Why Kroll
Sophisticated fraud rarely leaves one clear trail. Kroll combines forensic technology, investigations and intelligence across borders to find the connections a conventional review can miss.
Need help staying ahead of a complex challenge?
Client Stories
Exposing the Network Behind a USD 1.85 Million Payroll Fraud
The Challenge
A global payroll and workforce management platform found it had paid approximately USD 1.85 million to a group of supposed employees of what appeared to be a legitimate customer in India. Banking and guarantee documents supporting the arrangement had likely been forged, and several of the 'employees' may not have worked for the customer at all. The client's working theory was that one of its employees had been deceived by individuals impersonating a large multinational organization. It needed to know who was behind the scheme, how they were connected and where the money had gone.
Kroll's Solution
Kroll carried out a forensic examination of the employee's corporate laptop, reviewing emails, web history, deleted data, external devices and activity logs. In parallel, the team analyzed KYC records, onboarding data, IP addresses and device information for the beneficiaries. It used open-source intelligence and social media research to verify identities, employment histories and relationships, and examined bank records for payments between the employee and individuals linked to the fraud. Kroll then integrated these findings into a single network analysis connecting digital, financial and behavioral evidence across multiple jurisdictions.
The Impact
The picture changed completely. Far from being the victim of outside deception, the employee was at the center of the scheme. Majority of the beneficiaries had identifiable links to the employee, including financial transfers that predated the fraud. The beneficiaries were also connected to each other through family ties, shared IP addresses, common VPN infrastructure and overlapping social media activity. Kroll also identified signs of substantial data deletion on the employee's device. The findings challenged the key assumptions underlying the case, and the client and its legal counsel now had clear evidence to support legal, disciplinary and recovery action.
Stay Ahead with Kroll
Investigations, Diligence and Compliance
Kroll’s Investigations, Diligence and Compliance team helps our clients stay ahead of complex demands related to independent expert analysis, testimony, advice and intelligence in complex investigations, litigation and projects globally.