Forensic Accounting and Fraud Control Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends Internal Auditors, Finance Managers and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-FFC-017

Before you join: Participants should understand core accounting records, including general ledgers, invoices, purchase orders, payroll reports and bank reconciliations.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Financial fraud often begins within routine transactions: altered supplier bank details, duplicate invoices, false expense claims, revenue manipulation, payroll irregularities, procurement collusion or concealed related-party dealings. Finance and control teams need to distinguish errors from indicators of intentional misconduct, preserve evidence correctly, quantify financial exposure and respond without compromising an investigation. Poorly structured enquiries can destroy evidence, alert suspects prematurely or create legal and reputational risk.

This course develops practical forensic accounting and fraud control capability for finance, audit, compliance and investigation professionals. Participants examine fraud risk assessment, the ACFE Fraud Tree, COSO control principles, financial statement manipulation techniques, data-led anomaly detection, documentary evidence, investigative interviewing and loss quantification. They learn how to build an allegation assessment, document a defensible evidence trail, test transactions and recommend controls that address identified fraud schemes.

Teaching combines focused instructor briefings with financial records analysis, fraud case discussions, small-group investigation planning, interview simulations and control-design work. Cases reflect payment fraud, procurement misconduct, expense abuse, payroll fraud and financial reporting concerns commonly encountered by banks, public bodies, NGOs and multinational businesses. Participants leave with a fraud risk assessment model, investigation planning documents, evidence handling checklist, transaction-testing workbook and fraud control action plan. The course is delivered over five days, from 08:30 to 16:30, in classroom locations in 50+ cities or live online. Participants receive a certificate of completion.

The course is suited to professionals who already work with financial records, controls, audit evidence or misconduct allegations and need a structured method for preventing, detecting and investigating fraud.

What you will be able to do

  • Assess fraud risks using the Fraud Triangle, ACFE Fraud Tree and control mapping
  • Identify financial statement manipulation through ratio analysis, journal testing and revenue review
  • Design transaction tests that detect duplicate payments, abnormal vendors and suspicious expenses
  • Prepare an investigation plan defining allegations, evidence sources, roles and reporting lines
  • Preserve documentary and digital evidence using chain-of-custody and evidence-register procedures
  • Conduct structured investigative interviews using PEACE-based questioning and corroboration methods
  • Quantify suspected fraud losses using transaction reconstruction and financial impact analysis
  • Recommend fraud controls using COSO principles, segregation-of-duties analysis and monitoring rules

Benefits of attending

For you

  • Recognise fraud indicators before losses become material
  • Assess allegations using a documented, proportionate investigation method
  • Test financial transactions with clearer fraud-focused criteria
  • Handle evidence records without weakening later disciplinary action
  • Present fraud findings and control recommendations credibly to management

For your organisation

  • Earlier detection of payment, procurement, payroll and expense fraud
  • More consistent handling of fraud allegations and evidence
  • Better targeted controls based on documented fraud risk scenarios
  • Stronger investigation records for disciplinary, recovery and legal decisions
  • Reduced financial loss from duplicate, fictitious and manipulated transactions

Course modules

10 modules over 5 days

Participants can classify fraud allegations and select an appropriate initial response.

  • Forensic accounting roles in prevention, detection, investigation and dispute support
  • ACFE Fraud Tree classifications for corruption, asset misuse and reporting fraud
  • Fraud Triangle pressures, opportunities and rationalisation within misconduct assessments
  • Distinguishing error, policy breach, control failure and intentional fraud
  • Allegation triage using credibility, materiality, urgency and evidence availability
  • Initial response decisions: containment, confidentiality, escalation and legal consultation

Participants can produce a fraud risk assessment linked to key controls and control gaps.

  • Fraud risk register structure: schemes, perpetrators, controls and residual exposure
  • Process mapping identifies fraud opportunities within procure-to-pay and payroll cycles
  • COSO control principles applied to fraud prevention and detection
  • Segregation-of-duties conflicts assessed through approval, custody and recording responsibilities
  • Control gaps prioritised by likelihood, financial impact and detection difficulty
  • Key risk indicators designed for vendor, employee and payment anomalies

Participants can identify common reporting fraud schemes through analytical review and account testing.

  • Revenue recognition red flags: premature, fictitious and side-agreement sales
  • Expense capitalisation tested against policy, supporting records and accounting treatment
  • Journal entry testing targets unusual users, timing and account combinations
  • Ratio analysis detects implausible margins, receivables, inventory and cash movements
  • Related-party transactions reviewed through ownership, approvals and disclosure evidence
  • Management override indicators examined within estimates, provisions and period-end adjustments

Participants can test procure-to-pay records for common vendor and payment fraud indicators.

  • Vendor master-file review identifies duplicate, fictitious and conflicted suppliers
  • Three-way matching exceptions reveal unsupported purchases and invoice manipulation
  • Duplicate-payment testing compares invoice numbers, amounts, dates and bank accounts
  • Bid-rigging indicators include split orders, repetitive winners and unusual specifications
  • Conflict-of-interest checks connect employees, vendors, addresses and bank details
  • Purchase order amendments tested for post-approval price and quantity changes

Participants can detect employee-focused fraud schemes through targeted record review.

  • Ghost employee tests compare payroll records, identity data and bank accounts
  • Overtime analysis identifies improbable patterns, overrides and unauthorised approvals
  • Expense claim testing targets duplicates, altered receipts and policy circumvention
  • Corporate card reviews identify merchant anomalies, split transactions and personal spending
  • Inventory shrinkage analysis reconciles stock movements, write-offs and physical counts
  • Cash-handling controls examine collections, deposits, refunds and void transactions

Participants can design and document data tests that prioritise suspicious transactions for review.

  • Data acquisition scope defines systems, fields, periods and record custodians
  • Benford's Law screens selected datasets for unusual leading-digit distributions
  • Outlier testing ranks transactions by amount, frequency, timing and user
  • Link analysis connects vendors, employees, addresses, telephone numbers and accounts
  • Stratified sampling separates high-value, high-risk and routine transaction populations
  • Test documentation records objectives, parameters, exceptions and reviewer conclusions

Participants can establish a defensible investigation plan and evidence management process.

  • Investigation scope defines allegations, objectives, periods, entities and decision authority
  • Evidence registers record source, custodian, relevance, handling and storage location
  • Chain-of-custody documentation preserves integrity of physical and digital materials
  • Document preservation notices prevent deletion, alteration and unauthorised disclosure
  • Investigation hypotheses guide evidence collection without assuming guilt prematurely
  • Privilege, confidentiality and data protection issues require appropriate specialist advice

Participants can plan and conduct structured fact-finding interviews supported by corroborating evidence.

  • PEACE interviewing framework structures preparation, engagement, account and evaluation
  • Interview plans sequence background, process, transaction and allegation questions
  • Open questions obtain narratives before introducing documents or contradictions
  • Cognitive interviewing techniques support accurate recall without leading witnesses
  • Document confrontation uses verified evidence, timing and neutral questioning
  • Corroboration matrices compare statements, records, witnesses and digital evidence

Participants can quantify suspected losses and prepare clear investigation findings for decision-makers.

  • Loss calculation separates direct loss, avoided cost, recovery and consequential impact
  • Transaction reconstruction traces funds from source record to recipient account
  • Damages schedules document assumptions, calculations, source records and limitations
  • Investigation reports distinguish facts, inferences, allegations and unresolved matters
  • Finding ratings communicate substantiated, unsubstantiated and inconclusive allegations
  • Remediation actions address control failures, recovery options and disciplinary decisions

Participants can create a practical fraud response and control improvement plan for their organisation.

  • Fraud response protocols assign reporting, escalation, investigation and oversight responsibilities
  • Whistleblowing arrangements protect reporters, preserve confidentiality and prevent retaliation
  • Case lessons translated into preventive, detective and corrective control actions
  • Control owners receive actions, deadlines, evidence requirements and accountability measures
  • Fraud dashboards track allegations, losses, control failures and remediation status
  • Personal application plans identify priority fraud risks and immediate next actions

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Fraud risk assessment register
  2. Fraud allegation triage checklist
  3. Forensic transaction-testing workbook
  4. Investigation planning template
  5. Evidence register and chain-of-custody form
  6. Fraud control remediation plan

Who should attend

  • Internal Auditors — investigate control failures and assess fraud indicators
  • Finance Managers — protect payment, reporting and close processes from manipulation
  • Compliance Officers — manage misconduct allegations and escalation procedures
  • Risk Managers — assess fraud exposures and strengthen preventive controls
  • External Auditors — identify fraud risks and evaluate audit evidence
  • Procurement and Payroll Managers — detect collusion, vendor abuse and employee fraud

Skills and tools covered

Fraud risk assessmentForensic transaction testingEvidence preservationInvestigative interviewingLoss quantificationFraud control design

Tools and standards

ACFE Fraud Tree, COSO Internal Control—Integrated Framework, PEACE Interviewing Framework, Benford's Law

How the course runs

Training methodology

The course uses short instructor briefings to establish methods, followed by case-based analysis of accounting records, fraud scenarios and control failures. Participants work in groups to assess allegations, identify evidence sources, test transactions, plan interviews and recommend corrective controls. Simulations examine investigation decisions, including suspect notification, evidence preservation and reporting escalation. Facilitated discussion compares approaches used in public-sector, banking, NGO and corporate cases. Each participant develops an application plan for a current or anticipated fraud risk.

Requirements and prerequisites

Participants should understand core accounting records, including general ledgers, invoices, purchase orders, payroll reports and bank reconciliations. Experience in finance, audit, compliance, risk, procurement, payroll or investigations is helpful. Participants should be comfortable reading basic financial statements and interpreting transactional data in spreadsheets. Prior fraud investigation experience is not required. The course does not require legal qualifications, digital forensics certification, advanced statistics, coding skills or specialist audit software knowledge. It focuses on financial evidence, investigation structure and fraud control decisions.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need familiarity with basic accounting records and financial transactions. Prior investigation experience, legal training and data analytics expertise are not required.

Bring a laptop if attending in person, as participants may review spreadsheet-based examples and course materials. A current fraud concern or control issue from your workplace can inform the application planning, but no confidential records should be brought to class.

The course is designed for internal audit, finance, compliance, risk, procurement, payroll and external audit professionals. It is particularly useful for staff who may receive, assess or investigate financial misconduct allegations.

Internal audit courses focus on assurance planning and audit execution, while anti-money laundering courses focus on suspicious financial activity and regulatory reporting. This course concentrates on occupational fraud, accounting evidence, investigation methods and control responses.

Participants can use the fraud risk register, allegation triage checklist and transaction-testing workbook to review a live process or suspected issue. The methods also support more consistent escalation, evidence handling and control remediation.

The five days provide about 32.5 contact hours, normally from 08:30 to 16:30. Time is divided between instructor briefings, financial case analysis, group work, interview simulations, transaction testing and application planning.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.