Auditors and Securities Fraud Gatekeepers: When the Audit File Invents the Audit

Auditors and securities fraud gatekeepers test the information investors rely on, but the audit file itself can become part of the deception. A workpaper says a partner reviewed the evidence. A confirmation appears to come from an independent source. An approval says the questions were resolved. If you know the review never happened, the confirmation changed or the questions remained unanswered, you know something the finished report leaves out.

This page follows the work behind an audit opinion, from the company’s books to the evidence, approvals and representations that support it. For someone working in audit or compliance, we also address how your role and the way you learned about the conduct affect a whistleblower case with you.

The Records Behind an Auditor’s Sign-Off

Securities fraud gatekeepers include external auditors, engagement quality reviewers and audit committees, with valuation specialists checking investment values. The reporting chain begins with transactions and accounting entries, then moves through estimates, the financial close and the statements investors see. Management prepares the reports, the chief executive and chief financial officers certify them, and the audit committee oversees the external auditor. The records behind those numbers include contracts, ledgers, reconciliations, report drafts, committee minutes and audit workpapers.

The auditor’s job is to obtain reasonable assurance that the financial statements are free of material misstatements caused by error or fraud. That requires evidence: testing journal entries, examining estimates and unusual transactions, and considering whether management bypassed controls. The Public Company Accounting Oversight Board’s auditing standards make those procedures part of the work. For an insider, the useful comparison is between the procedure recorded and the procedure actually performed.

Independence matters inside that process. An engagement quality reviewer evaluates the audit team’s significant judgments and conclusions before approving issuance of the report. The BF Borgers order describes that separate review as a safeguard meant to catch significant deficiencies. A reviewer’s name on a form carries a claim about work someone actually did.

Who Oversees Auditors?

The Public Company Accounting Oversight Board registers, inspects and disciplines covered audit firms, while the Securities and Exchange Commission has its own oversight and securities-enforcement responsibilities. Inside the public company, the audit committee oversees the external auditor and establishes procedures for accounting complaints. Committee minutes, retained complaints and communications with the audit firm can show what reached that oversight body and how it responded.

An inspection examines the quality of professional work. An enforcement proceeding identifies the conduct and violations the agency pursued. The language of the complaint or order matters because the examples below concern different conduct: allegedly fabricated audit work at BF Borgers, admitted audit failures at BDO, and admitted integrity failures at Ernst & Young.

BF Borgers and the Reviews That Existed on Paper

The Securities and Exchange Commission alleged that BF Borgers copied workpapers from earlier engagements, changed the dates and represented that audit procedures and approvals had occurred. Its May 2024 order describes a planning-meeting form rolled forward from the prior period with a new date, even though the meeting never happened. Another form carried forward check marks and inserted the engagement partner’s and quality reviewer’s names on signature lines.

The electronic record allegedly repeated the fiction. According to the order, the firm’s owner instructed a staff member to sign off on workpapers using usernames that made the approvals appear to come from different reviewers. If an audit file credits you with work you never performed, the signature history and instructions behind it are central to the story. In the SEC’s account, we get a quality review by typing a name.

The order says the failure to obtain required engagement quality review affected audits and reviews incorporated in at least 1,625 public filings and disclosures from January 2021 through June 2023. That count covers uses of the firm’s work across annual reports, quarterly reports, registration statements and other disclosures. The Commission’s fraud allegations concern audit reports that claimed compliance with standards despite the work and approvals it said were missing.

BDO Demanded an Investigation, Then Signed Anyway

BDO admitted facts about its handling of an unexplained $2.3 million purported bank deposit at General Employment Enterprises, a staffing company. The money represented approximately half the company’s assets and substantially all its cash. In the Securities and Exchange Commission’s account of the admitted conduct, BDO learned that a bank employee said there was no record of the certificate of deposit, while management and board members supplied conflicting explanations.

Replacement deposits then arrived from entities unaffiliated with the bank. BDO escalated the issue to senior partners, including its national accounting and SEC practice directors, and sent a letter demanding an independent investigation overseen by the audit committee. It later withdrew that demand without receiving a reasonable explanation and issued unqualified opinions on the company’s financial statements, presenting them as fairly stated.

The BDO order also describes a partner’s email stressing the approaching filing deadline. Partners later agreed to drop the investigation demand if the company disclosed certain weaknesses in its controls and met other conditions, despite unanswered questions about the money. For someone inside an audit firm, the demand letter, consultation notes and decision to sign show what the firm knew and what it chose to accept. The questions survived. The investigation did not.

Ernst & Young and the Ethics Answers Passed Around

Ernst & Young admitted that audit professionals cheated on ethics examinations and other courses required to obtain or maintain their accounting licenses. Its June 2022 Securities and Exchange Commission order describes employees using and sharing answer keys.

The firm’s response to the Securities and Exchange Commission made this more than an examination-cheating story. On the day the agency requested information about cheating complaints, EY received a tip about an employee sharing an ethics-exam answer key. EY nevertheless submitted a response indicating it had no current cheating issues, and admitted that it left the response uncorrected even after its internal investigation confirmed cheating.

EY agreed to a $100 million civil penalty. The Commission’s proceeding addressed integrity, professional conduct and the firm’s quality controls. An employee who saw the tip arrive and the regulatory response go out could identify the contradiction at the heart of that admitted conduct.

When the Evidence Sent to the Auditor Changes

The Securities and Exchange Commission’s civil complaint against two former Celadon executives alleged that they hid a contract governing truck swaps while portraying the purchases and sales as separate transactions at market prices. The auditor had asked for the agreements. The executives allegedly withheld the contract and supplied representations that concealed the connection between the deals.

That is why side agreements kept out of the accounting review matter. In the Celadon complaint, the allegedly inflated swap prices supported inflated truck values on the company’s books. The contract could change the meaning of the transactions the auditor was being asked to accept.

At Infinity Q, the Securities and Exchange Commission alleged that the founder and former chief investment officer changed trade documents after positions were selected for independent valuation. Its civil complaint describes an original term sheet removed from the auditor’s client portal and replaced with a forged version. The auditor noticed the replacement and asked about it. According to the complaint, the executive answered:

The alleged change altered the terms used to value the investment. In another example in the same complaint, the auditor passed an altered term sheet to its valuation expert, who then calculated a value close to Infinity Q’s. An independent calculation can still depend on an input someone changed. The original trade confirmation, replacement file and portal history show where that interference occurred.

What Is Whistleblowing in Accounting?

Whistleblowing in accounting brings suspected misconduct in the books, financial reporting or audit work to someone able to act on it. An accountant may understand why an entry moved, which agreement was withheld or why an approval could not have been genuine. Those details connect a suspicious number to the decisions behind it.

A study in the Journal of Forensic & Investigative Accounting, The Significance of Whistleblowing as an Anti-Fraud Measure, examined occupational-fraud survey data collected by the Association of Certified Fraud Examiners. Published in 2018, it found that whistleblowers detected 35.9% of the 4,943 frauds with complete data, compared with 21.4% detected through internal controls. The study also found that whistleblowing became more likely to be the detection method as more people participated in the fraud.

An SEC award order from August 2025 describes a principal restricting financial information so that employees individually lacked the full picture. Whistleblowers combined their knowledge, interviews and documents to expose misrepresentations about an investment project. Based on collections at the time, their joint award totaled more than $4.5 million across the SEC action and a related action. Their contribution was the connection between pieces of the business that management had kept apart.

For audit and compliance professionals, we work through the role, information source and award questions with you. Eligible SEC whistleblowers can share 10% to 30% of qualifying monetary sanctions collected. Where the conduct also involves fraud against government money, a separate whistleblower program may matter: a whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

When the Audit Record Is False

If you know how a sign-off, confirmation or audit response became false, speak with our whistleblower experts about the work behind it. We build the case with you around the original records, the decisions inside the firm and the information investors received. We bring in securities fraud whistleblower lawyers who understand audit evidence and stay beside you through the process.