Financial Forensics: The Due Diligence Files

Financial Forensics: The Due Diligence Files

By Sergio StiebenBusinessManagement
Download on the App Store

Financial Forensics: The Due Diligence Files episodes

  • Luckin Coffee 2020 : VIE Audit Gap & Circular Related-Party Revenue Fabrication | GP/LP Analysis - 3 Red Flags | EP56 T2

    .This GP/LP technical episode dissects the two-database architecture in full detail — how the operations team maintained one database with real transactions and a second with fabricated ones on top, and why EY Hua Ming's audit process could only review the second. We analyze the three simultaneous fraud channels and their mechanics, the expense inflation that completed the internal consistency of the fabricated income statement,

    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠

    erates through a structure that creates a specific, permanent gap between the financial statements an investor reviews and the operational reality those statements are supposed to reflect. The VIE structure is that gap, formalized into legal architecture. Luckin Coffee's $310 million revenue fabrication is the answer to what that gap looks like when management decides to use itand the WhatsApp message record and internal email chain that documented the execution in real time. We identify three institutional-grade red flags with specific document sources and actionable signals: (1) per-store productivity decomposition — separating same-store performance from new store drag using Luckin's own quarterly disclosures, the specific arithmetic that exposed the inconsistency, (2) related-party corporate voucher analysis — how to identify undisclosed related parties in a material new revenue line, and the specific due diligence request that would have surfaced the Lu-connected buyers, and (3) PCAOB inspection status of the specific China-affiliate auditor — the difference between an EY opinion from a PCAOB-inspectable entity and one from a China-affiliate pre-2022, and what that difference means for how you weight the opinion. We provide the active market context: the HFCAA framework post-2022, current PCAOB access status for major Chinese-affiliate auditors, and which VIE-structure sectors retain elevated verification risk. For institutional equity allocators, hedge fund analysts, emerging market fund managers, and anyone conducting due diligence on US-listed Chinese companies.Financial Forensics Labs — Every collapse has a pattern. We dissect it. Layer by layer.KEYWORDS Luckin Coffee VIE structure analysis, VIE audit gap institutional investor, PCAOB China audit inspection risk, Luckin Coffee revenue fabrication mechanism, Chinese company due diligence, circular revenue fraud mechanism, related party transaction detection, US listed Chinese equities due diligence, EY Hua Ming audit independence, Luckin Coffee red flags analysis, HFCAA framework risk, per store productivity decomposition, China VIE structure risk, emerging market equity fraud, Nasdaq China company verification


    17 min
  • Luckin Coffee 2020 : 1,418 Investigators. 11,000 Hours of Video Surveillance. One Database Nasdaq Never Saw — EP56 T1

    It took ninety-two full-time investigators, fourteen hundred part-time staff, six hundred and twenty stores, and eleven thousand hours of video surveillance to prove that a publicly listed company was lying about how many cups of coffee it was selling. On April 2, 2020, Luckin Coffee admitted that its COO and his team had fabricated $310 million in revenue. The stock fell 81% in a single day. This is the financial autopsy of Luckin Coffee — and the circular related-party revenue fabrication that turned a two-year-old Chinese startup into a $12 billion Nasdaq darling, and then into the case that showed every institutional investor what the VIE structure's audit gap actually looks like when it is used intentionally. We trace the full architecture of the fraud: the two-database system — one with real transactions, one with fabricated ones, and how the finance department and EY Hua Ming only ever saw the second.

    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠

    We explain the three simultaneous revenue channels: employee-funded fake transactions, related-party corporate voucher circular purchases through shell companies connected to Chairman Charles Lu, and the expense inflation that made the fabricated revenue margins look operationally consistent. We walk through the Muddy Waters 89-page short report, how the anonymous research entity deployed fifteen hundred investigators across China, and why the surveillance count of items sold per store was roughly 60% of what Luckin was reporting to investors. We cover the $180M SEC settlement, the Nasdaq delisting, and the subsequent financial restructuring. If you hold US-listed Chinese equities, allocate to emerging market equity, or evaluate companies with VIE structures, this is the episode that explains the specific audit gap you are relying on your auditor to close — and why they structurally cannot. Financial Forensics Labs — Every collapse has a pattern. We dissect it. Layer by layer.

    KEYWORDS Luckin Coffee fraud 2020, VIE structure audit gap, Chinese company fraud Nasdaq, Luckin Coffee SEC settlement, Muddy Waters Luckin Coffee, Chinese company short seller fraud, PCAOB China audit inspection, EY Hua Ming audit failure, Luckin COO fraud, Chinese startup fraud, revenue fabrication mechanism, related party circular transactions, US listed Chinese equities risk, VIE structure risk, Nasdaq China fraud

    16 min
  • Carbon Credit Fraud 2024: Certification Capture & Unobservable Asset Verification Failure | GP/LP Analysis - 3 Red Flags | EP55 T2

    This GP/LP technical episode dissects the structural conflict embedded in the voluntary carbon credit market's economics: the project developer pays the certifier, the certifier's revenue depends on issuing certifications, the registry generates fee income from listings, and the buyer has a compliance need the credit satisfies regardless of whether the underlying reduction was real. We analyze the CQC enforcement documents — CFTC order and DOJ indictment — in full technical detail: the dual-database architecture, the training manual's explicit instruction to "cover up" non-operational stoves, the WhatsApp message record, and the four-year concealment timeline. We identify three institutional-grade red flags with specific document sources and actionable signals:


    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠⁠


    A voluntary carbon credit is not a financial asset in the conventional sense. It is a certification that a specific quantity of carbon reduction occurred — and the certification's entire value rests on the independence and integrity of the chain that connects what supposedly happened in a rural household in Malawi to the instrument a corporate treasury in Frankfurt is booking against its net-zero commitment. (1) payment flow mapping through the certification chain — who paid each verifier and whether that creates an independence problem, (2) the observability test — technology deployment credits versus counterfactual-modeled avoided deforestation credits, and (3) registry independence analysis against disclosed fee structures. We provide the active market context: ICIC Core Carbon Principles framework rollout in 2024–2026, which credit categories retain the structural conflict, and how to apply source independence principles to any carbon position. For institutional ESG allocators, corporate sustainability officers, fund managers with carbon exposure, and any GP conducting due diligence on project developers or registries. Financial Forensics Labs — Every collapse has a pattern. We dissect it. Layer by layer.

    KEYWORDS carbon credit fraud GP LP analysis, voluntary carbon market due diligence, carbon credit certification capture, Verra verification independence, CQC CFTC enforcement analysis, carbon offset red flags, ESG asset verification, carbon credit source independence, ICIC Core Carbon Principles, additionality verification fraud, carbon registry conflict of interest, net zero due diligence, carbon credit institutional risk, project developer due diligence, voluntary carbon market integrity

    17 min
  • Carbon Credit Fraud 2024 : Six Million Fake Credits. The DOJ Called It Fraud. The Registry Called It Verified — EP55 T1

    In October 2024, the DOJ, CFTC, and SEC filed simultaneous charges against CQC Impact Investors. The allegation: six million fraudulent carbon credits, sold to BP and Shell, backed by cookstoves in rural Malawi and Zambia that were broken, abandoned, or never installed. The internal email that summarized the situation: actual emissions reductions were roughly half of what CQC had promised. The CEO's response: "This is a disaster for us." His team's solution: revise the survey results. They did. For four years. This is the financial autopsy of the voluntary carbon credit market — and the certification capture mechanism that allowed millions of fraudulent credits to reach institutional buyers while every verification body in the chain was paid by the entity it was verifying. We dissect the three-channel fraud architecture: employee-funded fake transactions, related-party corporate voucher circular purchases, and the training manual that explicitly instructed staff to find operational stoves to "compensate and cover up" for non-operational ones. We explain why Verra — which certifies three quarters of all voluntary carbon credits on the planet — processed the claims and issued the credits.


    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠⁠⁠

    We cover the Guardian's January 2023 investigation finding that 90% of Verra's rainforest credits showed no evidence of genuine reforestation reduction, and the University of Cambridge analysis showing forests were overstated as threatened by 400%. We trace the CQC collapse fromthe British documentary crew in Malawi to the voluntary DOJdisclosure. If you hold carbon credits in any capacity — as an ESG asset, a compliance offset, a corporate sustainability instrument, or an equity position in a project developer — this is the episode that explains what you are actually holding and what the certification is and is not. Financial Forensics Labs — Every collapse has a pattern. We dissect it. Layer by layer.Keywords: carbon credit fraud, CQC Impact Investors DOJ, voluntary carbon market fraud, Verra carbon credits investigation, cookstove carbon credit fraud, CFTC carbon credit enforcement, carbon offset fraud 2024, ESG fraud, net zero fraud, carbon certification capture, Verra rainforest credits investigation, Guardian carbon credit investigation, carbon credit due diligence, BP Shell carbon credits fraud, voluntary carbon market integrity

    17 min
  • Abraaj Group 2018: LP Capital Commingling & GP Working Capital Misappropriation | GP/LP Analysis — 3 Red Flags | EP54 T2

    This .GP/LP technical episode dissects the two-entity architecture of private equity — fund vehicle versus management entity — and explains precisely how the gap between fund-level reporting and GP-level financial reality enabled Abraaj's commingling. We analyze the SEC amended complaint line by line: Naqvi's personal signatory authority, the $100M March 2017 transfer, the internal email that used the word "taken," and the instruction to manage the next reporting cycle. We walk through the concealment loop mechanics in full technical detail — how borrowed third-party capital inflated the fund balance on statement date and disappeared afterward. We identify three institutional-grade red flags with specific document sources and actionable signals: (1) deployment velocity decomposition against the disclosed project pipeline, (2) the KPMG simultaneous audit conflict — same firm auditing GP entity and fund — and (3) the structural absence of GP-level financial disclosure in the LP reporting package. We provide the active market context: mid-size GP fee compression in 2024–2026 and which fund structures currently carry the same structural condition that produced Abraaj. For GPs, LPs, fund of funds managers, institutional allocators, and anyone conducting PE operational due diligence


    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠⁠⁠

    he LPA's cash management discretion clause is a legitimate operational provision. It is not authorization for the GP to transfer LP capital to its own operating accounts to cover expenses unrelated to the fund's investment mandate. At Abraaj, that clause was the mechanism of a three-year fraud that drained $230 million from a Bill and Melinda Gates Foundation-backed healthcare fund . Financial Forensics Labs — Every collapse has a pattern. We dissect it. Layer by layer.

    KEYWORDS Abraaj Group GP LP analysis, LP capital misappropriation, PE fund governance red flags, private equity due diligence, GP balance sheet disclosure, LPA cash management clause, fund commingling mechanism, Abraaj SEC complaint, Abraaj DFSA enforcement, emerging market PE risk, GP insolvency risk, management entity audit, impact investing governance, PE operational due diligence, fund fiduciary breach

    16 min
  • Abraaj Group 2018 : $13.6 Billion. The Middle East's Biggest PE Firm. LP Capital Used to Pay the GP's Grocery Bills — EP54 T1

    In January 2018, Arif Naqvi was on stage at Davos with Bill Gates. Eight days later, forensic accountants were looking for $230 million in LP capital that had vanished from a healthcare fund. This is the financial autopsy of Abraaj Group — the largest private equity collapse in emerging markets history. In this episode, we dissect the LP capital commingling mechanism that turned a ring-fenced healthcare fund into a corporate treasury for the GP's own operating expenses. We trace how $310 million in called LP capital was transferred from fund accounts to Abraaj Investment Management Limited to cover salaries, advisory fees, and the personal obligations of founder Arif Naqvi. We explain the concealment loop: how Abraaj borrowed money from third parties before each reporting period to temporarily inflate the fund bank balance for the financial statements, then returned the borrowed cash after the statements were signed — leaving the fund short again. We document the three signals that were in the public record before the June 2018 liquidation: the deployment lag against the disclosed pipeline, the KPMG conflict of interest, and the absence of a consolidated GP balance sheet in any LP disclosure. We cover the SEC enforcement action, the DFSA's $315M fine, Naqvi's extradition proceedings, and the Hamid Jafar loan that became a criminal case in Sharjah


    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠⁠⁠⁠


    . If you invest in private equity, manage LP relationships, or analyze PE fund governance, this is the episode that explains how the LPA's cash management discretion clause becomes the mechanism of extraction when a GP is insolvent and no one is auditing the management entity. Financial Forensics Labs — Every collapse has a pattern. We dissect it. Layer by layer.KEYWORDS Abraaj Group collapse, Arif Naqvi fraud, LP capital commingling, PE fund fraud, private equity governance, emerging markets PE, impact investing fraud, Gates Foundation fraud, IFC investment fraud, Abraaj SEC enforce management

    15 min
  • Peregrine Financial 2012 : Bank Statement Fabrication & Source Independence Failure │GP/LP Analysis - 3 Red Flags│EP53 T2

    The NFA staff who examined Peregrine Financial Group for twenty years were not negligent. They followed the procedures. The procedures were wrong — not because they were badly designed for the risks they were modeling, but because they were not designed to detect the specific risk that Wasendorf exploited: fabrication of the documents that the verification process treated as evidence. A verification system that reviews documents provided by the regulated entity can confirm internal consistency. It cannot confirm accuracy.

    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

    Those are different properties. A fraudster optimizes for the first — matching the false balance on the statement to the false balance in the report — while the real account sits at a different number at the actual bank. This episode builds the source independence framework for custody verification: the minimum condition that at least one critical input comes from a source the verified entity cannot control, how that principle applies across prime brokerage relationships, futures commission merchants, and fund of funds structures, and why the standard ODD questionnaire — regulatory registration, capital adequacy, audit opinion — confirms the architecture without testing whether the architecture is performing its function. Three features of Peregrine's structure that elevated the fabrication risk before 2012: the founder's unilateral control over both the segregated account and the compliance documentation, the paper-based confirmation process as a known post-MF Global regulatory vulnerability, and the gap between the firm's visible business profile and the reported segregated fund balance it maintained. All observable. All askable. The question that closes the gap has one word in it: independent.

    16 min
  • Peregrine Financial 2012 : He Faked the Bank Statements for 20 Years. The Regulator Never Called the Bank — EP53 T1

    In July 2012, Russell Wasendorf Senior sat in his car with a confession in his pocket. It began: "I have committed fraud. For this I feel constant and intense guilt." The fraud had been running for twenty years. Two hundred million dollars in client funds were missing. The mechanism was a scanner, Microsoft Paint, and a post office box he had rented under a name that resembled US Bank's address — so that any NFA correspondence directed to the bank would be intercepted by him before it arrived. The National Futures Association examined Peregrine Financial Group regularly for two decades. Two hundred sequential examinations. Each one reviewed the bank statements Wasendorf provided and confirmed the reported balance matched the statement

    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠

    Each confirmation was accurate — the two numbers matched, because Wasendorf had set both of them. Neither number was real. The fraud ended in forty-eight hours when the NFA migrated to electronic verification and sent a balance request directly to US Bank through a channel Wasendorf could not intercept. US Bank responded with the real balance: approximately five million dollars. The segregation report showed approximately two hundred and twenty million. This episode dissects the simplest version of a principle that runs through the Allied Irish Banks and MF Global episodes: a verification process that accepts evidence from the entity being verified cannot detect fabrication by that entity. The complexity of the fraud is irrelevant. What matters is whether the verifier controls at least one input the fraudster cannot.

    16 min
  • MF Global 2011 : Rehypothecation Under Liquidity Stress & The Conditional Custody Guarantee │GP/LP Analysis - 3 Red Flags│EP52 T2

    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

    A custody guarantee is unconditional in the regulatory disclosure. It is conditional in practice — conditional on the firm's internal treasury not using the segregated pool as an intraday liquidity resource, on the jurisdictional rules governing each account actually prohibiting rehypothecation, and on the firm's leverage structure not creating a scenario where house capital is exhausted before margin obligations are met. MF Global's clients received an accurate regulatory disclosure. The conditionality was not in the disclosure. It was in the treasury practices, the jurisdictional structure, and the leverage arithmetic — all of which were either disclosed or askable before October 2011. This episode builds the operational due diligence framework for custody arrangements with broker-dealers: the three questions the standard ODD questionnaire doesn't ask — intraday transfer policy, jurisdictional allocation of client funds and the specific rules in each, and the leverage stress scenario under which house capital is exhausted — and the three features of MF Global's structure that were in the public record before the collapse: the repo-to-maturity notional against firm equity in the SEC 10-Q, the Moody's downgrade trajectory and its repo market access implication, and the CFTC's own 2010–2011 examination priorities flagging intraday segregation practices as an active regulatory concern. The distinction that defines the lesson: a conditional custody guarantee and an unconditional one are operationally identical under normal conditions. The difference only appears under the specific stress scenario that MF Global created by design and triggered by accident.

    16 min
  • MF Global 2011 : $1.6 Billion in Client Funds Went Missing. Nobody Decided to Take It. That Was the Problem — EP52 T1

    In October 2011, MF Global filed for bankruptcy with $1.6 billion in client funds missing. It was the eighth largest bankruptcy in US history. The funds were not stolen in the way Madoff stole. They were used — as collateral, to cover margin calls, through intraday transfers from the segregated pool that were supposed to be reversed before close of business and were not, because the firm capital that was supposed to fund the reversals did not arrive. Each transfer was individually justified as temporary. Collectively, they produced a permanent shortfall. Jon Corzine was former CEO of Goldman Sachs, former Governor and Senator of New Jersey. MF Global was a regulated broker-dealer.

    🔴 Every corporate failure leaves behind a pattern.

    FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

    Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

    All analysis runs locally and remains private.

    ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠


    The European sovereign bonds at the center of the position — six point three billion dollars in Italian, Spanish, and Portuguese debt financed through repo-to-maturity — were disclosed in the SEC filings. The position was not secret. The leverage was not hidden. The funding cliff it created when the repo market closed was not modeled. This episode dissects the rehypothecation mechanism: the repo-to-maturity structure and its off-balance-sheet accounting treatment, the intraday transfer practice that made the segregated pool a conditional liquidity resource, the jurisdictional split between US and UK client money rules, and how the combination of those three features made the custody guarantee conditional on conditions that failed in the same week. 

    15 min

About Financial Forensics: The Due Diligence Files

From the publisher's feed

Forensic dissection of capital markets collapses.