How do I conduct an effective interview with a subject in a fraud investigation?

An effective fraud-investigation interview should be a fact-finding exercise, not an interrogation. A useful structure is the PEACE model: Planning and preparation → Engage and explain → Account → Clarification/challenge → Closure → Evaluation. The College of Policing and the Association of Certified Fraud Examiners both emphasize preparation, open questioning, accurate documentation, and avoiding assumptions about guilt.

1. Prepare before you meet the subject

Know exactly what you are trying to establish.

• Review the relevant financial records, emails, transactions, policies, access logs, and other evidence.
• Build a timeline of the events.
• Separate known facts, assumptions, and unanswered questions.
• Identify the specific elements of the alleged misconduct you need to prove or disprove.
• Decide what information you will disclose and what you will initially hold back.
• Prepare a topic-based interview plan rather than a rigid script.

ACFE specifically emphasizes understanding the underlying documents and internal controls before interviewing a subject.

2. Start by establishing rapport and ground rules

Be professional and non-accusatory at the outset.

Explain:

• Who you are and your role.
• The purpose of the interview.
• How the interview will be documented or recorded, where legally permitted.
• That you want the subject's account in their own words.
• Any applicable rights, representation requirements, company policies, or jurisdiction-specific legal requirements.

A professional relationship can improve the accuracy and completeness of information, while preconceived judgments can undermine the interview.

3. Get a free narrative first

Start broad rather than immediately confronting the person with evidence.

For example:

"I'd like you to walk me through your involvement with the vendor-payment process from the beginning. Take it in your own words." Then listen.

Avoid interrupting unnecessarily. Take notes on who, what, when, where, how, and how much, and identify areas that need follow-up. ACFE guidance similarly recommends obtaining a narrative first and then asking clarifying questions.

4. Drill down systematically

Once the subject has given their account, work through it topic by topic.

Useful questions include:

• "What happened next?"
• "Who else was involved?"
• "How did you know that?"
• "When did that conversation take place?"
• "What records would show that?"
• "Who had access to that account?"
• "Walk me through how that payment was authorized."
• "What was your understanding of the company's policy?"
• "Is there anything about that transaction you think I should understand?"

Prefer short, clear, non-leading questions. Avoid combining several questions into one.

5. Test the account against the evidence

After obtaining the subject's version, introduce discrepancies carefully.

Instead of:

"You lied about approving the invoice." Try:

"You said you didn't approve this invoice. The approval record shows your credentials were used at 3:14 p.m. Can you explain what happened?" Then let the subject explain.

This gives you an opportunity to distinguish between possibilities such as unauthorized credential use, misunderstanding, delegated authority, an inaccurate record, or intentional misconduct.

The objective is to test competing explanations, not merely obtain a confession.

6. Don't treat body language as proof of deception

Nervousness, avoiding eye contact, changing posture, pauses, or unusual speech patterns are not reliable proof that someone is lying. Treat behavioral changes as things that may warrant additional factual questioning, not as conclusions.

ACFE's own material emphasizes the danger of preconceived assumptions and subjective interpretation of behavior.

7. Give the subject opportunities to explain

Especially when evidence appears incriminating, ask for an explanation before reaching a conclusion.

For example:

"We've identified three payments with similar characteristics. What is your explanation for that pattern?" And:

"Is there another explanation for what we're seeing that we haven't considered?" This can uncover legitimate explanations, additional participants, control failures, or evidence you did not previously know about.

8. Close carefully

Before ending, summarize the important points:

"Let me make sure I've understood you correctly..." Then verify disputed facts and ask:

• "Is there anything I've misunderstood?"
• "Is there anything you want to correct?"
• "Who else should we speak with?"
• "What records should we examine?"
• "Is there anything else relevant that we haven't discussed?"

Don't prematurely reveal everything you know. The interview may generate new investigative leads.

9. Document and evaluate afterward

Immediately document the interview according to your organization's procedures. Preserve recordings, notes, exhibits, and any statement obtained.

Then evaluate:

• What did the interview establish?
• What did it contradict?
• What new evidence or witnesses were identified?
• Which claims can be independently corroborated?
• What remains unresolved?
• Does the investigation need additional interviews or document collection?

PEACE explicitly treats evaluation as part of the interview process rather than something that happens only at the end of the investigation.

A simple interview sequence

Prepare → rapport/ground rules → free narrative → clarify → probe specific issues → present discrepancies → obtain explanations → summarize → identify new leads → document/evaluate.

One important distinction: if this is a criminal investigation, rather than an internal corporate investigation, the applicable rules concerning warnings/cautions, counsel, recording, voluntariness, evidence disclosure, and questioning can vary substantially by jurisdiction. For an actual case, follow the applicable law and your organization's investigative/legal protocols rather than relying solely on a generic interview technique.

The objective is to test competing explanations, not merely obtain a confession.

6. Don't treat body language as proof of deception

Nervousness, avoiding eye contact, changing posture, pauses, or unusual speech patterns are not reliable proof that someone is lying. Treat behavioral changes as things that may warrant additional factual questioning, not as conclusions.

ACFE's own material emphasizes the danger of preconceived assumptions and subjective interpretation of behavior.

7. Give the subject opportunities to explain

Especially when evidence appears incriminating, ask for an explanation before reaching a conclusion.

For example:

"We've identified three payments with similar characteristics. What is your explanation for that pattern?" And:

"Is there another explanation for what we're seeing that we haven't considered?" This can uncover legitimate explanations, additional participants, control failures, or evidence you did not previously know about.

8. Close carefully

Before ending, summarize the important points:

"Let me make sure I've understood you correctly..." Then verify disputed facts and ask:

• "Is there anything I've misunderstood?"
• "Is there anything you want to correct?"
• "Who else should we speak with?"
• "What records should we examine?"
• "Is there anything else relevant that we haven't discussed?"

Don't prematurely reveal everything you know. The interview may generate new investigative leads.

9. Document and evaluate afterward

Immediately document the interview according to your organization's procedures. Preserve recordings, notes, exhibits, and any statement obtained.

Then evaluate:

• What did the interview establish?
• What did it contradict?
• What new evidence or witnesses were identified?
• Which claims can be independently corroborated?
• What remains unresolved?
• Does the investigation need additional interviews or document collection?

PEACE explicitly treats evaluation as part of the interview process rather than something that happens only at the end of the investigation.

A simple interview sequence

Prepare → rapport/ground rules → free narrative → clarify → probe specific issues → present discrepancies → obtain explanations → summarize → identify new leads → document/evaluate.

Conducting an effective investigative interview in a fraud case requires a careful blend of psychology, law, preparation, and control. Unlike a casual conversation or a standard fact-finding HR meeting, a fraud interview aims to establish the truth, secure admissions, or lock a suspect/witness into a factual timeline.

Here is a structured approach to running a successful fraud interview:

• Preparation and Planning is the absolute bedrock of a successful interview. Gather all relevant documentary evidence (emails, bank statements, logs, invoices) before stepping into the room. Create a detailed chronological timeline of events and map out your ultimate objective for the interview (e.g., gathering general background vs. obtaining a full confession). Know the elements of the fraud scheme inside and out so you can spot evasions or lies immediately.
• Logistics and Environment set the psychological tone. Choose a quiet, private, neutral location with minimal distractions or interruptions (turn off phones). Arrange the room so there are no physical barriers like a massive desk between you and the subject, but ensure the exit path is clear to avoid any unlawful imprisonment or coercion claims. Two interviewers are ideal—one to lead the questioning and one to take meticulous, contemporaneous notes.
• Establishing Rapport and Ground Rules should happen in the opening minutes. Start with neutral, non-threatening questions to gauge the subject’s baseline behavior, nervous tics, and communication style. Clearly state the purpose of the meeting without using aggressive legal jargon right away. Establish ground rules, such as letting each other finish speaking and maintaining a professional, objective tone.
• The Controlled Delivery of Evidence requires a strategic pacing. Do not lay all your cards on the table in the first five minutes. Start with open-ended, broad questions ("Walk me through your process for handling vendor approvals") to let the subject commit to a narrative. Gradually move to closed, specific questions, and only introduce your strongest documentary evidence when necessary to challenge an inconsistency or a falsehood.
• Managing Subject Defenses and Denials tests your composure. Watch for behavioral shifts such as sudden defensiveness, changes in posture, overly rehearsed answers, or selective memory. When faced with a lie, do not argue or lose your temper; calmly present the contradictory document or data point and ask them to help you reconcile the discrepancy. Allow comfortable silences—people often rush to fill an awkward pause with damaging admissions.
• Documenting the Outcome protects the integrity of the investigation. If an admission or confession is made, secure it clearly by summarizing the key facts, quantities, dates, and methods used. Transition immediately to formalizing a written statement, audio/video recording (where legally permissible), or a detailed memorandum of interview signed or reviewed by the attendees as soon as possible while details are fresh.

If you'd like, let me know:

• Is the subject an employee, a vendor, or an external third party?
• Do you need advice on legal/union representation rights (like Weingarten rights) during the process?

I can tailor the strategy further to your specific scenario.

Conducting an effective interview in a fraud investigation requires careful planning, psychological awareness, and strict adherence to legal and organizational protocols. Unlike a casual conversation or a routine witness chat, a fraud interview often involves a hostile, defensive, or deceptive subject.

Here is a structured, step-by-step approach to conducting an effective and legally sound fraud interview:

1. Preparation and Planning
   • Review the evidence: Gather and analyze all available documentation (e.g., emails, financial records, transaction logs, access logs) before walking into the room. Do not walk in blind.
   • Establish the objective: Know what you need to prove or disprove and list the specific elements of the fraud you are trying to establish.
   • Determine the sequence: Interview lesser witnesses or neutral parties first before interviewing the primary target or suspect, allowing you to lock down facts and timelines.
   • Plan the logistics: Choose a neutral, private, and distraction-free setting. Consider having two investigators present—one to lead the questioning and one to take detailed, contemporaneous notes.
2. Setting the Tone and Rapport
   • Maintain professionalism: Keep your demeanor calm, objective, professional, and detached. Avoid showing anger, disgust, or premature judgment, as hostility causes the subject to shut down or law up.
   • Establish boundaries: Introduce all parties present, state the purpose of the meeting in broad, non-accusatory terms, and set expectations regarding confidentiality and respectful dialogue.
3. The Investigative Flow (The Reid-Style or Cognitive Approach)
   • The introductory phase: Start with benign, non-threatening background questions. Observe the subject's baseline behavior, verbal style, nervous tics, and posture.
   • Establish the timeline: Ask the subject to walk through their responsibilities, workflows, and their version of events during the period in question. Let them talk freely without interruption; people often trap themselves in lies when given enough rope.
   • Introduce the evidence gradually: Move from general questions to specific, evidence-backed inquiries. Introduce documents or anomalies late in the interview rather than upfront, so the subject cannot tailor their fabricated explanation to fit the paperwork.
4. Observing Verbal and Non-Verbal Cues
   • Watch for behavioral shifts: Look for sudden changes in posture, defensive barriers (crossing arms, putting objects between you), changes in speech cadence, or excessive grooming behaviors.
   • Evaluate denials: Notice the quality of the denial. Guilty subjects often give qualified or weak denials ("I don't recall ever doing that" vs. an unequivocal "I did not do that").
   • Avoid profiling: Remember that nervousness is normal for anyone in an interrogation-style room, innocent or guilty. Treat behavioral cues only as indicators that warrant further probing, not definitive proof of guilt.
5. Closing the Interview
   • Summarize and clarify: Recap key statements and ensure you have clear answers to your critical questions. Ask if there is anything they would like to add or modify.
   • Document immediately: Finalize your interview notes immediately following the session while details are fresh. If a formal written statement or confession is obtained, ensure it is reviewed, signed, and dated according to legal guidelines.

If you'd like, let me know:

• Is this an internal corporate investigation or a formal legal proceeding?
• Do you need help drafting a specific line of questioning for a certain type of fraud (e.g., embezzlement, procurement fraud)?

An effective fraud-investigation interview is primarily a fact-finding exercise, not an attempt to pressure someone into confessing. Preparation, neutral questioning, careful documentation, and corroboration are more reliable than trying to “read” body language. The ACFE specifically emphasizes preparation, precise questions, bias awareness, and avoiding interview contamination.

1. Prepare before the interview

Know what you are trying to establish before you sit down with the subject.

• Build a timeline of the suspected events.
• Identify what is known, disputed, and still unknown.
• Review relevant financial records, emails, system logs, policies, access records, and witness accounts.
• Identify inconsistencies that need explanation.
• Decide which evidence you should not reveal initially, so you can obtain the subject's account independently.
• Define your objectives and prepare a question outline rather than a rigid script.
• Check applicable company policies, employment rules, privilege/confidentiality issues, recording laws, and any rights or representation requirements. ACFE's examination framework specifically includes interviewee rights, documentation, evidence collection, and legal considerations.

Also consciously check your own assumptions. Going in convinced that the subject is guilty can cause you to interpret ambiguous answers as incriminating and overlook evidence pointing elsewhere.

2. Establish rapport and explain the process

Start with straightforward background questions and establish a professional, non-threatening environment. Generally, conduct the interview privately and individually rather than in a group.

Explain:

• who you are and your role;
• the general purpose of the interview;
• whether the interview is being recorded or notes are being taken;
• any applicable rights or representation procedures;
• that you want the subject's account of what happened.

Avoid pretending that the interview is something it isn't. If you're investigating a specific allegation, don't manufacture a false pretext merely to obtain information.

3. Begin with an uninterrupted account

A useful opening is something like:

“I'd like you to tell me, in your own words, what happened.” Let the person give their account before confronting them with individual pieces of evidence. Take notes on who, what, when, where, how, and why, but don't constantly interrupt.

Open-ended questions are particularly useful initially because they allow you to discover information you didn't anticipate.

4. Then narrow the questions

Move progressively from broad questions to precise ones.

For example:

• “Walk me through the payment process.”
• “Who normally approved those payments?”
• “Take me through the transaction on June 22.”
• “Who had access to that account?”
• “You said you approved the invoice. What did you review before approving it?”
• “What do you mean when you say you ‘handled’ the payment?”
• “Did you personally change the vendor's bank details?”

Precision matters. ACFE recommends clarifying the meaning of important terms rather than allowing ambiguity to create an escape route.

5. Don't reveal all your evidence too early

Suppose you have evidence showing that an employee accessed a system at 10:14 p.m. You might initially ask:

“Tell me about your activities that evening.” Rather than immediately saying:

“We know you logged into the system at 10:14 p.m.” The first approach gives you an opportunity to obtain an independent account that can subsequently be compared with the evidence.

When you eventually introduce evidence, do it specifically:

“You said you weren't in the office that evening. The access records show your credentials were used at 10:14 p.m. Help me understand that discrepancy.” Give the subject an opportunity to explain apparently contradictory evidence. An inconsistency is something to investigate, not automatically proof of deception.

6. Ask direct questions about critical facts

When you reach an important issue, don't hide the question inside vague language.

Instead of:

“Would you say that you might have had something to do with the missing funds?” use:

“Did you transfer the $5,000?” Then follow up:

“When did you do that?” “How did you initiate the transfer?” “Who else knew about it?” “What happened to the money afterward?” ACFE's recent interviewing guidance specifically cautions against vague formulations such as “What would you say...” because they can allow a subject to answer a different question from the one the investigator actually needs answered.

7. Treat behavior cautiously

Don't assume that nervousness, avoiding eye contact, sweating, pauses, or changes in tone mean someone is lying. Anxiety can have many innocent explanations.

Behavioral observations can tell you where to ask another question, but they shouldn't substitute for evidence. ACFE recommends considering behavioral changes in context and against the person's normal communication pattern rather than treating an individual behavior as proof of deception.

8. Handle denials and resistance methodically

If the subject denies involvement, don't immediately argue.

Ask:

• “What makes you certain?”
• “Walk me through what you did instead.”
• “Who can verify that?”
• “What records would support your account?”
• “Is there anything else about this transaction that we haven't discussed?”

If they say, “I don't remember,” distinguish genuine lack of memory from an incomplete answer:

“What do you remember about the events immediately before and after the transaction?” Document the answer rather than trying to force a different one.

9. Close carefully

Before ending, ask:

• “Is there anything important I haven't asked you about?”
• “Is there anyone else we should speak with?”
• “Are there records or documents that would help establish what happened?”
• “Is there anything in your account that you want to correct or clarify?”

Give the subject an opportunity to add information. Then document the interview promptly, separating what the subject said from your interpretation of its significance.

A simple interview structure

Preparation → rapport → uninterrupted account → clarification → detailed timeline → evidence comparison → direct questions → follow-up → final opportunity to add information → documentation/corroboration

The key mindset is: your job is to discover what happened, not to prove your initial theory. That makes the interview more useful whether the subject ultimately appears to have participated in the fraud, had peripheral involvement, or turns out to have an innocent explanation.

If this is for an actual investigation, I can also give you a 60-minute fraud-subject interview plan with a question-by-question script, including how to introduce documentary evidence and handle common evasive answers.

6. Ask direct questions about critical facts

When you reach an important issue, don't hide the question inside vague language.

Instead of:

“Would you say that you might have had something to do with the missing funds?” use:

“Did you transfer the $5,000?” Then follow up:

“When did you do that?” “How did you initiate the transfer?” “Who else knew about it?” “What happened to the money afterward?” ACFE's recent interviewing guidance specifically cautions against vague formulations such as “What would you say...” because they can allow a subject to answer a different question from the one the investigator actually needs answered.

7. Treat behavior cautiously

Don't assume that nervousness, avoiding eye contact, sweating, pauses, or changes in tone mean someone is lying. Anxiety can have many innocent explanations.

Conducting an effective fraud investigation interview requires a strategic approach that balances preparation, psychology, and legal awareness. Unlike a casual conversation, a fraud interview aims to uncover the truth, test evidence, and potentially secure an admission or critical leads.

Here is a step-by-step framework to conduct a professional and effective investigative interview:

1. Phase 1: Thorough Preparation

• Gather facts first - Never walk into an interview cold. Review all available documents, emails, transaction logs, and financial data before sitting down with the subject.
• Establish the objective - Define what you need to achieve from this specific interview (e.g., clarify a workflow, authenticate a document, or assess culpability).
• Prepare a document trail - Have relevant exhibits, signed forms, or questionable invoices printed and ready to present at the precise moment required.
• Determine the setting - Choose a neutral, private, and quiet location (or a secure virtual room) with minimal distractions and no physical barriers that block the exit, ensuring a safe environment for both parties.

1. Phase 2: Structuring the Interview

• Introduction and rapport - Open by introducing yourself and any co-investigator, stating the purpose of the meeting in a calm, professional, and non-accusatory tone.
• Establish ground rules - Explain that you are conducting a fact-finding inquiry, note-taking will occur, and honesty is vital.
• The baseline phase - Ask open-ended, non-threatening background questions regarding their role, responsibilities, and normal procedures to gauge their baseline verbal and non-verbal behavior.
• The transition to core topics - Gradually pivot from general operational questions to specific anomalies, anomalies in transactions, or contradictory statements found during the evidence review.

1. Phase 3: Questioning Techniques & Tactics

• Ask open-ended questions first - Let the subject talk extensively before narrowing down with closed or direct questions. Silence is a powerful tool; give them time to answer rather than rushing to fill the void.
• Use the "funnel" approach - Move from broad topics down to granular specifics. If a discrepancy arises, present the documentary evidence neutrally and ask for an explanation.
• Avoid premature accusations - Accusing a subject too early triggers defense mechanisms, hostility, or a hard shutdown in communication. Frame questions around "reconciling discrepancies" rather than proving guilt.
• Observe verbal and non-verbal cues - Pay attention to baseline shifts, evasive language, nervous habits, or overly rehearsed answers, but treat these as indicators for further probing rather than definitive proof of deception.

1. Phase 4: Documenting and Closing

• Accurate note-taking - Document exact quotes where possible, especially regarding alibis, timelines, or denials. If recording, ensure compliance with local single-party or dual-party consent legal requirements.
• Summarize key points - Before concluding, review the core elements discussed to ensure clarity and give the subject an opportunity to clarify or amend any statements.
• Maintain confidentiality - Remind the subject of the sensitive and confidential nature of the internal investigation to prevent retaliation, evidence tampering, or workplace gossip.

Would you like me to expand on:

• Deception detection techniques and how to handle denials?
• Legal and compliance considerations (such as Weingarten rights or employment laws)?
• Structuring a confession or admission if wrongdoing is uncovered?

An effective fraud interview is primarily a fact-finding exercise, not an attempt to force a confession. The strongest approach is structured, neutral, well-prepared, and designed to let the subject commit to an account that you can later test against documents and other evidence. The acfe.com and professional investigative-interviewing guidance emphasize preparation, rapport, open questions, careful challenge, and corroboration.

1. Prepare before you walk in

Know exactly what you need to accomplish.

• Build a timeline of the suspected fraud.
• Identify the transactions, documents, systems, people, and decisions that matter.
• Separate what you know from what you suspect.
• Identify contradictions or unexplained gaps.
• Decide which evidence you will introduce during the interview and which you should hold back initially.
• Prepare a list of objectives rather than a rigid list of questions.

Your objective might be: Establish who had access to the account, who initiated the transactions, what authorization process was followed, and what the subject knew about the resulting payments.

Planning is specifically recommended because it helps the interviewer understand existing evidence and identify the information still needed.

2. Start neutral and establish rapport

Don't begin with, "We know you stole the money."

Instead, explain the purpose of the interview and establish that you're interested in their account.

For example:

"I'd like to understand your role in the purchasing process, particularly what happened between the initial request and the final payment. I'll ask you to walk me through what you remember, and I'll come back to specific documents and transactions afterward." A professional, non-accusatory approach can improve the quality of the information you obtain.

3. Get their uninterrupted account first

Start broad:

• "Tell me about your role in the process."
• "Walk me through what happened."
• "Describe how that transaction normally worked."
• "What happened next?"
• "Who else was involved?"

Then listen.

Don't immediately correct inconsistencies or reveal everything you know. Let the subject establish their version of events before you start testing it.

Open-ended questions are particularly useful because they allow the interviewee to provide an account in their own words and reduce the risk of the interviewer inadvertently supplying information.

4. Drill down systematically

Once you have the broad account, move from general → specific.

For example:

Broad: "Tell me how the vendor was selected."

Specific: "Who contacted the vendor?"

More specific: "When did that happen?"

Verification: "What system did you use?"

Evidence: "Our records show the vendor's bank account was changed on March 14. Walk me through that change."

This progression lets you clarify details without prematurely suggesting the answer.

Avoid questions containing several issues at once. Instead of:

"Did you create the vendor, approve the payment, and tell John about the transaction?" ask three separate questions.

Professional guidance specifically cautions against multiple, forced-choice, and leading questions because they can restrict or distort an account.

5. Test the account against evidence

This is where a fraud interview becomes particularly valuable.

Suppose the subject says:

"I never had access to that account." Don't immediately say, "That's a lie."

Ask:

• "What systems did you have access to?"
• "How did you normally access the payment system?"
• "Who else had your credentials?"
• "When was the last time you logged in?"
• "What would someone need to do to make that change?"
• "Is there anything else that could explain this record?"

Then introduce the relevant evidence:

"The access log shows your account was used at 10:42 p.m. on March 14 to change the banking information. Help me understand that." The goal is to give the subject a fair opportunity to explain the discrepancy while creating a precise record of what they say.

Investigative interviewing guidance recommends testing the account against what is already known and using the interview to corroborate or disprove investigative hypotheses.

6. Don't mistake nervousness for deception

A subject may be nervous, angry, embarrassed, confused, or defensive for perfectly innocent reasons.

Focus much more heavily on verifiable inconsistencies than on body language.

For example, these are more useful than "he wouldn't make eye contact":

• His stated timeline conflicts with access logs.
• He says he never communicated with a vendor, but emails show repeated communications.
• He says he didn't approve a transaction, but approval records show his credentials.
• His explanation changes when confronted with independently established facts.

Even then, an inconsistency is a reason to investigate—not automatic proof of fraud.

7. Give them opportunities to explain

A useful technique is to ask an apparently contradictory question without supplying your preferred answer:

"Help me understand how that happened." or

"What explanation is there for that?" This can produce information you wouldn't obtain if you simply accused them.

Also consider alternative hypotheses. Perhaps the credentials were compromised, another employee used the account, the process was misunderstood, or the records are incomplete. Maintaining an open mind helps prevent confirmation bias. Effective-investigation guidance emphasizes following all reasonable lines of enquiry rather than simply pursuing the investigator's initial theory.

8. Close carefully

Before ending:

• Summarize the subject's important statements.
• Ask, "Is there anything I've misunderstood?"
• Ask whether there is anything else they think you should know.
• Ask about documents, systems, or people that could corroborate their account.
• Clarify any remaining contradictions.
• Record the time and circumstances of the interview according to your organization's procedures.

The interview should produce not just an account, but new investigative leads.

A simple structure to remember

Prepare → Engage → Free account → Clarify → Test → Challenge → Corroborate → Close → Evaluate

This is closely aligned with the PEACE investigative-interviewing framework: planning/preparation, engage/explain, account/clarify/challenge, closure, and evaluation.

One important distinction

If this is an internal corporate fraud investigation, your procedures should also account for applicable employment law, privacy requirements, attorney involvement, privilege issues, recording-consent rules, and the subject's applicable rights. If it is a criminal investigation, follow the governing jurisdiction's rules and involve appropriate legal counsel/law enforcement procedures rather than treating a general interview framework as legal advice.

If you want, I can also give you a practical 30-question fraud-investigation interview script, including opening questions, evidence-reveal questions, contradiction questions, and closing questions.

ask three separate questions.

Professional guidance specifically cautions against multiple, forced-choice, and leading questions because they can restrict or distort an account.

5. Test the account against evidence

This is where a fraud interview becomes particularly valuable.

Suppose the subject says:

"I never had access to that account."

An effective fraud-investigation interview is primarily a fact-finding exercise, not an attempt to pressure someone into confessing. The strongest approach is planned, neutral, evidence-driven, and designed to give the subject opportunities to explain discrepancies. The Association of Certified Fraud Examiners (ACFE) emphasizes preparation, precise questioning, avoiding contamination, and maintaining awareness of interviewer bias.

1. Prepare before you walk in

Know what you're trying to establish:

• What happened?
• When and where did it happen?
• Who was involved?
• What did the subject personally see, do, approve, receive, or communicate?
• What documents or systems should corroborate the account?
• What remains unexplained?
• What alternative explanations are plausible?

Create an evidence timeline and interview outline beforehand. Separate facts you know from assumptions and allegations. ACFE specifically recommends determining what evidence and witnesses exist before interviewing the subject.

Also decide what information not to disclose initially. You generally don't want to reveal every piece of evidence before hearing the person's unaided account.

2. Start neutral and establish rapport

Begin by explaining:

• Who you are and your role.
• The general purpose of the interview.
• How the information will be used and any applicable confidentiality limits.
• Whether participation is voluntary or required under the applicable policy/law.
• That you want the subject's account of the facts.

Don't begin with an accusation such as, "We know you stole the money."

A calm opening can produce much more useful information than an adversarial one. ACFE recommends an introductory phase that establishes rapport and gets the interviewee talking before moving into substantive questioning.

3. Let the subject give an uninterrupted account

Start broadly:

"Please walk me through what happened." Then:

"Start wherever you think is most relevant." Listen. Take notes, but don't constantly interrupt.

You're looking for the subject's spontaneous account before introducing the details you've already discovered. This helps you compare their version against independent evidence.

4. Progress from broad questions to precise questions

A useful progression is:

Open → clarify → pin down → corroborate

For example:

• "Tell me about the payment process."
• "Who normally approved those payments?"
• "You said John approved this one. When did that happen?"
• "Was that approval by email, in the system, or verbally?"
• "What did you do after receiving the approval?"
• "Which account did the money go to?"
• "Who else would have records showing that?"

Prefer questions that require a factual answer over hypothetical or speculative wording. ACFE's recent guidance cautions against vague formulations such as "What would you say...?" because they can let the subject answer something other than the factual question you're trying to resolve.

5. Pin down ambiguous language

This is particularly important in fraud cases.

If the subject says:

"I didn't handle the money." Don't assume you know what "handle" means.

Ask:

"What do you mean by 'handle'?" Then establish the facts:

"Did you have access to the account?" "Did you enter the transaction?" "Did you instruct anyone else to enter it?" "Did you approve it?" Precise definitions prevent someone from giving a technically true but misleading answer.

6. Introduce contradictory evidence carefully

Don't immediately dump your entire evidence file on the subject.

First obtain their account. Then introduce relevant evidence one item at a time:

"You said the payment was approved on Monday. I want to show you this approval record. Help me understand the difference." Give them an opportunity to explain it.

If the explanation changes, document what changed and why, rather than simply labeling the person deceptive.

A discrepancy can have innocent explanations: misunderstanding, faulty memory, incomplete records, another person's actions, system problems, or genuinely conflicting evidence.

7. Don't rely on body language as a lie detector

Nervousness, avoiding eye contact, sweating, changes in voice, or fidgeting aren't proof of deception. Someone can be truthful and anxious, particularly when being investigated.

Treat behavioral changes as reasons to ask another factual question, not as evidence of guilt. ACFE similarly cautions interviewers to consider alternative explanations and their own biases when interpreting nonverbal behavior.

8. Explore innocent explanations

A good investigator actively tests both sides.

Ask:

"What is another explanation for this transaction?" "Who else could have made this change?" "What evidence would support your explanation?" "Is there anything in the records that might make your account look different from what actually happened?" This protects the investigation from confirmation bias and can make the eventual findings much more defensible.

9. If the evidence points strongly toward misconduct

Move from information gathering to direct questions, while remaining professional.

For example:

"The records show that you accessed the account at 3:14 p.m., changed the beneficiary information, and subsequently approved the payment. Is that what happened?" Then stop talking and allow the subject to answer.

Follow up on the answer rather than immediately arguing with it.

Avoid threats, promises of leniency you cannot deliver, humiliation, or coercion. The legal requirements surrounding interviews vary substantially depending on whether you're conducting an internal corporate investigation, regulatory inquiry, or law-enforcement interview, and where you're located. ACFE specifically highlights the importance of understanding the legal authority for the interview and the subject's applicable rights and duties.

10. Close methodically

Before ending, ask:

• "Is there anything important I haven't asked you about?"
• "Who else should I speak with?"
• "What documents should I review?"
• "Is there anything in your account you'd like to correct or clarify?"
• "Is there anything you think we've misunderstood?"

Then summarize the key points back to the subject and ask whether you've accurately understood them.

Document the interview promptly, distinguishing what the subject said from your interpretation of what it means.

A simple interview structure

1. Preparation — establish objectives, evidence, timeline, witnesses, and legal constraints.
2. Introduction — explain role, purpose, ground rules, and confidentiality limits.
3. Rapport — establish a professional, non-threatening environment.
4. Free account — let the subject explain events in their own words.
5. Clarification — identify people, dates, actions, systems, and terminology.
6. Detailed questioning — work systematically through the relevant transactions.
7. Evidence testing — introduce discrepancies and seek explanations.
8. Direct questions — address unresolved evidence when appropriate.
9. Closure — ask for additional information and corrections.
10. Documentation/corroboration — compare the account against independent evidence and pursue leads.

The central principle is: don't try to prove your theory during the interview; try to discover whether your theory survives the subject's account and the evidence. That approach generally produces a more reliable and defensible investigation.

If this is for an actual workplace fraud investigation, I can also give you a practical 60-minute subject-interview script with specific questions for embezzlement, expense fraud, procurement fraud, or financial-statement fraud.

"What do you mean by 'handle'?" Then establish the facts:

"Did you have access to the account?" "Did you enter the transaction?" "Did you instruct anyone else to enter it?" "Did you approve it?" Precise definitions prevent someone from giving a technically true but misleading answer.

6. Introduce contradictory evidence carefully

Don't immediately dump your entire evidence file on the subject.

First obtain their account. Then introduce relevant evidence one item at a time:

"You said the payment was approved on Monday. I want to show you this approval record. Help me understand the difference." Give them an opportunity to explain it.

If the explanation changes, document what changed and why, rather than simply labeling the person deceptive.

A discrepancy can have innocent explanations: misunderstanding, faulty memory, incomplete records, another person's actions, system problems, or genuinely conflicting evidence.

7. Don't rely on body language as a lie detector

Nervousness, avoiding eye contact, sweating, changes in voice, or fidgeting aren't proof of deception. Someone can be truthful and anxious, particularly when being investigated.

Treat behavioral changes as reasons to ask another factual question, not as evidence of guilt. ACFE similarly cautions interviewers to consider alternative explanations and their own biases when interpreting nonverbal behavior.

8. Explore innocent explanations

A good investigator actively tests both sides.

Ask:

"What is another explanation for this transaction?" "Who else could have made this change?" "What evidence would support your explanation?" "Is there anything in the records that might make your account look different from what actually happened?" This protects the investigation from confirmation bias and can make the eventual findings much more defensible.

9. If the evidence points strongly toward misconduct

Move from information gathering to direct questions, while remaining professional.

For example:

"The records show that you accessed the account at 3:14 p.m., changed the beneficiary information, and subsequently approved the payment. Is that what happened?" Then stop talking and allow the subject to answer.

Follow up on the answer rather than immediately arguing with it.

Avoid threats, promises of leniency you cannot deliver, humiliation, or coercion. The legal requirements surrounding interviews vary substantially depending on whether you're conducting an internal corporate investigation, regulatory inquiry, or law-enforcement interview, and where you're located. ACFE specifically highlights the importance of understanding the legal authority for the interview and the subject's applicable rights and duties.

10. Close methodically

Before ending, ask:

Conducting an effective investigative interview in a fraud case requires a careful blend of psychology, legal awareness, and rigorous preparation. Unlike a routine fact-finding discussion, a fraud interview often involves a subject who may be defensive, deceptive, or hiding illicit behavior.

Here is a step-by-step framework to conduct a professional, legally sound, and effective fraud interview:

1. Pre-Interview Preparation

• Gather and analyze evidence first: Never walk into an interview cold. Secure all relevant documentation, emails, financial logs, system access records, and audit trails before scheduling the conversation.
• Establish the timeline: Build a precise chronological sequence of events and transactions so you can spot inconsistencies immediately when the subject speaks.
• Determine the objective: Know what you need to prove or disprove, and identify what missing pieces of the puzzle this specific subject holds.
• Choose the right setting: Conduct the interview in a neutral, private, and quiet location (or via a secure, stable video platform if remote) that ensures confidentiality and minimizes distractions.
• Plan for legal and company policy compliance: Coordinate with HR and legal counsel regarding whether the interview is voluntary, whether an employee has a right to representation (such as Weingarten rights in union settings), and when law enforcement involvement is required.

2. Structuring the Interview

• The Introduction (Setting the Tone):
  • Introduce yourself and any co-investigator or witness present.
  • State the purpose of the meeting in a neutral, professional manner (e.g., "We are reviewing recent procurement discrepancies and want to get your perspective" ). Avoid accusing the person immediately.
  • Establish ground rules: confidentiality, the importance of honesty, and that you will be taking notes.
• The Establishment Phase (The "Norming" Period):
  • Start with non-threatening, open-ended background questions about their role, responsibilities, and routine.
  • Observe their baseline behavior, communication style, and nervous ticks when answering comfortable questions.
• The Transition to Core Topics:
  • Move gradually from general operational questions to specific operational anomalies, and finally to the specific red flags or transactions in question.
  • Present neutral documents or exhibits naturally (e.g., "Take a look at this invoice; walk me through your approval process here." ) rather than thrusting them as a "gotcha."

3. Effective Questioning and Listening Techniques

• Ask open-ended questions first: Allow the subject to talk freely (e.g., "How did this vendor selection come about?" ). Save closed, direct questions for pinning down specifics later.
• Master strategic silence: After asking a tough question, stay silent . People are naturally uncomfortable with silence and will often fill the void by talking—and sometimes incriminating themselves or revealing critical information.
• Watch for behavioral shifts: Notice sudden changes in posture, defensive language, overly clipped answers, excessive sweating, or shifts from cooperative to hostile. Note: Do not rely on behavior alone to prove guilt, but use it as a prompt to dig deeper.
• Avoid premature conclusions: Do not accept an evasive or convenient answer at face value. Follow up with, "Help me understand that better," or "That doesn't match the record we have for X date; how do you account for that difference?"

4. Handling Admissions and Concluding

• If they make an admission: Do not interrupt. Let them fully explain. Clarify the details—who, what, when, where, and why—and document the confession carefully without making threats or promises of leniency.
• Maintain professionalism: Even if the person becomes hostile or breaks down, maintain an objective, calm, and empathetic yet firm demeanor.
• Conclude cleanly: Ask if there is anything they would like to add, clarify, or correct. Inform them of the next steps regarding the ongoing nature of the review and instruct them regarding confidentiality (retaliation and non-disclosure policies).
• Document immediately: Draft your detailed interview memorandum or notes while the memory is fresh, ideally within hours of the conclusion.

If you'd like, I can:

Provide a list of red flags for verbal deception during corporate interviews Outline the rules for employee representation and rights during internal investigations Help draft an interview outline template tailored to a specific type of fraud (e.g., expense abuse or procurement fraud)

Conducting an effective investigative interview in a fraud case requires a careful blend of psychology, legal awareness, and rigorous preparation. Unlike a routine fact-finding conversation, a fraud interview often involves deceptive behavior, defensiveness, or high stakes.

Here is a step-by-step framework to handle these challenging conversations effectively:

1. Pre-Interview Preparation

• Gather and analyze the evidence first: Never go into an interview "fishing." Have your financial records, emails, system logs, and witness statements organized and analyzed. Know the facts better than the subject thinks you do.
• Establish the objective: Define what you need to learn. Are you trying to establish facts, test an alibi, or secure an admission?
• Determine the appropriate setting: Choose a neutral, private, and quiet location (ideally a closed conference room) that minimizes distractions and removes the subject's feeling of control over the environment (avoid their personal office if possible).
• Decide on the interview team: It is best to have two investigators present—one primary interviewer and one silent observer/note-taker. Check internal policies or legal counsel regarding whether the session should be recorded.

2. Opening and Rapport Building

• Set the tone: Begin in a professional, calm, and non-accusatory manner. Avoid diving straight into aggressive questioning, which triggers an immediate "fight or flight" defensive response.
• Establish ground rules: Explain the purpose of the meeting broadly (e.g., "We are reviewing recent operational and financial workflows in Department X").
• Observe baseline behavior: Ask neutral, comfortable background questions (e.g., tenure, daily responsibilities) to gauge the subject's normal demeanor, speech patterns, and body language under low stress.

3. The Body of the Interview (The Transition)

• Move from broad to specific: Progress gradually from open-ended background questions to specific operational questions, and finally to the sensitive areas of concern.
• Ask open-ended questions first: Allow the subject to commit to a narrative. For example: "Walk me through the approval process for vendor invoice #1234." If they are lying, locking them into a detailed narrative creates logical inconsistencies later.
• Do not reveal your hand too early: Let the subject talk and dig themselves into a hole or provide an untruthful alibi before presenting contradictory evidence.
• Watch for verbal and non-verbal cues: Pay attention to shifts from baseline behavior—such as sudden changes in posture, defensive language, overly rehearsed answers, shifting the blame, or selective memory ("I don't recall" repeated only on specific dates).

4. Confrontation and Handling Deception

• Introduce evidence methodically: When introducing documents or data that contradict their statements, do it calmly and objectively. Do not argue or lose your temper.
• Address rationalization: Fraudsters often rationalize their actions (e.g., "The company owes me," "Everyone does it," "It was just a temporary loan"). Recognize these rationalizations without validating them, and gently pivot back to the objective facts.
• Allow silence: After presenting a tough question or piece of evidence, remain silent. Uncomfortable silence often forces the subject to fill the gap, frequently with damaging admissions or nervous backtracking.

5. Closing and Documentation

• Summarize and clarify: Before concluding, summarize the key points the subject has stated to ensure accuracy and eliminate any claims of being misunderstood later.
• Leave a final opportunity: Ask if there is anything else they feel they should add or clarify regarding the matter.
• Document immediately: Draft a detailed, objective memorandum of interview (MOI) as soon as possible while your memory is fresh. Record exact quotes where critical, and distinguish between direct observations (what was said/done) and subjective interpretations.

If you'd like, let me know:

• Is this an internal corporate investigation or an external law enforcement context?
• Are you interviewing a suspect, a victim, or a neutral witness?

I can provide tailored techniques or sample questions for your specific situation.

An effective fraud investigation interview is a structured fact-finding process designed to obtain accurate information, test explanations, and preserve the integrity of the investigation. The goal is not simply to get an admission; it is to understand what happened, who was involved, and what evidence supports or contradicts the account.

1. Prepare before the interview

Before meeting with the subject:

• Understand the allegation and theory of the case. Know the suspected scheme, timeline, transactions, policies, and known facts.
• Review available evidence (emails, financial records, access logs, contracts, audit findings, prior statements).
• Identify your objectives. Decide what facts you need from the subject and what gaps you need to close.
• Plan the interview sequence. Consider whether the subject should be interviewed early for information gathering or later after evidence has been developed.

Prepare questions, but avoid becoming so tied to a script that you stop listening.

2. Establish a professional tone

Begin by:

• Introducing yourself and explaining your role.
• Explaining the purpose of the meeting in a neutral way.
• Emphasizing that you are seeking accurate information.
• Avoiding assumptions that the subject is guilty.

A defensive or accusatory opening often reduces cooperation and can make it harder to obtain reliable information.

Example opening:

“I’m conducting a review to understand the facts surrounding certain transactions. I’d like to hear your perspective and walk through what happened.”

3. Start broad, then narrow

Use a funnel approach:

Broad questions

Allow the subject to tell their story.

Examples:

• “Please describe your responsibilities related to this process.”
• “Walk me through how this transaction normally works.”
• “Tell me what happened from your perspective.”

Detailed questions

Once you have their narrative:

• “Who approved that payment?”
• “When did you first become aware of this issue?”
• “What records would support that?”
• “Who else was involved?”

Open-ended questions generally produce more information than questions that only invite yes/no answers.

4. Let the subject talk

A common mistake is filling silence too quickly. Allow pauses after answers; people often add details when given time.

Effective habits:

• Listen more than you speak.
• Avoid interrupting.
• Ask follow-up questions about details the subject volunteers.
• Clarify vague terms.

Examples:

• “What do you mean by ‘handled appropriately’?”
• “Can you explain that step in more detail?”
• “What happened next?”

Journal of Accountancy## 5. Establish a baseline

Start with routine topics where the answers are known or easily verified:

• Job duties
• Normal procedures
• Reporting relationships
• Familiar transactions

This helps you understand the subject’s normal communication style. However, do not treat body language alone as proof of deception; changes in behavior can have many causes.

6. Introduce evidence strategically

Do not reveal all evidence at the beginning. A useful sequence is often:

1. Obtain the subject’s independent account.
2. Clarify details.
3. Compare their account with records.
4. Ask for explanations of discrepancies.

Examples:

• “You mentioned you did not approve the payment. Help me understand this approval record showing your credentials.”
• “Can you explain the difference between your recollection and this document?”

Avoid trick questions or misleading statements; credibility of the investigation depends on fairness and accuracy.

7. Handle denials and inconsistencies carefully

When answers conflict with evidence:

Avoid:

• “We know you did it.”
• “You’re lying.”

Instead:

• “Help me understand this inconsistency.”
• “I may be missing something. Can you explain how these two things fit together?”
• “What is your explanation for this record?”

This keeps the subject engaged while testing the explanation.

8. Ask about motive, opportunity, and controls

Fraud interviews often need to explore:

• Access and authority
• Process weaknesses
• Relationships with vendors/customers
• Financial pressures or incentives
• Attempts to conceal activity
• Other people who may have knowledge

Ask neutrally:

• “Who had the ability to make this change?”
• “What controls existed around this process?”
• “Were there exceptions to the normal procedure?”

9. Document thoroughly

Record:

• Date, time, location, participants
• Questions asked
• Key answers
• Documents shown
• Follow-up items
• Any admissions or denials

Separate what the subject said from your interpretation.

10. Close the interview properly

Before ending:

• Summarize important points.
• Ask if anything was misunderstood.
• Ask who else should be interviewed.
• Leave an opportunity for additional information.

Example:

“Is there anything about this situation that we have not discussed that you believe is important?” A strong fraud interview combines preparation, neutrality, careful questioning, and evidence-based follow-up. The best investigators create conditions where accurate information is more likely to emerge while maintaining fairness and professional credibility.

I can also provide a fraud subject interview checklist, question template, or a sample interview script for an embezzlement/vendor fraud case if useful.