Skip to main content

Lesson 15 of 25

Evidence, Litigation, and the Expert Witness

5 min read · CFE

Learn what makes evidence admissible — relevance, authentication, the hearsay rule and the Rule 1006 summary, privilege and work product — and the difference between a fact and an expert witness. Keep your evidence and your testimony defensible.

Evidence is the whole game

  • A finding is only as good as the evidence behind it
  • Direct vs. circumstantial; the standard of admissibility
  • Federal Rules of Evidence frame what gets in

An examiner can be completely right about a fraud and still lose the case, if the evidence can't come in. That's the hard truth this lecture is built around: being correct isn't enough, your proof has to be admissible. So we'll cover how evidence is classified and what it takes to get it admitted.

Start with two basic distinctions the exam tests. Direct evidence proves a fact without any inference — an eyewitness who saw it, a signed confession, a video. Circumstantial evidence proves a fact by inference — fingerprints at the scene, a money trail leading to an account, a lifestyle wildly inconsistent with reported income.

Here's the point candidates often get wrong: fraud cases lean heavily on circumstantial evidence, because nobody films themselves embezzling, and that's perfectly fine. A strong, tightly woven web of circumstantial evidence can absolutely sustain a conviction, every bit as much as direct evidence. Circumstantial does not mean weak.

The Federal Rules of Evidence, the F-R-E, govern what's admissible in U-S federal court, and several specific rules show up on this exam by number, so we'll name them as we go.

Relevance, authentication, and the best-evidence idea

  • Relevance — FRE 401/402: does it make a fact more or less likely?
  • Authentication — FRE 901: prove the thing is what you claim
  • Documents must be shown to be genuine

Three threshold concepts. First, relevance: under Federal Rules of Evidence four-oh-one and four-oh-two, evidence is admissible only if it tends to make a material fact more or less probable. Irrelevant evidence is out, full stop.

Second, authentication, Rule nine-oh-one: before a document or item comes in, you must show it's genuinely what you claim — this bank record really is from this bank, this email really came from this account. Authentication is where sloppy evidence handling kills a case. And the related best-evidence principle generally calls for the original of a writing when its contents are in dispute.

This is where the chain of custody earns its keep — a clean, documented trail showing who had the evidence and when. The lesson for the examiner: collect cleanly, label everything, and document where each item came from at the moment you get it, so authentication is easy later instead of impossible at trial.

Hearsay — and why summaries matter

  • Hearsay — an out-of-court statement offered for its truth
  • Generally inadmissible, with many exceptions (e.g., business records)
  • FRE 1006 — summaries of voluminous records are admissible

Hearsay is a favorite exam topic. Hearsay is an out-of-court statement offered to prove the truth of what it asserts, and it's generally inadmissible because the person who made it isn't there to be cross-examined. But there's a long list of exceptions — the business-records exception is the one examiners rely on most, letting properly kept records of a regularly conducted activity come in.

The rule examiners should especially know is Federal Rule of Evidence ten-oh-six, the summary rule: when the underlying records are too voluminous to examine conveniently in court, you may present a summary, chart, or calculation — as long as the originals are made available to the other side. That's exactly what a fraud examiner's spreadsheets, schedules, and money tracings often are — a digestible summary standing in for thousands of underlying transactions — so Rule ten-oh-six is your friend, as long as you keep and share the source records that support it.

Privilege and work product

  • Attorney-client privilege protects confidential legal advice
  • Work-product doctrine protects materials prepared for litigation
  • Working under counsel can extend protection to your analysis

Two protections can shield — or trip up — your work. Attorney-client privilege protects confidential communications between a client and its lawyer made to obtain legal advice. The work-product doctrine protects materials prepared in anticipation of litigation.

For a fraud examiner, the practical point is that when you're engaged by or working at the direction of counsel, your analyses and reports may fall under these protections, which is one reason sensitive investigations are often run through the legal department. But privilege can be waived by careless disclosure, so understand whose privilege it is and how to preserve it. The exam may ask whether a given examiner's report is protected — the answer usually turns on two things: who directed the work, and whether it was done to obtain legal advice or in anticipation of litigation.

Work the examiner did on their own, for ordinary business reasons, generally isn't privileged.

Testifying: fact witness vs. expert

  • Fact (lay) witness — testifies to what they observed
  • Expert witness — FRE 702: gives opinions from specialized knowledge
  • Stay objective; opinions must rest on reliable methods

Finally, your day in court. A fraud examiner can testify in two capacities, and the exam tests the difference. As a fact, or lay, witness, you testify to what you personally observed and did — no opinions.

As an expert witness, under Federal Rule of Evidence seven-oh-two, your specialized knowledge, skill, training, or experience lets you offer opinions — conclusions a lay witness could never give — provided those opinions rest on sufficient facts or data and on reliable principles and methods reliably applied to the case. That reliability requirement is the gatekeeping standard the exam expects you to recognize. Whichever role you're in, objectivity is everything: an expert who slides into advocacy, who argues for a side rather than informs the trier of fact, loses credibility and can be excluded outright.

Present your findings clearly, ground every opinion in your methodology, and never overstate what the evidence shows. That closes the Law section. Next, the Investigation section opens with how to plan and conduct the examination itself.

Sources

  • Federal Rules of Evidence — relevance (Rules 401–402), hearsay (Rule 801 et seq.), authentication (Rule 901), summaries of voluminous records (Rule 1006), expert testimony (Rule 702)
  • attorney-client privilege and work-product doctrine
  • direct vs. circumstantial evidence

Test your knowledge

A few CFE questions on this material — pick an answer to see the explanation.

  1. Q1. The accounting equation that serves as the foundation of double-entry bookkeeping is:

  2. Q2. Under the accrual basis of accounting, revenue is recognized when:

  3. Q3. A company understates its allowance for doubtful accounts, thereby overstating net accounts receivable and understating bad-debt expense. The net effect on reported income is:

  4. Q4. Which of the following best describes 'improper capitalization' as a financial statement fraud scheme?

Ready to practice?

Put this lesson to work on real CFE questions.

Drill the full CFE bank →