Financial Forensics: The Due Diligence Files

In August 2013, the European Commission published a document that changed the risk profile of every subordinated bank bond in the eurozone. Four months and seventeen days later, Slovenia used it to wipe out two thousand retail investors overnight. The document was public. The bank's capital shortfall was documented since 2011. The resolution statute had no pre-execution challenge right. All three were readable before December 2013.

This episode is the due diligence framework a GP or LP should apply to any subordinated bank debt position where the resolution framework, the sovereign's fiscal position, and the bank's capital adequacy combine to create bail-in risk the yield spread does not compensate for.

We cover: the three variables that converged in December 2013 — EU framework, capital shortfall, resolution statute gap — the three diagnostics that identified the bail-in before it was executed — the active red flag in AT1 instruments post-Credit Suisse 2023 — and the four questions any fixed income allocation should answer before taking subordinated bank exposure in any eurozone jurisdiction today.

The Forensic Data Sheet is on Substack. Link in bio.

Every collapse has a pattern. We dissect it. Layer by layer.

In December 2013, the Bank of Slovenia annulled five hundred and eighty-one million euros of subordinated debt overnight. No market event. No default. A regulatory decree — executed before the market opened, without prior legal challenge, without compensation. Two thousand retail investors who had bought bonds at the same counter where they kept their savings lost everything before they could contest it.

🔴 Every corporate failure leaves behind a pattern.

FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

All analysis runs locally and remains private.

⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

This episode dissects the burden-sharing mechanism that used the EU's own state aid framework as the mandate for a loss distribution that served the sovereign's fiscal interests — and how the instrument, the framework, and the legal gap were all in the public record four months before the bail-in was executed.

We cover: why the EU Banking Communication of August 2013 changed the risk profile of every subordinated bank bond in the eurozone — how the Slovenian government used a non-binding policy document as if it were a legal requirement — the NPL concentration that made a third recapitalization inevitable — and why the Slovenian Banking Act's resolution provisions contained no pre-execution challenge right for bondholders — a defect the Constitutional Court confirmed in 2016, three years after the bonds were gone.

The Forensic Data Sheet is on Substack. Link in bio.

Every collapse has a pattern. We dissect it. Layer by layer.

In 2003, every signal that distinguished the Yukos proceedings from a legitimate tax enforcement action was in the public record. The transfer pricing structures being assessed were used by every comparable Russian energy company — and enforced against none of them. The tax court proceedings moved in weeks on claims that normally take eighteen months. The asset freeze on Yuganskneftegaz preceded the final judgment. The auction excluded competitive foreign bidding through informal signals that were reported in real time.

This episode is the due diligence framework a GP or LP should apply to any cross-border position in a jurisdiction where the state retains discretionary enforcement authority — and where the independence of that enforcement from political direction has not been institutionally verified.

We cover: the four-step sequence from retroactive tax assessment to state asset — selectivity, acceleration, pre-judgment freeze, controlled auction — the three signals in the public record that identified the Yukos proceedings as political before the arrest — the arbitration gap between a fifty billion dollar award and zero recovery — and where this exact structure, selective enforcement against a politically exposed controlling shareholder, is running in listed emerging market equities today.

The Forensic Data Sheet is on Substack. Link in bio.

Every collapse has a pattern. We dissect it. Layer by layer.

In October 2003, Russian authorities arrested the richest man in Russia on a Siberian airport tarmac. No expropriation decree. No nationalization law. Just a tax bill — retroactive, accelerated, and precisely targeted at one company while identical conduct at every comparable Russian company went untouched.

This episode dissects the retroactive tax assessment mechanism: how the Russian state used its own legal apparatus to dismantle Yukos, transfer Yuganskneftegaz to Rosneft at a fraction of its value, and produce the largest arbitration award in history — fifty billion dollars — that has not generated a dollar of recovery in twenty years.

Three signals were in the public record before the arrest: Khodorkovsky's escalating political exposure, the selective enforcement pattern visible against sector peers, and an investment thesis built on a rule-of-law assumption that had never been tested at scale. Each one was available to any institutional investor with Russian equity exposure.

The Yukos case is not a Russian story. It is the operating manual for selective enforcement in any market where the state retains discretionary authority over tax, licensing, or regulatory compliance — and where the enforcement apparatus does not operate independently of political direction.

Mechanism: Selective enforcement as expropriation — legal form, political function.

Financial Forensics Labs — EP45 T1

#PoliticalRisk #EmergingMarkets #CorporateGovernance #Yukos #Russia #FinancialForensics #InstitutionalInvesting #Expropriation #EnergyMarkets #FinancialAutopsy

In 2009, Satyam's balance sheet showed over one billion dollars in cash. The auditor had signed. The confirmations had been received. None of it was real — and three signals in the public filings identified the gap before Raju wrote the confession email.

This episode is the due diligence framework a GP or LP should apply to any emerging market position where promoter alignment is a stated thesis — and where the promoter shareholding is the primary indicator of founder commitment to minority investors.

🔴 Every corporate failure leaves behind a pattern.

FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

All analysis runs locally and remains private.

⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

We cover: the cash-to-operations divergence that a company with a billion in treasury doesn't exhibit — the promoter shareholding stability pattern that was inconsistent with Raju's actual borrowing activity — the auditor structure that sent confirmation requests through channels the company could influence — and where this exact mechanism — pledged promoter shares undisclosed, balance sheet inflated to support the collateral value — is running in listed emerging market companies today.

The Forensic Data Sheet is on Substack. Link in bio.

Every collapse has a pattern. We dissect it. Layer by layer.

In January 2009, Ramalinga Raju sent his board an email before the market opened. One billion dollars on the balance sheet didn't exist. The promoter shareholding had been overstated for years. Not one fraud — two, running in parallel, in the same company, funding each other.

🔴 Every corporate failure leaves behind a pattern.

FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

All analysis runs locally and remains private.

⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

This episode dissects the promoter control mechanism that allowed a founder to fabricate both the financial statements and the ownership register simultaneously — while two Big Four auditors signed, while the World Bank kept him on its advisory panel, and while institutional investors held the stock in emerging market growth funds.

We cover: how fictitious fixed deposits and forged bank confirmation letters held together a balance sheet for years — why the cash fraud and the share pledge concealment were structurally dependent on each other — the Maytas acquisition attempt that broke the mechanism in a single afternoon — and the three signals in the public record that any institutional investor had access to before the email arrived.

The Forensic Data Sheet is on Substack. Link in bio.

Every collapse has a pattern. We dissect it. Layer by layer.

HealthSouth's $2.7 billion earnings fraud didn't run through one bad actor. It ran through five consecutive CFOs, a finance department with its own internal vocabulary for fabrication, and an organizational culture where the tolerance for unwelcome numbers had been systematically eliminated.

🔴 Every corporate failure leaves behind a pattern.

FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

All analysis runs locally and remains private.

⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

This episode dissects the tone at the top mechanism for GPs and LPs: how to identify when a finance function has been captured by the CEO's earnings expectations, the three quantifiable red flags that were in the public filings before the FBI arrived — earnings variance anomaly, cash flow divergence, and auditor tenure erosion — and the three operational tests applicable to any portfolio company or pre-investment diligence process today.

Mechanism: Earnings target → the hole → journal entries. Organizational capture, not accounting complexity.

Financial Forensics Labs — EP43 T2 │ GP/LP Analysis

#DueDiligence #CorporateGovernance #EarningsManagement #PrivateEquity #FinancialForensics #ToneAtTheTop #AccountingFraud #HealthSouth #InstitutionalInvesting #CFO

In 2003, five consecutive CFOs of the same public company admitted to fabricating earnings — not one rogue accountant, not one bad quarter covered up. Five chief financial officers, in sequence, each handed the same instruction on their first week: the number is already decided. Your job is to make the books match it.

🔴 Every corporate failure leaves behind a pattern.

FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

All analysis runs locally and remains private.

⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

This episode dissects the multi-CFO complicity chain at HealthSouth: how Richard Scrushy converted the finance function into a production department, how the hole and the target became ordinary operational vocabulary, and how a $2.7 billion fraud ran for six years while Ernst & Young signed every annual opinion.

The first CEO prosecuted under Sarbanes-Oxley. Acquitted. Fifteen of his executives pleaded guilty.

Financial Forensics Labs — EP43 T1

#CorporateGovernance #AccountingFraud #HealthSouth #Sarbanes-Oxley #FinancialForensics #EarningsFabrication #CFO #WhiteCollarCrime #FinancialAutopsy

In 2002, Tyco International's CEO extracted $400 million from a Fortune 500 company using a mechanism the compensation committee authorized, the auditors reviewed, and the board approved — for six consecutive years.

🔴 Every corporate failure leaves behind a pattern.

FFL Risk Pattern Scan provides access to a searchable library of documented corporate collapses, frauds and restructurings that can be filtered by geography, sector, collapse mechanism and fraud vector.

Compare live opportunities against historical cases using pattern matching and risk assessment tools designed for investors, lenders and deal teams.

All analysis runs locally and remains private.

⁠⁠⁠⁠⁠https://risk-pattern-scan.lovable.app/⁠⁠

This episode dissects the executive loan forgiveness mechanism: how Dennis Kozlowski used Tyco's Key Employee Loan Program as a personal extraction instrument, how the compensation committee lost substantive independence while maintaining formal compliance, and why the audit trail was clean while the fraud ran.

For GPs and LPs: the three red flags that were in the proxy statements before the investigation opened — nomination history analysis, peer compensation benchmarking, and the absence of documented committee friction — and the active signal in private equity portfolio companies where compensation governance captures the same structure today.

Mechanism: Compensation committee capture via loan forgiveness authorization.Sarbanes-Oxley Section 402 — the executive loan prohibition — is Tyco's mechanism, translated directly into law.

Financial Forensics Labs — EP42 T2 │ GP/LP Analysis

#CorporateGovernance #ExecutiveCompensation #PrivateEquity #DueDiligence #FinancialFraud #Tyco #SarbanesOxley #BoardGovernance #InstitutionalInvesting #FinancialForensics

In 2001, three signals in WorldCom's public filings identified the fraud before any regulator, analyst, or auditor acted on it. Capital expenditure growth moving opposite to every telecom peer. A line cost ratio holding flat with statistical precision across quarters where every market variable should have produced volatility. Cash flow payments going to other carriers — consistent with operating expenses, not capital investment.

🔴 FFL Case Library is Live

The FFL Case Library is now fully populated with eighty historic forensic frameworks. completely offline, zero cloud, zero NDA exposure.

Run your deals against the pattern database

All Info is in the Link

[⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://sergiostieben.gumroad.com/l/wqyicc⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠]

This episode is the due diligence framework a GP or LP should apply to any company whose reported earnings depend on a cost ratio management monitors closely — and whose capex growth cannot be explained by visible operational investment.

We cover: the acquisition currency dependency that made WorldCom's stock price a prerequisite for its business model — the moment the Sprint merger died and the organic business couldn't sustain the growth rate the multiple implied — the specific mechanism Scott Sullivan used to move $3.8 billion in line costs off the income statement — the three diagnostic ratios that identified the fraud from the public 10-Q — and why Arthur Andersen signed off while the board approved $400 million in personal loans to Ebbers.

Plus the active signal: where this exact structure — auditor capture plus board conflict of interest plus a key ratio managed to a target — is running in public markets today.

The Forensic Data Sheet is on Substack. Link in bio.

Every collapse has a pattern. We dissect it. Layer by layer.