How do I conduct an effective interview with a subject in a fraud investigation?

Conducting an effective investigative interview in a fraud case requires a careful blend of psychology, legal awareness, and rigorous preparation. Unlike a friendly chat or a routine HR gathering, a fraud interview is a high-stakes fact-finding mission where the goal is to secure reliable admissions, identify co-conspirators, and preserve the integrity of the evidence.

1. Preparation and Planning

• Gather All Evidence First: Never go into an interview "fishing." Have your documentary evidence—bank records, emails, forged invoices, system access logs—organized and sequenced chronologically.
• Establish the Objective: Define what you need to prove or disprove. Is this person a witness, a victim, or the primary target? Tailor your strategy accordingly.
• Know the Legal and Policy Boundaries: Understand local employment laws, union representation rights (such as Weingarten rights in the U.S. if dealing with unionized employees), and internal corporate policies. Consult legal counsel before interviewing a primary suspect.
• Select the Right Location: Choose a neutral, private, and quiet setting—preferably a room with no physical barriers blocking the door (for safety and comfort) and minimal distractions. A two-person interview team (one primary interviewer, one silent note-taker/observer) is ideal.

2. Structuring the Interview

• The Introduction (Setting the Tone): Introduce yourselves, state your roles, and explain the purpose of the meeting in a professional, objective, and non-accusatory manner. Avoid using loaded words like "embezzlement" or "stealing" early on; use neutral terms like "discrepancy," "irregularity," or "review."
• Establish Rapport and Baseline Behavior: Ask neutral, open-ended background questions. Observe the subject’s baseline communication style, posture, eye contact, and nervous habits so you can later spot deviations when tough questions arise.
• The Transition to Core Topics: Move smoothly from general operations to specific control breakdowns or anomalies. Ask broad questions first ("Walk me through the approval workflow for vendor X") before narrowing down to specifics ("Why does this invoice lack a receiving stamp?").
• Presenting the Evidence: Introduce exhibits (documents, emails) incrementally. Let the subject explain or dig themselves into a corner before showing definitive proof that contradicts their statements.
• The Closing: Summarize key points, ensure the subject has an opportunity to clarify or add anything, and outline the next steps regarding confidentiality (instructing them not to discuss the ongoing inquiry with colleagues).

3. Essential Questioning and Psychological Tactics

• Ask Open-Ended Questions: Force the subject to talk rather than giving simple "yes/no" answers. Use prompts like "Help me understand how this happened" or "Walk me through this process step-by-step."
• Use Strategic Silences: Do not fear silence. When a tough question is asked or an inconsistency is highlighted, remain quiet. People naturally rush to fill awkward silences, often revealing damaging details or nervous admissions.
• Focus on Rationalizations, Not Just Denials: Fraudsters rarely admit to being "criminals"; they rationalize their actions ("The company owed me," "I was going to pay it back"). Listen closely to how they justify anomalies—their rationalizations often validate their intent.
• Observe Non-Verbal Cues (Carefully): Look for sudden shifts in baseline behavior—changes in posture, grooming gestures, defensive barriers (crossing arms), or sudden sweating/dry mouth—when transitioning from neutral to sensitive topics. Note: Non-verbal cues indicate stress or discomfort, not definitive guilt on their own.

4. Critical Dos and Don'ts

• DO Maintain Professionalism and Neutrality: Never lose your temper, raise your voice, or make threats/promises of immunity. Coerced statements or a hostile demeanor can ruin the credibility of the interview in court or arbitration.
• DO Accurately Document Everything: The note-taker should record verbatim quotes for critical admissions. If permitted and legally compliant, audio or video recording provides the cleanest record; otherwise, write up a detailed memorandum of interview immediately following the session while memories are fresh.
• DON'T Reveal Your Entire Hand Too Soon: Give the subject enough room to provide an untruthful alibi before presenting the hard proof that refutes it. If you show all your evidence at minute five, you lose the chance to test their honesty.
• DON'T Accept Vague Answers: Press for clarity on ambiguous phrases like "I think," "usually," or "to the best of my recollection" when dealing with core transaction details.

If you'd like, let me know:

• Is the subject a witness, a lower-level employee, or a senior executive?
• Are you dealing with an internal corporate review or a formal criminal/regulatory setting?

I can help you tailor specific questioning templates or evidence presentation strategies for your exact situation.

An effective fraud-investigation interview is primarily a fact-finding exercise, not an interrogation. The goal is to obtain reliable information, test the subject's account against evidence, identify inconsistencies, and preserve the integrity of the investigation. The Association of Certified Fraud Examiners (ACFE) emphasizes preparation, direct and follow-up questions, legal considerations, and maintaining an open mind.

1. Prepare before you meet the subject

Know the case well enough that you aren't discovering the facts for the first time in the room.

• Establish exactly what you need to learn from this interview.
• Build a chronology of the relevant events.
• Review documents, transaction records, emails, system logs, policies, and prior statements.
• Separate established facts, allegations, and assumptions.
• Identify gaps and contradictions that the subject can potentially explain.
• Decide which evidence you will disclose and which you should hold back initially.
• Understand applicable employment, privacy, recording, labor, and other legal requirements. ACFE specifically identifies interviewee rights and the legal authority for conducting interviews as preparation issues.
• Examine your own assumptions. Going in convinced that the person is guilty can distort both your questions and your interpretation of their answers.

A useful preparation question is: “What information could this person provide that would cause me to change my current theory?”

2. Establish a professional environment

Conduct the interview privately and, where practical, one interviewer with one subject. Minimize interruptions and distractions. ACFE guidance also recommends a non-threatening, nonjudgmental approach because hostility can inhibit information flow.

At the beginning:

• Introduce yourself and explain your role.
• Explain the general purpose of the interview.
• Explain any applicable confidentiality limitations.
• Address recording or note-taking procedures.
• Make sure the subject understands any applicable rights or obligations.
• Start with neutral background questions to establish rapport and understand the person's normal communication style.

Don't promise confidentiality that you cannot actually provide.

3. Start broad, then become progressively specific

A good sequence is:

Open → clarify → narrow → confront/document

For example:

“Walk me through your responsibilities for approving vendor payments.” Then:

“Tell me what happened with the payment to ABC Company on June 14.” Then:

“Who initiated that payment?” Then:

“What did you do after receiving the invoice?” Finally, once the facts have been established:

“The system records show that your credentials were used to approve the payment at 3:42 p.m. How do you explain that?” Open-ended questions initially give the subject an opportunity to provide their account without you supplying facts they might simply adopt. ACFE's recent guidance specifically stresses clear, precise, direct questions and minimizing interview contamination.

4. Listen more than you talk

Don't rush to fill silence.

Pay attention to:

• What the subject says.
• What they don't address.
• Changes in their account.
• Ambiguous terminology.
• People, dates, amounts, and actions that need clarification.
• Claims that can be independently corroborated.

When someone uses an important but vague term, ask what they mean by it. For example:

“When you say you ‘fixed’ the records, what exactly did you do?” This prevents later disputes about what the subject actually meant.

5. Don't overinterpret body language

Nervousness, avoiding eye contact, sweating, hesitation, or changes in tone are not proof of deception. Someone can be nervous while telling the truth, particularly when facing an investigation.

Treat behavioral changes as reasons to ask another question, not as conclusions.

For example, instead of:

“You're obviously lying.” try:

“You said earlier that you had never accessed that account. The access log shows an entry from your credentials. Help me understand that.” ACFE similarly recommends considering behavioral observations in context rather than treating them as standalone indicators of deception.

6. Put difficult evidence to the subject carefully

Don't reveal every piece of evidence immediately.

A useful approach is to allow the subject to establish their account first and then introduce relevant evidence.

For example:

1. “Have you ever accessed the payroll adjustment system?”
2. “When was the last time?”
3. “Who else had access?”
4. “What did you do when you accessed it?”
5. “Our records show an adjustment made using your credentials at 8:17 p.m. on March 4. Tell me about that transaction.”

This gives you a better opportunity to distinguish an innocent explanation from an explanation constructed in response to evidence.

7. When you identify a contradiction, stay precise

Avoid arguing with the subject.

Instead of:

“That's impossible. You're lying.” use:

“Earlier you said X. Now you're saying Y. Help me reconcile those two statements.” Then follow the issue wherever it leads.

Also distinguish between “I don't know,” “I don't remember,” and “I didn't do it.” They are materially different answers.

8. Ask the critical question directly

If the evidence supports asking whether the subject committed a particular act, don't hide the question behind hypotheticals.

For example:

“Did you alter the invoice?” is substantially clearer than:

“What would you say if someone suggested that the invoice had been altered?” ACFE's recent interviewing guidance specifically discusses the importance of precise, direct questions rather than hypothetical formulations that allow the subject to evade the underlying issue.

But reserve an admission-seeking/confrontational phase for circumstances where your evidence and investigative posture justify it; ACFE cautions against treating interviews as ordinary interrogations and recommends an appropriately planned strategy.

9. Close carefully

Before ending:

• Ask, “Is there anything else about this matter that you think I should know?”
• Ask whether there are documents or people who could corroborate their account.
• Give them an opportunity to correct or clarify anything.
• Summarize important points and ask whether your understanding is accurate.
• Document exactly what was said and by whom.
• Preserve original notes and recordings according to your organization's procedures.

Don't tell the subject what you think the investigation will ultimately conclude unless there is a legitimate reason to do so.

A simple interview structure

You can think of the interview as seven stages:

1. Prepare — evidence, chronology, objectives, legal considerations.
2. Rapport — establish a professional working relationship.
3. Free account — “Tell me what happened.”
4. Clarify — who, what, when, where, how, why.
5. Test — compare the account against documents and other evidence.
6. Challenge — address significant contradictions or suspected conduct directly.
7. Close — obtain additional leads, clarify the record, and document the interview.

The central principle is curiosity rather than accusation. Even when you're interviewing someone you strongly suspect committed the fraud, approach the interview as though you need to determine what actually happened—not merely obtain confirmation of your existing theory. That approach reduces confirmation bias and produces a more defensible investigative record.

For additional professional material, ACFE maintains a dedicated acfe.com, including material on interviewing witnesses and suspects and investigative interview techniques.

Then follow the issue wherever it leads.

Also distinguish between “I don't know,” “I don't remember,” and “I didn't do it.” They are materially different answers.

8. Ask the critical question directly

If the evidence supports asking whether the subject committed a particular act, don't hide the question behind hypotheticals.

For example:

“Did you alter the invoice?” is substantially clearer than:

“What would you say if someone suggested that the invoice had been altered?” ACFE's recent interviewing guidance specifically discusses the importance of precise, direct questions rather than hypothetical formulations that allow the subject to evade the underlying issue.

But reserve an admission-seeking/confrontational phase for circumstances where your evidence and investigative posture justify it; ACFE cautions against treating interviews as ordinary interrogations and recommends an appropriately planned strategy.

9. Close carefully

Before ending:

Conducting an effective investigative interview in a fraud case requires a careful blend of psychology, legal awareness, and rigorous preparation. Unlike a routine informational interview, a fraud interview often targets a reluctant, defensive, or deceptive subject.

Here is a structured, step-by-step approach to conducting an effective fraud investigation interview:

1. Preparation and Planning

• Gather evidence first : Never walk into an interview cold. Review all relevant documents, emails, bank statements, ledger entries, and audit trails before scheduling the session.
• Establish the objective : Know what you need to prove or disprove. Do you need an admission, an explanation of a process, or identification of co-conspirators?
• Determine the setting : Choose a neutral, private, and quiet location (or a secure virtual platform) that minimizes distractions and prevents interruptions. Ensure recording equipment (if permitted/appropriate) is tested beforehand.
• Prepare a document exhibit folder : Arrange key documents in chronological or thematic order. Do not show your entire hand immediately; save pivotal evidence for later in the interview.

1. Structure the Interview Flow

• The opening (Introductory phase) : Introduce yourself and any co-interviewer. Establish the purpose of the meeting professionally. Set the tone as formal, objective, and calm—avoid showing premature hostility or a rush to judgment.
• Establish ground rules : Clarify that the purpose is fact-finding, that notes are being taken, and encourage the subject to tell the complete truth. If applicable, ensure appropriate warnings or organizational rights (such as Weingarten rights for union employees) are addressed according to company policy or legal counsel advice.
• The background phase (Non-threatening questions) : Ask open-ended, low-risk questions about the subject's role, responsibilities, and routine. This establishes a baseline for their normal verbal and non-verbal communication behavior (baseline demeanor).
• The transition phase : Pivot gradually toward the problematic area or the specific transactions/anomalies in question. Ask neutral, broad questions about the process before narrowing down to specific documents.
• The body (Detailed questioning) : Present evidence methodically. Allow the subject adequate time to respond to discrepancies. Listen actively—pay attention not just to what they say, but how they say it (evasiveness, shifting timelines, over-explaining minor details, or sudden defensive postures).
• The closing : Summarize key admissions or statements to ensure accuracy, ask if they have anything else to add, and explain the next steps regarding the investigative process.

1. Key Tactics and Best Practices

• Use cognitive interviewing techniques : Ask the subject to recall events in reverse chronological order or from a different perspective to spot inconsistencies in fabricated stories.
• Control the environment : Maintain a calm, professional demeanor. Do not raise your voice, interrupt unnecessarily, or accept vague "I don't recall" answers too easily without gently pressing for clarification or presenting a document to jog their memory.
• Avoid premature accusations : Framing the interview as an interrogation too early causes the subject to shut down or demand legal counsel, ending your opportunity to gather spontaneous admissions.
• Document meticulously : Take precise, contemporaneous notes of exact quotes, behavioral shifts, and specific documents reviewed during the conversation. If a formal written statement or confession is obtained, review it carefully for accuracy and have it signed and dated if standard protocol dictates.

If you'd like, I can dive deeper into:

• How to spot verbal and non-verbal indicators of deception
• The legal difference between an investigative interview and a custodial interrogation
• How to structure a written confession or statement

Let me know how you want to proceed.

An effective fraud-investigation interview is primarily a fact-finding exercise, not an interrogation. Your objective is to obtain a complete, accurate account, test it against independent evidence, and identify additional investigative leads. The PEACE framework—Planning & Preparation, Engage & Explain, Account, Clarify & Challenge, Closure, and Evaluation—is a useful structure.

1. Plan before you walk in

Know exactly what you need the interview to accomplish.

• Establish the issues: What happened, when, how, who was involved, what was known, and what benefit or loss resulted?
• Build an evidence timeline: transactions, emails, system logs, approvals, access records, communications, policies, and witness accounts.
• Separate facts from assumptions. Don't begin with "I know this person committed fraud."
• Identify the gaps and contradictions that the subject can potentially explain.
• Decide which evidence you will disclose, and when. You don't necessarily want to reveal every piece of evidence at the beginning.
• Prepare a topic outline rather than a rigid script. ACFE emphasizes that careful preparation and question construction are central to effective fraud interviews.
• Determine applicable legal, employment, privacy, recording, privilege, and representation requirements before interviewing—particularly if the interview could lead to disciplinary or criminal proceedings.

2. Establish rapport without becoming overly familiar

Start with neutral background questions and explain the purpose and process.

For example:

"I'd like to understand your responsibilities, the procedures you normally follow, and then walk through some transactions that we're reviewing. I'm interested in your account of what happened." Be professional and nonjudgmental. Don't signal that you've already decided the subject is guilty. A professional relationship tends to produce better information, while interviewer bias and suggestive questioning can contaminate the account.

Conduct the interview privately and, where practical, with a single interviewer. ACFE specifically cautions that multiple people can influence one another and recommends private, individual interviews.

3. Get their story before showing your hand

Start with open-ended questions:

• "Tell me about your role in the purchasing process."
• "Walk me through what happened with this transaction."
• "What happened next?"
• "Who else was involved?"
• "How did you make that decision?"
• "What records would help us verify that?"

Then listen.

Don't immediately fill every silence. Let the subject provide their own chronology and terminology. This gives you a baseline account against which you can later compare documentary evidence.

4. Drill down systematically

Once you have the broad account, move from general → specific.

For example:

Broad: "Tell me how the payment was processed."

Specific: "Who initiated it?"

More specific: "What system did you use?"

Verification: "When did you enter it?"

Corroboration: "Who could see or approve the transaction?"

Evidence: "There's an approval recorded at 2:14 p.m. What does that approval represent?"

This approach is especially useful in fraud cases because seemingly minor details—access, timing, authorization, terminology, and workflow—can become important when compared with records.

ACFE recommends questions that are clear, precise, direct, and mutually understood, including asking subjects to define ambiguous terms they use.

5. Test inconsistencies rather than accusing

Suppose the subject says:

"I never approved that payment." Don't immediately respond:

"That's a lie. We have your approval." Instead, establish the account and then introduce the evidence:

"You said you didn't approve the payment. Help me understand this approval record showing your credentials at 2:14 p.m." Then let them explain.

Follow up on the explanation:

• "How could that have occurred?"
• "Who else had access?"
• "What is your explanation for the timing?"
• "What would we find if we checked the system logs?"
• "Who can corroborate what you're telling me?"

The point is to test competing explanations, not simply win an argument. Investigative interviewing guidance emphasizes testing accounts against what is already known and using discrepancies to develop further lines of inquiry.

6. Don't rely on "body language" as proof of deception

Avoid conclusions such as "He looked away, therefore he's lying."

Nervousness, hesitation, eye contact, posture, and changes in demeanor have many possible explanations. Treat behavioral observations as things that may warrant follow-up questions, not as evidence of guilt. ACFE's professional guidance recognizes behavioral assessment as part of interviewing but places it alongside other investigative considerations.

The strongest approach is:

behavior → question → evidence → corroboration

rather than:

behavior → conclusion of deception.

7. Ask the difficult questions directly

When you've established the relevant facts, don't hide the key issue behind convoluted questions.

For example:

• "Did you create this vendor?"
• "Did you authorize this payment?"
• "Did you receive any money from the vendor?"
• "Did you give anyone your credentials?"
• "Were you aware that the payment exceeded the approval limit?"
• "Did you alter this record?"

Then stop talking and give the person an opportunity to answer.

Direct questions are particularly important when you're testing a specific allegation; ACFE's fraud-interview guidance distinguishes clear, direct questions from vague or leading formulations.

8. Preserve the interview properly

Follow your organization's and jurisdiction's requirements for recording and documentation.

At minimum, document:

• date, time, location, and participants;
• the purpose of the interview;
• important questions and answers;
• documents or exhibits shown;
• significant admissions or denials;
• explanations for discrepancies;
• new leads identified;
• follow-up actions.

If recording is legally and organizationally permitted, an accurate recording is generally preferable to relying solely on memory or notes. Also preserve the original recording/notes and maintain appropriate chain-of-custody and confidentiality procedures.

9. Close carefully

Don't end immediately after the big question.

Ask:

• "Is there anything we've missed?"
• "Is there anything you want to correct or clarify?"
• "Who else should I speak with?"
• "What documents should I review?"
• "Is there anything you think I should know about this transaction?"
• "What do you think happened?"

Then summarize the important points back to the subject and give them an opportunity to correct inaccuracies. PEACE specifically treats closure and subsequent evaluation as distinct parts of the interview process.

A useful mental model

Think of the interview as:

Prepare → Let them tell the story → Clarify → Test → Challenge with evidence → Verify → Close → Investigate further

The biggest mistakes are usually starting with accusations, asking leading questions, revealing all the evidence too early, talking too much, treating nervous behavior as proof of lying, or failing to corroborate the account independently.

If this is a workplace/internal investigation rather than a law-enforcement investigation, the same fact-finding principles apply, but your employment-law, privacy, privilege, recording-consent, and disciplinary procedures can materially change how the interview should be conducted.

Direct questions are particularly important when you're testing a specific allegation; ACFE's fraud-interview guidance distinguishes clear, direct questions from vague or leading formulations.

Don't immediately respond:

"That's a lie. We have your approval." Instead, establish the account and then introduce the evidence:

"You said you didn't approve the payment. Help me understand this approval record showing your credentials at 2:14 p.m." Then let them explain.

Follow up on the explanation:

• "How could that have occurred?"
• "Who else had access?"
• "What is your explanation for the timing?"
• "What would we find if we checked the system logs?"
• "Who can corroborate what you're telling me?"

The point is to test competing explanations, not simply win an argument. Investigative interviewing guidance emphasizes testing accounts against what is already known and using discrepancies to develop further lines of inquiry.

6. Don't rely on "body language" as proof of deception

Avoid conclusions such as "He looked away, therefore he's lying."

Conducting an effective interview in a fraud investigation requires careful preparation, a structured approach, and psychological awareness. Unlike standard information-gathering interviews, fraud interviews often involve hostile, defensive, or deceptive subjects.

Here is a step-by-step framework to conduct an effective fraud investigation interview:

• Preparation and Planning : Review all available evidence, documents, emails, and financial records before the interview. Establish a timeline of events and identify the specific facts you need to prove or disprove.
• Establish the Setting : Choose a neutral, private, and quiet location with minimal distractions and a clear exit for all parties (ensure safety protocols are met). Avoid setting it up in a way that feels overly aggressive, but maintain a professional and formal atmosphere.
• Establish Rapport and Ground Rules : Start with non-threatening, general background questions to ease tension and gauge the subject's baseline behavior, verbal responses, and body language. State the purpose of the interview professionally without immediately making accusations.
• The Transition (The Body of the Interview) : Move systematically from general topics to specific, sensitive areas. Ask open-ended questions first ($Can you walk me through the approval process for this vendor?"$) before drilling down into closed, specific questions ($Why does this invoice lack a receiving stamp?"$).
• Observe Verbal and Non-Verbal Cues : Pay attention to shifts in behavior, inconsistencies in the timeline, evasive answers, or sudden defensiveness. Note that behavioral cues are indicators for deeper probing, not definitive proof of guilt.
• Introduce Evidence Methodically : Do not reveal all your evidence at once. Introduce documents or data points progressively, starting with neutral records and moving toward the most incriminating or contradictory evidence.
• Secure the Statement or Admission : If an admission or critical concession is made, clarify the details clearly: who, what, when, where, why, and how. Document the response meticulously, and if appropriate, transition to a written or recorded formal statement.
• Conclusion : Conclude the interview professionally. Summarize key points if necessary, remind the subject of confidentiality policies, and outline the immediate next steps without making premature final judgments or termination announcements (unless authorized by HR/Legal).

Would you like me to help you draft specific interview questions or outline how to handle a subject who is actively denying involvement?

An effective fraud investigation interview is a structured fact-finding process, not a confrontation. The goal is to obtain accurate information, test explanations, identify additional evidence, and preserve the subject’s statements. Good preparation, open-ended questioning, active listening, and careful documentation are central to successful fraud interviews.

1. Prepare before the interview

Before meeting the subject:

• Understand the allegation and known facts

  • What happened?
  • When did it occur?
  • Who had access, authority, or opportunity?
  • What documents, transactions, or systems are involved?

• Review evidence first

  • Examine records, emails, transaction logs, policies, and timelines.
  • Separate confirmed facts from assumptions.

• Define your objectives Decide what you need from the interview:

  • Background information?
  • Explanation of transactions?
  • Identification of other involved people?
  • Confirmation or contradiction of evidence?

• Plan the interview order Often, it is useful to interview witnesses and information holders before the primary subject so you understand the facts and can ask more informed questions.

2. Create the right environment

A productive interview environment should be professional and controlled:

• Use a private setting with minimal distractions.
• Avoid an overly aggressive atmosphere.
• Maintain a calm, respectful tone even if you suspect deception.
• Consider having one person lead questioning while another documents the interview.

The objective is to encourage the subject to provide information, not to make them defensive immediately.

3. Start broadly, then narrow

A common effective structure is the funnel approach: begin with broad questions and move toward specific issues.

Examples:

Background questions

• “Please describe your role and responsibilities.”
• “Walk me through your normal process for handling these transactions.”

Process questions

• “Who else is involved in this process?”
• “What controls are supposed to exist?”
• “What happens when there is an exception?”

Case-specific questions

• “Help me understand this transaction on March 12.”
• “Why was this approval entered under your credentials?”
• “Who authorized this change?”

Avoid revealing all evidence too early. Let the subject explain events in their own words first.

4. Use open-ended questions and listen

Strong interviewers spend more time listening than talking.

Helpful prompts:

• “Tell me more about that.”
• “Walk me through what happened next.”
• “How did you come to that conclusion?”
• “Who else would know about this?”

Allow silence. People often provide additional details when the interviewer does not immediately fill pauses.

5. Establish a baseline

Early questions about routine duties can help you understand the subject’s normal communication style and knowledge level.

For example:

• Ask about responsibilities they should easily know.
• Ask them to describe ordinary procedures.
• Observe how confidently and consistently they answer.

A change in behavior when discussing sensitive topics may indicate an area requiring further questioning, but avoid treating body language alone as proof of deception.

6. Challenge inconsistencies carefully

When you identify contradictions:

1. Let the subject finish their explanation.
2. Clarify the timeline.
3. Present facts gradually.
4. Ask for an explanation.

Example:

“Earlier you stated that you did not approve these payments. The records show your credentials were used for approval. Help me understand what occurred.”

Avoid accusations like:

“You committed fraud.”

Those statements can shut down communication and reduce the chance of obtaining useful information.

7. Document thoroughly

Record:

• Date, time, location, and attendees
• Questions asked and responses given
• Key admissions or denials
• Documents reviewed
• Follow-up items

After the interview, compare statements against evidence and other interviews. Interviews are most valuable when they help corroborate or challenge other evidence.

8. Close the interview strategically

Before ending:

• Ask: “Is there anything else you think I should know?”
• Ask who else should be interviewed.
• Confirm important facts.
• Leave the possibility open for follow-up questions.

A subject who feels the conversation remains open may provide additional information later.

Common mistakes to avoid

• Asking accusatory questions too early
• Talking more than listening
• Revealing all evidence immediately
• Interrupting explanations
• Treating nervousness as proof of guilt
• Failing to prepare a timeline and evidence map
• Relying on memory instead of detailed notes

For a suspected fraudster, the strongest interview is usually one that is calm, evidence-based, and patient—allowing the subject’s own explanation to be compared against the facts.

Conducting an effective interview in a fraud investigation requires careful preparation, a structured approach, and psychological awareness. Unlike standard information-gathering interviews, fraud interviews often involve hostile, defensive, or deceptive subjects.

• Preparation and Planning , review all relevant documents, financial records, emails, and physical evidence beforehand. Establish a clear objective, outline specific areas to cover, and timeline the alleged fraudulent actions so you can spot inconsistencies.
• Location and Setting , choose a quiet, private, and neutral room with minimal distractions and no physical barriers that block the subject's exit (to maintain a voluntary atmosphere). Ensure you have a witness present (ideally another investigator) to take notes and corroborate the conversation.
• Establish Rapport and Tone , begin with non-threatening, routine background questions to gauge baseline verbal and non-verbal behavior. Maintain a professional, objective, and calm demeanor—avoid showing anger, bias, or premature judgment.
• The Assessment Phase , use introductory and non-accusatory questions to test the subject's reactions and observe baseline stress indicators. Ask open-ended questions like "Can you explain how this process works?" rather than closed "yes/no" queries.
• The Transition to Confrontation , shift from information-gathering to a direct approach once you have established your evidence framework. Present facts logically, transitioning from least sensitive to most sensitive topics, and address rationalizations or denials firmly with documented proof.
• Managing Denials and Resistance , do not argue or get pulled into minor tangents when the subject denies involvement. Re-introduce the objective evidence calmly and ask them to account for the discrepancies or paper trails.
• Securing the Admission or Statement , transition to obtaining a comprehensive account once admissions are made. Clarify details regarding who, what, when, where, why, and how, and document whether anyone else was involved or aware.
• Conclusion and Documentation , summarize the key points or read back critical admissions to ensure mutual understanding before ending the interview. Prepare detailed, contemporaneous notes or a formal memorandum of interview immediately while recollections are fresh.

If you'd like, let me know:

• What type of fraud you are investigating (e.g., embezzlement, procurement fraud, expense abuse)
• Whether the subject is an employee, vendor, or external party

I can give you more tailored question frameworks or evidence checklists.

An effective fraud-investigation interview is primarily a fact-finding exercise, not an interrogation. The strongest approach is to prepare thoroughly, let the subject talk, ask precise questions, test their account against known evidence, and document the answers carefully. The Association of Certified Fraud Examiners (ACFE) emphasizes preparation, question design, rapport, behavioral assessment, and a structured progression from general to specific questions.

1. Prepare before you walk in

Know what you're trying to establish:

• What happened?
• When and where did it happen?
• Who had access or authority?
• How was the transaction or scheme carried out?
• What records or systems were involved?
• Who else knew or participated?
• What benefit or loss resulted?

Review the evidence first—financial records, emails, system logs, policies, prior interviews, and relevant timelines. Build a chronology and identify gaps or contradictions you need the subject to explain.

Don't go in assuming guilt. Preconceived conclusions can affect both your questioning and interpretation of the answers.

2. Start broad, then narrow

A useful progression is:

Background → open narrative → specific facts → inconsistencies → evidence → direct questions → closing

Start with relatively neutral questions:

“Tell me about your responsibilities involving vendor payments.”

Then:

“Walk me through what happened with the payment to ABC Company on June 12.”

Once you have their account, drill down:

“Who initiated the payment?”
“What system did you use?”
“What did you do after entering it?”
“Who approved it?”
“What happened next?”

ACFE recommends moving from general information toward increasingly specific questioning rather than beginning with confrontation.

3. Use precise, non-leading questions

Avoid questions that give the subject an easy semantic escape.

Instead of:

“Would you say you didn't personally benefit from the transaction?”

Ask:

“Did you receive any money, goods, services, or other benefit from that transaction?”

If an important term is ambiguous, define it. For example:

“When you say you ‘approved’ the invoice, what exactly did you do?”

This is particularly important in fraud cases because vague terminology can allow someone to answer technically without addressing the underlying fact.

4. Let silence work

After asking an important question, stop talking.

Don't rescue the subject from an uncomfortable silence by rephrasing the question or suggesting an answer. Give them time to formulate their response.

Open-ended prompts such as:

“Tell me what happened.”

can produce information you wouldn't obtain through a series of yes/no questions.

5. Test the story against evidence

Don't reveal everything you know at the beginning.

First obtain the subject's independent account. Then introduce relevant evidence and ask for an explanation.

For example:

“You said you never accessed the account that week. Help me understand this system record showing a login from your credentials on Tuesday at 9:14 a.m.”

Then listen to the explanation.

A contradiction isn't automatically proof of deception. There may be innocent explanations—shared credentials, inaccurate records, memory problems, or misunderstandings. Your job is to resolve the discrepancy rather than simply label the person a liar.

6. Don't rely heavily on body language

Nervousness, avoiding eye contact, sweating, changes in voice, or fidgeting aren't reliable proof of deception by themselves. ACFE materials emphasize establishing a behavioral baseline and considering behavioral changes alongside the person's verbal responses and other evidence.

Treat unusual behavior as a reason to ask another question, not as a conclusion.

7. When appropriate, move to direct questions

If your evidence has established a sufficiently strong basis, you can transition from information gathering to direct questions.

For example:

“Did you alter that invoice?”

“Did you instruct the vendor to send the money to that account?”

“Did you know the payment was unauthorized when you submitted it?”

Keep the question simple and precise. ACFE specifically distinguishes admission-seeking interviews from ordinary information-gathering interviews and cautions that the former should be used when there is a reasonable basis for the subject's involvement.

8. Give the subject opportunities to explain

If the evidence looks bad, don't simply say, “We know you did it.”

Instead:

“The records show X, while you've told me Y. Help me understand the difference.”

This can reveal legitimate explanations, additional participants, concealment methods, or previously unknown evidence.

It also makes your investigation more defensible because you're giving the subject a meaningful opportunity to respond.

9. Close carefully

Before ending, ask whether there is anything you haven't covered:

“Is there anything else about this transaction that you think I should know?”

“Is there anyone else I should speak with?”

“Are there documents or records that would help verify what you've told me?”

A final open-ended question can produce significant new information.

Then summarize the important points back to the subject and allow them to correct inaccuracies.

10. Document the interview rigorously

Record, according to applicable law and organizational policy:

• Date, time, location and participants
• Who asked each question, if multiple interviewers are present
• Material answers and admissions
• Documents/evidence shown to the subject
• Explanations for contradictions
• Names of additional witnesses
• Follow-up evidence identified
• Any corrections or clarifications made by the subject

If you're considering an audio/video recording or a signed statement, check applicable state/federal recording laws, employment policies, collective-bargaining requirements, and legal guidance before doing so.

A simple interview framework

Before: establish facts and evidence → build chronology → identify gaps → prepare questions.

Opening: introduce yourself → explain purpose/process → establish rapport.

Middle:

1. “Tell me what happened.”
2. Clarify chronology.
3. Identify people, actions and decisions.
4. Pin down specific dates/transactions.
5. Test the account against evidence.
6. Explore inconsistencies.
7. Ask direct questions where justified.

Closing: summarize → correct misunderstandings → ask what you missed → identify additional witnesses/documents → document next steps.

The key principle is don't try to “catch” the subject. Try to obtain a sufficiently detailed account that can be independently tested against the evidence. That produces a stronger investigation whether the subject turns out to be responsible, partially responsible, or innocent.

ACFE Interviewing Resources 

An effective fraud-investigation interview is primarily a fact-finding exercise, not an attempt to pressure someone into confessing. The strongest approach is prepared, neutral, evidence-based, and structured so the subject has repeated opportunities to explain their account. The ACFE emphasizes planning, precise questions, follow-up, and ethical interviewing practices.

1. Prepare before the interview

Know the case well enough that you don't have to learn the basics from the subject.

Beforehand:

• Identify exactly what you know, what you suspect, and what remains unknown.
• Review relevant transactions, emails, system logs, policies, approvals, access records, and other evidence.
• Build a chronology of events.
• Identify discrepancies that require explanation.
• Decide what information you will not disclose initially, so you can compare the subject's independent account with evidence later.
• Define the objective of the interview—e.g., establish who had access, understand a transaction, identify other participants, or explain a discrepancy.
• Consider your own potential confirmation bias. Going in assuming guilt can distort both your questions and interpretation of answers.

A useful preparation question is: “What fact do I need this person to explain, and what evidence independently supports or contradicts their explanation?”

2. Establish rapport without being manipulative

Start with straightforward, non-threatening questions and explain who you are, why you're conducting the interview, and what you expect from the conversation.

You want the subject talking and providing information before you get into disputed transactions.

Don't confuse rapport with being overly friendly or deceptive. The goal is to create conditions in which the person can give a detailed account.

3. Start broad, then narrow

A funnel approach is particularly useful:

Broad → specific → evidence

For example:

“Tell me about your responsibilities for customer refunds.”

Then:

“Walk me through how a refund normally gets processed.”

Then:

“Who could approve a refund?”

Then:

“Take me through the $7,500 refund to Customer X on March 14.”

Finally:

“The system shows your credentials approved that refund at 2:17 p.m. What happened?”

ACFE guidance similarly recommends starting with general/open questions and progressively narrowing toward specific facts.

4. Let the subject give their account before revealing all your evidence

One of the most valuable things you can obtain is the subject's independent version of events.

For example:

• “Tell me everything you remember about that transaction.”
• “What happened next?”
• “Who else was involved?”
• “How did you learn about that?”
• “What records would help establish what happened?”
• “Is there anything else I should understand about this?”

Don't immediately interrupt with, “That's not true—we have the email.”

Instead, document the account and identify points that can subsequently be tested against the evidence.

5. Use precise follow-up questions

Vague questions produce vague answers.

Instead of:

“Did you have anything to do with the missing money?”

Use:

“Did you transfer $4,200 from Account A to Account B on May 6?”

Then follow up:

• “What was the purpose of that transfer?”
• “Who instructed you to make it?”
• “When did you receive that instruction?”
• “What did you do after receiving it?”
• “Who else knew about it?”
• “What documentation supports your explanation?”

ACFE's recent guidance specifically emphasizes questions that are understandable, precise, direct, and based on mutually understood terminology.

6. Don't overinterpret body language

Avoid the classic mistake of assuming that nervousness, lack of eye contact, sweating, fidgeting, or changes in voice prove deception.

A person can become nervous because they're being accused, even when they're innocent. Treat behavioral changes as reasons to explore an answer, not proof that someone is lying.

The more useful comparison is between the person's account and independent evidence.

7. Put contradictions to the subject fairly

When you reach an inconsistency, give the subject an opportunity to explain it.

For example:

“Earlier you said you did not access the account that afternoon. The access log shows your credentials were used at 3:42 p.m. Help me understand that.”

Then stop talking.

Allow the subject to explain.

If they claim someone else used their credentials, explore that explanation:

• Who could have accessed the workstation?
• Where were you?
• When did you give anyone your credentials?
• Had you reported unauthorized access?
• What evidence could corroborate your explanation?

This is much stronger than simply saying, “The logs prove you're lying.”

8. Use evidence strategically

Don't dump your entire evidence file onto the table at the beginning.

A useful sequence is:

1. Obtain the subject's account.
2. Establish their knowledge and terminology.
3. Pin down dates, times, people, actions, and decisions.
4. Test the account against independent evidence.
5. Present significant contradictions.
6. Give the subject a reasonable opportunity to explain them.
7. Clarify the final explanation.

The purpose isn't to “trap” the person. It's to determine whether their account is consistent with the evidence.

9. Keep the interview controlled

Generally, have one primary interviewer rather than several investigators firing questions at the subject. ACFE's recent guidance notes that a one-interviewer/one-interviewee setup can reduce distractions and contamination.

If another investigator is present, have them take notes and provide questions through the primary interviewer rather than creating an interrogation atmosphere.

Also:

• Don't argue.
• Don't threaten.
• Don't promise outcomes you can't deliver.
• Don't make accusations you can't substantiate.
• Don't disclose confidential investigative information unnecessarily.
• Don't manufacture evidence or imply you possess evidence you don't have.
• Follow applicable employment, privacy, recording, labor, and legal requirements.

10. Close carefully

Before ending, ask:

• “Is there anything important we haven't discussed?”
• “Is there anything you want to correct or clarify?”
• “Who else should I speak with?”
• “What records should I review?”
• “Is there anyone who could corroborate your account?”
• “Is there anything you think I may have misunderstood?”

Then explain what happens next without promising a particular outcome.

The PEACE framework is a useful general model: Planning and Preparation → Engage and Explain → Account/clarification and challenge → Closure → Evaluation. It emphasizes obtaining accurate, relevant, and complete accounts rather than relying primarily on coercive confession-seeking.

A practical rule

For every important allegation, try to establish these six things:

Who → What → When → Where → How → Why

And whenever possible, obtain independent corroboration for the answer.

The biggest mistake in fraud interviews is trying to prove your theory instead of testing it. A good interviewer should be prepared to discover that the subject's explanation is either consistent with the evidence, inconsistent with it, or reveals a different explanation altogether.

For further professional guidance, the ACFE's interviewing resources are a good starting point.

Conducting an effective investigative interview in a fraud case requires a careful blend of psychology, law, preparation, and tactical execution. Unlike a standard fact-finding interview, a fraud interview often targets a reluctant, defensive, or deceptive subject.

Here is a step-by-step framework to conduct an effective fraud investigation interview:

1. Preparation and Planning

• Gather all evidence first : Never walk into an interview cold. Review all relevant documents, emails, bank records, and audit trails (P ⋅ Q = evidence) before speaking to the subject.
• Establish the objective : Know precisely what you need to prove or disprove, and list the specific admissions or facts you want to obtain.
• Determine the sequence : Decide whether this person is a witness, a potential co-conspirator, or the primary target. Interview witnesses and minor players before confronting the primary suspect.
• Secure the environment : Choose a quiet, neutral, private room with minimal distractions and clear exits for safety, ensuring the door is not blocked.

1. Establish Rapport and Setting the Tone

• Remain objective and professional : Avoid showing anger, bias, or premature judgment. Your demeanor should be calm, methodical, and matter-of-fact.
• Set the ground rules : Introduce yourself, state the purpose of the meeting in a professional (and non-accusatory) manner, and explain that you are conducting a fact-finding inquiry.
• Observe baseline behavior : Ask neutral, comfortable background questions first to gauge the subject's normal verbal and non-verbal baseline responses.

1. The Informational Phase (Open-Ended Inquiry)

• Ask open-ended questions : Allow the subject to talk freely before locking them into a specific narrative (e.g., "Walk me through your process for handling vendor approvals").
• Avoid premature accusations : Let the subject incriminate or exonerate themselves through their own timeline. Listen actively and take meticulous notes.
• Pin down specifics : Ask about dates, times, locations, and specific documents. Get them to commit to details (e.g., "Whose signature is this?", "Did you authorize this transaction?").

1. The Confrontational / Deception-Detection Phase

• Watch for behavioral shifts : Look for sudden changes in posture, defensive language, avoidance of eye contact, excessive sweating, or sudden shifts from cooperative to hostile.
• Introduce evidence strategically : Do not lay all your cards on the table at once. Introduce evidence incrementally, starting with minor discrepancies and moving toward the most damaging proof.
• Confront inconsistencies calmly : When the subject contradicts a known fact or document, calmly point it out and ask them to explain the discrepancy without being aggressive or argumentative.

1. Securing the Admission or Closing

• Avoid legal traps or coercion : Do not make promises of immunity, lenient treatment, or threats, as this can invalidate any confession or admission legally.
• Summarize and clarify : Once an admission is made, have the subject repeat or clarify the key points to ensure there is no misunderstanding.
• Document the interview : Immediately following the session, draft a detailed memorandum of interview (chronological summary or Q&A) while the details are fresh, and have witnesses sign notes or formal statements if standard protocol dictates.

Would you like me to focus on:

• Specific question frameworks (like the Reid Technique or cognitive interviewing)
• How to handle defensive or hostile responses
• Documenting and preserving the interview legally

Let me know which area you'd like to explore further.