Computer Forensics: An Important Tool for Uncovering Fraud

In a world so dependent on technology, it is becoming more important than ever for computers to be investigated as part of accounting fraud cases. It may be obvious to assume that when looking at a hard drive, an investigator will be able to see the files saved on the computer. However, there is much more value to performing a computer forensic investigation than the aforementioned.

Someone committing fraud might believe they are savvy enough to know how to delete all electronic evidence that could possibly be found on their computer. However, despite deleting files and emptying the recycling bin, most files are still located somewhere on the hard drive. Using specially programmed computer forensic software, like EnCase ® and FTK , a trained computer forensic investigator can uncover these deleted files. A computer forensic investigation can identify the content of these deleted files and use them as evidence in a case; often these deleted files are the most valuable, as the perpetrator was trying to delete these for a reason.

Additionally, by using computer forensic software, an investigator can recover a file’s metadata, such as the created, last written, and last accessed dates. This type of data can be used to prove or disprove a suspect’s claim regarding evidence found on the hard drive.

Not only can computer forensic investigators uncover deleted files, but they can also unearth Internet search history and previously sent and received emails. These items can be particularly useful in building a case against a suspect. By producing proof that a suspect searched for certain keywords, or by recovering an incriminating e-mail, computer forensic investigations can provide key evidence for a case.

Computer forensics can assist in other areas of an investigation. When investigating the files on a hard drive, an investigator can pick up clues for other investigators. When looking through emails, there may be indicators to bank accounts or other names associated with the perpetrator, leading to a break in the case.

Computer forensic investigators can also work hand-in-hand with forensic accountants from the start of an investigation. Forensic accountants can give computer forensic investigators specific keywords to search for on a hard drive, saving time and effort. Likewise, a computer forensic investigator may reveal clues that forensic accountants can use to further an investigation. For example, if financial statement fraud is being committed, there might be emails that explain how the perpetrator planned on committing the fraud. This synergistic relationship can be crucial to solving many different types of fraud, such as embezzlement, extortion, and credit card frauds.

In today’s technologically saturated world, digital evidence has never been more important. By recovering deleted files and creating helpful synergy and collaboration, computer forensic examiners will continue to provide key evidence for many cases.

If you have any questions or would like to speak with one of our fraud specialists, fill in the form below and we will be in touch.