someone baselessly.
EmmaPrecisely. Acting on mere suspicion risks professional misconduct and wasting company resources. When you have proper predication, you have a defensible, logical basis for your actions, which minimizes that risk.
MarcusSo, where does this defensible basis—this predication—come from?
EmmaIt can come from many places. The source material for the exam highlights a few key ones. Anonymous tips are a big one.
MarcusBut aren't tips often vague? Like someone just saying, "I think there's fraud in accounting."
EmmaThey can be. But a specific tip, even if it's anonymous, can be a great starting point. Especially if you can corroborate some of its details. And remember, whistleblower protections under the Sarbanes-Oxley Act, like SOX Section 806 and 1107, encourage this kind of reporting.
MarcusWhat else? What if you don't get a tip?
EmmaInternal control weaknesses are another major source. Say an audit finds that the person who approves payments is also the one who can add new vendors to the system. That lack of segregation of duties doesn't prove fraud, but it certainly creates an environment where it could easily happen.
MarcusSo, the control weakness itself can be part of the predication?
EmmaYes, it’s part of that 'totality of circumstances.' The same goes for audit findings—like unexplained discrepancies—or even inquiries from regulatory agencies like the SEC. They all contribute to building a case for predication.
MarcusYou mentioned audits. This whole process sounds a lot like a financial audit. How are they different? I think a lot of us get those two confused.
EmmaIt’s a common point of confusion, but the difference is fundamental, and you have to know it for the exam. It starts with the primary objective.
MarcusOkay, what’s the objective of a financial audit?
EmmaA financial audit's goal is to express an opinion on whether financial statements are fairly presented according to standards like GAAP or IFRS. It’s a routine check-up.
MarcusAnd a fraud examination?
EmmaA fraud examination is laser-focused. Its objective is to determine if a specific fraud actually occurred, who was involved, and how much was lost. It’s not routine; it's a reaction to predication.
MarcusSo the trigger is different. Audits are recurring and planned, while fraud exams are non-recurring and reactive.
EmmaExactly. And that affects the scope. An audit is broad—it looks at the financial statements as a whole. A fraud examination is narrow, targeting the specific allegations. The methodologies are different, too. Audits use sampling and testing, while we use interviews, forensic analysis, and evidence gathering.
MarcusWhich leads to a different outcome. An audit ends with an opinion—unqualified, qualified, etc. A fraud exam ends with... what?
EmmaIt ends with findings about the fraud itself, and recommendations for what to do next—maybe legal action, recovery of assets, or internal discipline.
MarcusThat's a really clear distinction. Okay, let's apply this. Let's go back to our scenario: the drop in commissions, the spike in consulting fees, the anonymous tip. How would we use a systematic framework to decide what to do?
EmmaGreat. The first step is to evaluate the initial information objectively. What are the specific facts we have?
MarcusWe have a documented drop in revenue from a specific distributor. We have a documented increase in fees to a specific new vendor. And we have a tip, albeit anonymous, that links the two. That feels more specific than just a rumor.
EmmaIt is. Which leads to Step Two: Determine if predication exists. Based on those facts, would a reasonable professional believe a fraud might be occurring?
MarcusI’d say yes. The coinciding events, the financial data, and the specific relationship mentioned in the tip—that 'totality of circumstances'—it’s more than a hunch.
EmmaI agree. Predication is established. So, we can proceed to Step Three: Define the scope and objectives. We don't just start digging everywhere. We need to be specific.
MarcusSo we’d define our scope as investigating this specific distributor and this new vendor relationship. Our objective would be to confirm if there’s an improper financial link and if it’s causing the commission drop.
EmmaPerfect. And once you have that, you move to Step Four: Develop an action plan and allocate resources. This is your roadmap.
MarcusSo, who are we going to interview? What documents do we need to pull? What data analytics will we run? That all goes into the plan.
EmmaYes, and who is on the team, what technology you need, and what your budget is. This is also the point where you strongly consider bringing in legal counsel.
MarcusThat brings us to the final step, which is about the legal and ethical side of things.
EmmaStep Five: Consider legal and ethical implications. This isn't just a final check; it's something you do throughout the process. Are you respecting employee rights? Are you properly preserving evidence?
MarcusYou mean like maintaining the chain of custody?
EmmaAbsolutely. You have to plan for how you'll preserve evidence so it's admissible later. The Federal Rules of Evidence, like Rule 901 and 902, are critical here. And ethically, you must remember the ACFE Code.
MarcusIs there a specific part of the code that’s most relevant at this stage?
EmmaArticle IV is paramount. It states that a CFE shall *never* express an opinion on the guilt or innocence of any person. Our job is to find the facts and report them, not to be the judge and jury.
MarcusThat’s a powerful boundary to remember. Let's do a quick-hitter to really nail this down. What if an anonymous tip just says, 'Someone in accounting is stealing.' Period.
EmmaThat’s a classic example of suspicion. It's too vague. There are no specifics. You have no predication. A fraud examination is not justified.
MarcusBut what if the tip said, 'John Doe in accounting frequently stays late, and cash deposits are consistently short on the days he works, which Jane Smith has noticed.'
EmmaNow you have something. You have a specific person, a specific asset, a specific anomaly, and even a potential witness. Those are objective facts. With a little bit of preliminary work to confirm those details, you would absolutely have predication.
MarcusThat makes the difference so clear. When you're prepping for the exam, what's the most common trap people fall into with this topic?
EmmaThe biggest one by far is confusing suspicion with predication. The exam will give you a scenario with vague rumors and see if you jump the gun and launch a full investigation. The correct answer is always to say a formal examination isn't warranted without more specific facts that rise to the level of predication.
MarcusWhat's another one?
EmmaOverlooking the legal planning. Candidates focus on finding the fraud but forget that how they find it matters. You have to think about chain of custody for evidence right from the planning stage. If you mishandle digital evidence, for example, it could be worthless.
MarcusAnd you mentioned legal counsel earlier. Is failing to involve them a trap?
EmmaYes. The exam might present a scenario where a CFE acts alone and violates whistleblower protections under SOX or other employee rights. Involving legal counsel early is almost always a wise step in your plan.
MarcusThis has been incredibly helpful, Emma. Before we wrap, if someone is trying to remember the one key idea here, what should it be?
EmmaRemember that predication is your license to investigate. It’s the shield that protects you from claims of a baseless 'fishing expedition.' Always ask yourself: Do I have specific, objective facts that point to fraud, or just a gut feeling?
MarcusAnd if you’re looking for more ways to practice applying concepts like this, VoraPrep is a full exam-prep app — lessons, practice questions, and an AI tutor in one place. You can find it at Vora Prep dot com to get started and try it for free.
EmmaIt’s all about building that solid foundation, both in your studies and in every examination you conduct.
MarcusThanks for the time, Emma. And to everyone listening, keep up the great work. We’ll see you at the next Office Hours.