Financial Fraud Case Studies in Detection

Detection Case Studies
Cases	Nortel; Green Mountain Coffee Roasters; Bausch & Lomb; Bristol-Myers Squibb; New Century; Sino-Forest; Diamond Foods; Computer Associates
Dominant schemes	Reserve manipulation, channel stuffing, premature revenue, cost deferral, fictitious assets
Sources	SEC releases and orders, DOJ, court and securities-commission decisions
Companion article	Major Fraud Case Studies

This article examines eight financial-reporting cases from the perspective of an examiner: what the scheme was, which red flags were visible, how it came to light, which forensic technique would have caught it sooner, and how it ended. It deliberately avoids WorldCom and Enron, covered with Lehman, HealthSouth, Madoff, Wirecard and others in Major Fraud Case Studies, and the broader mechanics of earnings manipulation in Financial Statement Fraud. Facts below are taken from regulator and court sources cited in the references. The "technique that would have caught it" paragraphs are analytical judgements of this wiki, not findings of the regulators, and carry hindsight bias: the techniques are offered as practice points, not as proof that anyone should have seen the fraud at the time. Where a case ended without a finding of fraud, that is stated.

1 Summary table

Case	Period	Core mechanism	How it surfaced	Outcome (selected)
Nortel	2000–03	Reserve build-up and release; early revenue	Restatement, then audit-committee independent review	$35M SEC penalty (2007); executives acquitted in Ontario (2012)
Green Mountain Coffee	FY2007–10	Inventory costing and accrual errors; revenue practices questioned	Year-end audit; SEC inquiry disclosed Sept 2010	Restatement; SEC closed inquiry with no enforcement (2014); class action $36.5M
Bausch & Lomb	1993–94	Channel loading; fabricated sales	Internal audit; anonymous employee letter	SEC cease-and-desist orders (1997)
Bristol-Myers Squibb	2000–01	Channel stuffing; divestiture reserves	SEC investigation	$150M settlement (2004)
New Century	2005–06	Understated repurchase reserve	Bankruptcy examiner	SEC actions against CEO, CFO, controller (2009)
Sino-Forest	2003–10	Alleged overstated timber assets and revenue	Short-seller report (June 2011)	US$2.6B civil fraud judgment (2018); OSC sanctions
Diamond Foods	FY2010–11	Deferred grower payments	Restatement (Nov 2012)	$5M company penalty; CEO $125K (2014)
Computer Associates	1998–2000	Books held open after quarter end	SEC/DOJ investigation	$225M restitution; CEO 12 years (2006)

2 Nortel (reserve "cookie jars")

Scheme. According to the SEC, Nortel Networks manipulated its accounts between 2000 and 2003 to close gaps between actual performance, internal targets and Wall Street expectations. The SEC alleged that Nortel accelerated revenue in 2000 (by about $1.4 billion), maintained more than $400 million of excess reserves in 2002 that suppressed reported profit, and released roughly $500 million of reserves in 2003 to fabricate a return to profitability, which triggered "return to profitability" bonuses worth tens of millions of dollars to senior executives.^[1]

Red flags. Large provisions with no clear operational driver; reserve releases clustered in the quarter in which a bonus threshold would otherwise be missed; earnings that landed just above target; repeated restatements; weak controls over provisioning and revenue recognition.

Detection. After Nortel announced an initial restatement in October 2003, its audit committee commissioned an independent review with outside counsel; as it progressed, new management was directed to examine provisioning and provision releases in depth, and the later restatements followed.^[2] Detection was thus internal, driven by the audit committee, rather than by the external auditor or a whistleblower.

Technique that would have caught it. A reserve roll-forward analysis: for each reserve account, opening balance plus provisions minus utilisations minus releases equals closing balance, by quarter. Releases not matched to a utilisation or a change in estimate, and reserve movements that correlate with the gap between pre-reserve earnings and target, are the signature of earnings management. Pairing the roll-forward with the incentive-plan terms (the context track of the investigation timeline) exposes the motive.

Outcome. Nortel paid a $35 million civil penalty in October 2007 without admitting or denying the allegations, with funds earmarked for harmed shareholders, and accepted injunctions and remedial undertakings.^[1] The SEC separately sued the former CEO, CFO, controller and assistant controller. In Ontario, the former CEO, CFO and controller were tried on criminal fraud counts alleging they manipulated results to trigger $12.8 million in bonuses and stock; the judge acquitted them in January 2012, finding he was not satisfied that they had deliberately misrepresented the finances, and the Crown did not appeal.^[3] The case is a reminder that regulatory and criminal standards of proof differ and that complex estimates are hard to prosecute as intentional misstatements.

3 Green Mountain Coffee Roasters (restatement and a closed inquiry)

What happened. In September 2010 Green Mountain Coffee Roasters disclosed an SEC Enforcement inquiry into "certain revenue recognition practices and the company's relationship with one of its fulfillment vendors" and announced a restatement. The company said the errors, identified while preparing the fiscal 2010 financial statements and during the audit, would reduce cumulative net income across fiscal 2007 to 2009 and the first three quarters of 2010 by roughly $6.1 to $6.5 million, and it stated that none of the errors related to its fulfillment vendor.^[4] A later accounting summary listed six categories of error totalling about $11.5 million of cumulative pre-tax overstatement, the largest being a $7.6 million adjustment from applying an incorrect standard cost to intercompany K-Cup inventory in consolidation.^[5]

Why it belongs in a detection study. This is a case in which the red flags were public but the end point was not a finding of fraud. Hypergrowth, a heavy reliance on a single fulfillment vendor, intercompany inventory, and complex customer-incentive accruals created classic risk areas, and the company was publicly questioned by investor David Einhorn. In October 2014 the SEC staff notified the company that it had concluded its four-year inquiry without recommending enforcement action against the company or any current or former employee.^[6] A securities class action, In re Green Mountain Coffee Roasters, Inc. Securities Litigation, was settled for $36.5 million in cash under a stipulation dated June 2018, a private settlement that involved no regulator finding.^[7]

Technique that would have caught the errors. Standard-cost reconciliation: recompute consolidated inventory at the group standard cost and reconcile to the sum of entity-level inventories, eliminating intercompany profit; accrual back-testing of marketing and incentive programmes (compare accrued versus subsequently paid); and vendor confirmation of inventory and sell-through held at third-party fulfilment centres. These procedures distinguish honest accounting error from intentional manipulation by looking at direction and pattern: errors that consistently increase profit across several periods warrant a deeper look, while random errors do not.

Lesson. Not every restatement is fraud, and an examiner should record both the evidence of intent and its absence. The Green Mountain file is a counterweight to the other cases here, where documents showed management directing the outcome.

4 Bausch & Lomb (sales falsification, 1993–94, and subsidiary misconduct, 2002–05)

1993–94 scheme. The SEC's 1997 administrative findings describe two separate divisions inflating sales. The Contact Lens Division ran a "December Program" in late 1993 that pushed distributors to take about 1.8 million units of traditional lenses far beyond their needs just before year-end, granted unauthorised return rights to roughly 59% of participants, extended credit without creditworthiness analysis, and recognised about $5.7 million of revenue on goods not shipped until after year-end. In the Asia-Pacific Division, Hong Kong management fabricated sunglass sales, shipped goods to warehouses or complicit customers who never paid, forged delivery notes with receipt acknowledgments, and used sham "exchange" transactions to mask growing receivables and avoid raising the bad-debt reserve. Together the practices produced $42.1 million of improperly recognised revenue and overstated 1993 net income by at least $17.6 million, or 11%.^[8]

Red flags. Year-end spikes in distributor shipments; unusually generous return rights and credit terms; ageing receivables not matched by reserve increases; "exchange" transactions with no cash movement.

Detection. An internal audit team began investigating in June 1994, and an anonymous letter from employees in August 1994 exposed the Asia-Pacific scheme; management and outside auditors then identified both problems and restated 1993–94 results in early 1996.^[8] The case is a clean illustration of the ACFE finding that tips are the most common route to detection.

Technique. Revenue cutoff testing (match shipping documents to invoice dates for the last and first weeks of the year), receivables confirmation and subsequent-receipts testing (customers who never pay are exposed when cash receipts after year-end are traced), and return-rate analysis by distributor. Forged delivery notes are a document-examination problem (see Document Examination).

Outcome. The SEC issued cease-and-desist orders against the company and three executives; the order text reviewed here does not specify monetary penalties.^[8]

A second episode. In 2006 Bausch & Lomb again restated, after investigations into its Brazilian and Korean subsidiaries. In Korea the company found improper sales practices — improper return rights, unaccounted product exchanges between customers, unprocessed returns and excessive credit — and concluded that all vision-care transactions from 2002 to 2005 should be recorded on a consignment basis, recognising revenue only upon customer payment; it restated 2003 and 2004 and removed about $26.7 million of net sales dating back to 2001.^[9] Recurrence in remote subsidiaries shows why entity-level controls and distributor-return testing must extend to foreign operations. This wiki has not located an SEC enforcement order for the 2006 episode.

5 Bristol-Myers Squibb (channel stuffing)

Scheme. From the first quarter of 2000 through the fourth quarter of 2001, Bristol-Myers Squibb sold more pharmaceutical product to wholesalers than end demand justified, particularly near quarter-end, and improperly recognised revenue on about $1.5 billion of such sales to its two largest wholesalers, because the company covered the wholesalers' carrying costs and guaranteed them a return on investment until the product was resold, which meant the sales were not final. When results still fell short of analyst estimates, the company tapped improperly created divestiture reserves and reversed parts of them into income.^[10]

Red flags. Wholesaler inventory far above normal weeks of supply; receivables and revenue rising faster than prescriptions written; side agreements with customers; reserve releases to fill earnings gaps.

Technique that would have caught it. Sell-in versus sell-through reconciliation: compare the company's shipments to wholesalers with independent prescription or end-demand data and with the wholesalers' own inventory reports, expressed as days or weeks on hand. A sustained build above historical norms, concentrated in the last days of each quarter, is the channel-stuffing signature. A review of customer correspondence and contract files for guarantees, as well as a reserve roll-forward for the divestiture reserve, would have reached the other two mechanisms.

Outcome. In 2004 the company agreed to pay $150 million: a $100 million civil penalty and $50 million to a shareholder fund. It also accepted a permanent injunction and an independent adviser to monitor accounting, reporting and internal controls; the SEC said its investigation of individual responsibility continued.^[10] The release does not describe how the practice was first detected.

6 New Century Financial (loan repurchase reserves)

Scheme. New Century was a major subprime mortgage originator that sold loans into securitisations and was obliged to repurchase loans that breached representations or defaulted early. The SEC alleged that in the second and third quarters of 2006 the controller changed the method of estimating the loan-repurchase obligation contrary to GAAP and failed to ensure the backlog of pending repurchase requests was properly accounted for, understating the repurchase reserve and materially overstating results; the CEO and CFO were charged with not ensuring that negative trends were disclosed in periodic reports and private offerings.^[11]

Red flags. Rising early payment defaults and a growing repurchase-request backlog; reserves falling as a share of exposure while risk rose; a loan-quality standard defined by whether loans could be sold to Wall Street; reserve-method changes made late in the period.

Detection. The mechanism that revealed the full picture was a bankruptcy examiner. Michael Missal's report, dated 29 February 2008 and unsealed on 26 March 2008, ran to more than 550 pages, rested on voluminous document productions and 110 interviews of 85 fact witnesses, and found at least seven improper accounting practices in 2005 and 2006. It said management knew of an "alarming and steady increase in early payment defaults" no later than mid-2004, and criticised both senior management and the auditor, KPMG; the audit committee had not been told of the accounting changes.^[12] See Hidden Assets in Divorce and Bankruptcy for the examiner's powers.

Technique. Roll-rate and early-payment-default analysis against the repurchase reserve; ageing of the repurchase-request backlog (every unprocessed request is a liability); sensitivity analysis on reserve assumptions; and a change-in-estimate review, since a method change that increases income in a deteriorating environment is a standard auditor trigger.

Outcome. In 2009 the SEC charged the CEO (Brad Morrice), CFO (Patti Dodge) and controller (David Kenneally). Each consented to a permanent injunction and a five-year officer-and-director bar; Morrice agreed to disgorgement of $541,345 and a $250,000 penalty, Dodge to $450,000 and $100,000, and Kenneally to $150,000 and $32,500.^[11]

7 Sino-Forest (alleged phantom assets)

Scheme. Sino-Forest, a Toronto-listed forestry company with operations in China, reported growth that its later court judgment described as extraordinary: between 2003 and 2010 revenue grew 625% and assets 1,270%, and the company raised about $3 billion in debt and equity. In March 2018 the Ontario Superior Court (Justice Penny) found that former CEO Allen Chan had secretly controlled counterparties through nominees, used them to receive deposits and advances from the company, and that Sino-Forest lacked the documentation to establish ownership of its standing timber assets.^[13]

Red flags. Very high margins and growth in a capital-intensive industry; reliance on intermediaries to buy and sell standing timber; assets in remote regions that were difficult to inspect; cash flow that lagged reported profit; opaque related-party relationships.

Detection. Short seller Muddy Waters Research published a report on 15 June 2011 alleging that Sino-Forest was a "multi-billion dollar Ponzi scheme" involving theft, overstated revenue and undisclosed related-party dealings. The Ontario Securities Commission issued an order in August 2011 and delivered a statement of allegations in May 2012; Sino-Forest sought creditor protection under the CCAA in March 2012.^[13] The sequence shows how public-record research outside the company can precede formal audit findings. Short-seller reports are advocacy documents and are not evidence of fraud on their own; in this case the Ontario court and the OSC later made findings.

Technique that would have caught it. Independent verification of existence and ownership: confirmation of title with registries and forestry authorities, direct inspection or satellite verification of claimed plantations (Geolocation and Imagery OSINT), confirmation of bank balances directly with banks, and counterparty vetting through corporate registry filings and beneficial-ownership research (Shell Companies and Beneficial Ownership, Corporate Registries and Leak Databases). Comparing reported revenue with operating cash flow and with the financial capacity of the named suppliers would have shown whether the commercial story was plausible.

Outcome. The court awarded the SFC Litigation Trust US$2.6 billion for fraud and breach of fiduciary duty, plus C$5 million in punitive damages, described as the largest fraud judgment in Canadian history. On 9 July 2018 the OSC imposed sanctions on Chan and other former executives, including lifetime market bans, and reports put the total ordered at more than $80 million in penalties, costs and disgorgement, with Chan ordered to disgorge $60 million.^[14]

8 Diamond Foods (cost deferral)

Scheme. Diamond Foods, a snack and nut company, bought walnuts from growers. The SEC alleged that its former CFO, Steven Neil, directed an effort to under-report amounts paid to growers by delaying the recording of payments into later periods; he described walnut costs internally as a "lever" for managing earnings. Special payments were made to growers but portions were excluded from year-end statements and characterised as "advances on crops that had not yet been delivered" rather than as costs of prior deliveries, which lifted net income and earnings per share above analysts' estimates in fiscal quarters of 2010 and 2011.^[15]

Red flags. A key commodity cost that moved inconsistently with market prices; earnings that repeatedly met consensus; significant grower payments recorded as prepayments near period-end; acquisition-driven pressure on reported growth (not detailed in the SEC release; treat as context only).

Detection. The scheme was discovered through the company's restatement, announced in November 2012, which triggered the SEC investigation; the stock fell from a peak near $90 to about $17.^[15]

Technique that would have caught it. Cutoff and accrual-completeness testing of the largest cost line: search for payments made after year-end that relate to deliveries before it (subsequent-disbursements testing), and compare accrued grower obligations with the contract terms and with volumes delivered. Email keyword review on terms like "lever" or "push to next quarter" supplies direct evidence of intent. A prepaid-asset analysis would have flagged unusual growth in advances.

Outcome. In January 2014 the company agreed to pay $5 million to settle SEC charges. The former CEO, Michael Mendes, who should have known the reported walnut cost was wrong when he certified the statements, paid a $125,000 penalty and had returned or forfeited more than $4 million in bonuses and other benefits; litigation against Neil continued at the time of the release.^[15] Clawback of incentive pay is the operative remedy highlighted in Financial Statement Fraud.

9 Computer Associates (the "35-day month")

Scheme. From 1998 to 2000, Computer Associates routinely kept its books open after quarter-end to record revenue on software licence contracts executed after the quarter closed, to meet analyst estimates; the practice was internally referred to as the "35-day month". The SEC said the company prematurely recognised $2.2 billion of revenue in fiscal 2000 and 2001 and over $1.1 billion in prior quarters, more than $3.3 billion from at least 363 contracts in all, and that in fiscal 2000 the inflation of individual quarters ranged from 22% to 53% of properly recorded revenue. Executives allegedly approved backdated contracts and made false statements to the SEC and encouraged employees to give misleading testimony to investigators and outside counsel.^[16]

Red flags. A pronounced spike in signed contracts on the first days after quarter-end; contract signature dates conflicting with customer or counsel records; revenue per quarter that always barely met estimates; large multi-year licence deals with heavy up-front recognition.

Technique that would have caught it. Contract-date cutoff testing with independent evidence of when agreements were executed: counterparty confirmations, signature metadata, email timestamps, and fax or courier logs. Pattern analysis of booking dates (a histogram of contract dates by day relative to quarter-end shows a cliff if the books were held open). This is a straightforward test on a full population and an application of Fraud Detection Analytics. Evidence tampering is also a digital-forensics issue: the sentencing court found the CEO tampered with a laptop to conceal its contents from the government and the audit committee (Digital Forensics).

Outcome. In September 2004 Computer Associates agreed to a deferred prosecution agreement with the U.S. Attorney's Office and to a settlement with the SEC, paying $225 million in restitution, with an 18-month period of independent-examiner oversight and governance reforms. Former general counsel Steven Woghin pleaded guilty. Former CEO Sanjay Kumar pleaded guilty in April 2006 to securities fraud and obstruction and was sentenced on 2 November 2006 to 12 years in prison and an $8 million fine; prosecutors said the scheme prematurely recognised over $2 billion of revenue and caused shareholder losses above $400 million.^[16][17]

10 Patterns across the cases

• Period-end concentration. Five of eight cases (Nortel, B&L, BMS, Diamond Foods, Computer Associates) involved moving results across period boundaries. Cutoff testing is the most productive single procedure in financial-reporting fraud.
• Estimates as the soft target. Reserves and accruals (Nortel, BMS, New Century, Green Mountain) require judgement and are hard to prove intentional; the best evidence is the direction and timing of changes relative to earnings targets and bonus triggers.
• Detection came from inside or from outside the ordinary audit. An audit-committee review (Nortel), an internal audit plus anonymous letter (B&L), a bankruptcy examiner (New Century), a short seller (Sino-Forest) and a restatement (Diamond Foods) did the work; none was a routine external-audit finding. This matches the ACFE finding that tips and internal sources detect most frauds (see ACFE Report to the Nations).
• Incentives mattered. Bonus plans, analyst consensus and acquisitions are recurring pressures; see the fraud triangle and Fraudster Psychology and the Dark Triad.
• Outcomes diverge. Companies often settle with the SEC without admitting wrongdoing; individual executives face varied results, from acquittal (Nortel executives) and no enforcement (Green Mountain) to multi-year prison terms (Computer Associates). Reporting must state which standard of proof was met.
• Existence is an audit assertion. Sino-Forest shows that completeness and valuation tests do nothing if the asset does not exist or is not owned; verify existence with external evidence.

See also: Major Fraud Case Studies, Case Studies, Financial Statement Fraud, Red Flags, Forensic Investigation Planning, Auditing Standards and Fraud.

References

1. SEC. "Nortel Networks Pays $35 Million to Settle Financial Fraud Charges," Press Release 2007-217, 15 Oct 2007. sec.gov; Litigation Release 20333. sec.gov
2. Nortel Networks Corp. Form 10-K for fiscal 2003 (describing the audit committee independent review). sec.gov
3. CTV News. "Former Nortel execs found not guilty in fraud case," Jan 2012.; "Crown won't appeal Nortel verdict."
4. Green Mountain Coffee Roasters. Form 8-K, Exhibit 99.1, Sept 2010. sec.gov
5. Going Concern. "Green Mountain Coffee Roasters: Gosh, We Ended Up Having Way More Accounting Errors Than We Thought." goingconcern.com (secondary)
6. Keurig Green Mountain, Inc. Form 10-K for FY2014 (SEC closing notice of 16 Oct 2014). sec.gov; VTDigger, "SEC closes Keurig Green Mountain investigation without charges." vtdigger.org
7. Bernstein Litowitz. In re Green Mountain Coffee Roasters, Inc. Securities Litigation (settlement summary). blbglaw.com
8. SEC. Administrative order in the matter of Bausch & Lomb Incorporated, Harold O. Johnson, Ermin Ianacone and Kurt Matsumoto, 17 Nov 1997. sec.gov
9. Bausch & Lomb 2006 restatement: NBC News, "Bausch & Lomb restates revenue after probe." nbcnews.com; Rochester Business Journal, 7 Feb 2007. rbj.net
10. SEC. "Bristol-Myers Squibb Company Agrees to Pay $150 Million to Settle Fraud Charges," Press Release 2004-105. sec.gov
11. SEC. Litigation Release 21609 (New Century executives). sec.gov
12. D&O Diary. "New Century examiner's report faults KPMG, company officials," 2008. dandodiary.com; Orange County Business Journal coverage. ocbj.com
13. Bennett Jones. "Fraud Judgment Awarded Against Former Sino-Forest CEO," April 2018. bennettjones.com
14. Ontario Securities Commission. Re Sino-Forest Corporation, Reasons and Decision on sanctions and costs, 2018 ONSEC 37 (9 July 2018). capitalmarketstribunal.ca; Osler summary. osler.com
15. SEC. "Diamond Foods to Pay $5 Million to Settle SEC Charges," Press Release 2014-4, 9 Jan 2014. sec.gov
16. SEC. "SEC Charges Computer Associates and Three Former Executives," Press Release 2004-134. sec.gov
17. U.S. Attorney's Office, E.D.N.Y. Press release on sentencing of Sanjay Kumar, 2 Nov 2006. justice.gov; SEC Litigation Release 19898. sec.gov