Case Studies
This hub article surveys landmark and recent financial-fraud cases, each summarised with the detection or forensic-accounting angle that exposed it and its ultimate outcome. Cases are grouped into classic matters that shaped the profession and its laws, and recent matters (2020–2025) spanning corporate, crypto, and family-office fraud. Each entry links to the technique pages most relevant to how it was detected or proven. Figures are stated as reported in the source briefs; several carry corrections noted below to avoid the commonly repeated overstatements.
1 Summary table
| Case | Year | Approx. amount | Detection / forensic angle | Outcome |
|---|---|---|---|---|
| Al Capone | 1931 | ~$60M/yr income | Net-worth / indirect method (IRS Intelligence Unit) | Convicted; 11 years |
| Enron | 2001 | Off-balance-sheet SPEs | Financial-statement fraud; hidden debt | Bankruptcy; SOX 2002; Andersen collapsed |
| WorldCom | 2002 | ~$3.85B (later >$11B) | Internal audit; capitalised expenses | Bankruptcy; Sullivan pleaded guilty |
| HealthSouth | 2003 | ~$2.7B inflation | Earnings-inflation scheme | 15 execs guilty; Scrushy acquitted |
| Madoff | 2008 | ~$64.8B notional | Impossibility analysis (Markopolos) | 150 years; ~$17–20B principal lost |
| Lehman Brothers | 2008 | ~$50B "Repo 105" | Examiner report; off-balance-sheet | Largest US bankruptcy |
| Theranos | 2022 | >$140M wire | Investor / product fraud | Holmes convicted; 135 months |
| Wirecard | 2020 | €1.9B fake cash | Audit refusal; forged bank certs | Collapse; Braun arrested; Marsalek fugitive |
| FTX / SBF | 2022–24 | ~$8B customer funds | Controls "complete failure" (Ray III) | Convicted 7 counts; 25 years |
| Binance / CZ | 2023–24 | $4.3B resolution | BSA/AML + sanctions failures | Guilty; $50M fine; 4 months |
| Archegos / Hwang | 2024 | ~$36B; banks >$10B loss | Swap-based manipulation | Convicted; 18 years |
| Celsius / Mashinsky | 2024–25 | ~$20B deposits | Token manipulation; misleading customers | Guilty; 12 years |
2 Classic cases
The classic cases are studied less for their headline numbers than for what each taught the profession. Capone established that income can be proven indirectly when direct records are absent. Enron, WorldCom, HealthSouth, and Lehman are the canon of financial-statement fraud — showing, respectively, how off-balance-sheet vehicles, expense capitalisation, top-down earnings targets, and quarter-end window-dressing distort the picture investors see. Madoff and Theranos broaden the lens from cooked books to fabricated substance: a fund that never traded and a device that never worked. Read together, they map the detection controls — indirect proof, internal audit, whistle-blower tips, analytical impossibility tests, and independent examiners — that a modern investigator deploys.
Al Capone (1931)
The prosecution of Al Capone is the foundational case for indirect-proof forensic accounting. Capone earned roughly $60 million a year in illegal income yet filed no returns. The IRS Intelligence Unit, led by Elmer Irey with agent Frank Wilson, applied the net-worth / indirect method — reconstructing income from spending and asset accumulation rather than from books that did not exist. Capone was convicted on 17 October 1931 and sentenced to eleven years, establishing techniques still used against organised crime and, today, human-trafficking finance.[1]
Enron (2001)
Enron hid debt and losses in off-balance-sheet special-purpose entities orchestrated by CFO Andrew Fastow, a paradigm financial-statement fraud. It filed for Chapter 11 on 2 December 2001 in what was then the largest US bankruptcy, and auditor Arthur Andersen was convicted over document shredding and collapsed. Enron directly produced the Sarbanes-Oxley Act of 2002, reshaping forensic accounting and internal control.[1][2]
WorldCom (2002)
CFO Scott Sullivan capitalised roughly $3.85 billion (ultimately more than $11 billion) of ordinary operating expenses, inflating profit. The fraud was caught internally by VP of Internal Audit Cynthia Cooper, who escalated to the audit committee in June 2002 — a landmark illustration of internal audit and whistle-blowing as detection controls (consistent with the ACFE finding that tips are the leading detection method).[1][3]
HealthSouth (2003)
CEO Richard Scrushy directed approximately $2.7 billion of earnings inflation from 1996 to 2002. Fifteen executives, including five CFOs, pleaded guilty; Scrushy himself was acquitted in 2005, a much-studied outcome on the difficulty of proving executive knowledge in accounting fraud.[1][4]
Bernie Madoff (2008)
Madoff ran the largest Ponzi scheme in history, with roughly $64.8 billion in notional (fabricated statement) value across 40,000+ investors. Analyst Harry Markopolos proved mathematically that Madoff's claimed returns were impossible and warned the SEC repeatedly from 2000 to 2008, warnings that were ignored — a classic use of analytical procedures to detect fraud that direct audit missed. Madoff was sentenced to 150 years. Correction: the $64.8B is the notional figure on fake statements; actual principal lost is estimated at ~$17–20B (see §4).[1]
Lehman Brothers (2008)
Lehman used an accounting device called "Repo 105" to move roughly $50 billion off its balance sheet at quarter-end, masking leverage from investors. The scheme was documented in the 2,200-page examiner's report by Anton Valukas (11 March 2010), which found auditor Ernst & Young was aware of the practice. Lehman's failure was the largest US bankruptcy and a trigger of the 2008 crisis.[1][5]
Theranos / Elizabeth Holmes (2022)
Theranos represented a fraud of technological capability rather than the books: founder Elizabeth Holmes misrepresented the performance of the company's blood-testing devices to investors. She was convicted on 3 January 2022 on four counts of investor fraud (more than $140 million in wire fraud) and sentenced on 18 November 2022 to 135 months. The case underscores that red flags around unverifiable technical claims are within the forensic investigator's remit.[1]
3 Recent cases (2020–2025)
The recent wave concentrates in two arenas: audit-confirmation fraud in traditional finance (Wirecard) and the crypto sector, where the collapse of exchanges and lending platforms exposed an almost total absence of the controls the classic cases had forced onto public companies. A striking through-line is that the crypto failures were caught not by sophisticated analytics but by liquidity runs that revealed missing customer funds — after which forensic teams found, in John Ray III's words on FTX, a "complete failure" of basic record-keeping. These cases are where cryptocurrency tracing, digital forensics, and AML enforcement now do the heavy lifting.
Wirecard (2020)
The German payments firm Wirecard collapsed in June 2020 after €1.9 billion of purported "escrow cash" was found not to exist, supported by forged bank confirmations. Auditor EY refused to sign the 2019 accounts, precipitating the collapse. CEO Markus Braun was arrested; COO Jan Marsalek fled and remains a fugitive with reported Russian-intelligence links. Wirecard is a modern lesson in confirmation fraud and the limits of external audit.[1]
FTX / Sam Bankman-Fried (2022–24)
The crypto exchange FTX collapsed with roughly $8 billion of customer funds missing, commingled with affiliated trading firm Alameda Research. Restructuring officer John J. Ray III — who had overseen the Enron cleanup — called the controls a "complete failure," citing an absence of records, unencrypted private keys, and use of QuickBooks. SBF was convicted on seven counts in November 2023 and sentenced on 28 March 2024 to 25 years plus $11 billion forfeiture. The case links directly to cryptocurrency tracing and digital forensics.[1] Forensically, FTX is instructive precisely because the fraud hid in the absence of infrastructure that any public company would take for granted: no reliable ledger existed to falsify, so investigators reconstructed the flow of customer funds into Alameda from bank records, blockchain analysis, and the recollections of insiders who cooperated. It is the mirror image of Enron, where the fraud lived in too much engineered structure; here it lived in the void where controls should have been.
Binance / Changpeng Zhao (2023–24)
Unlike the others, Binance was a compliance case rather than a theft: the exchange pleaded guilty to Bank Secrecy Act / anti-money-laundering and sanctions violations, having failed to report 100,000+ suspicious transactions. The $4.3 billion resolution, CZ's guilty plea (November 2023), $50 million personal fine, and four-month sentence (April 2024) mark one of the largest AML enforcement actions on record. CZ was pardoned in October 2025.[1]
Archegos / Bill Hwang (2024)
Bill Hwang's family office Archegos Capital Management imploded in March 2021, causing bank losses exceeding $10 billion on a portfolio with roughly $36 billion of exposure built through total-return swaps that concealed his positions. Hwang was convicted in July 2024 of racketeering, securities fraud, and market manipulation, and sentenced (20 November 2024) to 18 years — a case turning on analysis of derivative positions and concentration.[1]
Celsius / Alex Mashinsky (2024–25)
The crypto-lending platform Celsius collapsed in 2022 with roughly $20 billion in deposits at stake. Founder Alex Mashinsky was found to have misled customers and manipulated the CEL token while personally pocketing about $48 million. He pleaded guilty in December 2024 and was sentenced on 8 May 2025 to 12 years. Correction: the widely cited "$4.7B" figure is the amount of a Federal Trade Commission settlement, not the size of customer losses (see §4).[1] Celsius also illustrates token manipulation as a distinct forensic problem: because a platform can influence the market price of its own token, apparent asset values on its books may be partly self-manufactured, so an investigator must test whether reserves are genuinely independent of the issuer's own trading. The same skepticism that analytical methods bring to earnings figures applies to crypto balance sheets.
Common threads across the recent cases
Three lessons recur across FTX, Binance, Archegos, and Celsius. First, opacity of structure — commingled accounts, undisclosed swaps, self-issued tokens — is itself a red flag, because complexity that serves no legitimate business purpose usually serves to hide something. Second, speed defeats periodic controls: crypto and derivative positions move faster than quarterly audits, which is a principal driver of the shift toward the real-time monitoring discussed in Emerging Trends. Third, enforcement now spans theft and compliance: Binance was punished not for stealing customer funds but for failing to operate the anti-money-laundering controls that would have surfaced others' crimes — a reminder that the absence of a control can be the offence.
4 Corrections and cautions
Popular coverage of these cases repeats several figures that conflate different quantities. Two are corrected here to keep the wiki accurate.
| Case | Commonly cited | Correction |
|---|---|---|
| Madoff | "$65 billion stolen" | $64.8B is the notional value shown on fabricated statements; actual principal lost is estimated at ~$17–20B. The difference is fictitious "profit" that never existed. |
| Celsius | "$4.7 billion loss / fraud" | $4.7B is the figure from the FTC settlement, not the magnitude of customer losses (~$20B in deposits were at stake). |
The general caution: notional, exposure, deposits, losses, settlements, and forfeitures are different measures. A responsible forensic report states which measure a figure represents. Amounts in the summary table above are labelled accordingly.
5 See also
See also: Financial Statement Fraud, Net Worth Method, Analytical Methods, Cryptocurrency Tracing, AML Law, Emerging Trends, Occupational Fraud.
References
- BRIEF: Landmark & recent fraud cases (sourced) — case facts, dates, amounts, and corrections. (source brief material)
- Healy, P.M. & Palepu, K.G. "The Fall of Enron." J. Economic Perspectives 17(2):3–26. 2003. DOI 10.1257/089533003765888403.
- Sullivan, R. "WorldCom: A case study in corporate fraud." Corporate Governance 12(4). 2004.
- Klein, A. "HealthSouth: A case study in corporate fraud." J. Business Ethics 88(2). 2009.
- Valukas, A.R. "Lehman Brothers: Examiner's Report." US Bankruptcy Court, SDNY, 9 vols. 2010 ("Repo 105").