Financial Statement Analysis to Detect Fraud Red Flags: Which Ones Deserve Investigation?

Unusual changes in financial statements are often considered potential signs of fraud. Revenue surging toward the end of the year, a sharp increase in receivables, cash flow failing to keep pace with profit growth, or large related-party transactions can all raise questions.

However, an anomaly is not the same as fraud. Growth in receivables can occur because a company offers longer payment terms.

Margins may also improve due to changes in pricing or production costs. A revenue surge at the end of a reporting period may simply reflect a seasonal business pattern.

For this reason, the purpose of financial statement analysis is not to find a single figure that can "prove" fraud. Instead, analysis is used to identify inconsistencies that have sufficient reason to warrant further examination.

A similar approach is seen in the US PCAOB audit standard AS 2401. Auditors are not directed to treat every unusual change as fraud, but to evaluate analytical relationships, significant unusual transactions, revenue recognition, certain journal entries, and other evidence when such conditions increase the risk of material misstatement due to fraud.

Therefore, a more useful question is not:

"Is this number suspicious?"

but rather:

"Is this change consistent with the business conditions, supported by other evidence, and economically reasonable?"

1. A Single Red Flag Is Rarely Enough: Look for Inconsistencies Across Data

An indicator becomes more relevant when it does not stand alone.

Imagine a company records revenue growth of 25%. That number is not suspicious on its own. However, an analyst may need to look further if during the same period:

The problem is not one particular number, but the relationship between numbers that is difficult to explain by normal business activity.

PCAOB, for example, suggests using more segmented revenue data—by month, product line, or business segment—to find unusual relationships or transactions when there is a risk of improper revenue recognition.

This means fraud analysis should not use the approach:

ratio X above a certain threshold = fraud.

What is more relevant is reading patterns across periods and testing whether those changes align with the company's operational drivers.

2. When Profit and Cash Flow Move in Different Directions

One area worth examining is the relationship between profit and cash flow. A company can report a profit without immediately receiving cash because accounting is based on the accrual method.

Therefore, a difference between net income and operating cash flow is not automatically a red flag. What needs to be analyzed is the pattern and the reasons behind it.

For example, a company reports profit growth over several periods while, at the same time:

Such conditions can have legitimate explanations, such as an expansion of credit sales. However, analysts need to test whether the quality of revenue still aligns with the reported profit figures.

This is why earnings quality is more informative than just the nominal profit. The question is not only whether the company generates profit, but how that profit is formed and to what extent those activities generate cash.

Financial changes should fundamentally be traceable to economic or operational changes.

If revenue increases because sales volume grows, operational data should support that explanation.

If margins increase because raw material prices fall, the change in costs should also be visible in the company's expense structure.

Therefore, one way to look for red flags is to compare financial outcomes with business drivers.

Some example questions that can be used:

If a major change has no clear driver, that condition does not prove fraud.

However, the inability to connect numbers with operational reality is a stronger reason to conduct further examination than simply seeing that a ratio looks "odd."

4. Pay Attention to Significant Unusual Transactions

Not all large transactions are red flags. A company may carry out acquisitions, sell assets, obtain funding, or complete large contracts that are indeed outside routine activities.

What needs attention are significant transactions that are unusual in terms of timing, size, structure, or economic purpose.

PCAOB AS 2401 specifically highlights significant transactions outside the normal course of business or transactions that appear unusual based on their timing, size, or nature.

The standard also asks auditors to understand the business purpose of such transactions and to consider whether overly complex transactions, lack clear economic substance, involve certain related parties, or are carried out near the end of the period need additional attention.

Examples of areas that can be explored further include:

5. Related-Party Transactions Are Not Fraud, but They Require Context

Related-party transactions are a normal part of many business groups.

A company may conduct transactions with a parent company, subsidiary, associate, owner, or another party with a particular relationship. The existence of such transactions does not itself indicate fraud.

However, these relationships matter because transactions between related parties do not always take place under the same conditions as transactions between two independent parties.

IAS 24 specifically requires disclosure of related-party relationships, transactions, and certain balances so that users of financial statements can understand the potential influence of those relationships on the company's financial position and profit or loss.

IFRS also explains that related parties may conduct transactions on terms that might not be given to independent parties.

6. Number Behavior Approaching Period-End Deserves Examination

Changes that occur close to the end of a month, quarter, or year can provide additional insight because that period is directly related to the numbers that will be reported.

For example, an analyst may find a sales spike in the last few days of a period, a sudden increase in receivables, a decrease in liabilities approaching the reporting date, or a large inflow of funds shortly before book closing.

Retail businesses may experience genuinely high year-end sales. Large customers may pay invoices right before the period ends.

Companies may also intentionally settle their obligations before book closing as part of normal cash management.

However, timing provides context.

PCAOB identifies transactions recorded at the end of a reporting period, post-closing entries with limited explanations, revenue transactions occurring near period-end, and transactions conducted before the end of a reporting period and subsequently reversed as areas that may require further examination in the context of fraud risk.

Financial statements do not have to be analyzed in a closed room.

A number becomes far more informative when compared with other data sources. For example:

Financial statements: sales grow significantly. Bank statements: no comparable increase in customer cash flow is visible.

Or:

Financial statements: the receivables balance declines. Transaction data: there is no payment pattern that explains the decline.

Or:

Management report: business volume increases. Invoices or supporting documents: activity does not show an equivalent change.

Differences across sources are not automatically proof of fraud because differences in recording periods, databases, reconciliations, and accounting policies can produce legitimate variations.

However, cross-validation helps determine whether a red flag deserves to be prioritized.

Financial Statement Analysis Starts an Investigation, It Does Not Replace One

Fraud ultimately involves an element of intent, while financial statements primarily show the financial results of a company's activities.

Therefore, financial statements are more appropriately used as a tool for risk identification and investigation prioritization rather than as a tool to conclude that fraud has occurred.

ISA 240 (Revised) from IAASB also maintains a risk-based approach: auditors identify and assess the risks of material misstatement due to fraud, design responses to those risks, consider whether certain misstatements may be indications of fraud, and then obtain and evaluate relevant evidence.

The latest revision of ISA 240 was issued by IAASB in July 2025 with a stronger emphasis on a fraud lens in risk assessment.

With this approach, analysis becomes more disciplined. Organizations do not need to treat every anomaly as fraud, but they also should not ignore changes that are difficult to explain.