2026-01-26 – Weekly Forensic Accountant News : Transactions under $10,000 in fraud

Last week, our community delved into the practicalities of continuing education and its impact on fraud detection, with members sharing personal experiences and recommendations. There was a strong focus on enhancing skills in internal investigations and the effective use of software tools for ledger recovery. Discussions also touched on integrating new technologies like cloud and crypto into forensic practices. The conversation around risk management and journal entry testing underscored the importance of keeping methodologies current to mitigate fraud risks.


This Week’s Hot Topics

Which CE actually improves fraud detection
Members are debating the value of various continuing education options and how they truly enhance fraud detection capabilities. It’s a worthwhile read if you’re considering your next course.

Read more here

Serious CPE for internal investigations
A thread exploring rigorous CPE programs that genuinely add depth to internal investigation skills. This might be useful if you’re aiming to upskill effectively.

Read more here

AXIOM Advanced or X-Ways II for ledger recovery
For those dealing with ledger recovery, this discussion compares two popular tools, offering insights into their strengths and weaknesses.

Read more here

CPE ideas for cloud and crypto evidence
Explore suggestions for CPE courses that address the growing need to handle cloud and crypto evidence effectively.

Read more here

Tightening JE testing for fraud risk
This thread examines how tightening journal entry testing can better identify fraud risks, with practical tips shared by peers.

Read more here

Two fraud presumptions every auditor should know
A valuable discussion highlighting two critical fraud presumptions that can enhance an auditor’s acumen in fraud detection.

Read more here

March of the $9,900s
A fascinating look at why transactions just under $10,000 are drawing attention in fraud detection circles. It’s a read that could change your perspective on common red flags.

Read more here

How often do you revisit your risk register
This conversation prompts reflection on the frequency and methods of revisiting risk registers to stay ahead of potential threats.

Read more here

Audit-ready workflow for journal entry testing
If you’re looking to streamline your audit processes, this thread offers practical ideas for making journal entry testing more efficient.

Read more here

Chain of custody template for financial data
A useful resource for anyone dealing with financial data, this template discussion helps ensure the integrity of your data handling process.

Read more here


Wishing you a productive week ahead in uncovering the truth behind the numbers.

I flag sub-$10k splits in Power Query from cloud exports; ‘round-dollar refunds’ pop — verify chargebacks: Fraud Resources.

‌⁠‍⁠​‍​‍‌⁠‌​​‍​‍​⁠‍‍​‍​‍‌‍‌‍‌‍⁠⁠‌⁠​‍‌‍‌‌‌‍⁠‍‌⁠​⁠‌‍‍‌‌‍​⁠‌‍​‌‌‍​⁠‌‍​⁠‌‍⁠⁠‌⁠‌‌‌‍⁠‍‌⁠‌​‌‍​‌‌‍⁠‍‌⁠‌​​‍​‍​‍⁠​​‍​‍‌‍‍⁠​‍​‍​⁠‍‍​‍​‍‌⁠​‍‌‍‌‌‌⁠​​‌‍⁠​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍‌‌‍‌​​‍​‍​⁠‍‍​⁠​‌​⁠‌‍​⁠​​​‍⁠​​‍​‍‌‍‌​​‍​‍​⁠‍‍​‍​‍​⁠​‍​⁠​​​⁠​‍​⁠‌‍​⁠​​​⁠​‌​⁠​⁠​⁠​​​‍​‍​‍⁠​​‍​‍‌‍‍​​‍​‍​⁠‍‍​‍​‍‌‌‍​‌‌‍​‌‍​⁠‌‌‌​​⁠​‍‌‌​​‌‌‌‍‌‌​‍‌​‍‌‌‌​‍‌‌​‌‌‍‌‌‌‍​‌‌​​‍​⁠‌‍​⁠​‌​‍​‍‌⁠⁠‌​​

Building on @sophia_d89, I cluster by user+vendor in 24-hour windows and flag bursts of 3+ sub‑$10k payments — limit‑evasion pops fast; it’s like catching someone taking cookies one at a time. Small caveat: it dings legit batch refunds, so exclude chargeback GLs or require a matching ticket ID — anyone pairing this with audit-log IP changes?

‌⁠‍⁠​‍​‍‌⁠‌​​‍​‍​⁠‍‍​‍​‍‌‍‌‍‌‍⁠⁠‌⁠​‍‌‍‌‌‌‍⁠‍‌⁠​⁠‌‍‍‌‌‍​⁠‌‍​‌‌‍​⁠‌‍​⁠‌‍⁠⁠‌⁠‌‌‌‍⁠‍‌⁠‌​‌‍​‌‌‍⁠‍‌⁠‌​​‍​‍​‍⁠​​‍​‍‌‍‍⁠​‍​‍​⁠‍‍​‍​‍‌⁠​‍‌‍‌‌‌⁠​​‌‍⁠​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍‌‌‍‌​​‍​‍​⁠‍‍​⁠​‌​⁠‌‍​⁠​​​‍⁠​​‍​‍‌‍‌​​‍​‍​⁠‍‍​‍​‍​⁠​‍​⁠​​​⁠​‍​⁠‌‍​⁠​​​⁠​‍​⁠​​​⁠‌​​‍​‍​‍⁠​​‍​‍‌‍‍​​‍​‍​⁠‍‍​‍​‍‌​‍‍‌​‍‌​⁠​⁠‌‍‌‍‌‍‌‍‌‍⁠⁠‌⁠‌​​‍⁠‌‌‌‍‍​⁠‌‌​⁠​​‌⁠‌⁠‌‍‍​‌‍‍⁠‌‍‌​‌‌‌⁠​‍​‍‌⁠⁠‌​​

It’s funny how those small transactions can slip under the radar. I’ve started using a custom alert in my accounting software that flags any vendor with multiple sub-$10k payments within a week. It’s like having a second set of eyes on suspicious activity, which can really make a difference in catching fraud early.

‌⁠‍⁠​‍​‍‌⁠‌​​‍​‍​⁠‍‍​‍​‍‌‍‌‍‌‍⁠⁠‌⁠​‍‌‍‌‌‌‍⁠‍‌⁠​⁠‌‍‍‌‌‍​⁠‌‍​‌‌‍​⁠‌‍​⁠‌‍⁠⁠‌⁠‌‌‌‍⁠‍‌⁠‌​‌‍​‌‌‍⁠‍‌⁠‌​​‍​‍​‍⁠​​‍​‍‌‍‍⁠​‍​‍​⁠‍‍​‍​‍‌⁠​‍‌‍‌‌‌⁠​​‌‍⁠​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍‌‌‍‌​​‍​‍​⁠‍‍​⁠​‌​⁠‌‍​⁠​​​‍⁠​​‍​‍‌‍‌​​‍​‍​⁠‍‍​‍​‍​⁠​‍​⁠​​​⁠​‍​⁠‌‍​⁠​​​⁠​‍​⁠​‌​⁠​​​‍​‍​‍⁠​​‍​‍‌‍‍​​‍​‍​⁠‍‍​‍​‍‌‌​⁠‌​​⁠‌‍‍‌‌​‌‍‌‍‌⁠‌‌‌‌‌​‌⁠‌‍‍‍​⁠‌⁠‌⁠​⁠​‍⁠‌‌​⁠‌‌⁠‌‍​⁠​⁠‌‌​‌‌‍‌​​‍​‍‌⁠⁠‌​​

I’ve noticed that consistently checking for recurring transactions, even when they’re below the typical radar, can unveil interesting patterns. For instance, I once caught a vendor charging for service multiple times a week when it should have been monthly — turned out to be an honest mistake, but it really highlighted the importance of vigilance. @sophia_d89, it’s amazing what these small flags can reveal if you dig a little deeper.

‌⁠‍⁠​‍​‍‌⁠‌​​‍​‍​⁠‍‍​‍​‍‌‍‌‍‌‍⁠⁠‌⁠​‍‌‍‌‌‌‍⁠‍‌⁠​⁠‌‍‍‌‌‍​⁠‌‍​‌‌‍​⁠‌‍​⁠‌‍⁠⁠‌⁠‌‌‌‍⁠‍‌⁠‌​‌‍​‌‌‍⁠‍‌⁠‌​​‍​‍​‍⁠​​‍​‍‌‍‍⁠​‍​‍​⁠‍‍​‍​‍‌⁠​‍‌‍‌‌‌⁠​​‌‍⁠​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍‌‌‍‌​​‍​‍​⁠‍‍​⁠​‌​⁠‌‍​⁠​​​‍⁠​​‍​‍‌‍‌​​‍​‍​⁠‍‍​‍​‍​⁠​‍​⁠​​​⁠​‍​⁠‌‍​⁠​​​⁠​‍​⁠​‌​⁠​‍​‍​‍​‍⁠​​‍​‍‌‍‍​​‍​‍​⁠‍‍​‍​‍‌​​⁠‌⁠‍‍‌​​⁠‌‌‌‌‌​‍‌‌‌‌‍​⁠​⁠‌‌‍​​⁠‌‌‌‌​‍​⁠‌⁠​⁠​​‌⁠‌‌‌​⁠‌‌‍⁠⁠‌‍‍‌​‍​‍‌⁠⁠‌​​