How Can Forensic Accountants Prove Estafa in Court?

Introduction

Corporate embezzlement cases often involve thousands of transactions, several bank accounts, multiple accounting records, and concealment methods that are difficult to explain through ordinary testimony. In these cases, an independent financial auditor or forensic accountant may help the prosecution convert complex financial data into evidence that the court can understand and evaluate.

The expert, however, does not decide whether the accused committed estafa. The expert explains the accounting records, identifies irregular transactions, traces the movement of funds, and presents the basis for the computation of the alleged loss. Criminal liability must still be established through competent evidence proving every element of the offense beyond reasonable doubt.

Legal Basis for Expert Testimony

Under Section 52, Rule 130 of the 2019 Amendments to the 1989 Revised Rules on Evidence, the opinion of a witness may be received when it concerns a matter requiring special knowledge, skill, experience, training, or education, and the witness is shown to possess those qualifications. The rule recognizes that specialized financial analysis may assist the court in understanding evidence that is beyond ordinary experience.

The admissibility of expert testimony depends not only on the witness’s professional title. The proponent must establish the witness’s actual competence in the subject matter, the reliability of the work performed, and the connection between the opinion and the evidence presented in court.

The Supreme Court has explained that an auditor’s testimony may be admissible when the auditor participated in examining the relevant records and is qualified to testify on the contents of the audit report. In Reyes, et al. v. Sandiganbayan (4th Division) and People of the Philippines, G.R. No. 148607, 2012, the Court sustained the admissibility of testimony from an audit-team member who examined and validated the working papers, participated in the exit conference, and helped prepare the audit report.

The Court likewise recognized the evidentiary value of an audit report supported by bank certifications and standard auditing procedures in San Diego v. Court of Appeals, G.R. No. 176114, 2015. The weight given to the report was strengthened because the opposing expert did not examine the cooperative’s primary books and commercial documents sufficiently to disprove its conclusions.

What a Forensic Accountant Should Establish

A forensic accountant should be prepared to explain four related matters: the records examined, the method used, the irregularity identified, and the resulting financial loss. The testimony should proceed from source documents to analysis and then to the conclusion.

The witness should identify, where applicable:

• the engagement or assignment under which the examination was conducted;
• the books of accounts, ledgers, journals, vouchers, invoices, bank statements, deposit slips, checks, and electronic records reviewed;
• the accounting and auditing procedures applied;
• the transactions that departed from the company’s records or established controls;
• the person or account connected with each questioned transaction; and
• the amount allegedly misappropriated, including the computation supporting that amount.

The witness should distinguish between an accounting irregularity and a criminal act. A shortage, unexplained entry, or reconciliation difference may support an inference of wrongdoing, but it does not automatically prove that the accused personally took the funds or acted with the intent required for estafa.

Preparing the Expert Before Trial

Review the Complete Record

Preparation should begin with a complete review of the primary records, not merely a summary prepared by another person. The expert should examine the original or properly authenticated copies of the books, bank documents, accounting entries, supporting vouchers, and communications relevant to the transactions.

In San Diego v. Court of Appeals, the Court contrasted a detailed examination of primary books and commercial documents with a review limited mainly to monthly reconciliation reports. The distinction is significant: an opinion based on incomplete materials is more vulnerable to an attack on reliability and weight.

Preserve the Audit Trail

The examination should maintain a clear audit trail showing how each conclusion was reached. Working papers should identify the source of each figure, the adjustment made, the person who performed the procedure, and the document that supports the conclusion.

The audit trail should permit the prosecutor, defense counsel, and court to move backward from the final loss computation to the underlying transaction. Unsupported totals and unexplained spreadsheets invite objections that the opinion is speculative or based on hearsay.

Separate Personal Knowledge from Information Received

The expert should clearly state which procedures the expert personally performed and which information was obtained from other auditors, employees, or records. An expert may rely on professional materials and records in forming an opinion, but the factual foundation must still be established in accordance with the Rules on Evidence.

In Reyes, et al. v. Sandiganbayan (4th Division) and People of the Philippines, the Court accepted the testimony of an audit-team member because she examined the documents, participated in the audit process, attended the exit conference, and helped prepare the report. The witness’s participation supplied a factual basis for her testimony.

Presenting the Expert in Direct Examination

Establish Qualifications First

The direct examination should establish the witness’s education, professional licenses, audit experience, forensic accounting work, familiarity with the relevant industry, and experience examining similar transactions. It should also identify the witness’s role in the particular examination.

The presentation should avoid relying solely on the witness’s designation as an “independent auditor” or “forensic accountant.” The court must be shown why the witness possesses the special knowledge, skill, experience, training, or education required by Section 52, Rule 130.

Explain the Method in Plain Language

The expert should describe the method in a manner understandable to a judge or non-accountant. Technical terminology should be defined before it is used. For example, the witness may explain that a bank reconciliation compares the entity’s ledger with the bank’s records and identifies deposits, withdrawals, checks, or entries that do not correspond.

The testimony should then connect the method to the records in the case. A simple transaction schedule may be more persuasive than a lengthy narrative if it shows the date, amount, source document, accounting entry, destination account, and resulting discrepancy.

Trace the Funds Transaction by Transaction

Where the theory involves corporate embezzlement, the witness should trace the funds from the entity’s possession to the alleged recipient or destination. The testimony should identify whether the accused received the property, controlled the relevant account, authorized the transaction, altered the records, or benefited from the disposition.

For example, the expert may explain that a check recorded as deposited into the corporation’s account was instead deposited into another account, or that a withdrawal was omitted from the books and later concealed through a false journal entry. Each conclusion should be supported by the corresponding check, deposit slip, bank certification, ledger entry, or other competent record.

Present the Loss Computation Transparently

The computation should identify the gross amount involved, legitimate deductions, recovered amounts, duplicate entries, and the final alleged loss. The expert should explain whether the computation concerns actual loss, unaccounted funds, or the value of property allegedly misappropriated.

The witness should not overstate the conclusion. If the records establish only an unreconciled shortage, the expert should say so and identify the additional evidence needed to connect the shortage to the accused.

Using Audit Reports and Supporting Documents

An audit report is not automatically conclusive merely because it was prepared by an auditor. Its evidentiary weight depends on the competence of the witness, the reliability of the procedures, the completeness of the records, and the extent to which the report is supported by independent documents and testimony.

In People of the Philippines v. Tanjutco, G.R. No. 23924, 1968, the Court gave weight to the auditors’ report because it was clear and supported by monthly bank accounts, bank statements, deposit slips, and testimonial evidence. The decision illustrates the value of presenting the report together with the underlying records rather than offering it as an unexplained conclusion.

The prosecution should ordinarily prepare the following exhibits, subject to the applicable rules on authentication and admissibility:

• the engagement letter, appointment, or assignment of the auditor;
• the audit report and relevant working papers;
• bank statements, certifications, cancelled checks, deposit slips, and withdrawal records;
• general ledgers, journals, cashbooks, vouchers, invoices, and subsidiary records;
• company policies, authorization matrices, and internal-control documents; and
• transaction schedules and charts that accurately summarize the source records.

The records should be organized in the same sequence in which the expert will explain them. A court should not be required to search through an unstructured collection of documents to verify the witness’s calculation.

Authentication and Electronic Accounting Records

Modern corporate investigations commonly involve electronic ledgers, accounting software, spreadsheets, emails, digital bank records, and extracted database files. These materials require careful attention to authentication, integrity, and the circumstances under which they were generated, maintained, and retrieved.

The 2019 Amendments to the 1989 Revised Rules on Evidence expressly recognize electronic, optical, and similar means of recording and presenting evidence. The proponent should be prepared to show the system used, the manner of retrieval, the identity of the person who extracted or maintained the data, and the safeguards against alteration.

A forensic accountant should also preserve the original electronic files where possible, document the extraction process, record the date and source of the data, and maintain a hash value or comparable integrity record when appropriate. Screenshots alone may be insufficient if the opposing party properly challenges their origin or completeness.

Handling Cross-Examination

Defense counsel will usually test the expert’s independence, qualifications, assumptions, methodology, access to records, and ability to exclude innocent explanations. The witness should therefore be ready to explain limitations without becoming argumentative.

Common areas of cross-examination include:

• whether the expert personally examined the primary records;
• whether the expert relied on summaries prepared by interested employees;
• whether legitimate business transactions were included in the alleged loss;
• whether the same transaction was counted more than once;
• whether the accused had authority over the funds or merely performed clerical functions; and
• whether the conclusion proves misappropriation or only poor accounting control.

The expert should not claim that an accounting discrepancy, standing alone, proves criminal intent. The witness’s role is to explain the financial evidence. The court determines whether the totality of the evidence proves the accused’s criminal liability.

Distinguishing Incompetence from Criminal Misappropriation

Corporate losses may result from theft, fraud, accounting error, negligence, unauthorized borrowing, weak internal controls, or ordinary business loss. The financial analysis should identify facts that distinguish these possibilities.

In San Diego v. Court of Appeals, the accused argued that missing funds demonstrated only incompetence in performing assigned duties. The Court nevertheless sustained the conviction because the prosecution’s audit evidence, bank certifications, and related proof sufficiently established the charged criminal conduct. The lesson is that the prosecution should present more than a shortage: it should establish the transaction pattern, access, concealment, benefit, and connection to the accused.

Similarly, Bank of the Philippine Islands v. Casa Montessori Internationale, et al., G.R. No. 149454, 2004, emphasized that an independent auditor’s work carries professional and ethical responsibilities. The auditor is not management and does not control the client’s operations, but is expected to apply appropriate auditing procedures competently. This distinction may be important when evaluating whether the auditor detected, enabled, or participated in the alleged scheme.

Typical Trial Scenarios

Unrecorded Bank Deposits

The expert may compare cash received according to official receipts with deposits reflected in bank records and the company’s books. The strongest presentation identifies each receipt, the expected deposit, the actual deposit, the person responsible for handling the funds, and any subsequent concealment.

Fictitious or Altered Entries

The witness may explain journal entries that lack supporting documents, contain fictitious names, or were posted after the fact to conceal withdrawals. If the case also involves false entries in books or records, counsel must identify the precise statutory offense charged and prove its separate elements.

Section 257 of the National Internal Revenue Code of 1997, as amended, penalizes specified acts involving false entries, records, reports, falsified forms, unauthorized auditing, or multiple sets of books in the circumstances stated in the provision. That offense should not be conflated with estafa; the information and evidence must correspond to the charge actually filed.

Transfers to Related Accounts

Where funds are transferred to an account associated with the accused, a related company, or a close associate, the expert should present the banking records and explain the accounting treatment. The financial connection may support the prosecution’s theory, but ownership, control, authority, and intent must be proved through the complete evidence.

Restitution Does Not Necessarily End the Criminal Case

Payment or restitution may affect the civil aspect of the case, but it does not automatically extinguish criminal liability. In People of the Philippines v. Tanjutco, G.R. No. 23924, 1968, the Court held that acceptance of payment or restitution did not bar prosecution for qualified theft involving abuse of confidence.

Accordingly, an auditor should record recovered amounts accurately but should not treat restitution as proof that the original transaction was lawful or that the criminal case has ended. The prosecution must still prove the offense charged and the accused’s participation.

Trial Checklist for Counsel

Before presenting the expert, counsel should confirm that:

• the witness is qualified in the specific subject of the opinion;
• the witness personally examined or reliably verified the material records;
• the audit report is supported by primary documents and independent confirmations;
• the chain of custody and integrity of electronic records are documented;
• the computation excludes legitimate transactions and duplicate amounts;
• the testimony connects the questioned transactions to the accused; and
• the expert distinguishes accounting findings from the ultimate legal conclusion of guilt.

Counsel should also prepare a concise transaction matrix and a demonstrative presentation that accurately reflects the admitted evidence. Demonstrative aids should summarize the records, not replace them.

Conclusion

A forensic accountant can be highly effective in an estafa trial when the testimony is grounded on complete records, transparent procedures, and transaction-level analysis. The most persuasive presentation does not merely announce a shortage; it shows how the funds were received, recorded, moved, concealed, and connected to the accused.

Prosecutors should establish the expert’s qualifications, authenticate the underlying records, explain the methodology in understandable terms, and prove the financial loss without overstating the accounting conclusions. Defense counsel should test the completeness of the examination, the reliability of the assumptions, and whether the evidence proves criminal misappropriation rather than mere negligence or inadequate controls.

The final opinion must remain within the proper role of an expert witness: to assist the court in understanding specialized financial evidence while leaving the determination of criminal liability to the court.

About Nicolas and De Vega Law Offices

 Nicolas and de Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.