Search the articles
Daily DD
- Operation Double Helix and LabSolutions: Why Lab EBITDA Can Hide Order-Source Risk
The LabSolutions sentencing shows that a laboratory's most dangerous liability may sit entirely outside the lab itself -- in the broker contracts,…
- Private Equity Healthcare Rollups: A Buyer Diligence Guide Before You Sign
Five public enforcement and oversight matters show what happens when the rollup thesis outpaces the legal and operational facts. Here is how to test the…
- DOJ Healthcare Fraud Takedowns: A Buyer Diligence Guide for Clinics, Labs, Telehealth, and Addiction Treatment
Healthcare revenue can look recurring, reimbursable, and scalable. The DOJ enforcement record shows why buyers need to test how that revenue is produced…
- Why Data Alone Usually Loses: Rule 9(b), the Public-Disclosure Bar, and How to Clear Them
The public-data screen produces a ranked list of providers who bill far above their peers. It is tempting to read that list as a list of defendants. It…
- Robert Morgan: Follow The Renovation Dollars
When a real estate offering says your capital will improve a specific property, the diligence question is not whether the sponsor believes that. The…
- EquityBuild: Collateral Position Beats Brochure Yield
The EquityBuild enforcement record is a diligence lesson about promissory notes, real estate collateral, title, lien position, and whether investor…
- The Whole Life Cycle of a Qui Tam Case: From Evidence to the Relator’s Check
In the companion pieces, I showed who has won whistleblower cases with public data and how to build the screen that finds the lead. This article is about…
- Woodbridge: When The Third-Party Borrower Is Really A Sponsor-Controlled Risk
The Woodbridge enforcement record is a diligence lesson about real estate lending deals, borrower ownership, recorded collateral, and whether investor…
- NRIA: When Marketing Yield Needs A Project-Cash Reality Check
The NRIA enforcement record is a diligence lesson about promised returns, distribution sources, financial statements, and whether real estate project…
- Nightingale And CrowdStreet: Escrow Is Not A Formality
When a property-specific crowdfunding raise ends in a federal guilty plea, the lesson is not about real estate underwriting. It is about who controls the…
- Real Estate Syndicator Diligence Guide: What To Check Before You Wire
Five major SEC enforcement matters and the public record behind them reveal a repeating pattern: investor money moves before controls are tested.
- Envision and EmCare: Successor Diligence After a Physician-Staffing FCA Settlement
What a 2017 DOJ settlement about hospital admission recommendations tells buyers about inherited billing risk, corporate integrity obligations, and…
- Steward and Cerberus: The Sale-Leaseback Cautionary Tale for Healthcare Rollup Buyers
When a hospital platform files for bankruptcy, the diligence failure is rarely a single bad decision. The Steward story shows how rent burden, deferred…
- Patient Care America and Riordan Lewis: When Investor Conduct Touches the Billing Mechanism
The Patient Care America settlement is a practical False Claims Act diligence case for PE-backed healthcare platforms: marketing economics, commission…
- Compass Detox and WAR Network Case Study: Addiction-Treatment Diligence Must Follow the Patient
The Markovich prosecution shows why addiction-treatment buyers cannot stop at payer contracts and utilization reports. Patient recruitment, inducements,…
- Arizona AHCCCS Addiction-Treatment Case Study: Medicaid Revenue Needs Chart-Level Diligence
Behavioral-health and addiction-treatment buyers cannot underwrite Medicaid revenue from billing reports alone. The Arizona AHCCCS matter shows what…
- Cerebral Controlled-Substance Case Study: When Growth Levers Become Compliance Evidence
Cerebral's non-prosecution agreement shows that buyer risk can exist even without a corporate indictment when internal business practices affect…
- Done ADHD Telehealth Case Study: When Prescription Growth Becomes Diligence Evidence
Telehealth buyers cannot treat prescription volume, prior authorizations, and patient growth as clean SaaS-style metrics. The Done case shows how a…
- What I Learned from Conduit Finance
Conduit-style structures teach a broader diligence lesson: structure manages uncertainty; it does not eliminate it.
- The Diligence Triangle
Credit, legal, and operations must reconcile; each workstream can be right alone and still miss the deal risk.
- Receivables: The Simplest Asset That Is Never Simple
An invoice is not collectible cash; receivables diligence lives in the gap between face value and realized collections.
- The First Data Request List
A good DDL is not clerical; it tests whether the seller understands its own business and whether the story can be evidenced.
- Why Emerging Asset Classes Are Hard
Novel assets fail diligence when people underwrite the name of the asset instead of the mechanics underneath it.
- Aspen Dental Management: When a DSO Support Model Becomes the Clinical-Control Diligence Question
The California Aspen Dental settlement announcement is a buyer-side warning for dental service organization rollups: the management agreement is not…
- Cash Flow Is Not Collateral: Separating the Source of Repayment from the Recovery Source
A practitioner’s guide to the most common analytical confusion in specialty finance and emerging-asset diligence By Noah Green CPA CFE, Sheepdog Prosperity Partners LLC The confusion In conventional credit analysis, cash flow...
- Due Diligence Is Structured Doubt: A Framework for Emerging Asset Classes
A practical framework for analyzing unfamiliar collateral, specialty finance assets, and structured cash-flow transactions. Why the diligence frame must be built from the asset, not borrowed from the label.
- Obligor Concentration
A pool can look diversified until the top customers, channels, or end markets are mapped correctly.
- Dilution Risk: The Silent Killer
Returns, credits, offsets, disputes, rebates, and chargebacks can destroy advance rates before credit loss is visible.
- USAP and Welsh Carson: When a Healthcare Rollup Becomes the Antitrust Diligence Question
The FTC's USAP and Welsh Carson matter is the flagship public example for healthcare rollup diligence: the buyer has to test whether the platform's value…
DD Tech Lab
- DD Tech Lab: Build a Medicare Outlier Screen, Step by Step
In the companion piece, Catching Fraud With Public Data, I described outsiders — data-analytics firms like Lincoln Analytics, reimbursement analysts,…
- The Public-Data Toolkit: Free Datasets That Expose Government Fraud
Every recovery in this section — the cardiac-device case, the PPP affiliation suits, the Medicare outlier screen — started in the same place: a free,…
- DD Tech Lab: Screening a State’s Medicaid Market with Public Data, a CPA’s Weekend Walkthrough
I am a CPA and a Certified Fraud Examiner, and most of my week is due diligence. This piece is about a weekend question I finally sat down to answer: how…
- Transaction-Timing Diagnostics in the CTMC Family: Poisson Arrivals, End-of-Period Spikes, and When to Escalate to Multi-State Models
Articles 001-009 modeled discrete-state sequences in discrete time. The implicit assumption — transactions occur at evenly-spaced moments — discards the most diagnostic feature of period-end audit…
- Correlation Diagnostics for Journal-Entry Pairs: Revenue ↔ AR, COGS ↔ Inventory, and Cash ↔ Operating-Expense
Revenue tracks accounts receivable until the collection cycle breaks. Cost of goods sold inversely tracks inventory changes until capitalizations distort the flow. Cash tracks operating expenses…
- Higher-Order and Variable-Order Markov Models for Long-Memory Fraud Schemes
First-order Markov modeling assumes the next state depends only on the current state — what happened one step ago tells you everything you need to know about what happens next. For most...
- Frequency-of-Amount Analysis: Detecting Approval-Limit Avoidance Schemes Through Histogram-of-Counts
Coarse-band threshold testing catches major asymmetric clusters but misses two refinements requiring dedicated analysis. Bimodality — where the amount distribution shows two distinct peaks at…
- Two-Stage Screening: Benford’s Law as a Stationary Distribution Combined With First-Order Markov Tests
Benford's Law and first-order Markov anomaly detection are usually presented as separate tools. Practitioners run each in isolation, get two binary "deviation / no deviation" signals, and either use…
- Date-Pattern Analysis: Weekend Postings, End-of-Period Clustering, and Holiday Anomalies
Management override of internal controls frequently manifests through journal-entry timing patterns. PCAOB AS 2401.A.5 identifies three temporal characteristics that elevate entries from routine to requiring substantive testing: entries posted on non-business days,...
- Neo4j Aura vs Self-Hosted vs Alternative Graph Databases: Architecture Choices for the Mid-Size DD Practice
The methodology articles in this sub-series have used Neo4j as the working substrate. The choice is not accidental — Cypher is the most mature graph…
- Stochastic Volatility Models for Restatement-Timing Anomalies
Public-company restatements do not arrive at a constant rate. They cluster — temporally Sarbanes-Oxley wave 2004-2006, financial-crisis wave 2008-2010, revenue-recognition-standard wave 2018-2019…
- Loading and Maintaining Production-Scale DD Graphs: APOC Procedures, Bulk Loading, Index Strategy, and Memory Tuning
The Neo4j sub-series up to this point has lived in the data-modeling and query-design layer. The methodology is correct; the queries make sense; the…
- Round-Number Bias and Threshold-Avoidance Pattern Detection: When Approval Limits Drive the Distribution
A disbursement file containing 5,000 vendor payments reveals its control architecture through statistical anomalies. The auditor observes 285 payments clustered in the narrow $9,500–$9,999 range…
- Graph-Based Wash-Sale and Layering Detection in Securities Transactions
The Cypher Patterns for Transaction-Graph Anomaly Detection article in this sub-series introduced cycle detection on transaction graphs for…
- Temporal Graph Patterns: Modeling Ownership Changes, Entity Lifecycle, and Beneficial-Owner Transitions Over Time
A static ownership graph answers "who owns what" — present tense, single snapshot. For most regulatory and audit work, that is the wrong question.…
- Markov Decision Processes for Risk-Based Audit Sampling Under Cost-of-Type-II Constraints
Risk-based audit sampling under PCAOB AS 2315 directs the engagement team to allocate substantive procedures toward higher-risk accounts. The continuous version of that decision — how heavily, in…
- Community Detection for Related-Party Cluster Identification: Louvain, Label Propagation, and Their Audit Use
PCAOB AS 2410 requires the auditor to obtain an understanding of the entity's related-party relationships and transactions. Management's representation…
- Time-Series Anomaly Detection in Excel: Rolling Z-Scores, Exponentially-Smoothed Residuals, and the Period-Over-Period Variance Diagnostic
Year-over-year percent change with a 10% threshold remains the most common analytical procedure on multi-period balance trends. The metric has known limitations the practitioner should account for: it is undefined when the...
- Random Walks on DD Graphs: PageRank, Personalized PageRank, and Influence Ranking for Counterparty Investigations
The Schema Design for Sanctions Screening article in this sub-series handled the direct-match screening problem: counterparty name matches an SDN entry,…
- GraphRAG for Due-Diligence Knowledge Management: Combining LLM Retrieval With Cypher Path Queries
The DD practice accumulates institutional knowledge in a specific shape: structured (CRM entries, ownership data, transaction records) plus unstructured…
- Random-Walk and Stationarity Tests on Account Reconciliations
A reconciliation account that should oscillate around its expected balance—intercompany clearing, suspense, accrued-payroll roll-forward—but instead wanders without bound has failed its control…
- Foundry vs Snowflake + DBT vs Databricks for DD Analytics: Architecture Trade-Off Framework
What you'll be able to do after reading this. Score your institution against a 10-dimension platform-comparison scorecard. Apply one of three elicited…
- OSINT for Financial Fraud in Excel: Integrating Public-Source Verification Into the Workpaper Workflow
Vendor validation at engagement scale breaks when each lookup requires manual browser navigation. The auditor opens OpenCorporates, searches the vendor name, copies registration status, switches to EDGAR, runs full-text search, copies filing...
- Foundry Ontology Design for Beneficial-Ownership Networks: Person, Entity, Officer, and Jurisdiction Modeling at Bank-Group Scale
What you'll be able to do after reading this. Recognize the ontology pattern as the difference between a structured relationship database and a flat…
- Time Series in Foundry: Modeling Counterparty Risk Trajectories and Early-Warning Indicator Pipelines
What you'll be able to do after reading this. Recognize the difference between a single-point risk rating and a risk trajectory, and what the latter adds…
- Quiver for Ad-Hoc Counterparty Queries: Lightweight Investigator Tooling Without a Full Workshop Build
What you'll be able to do after reading this. Recognize the situations where Quiver is the right tool and where Workshop is. Read a saved Quiver query…
- Markov Mixture Models for Round-Tripping and Lapping Detection
Round-tripping and lapping share a structural feature that breaks both Article 001's first-order Markov framework and Article 003's two-regime Hidden Markov Model. The transaction population is…
- Code Repositories in Foundry: When to Embed Python / PySpark in the Pipeline (and When to Stay in Pipeline Builder)
What you'll be able to do after reading this. Recognize the decision boundary between no-code Pipeline Builder and code-based Code Repositories. Read a…
- Foundry Actions Framework for Audit-Trail Discipline: Risk-Rating Changes, Regulatory Documentation, and the Examiner-Ready Audit Log
What you'll be able to do after reading this. Read an ActionType specification and understand what state change it captures. Recognize the bypass paths…
- Geospatial Address Mapping in Excel: Vendor-Employee Address Overlap and Risk Clustering
The vendor-employee address-overlap test addresses a specific control objective under ACFE Fraud Examiners Manual §3.5.2 and PCAOB AS 2401.A5: detecting unauthorized payments routed through…
- AIP-Driven Adverse-Media Summarization for DD Engagements: Prompt Patterns, Grounding Strategy, Hallucination Controls
What you'll be able to do after reading this. Read an AIP prompt specification and understand what structured output it produces. Recognize the four-gate…
- Workshop Application Patterns for Counterparty Risk Investigators: Single-Pane-of-Glass Investigator Workflows
What you'll be able to do after reading this. Recognize the design principles that distinguish a regulator-defensible investigator workflow from a…
- Pipeline Builder for DD Data Ingestion: Connecting Bank-Internal Systems to the Ontology Layer
Foundry Article 001 established that the ontology layer is the abstraction that insulates the analytical workflow from upstream schema churn. The ingestion layer is where that insulation is engineered. Pipeline Builder is...
- Hidden Markov Models for Earnings-Management Regime Detection in Public-Company Financials
The first-order Markov framework from Article 001 assumes the auditor can observe the state directly — an account class touched by a journal entry, a reconciliation status, a transaction…
- Foundry Ontology Design for Counterparty Risk Investigations
A counterparty-risk investigation at a large financial institution does not begin with a question about a counterparty. It begins with the institution rebuilding its understanding of the counterparty from data scattered across...
- Schema Design for Sanctions Screening: Modeling the OFAC SDN List as a Knowledge Graph for Real-Time DD Lookups
The U.S. Treasury's Office of Foreign Assets Control publishes the Specially Designated Nationals and Blocked Persons (SDN) list as XML and CSV files containing tens of thousands of entries: individuals, entities, vessels,...
- Linear Regression for Outlier Detection in Excel: Building the Standardized-Residual Workpaper for Expense-Account Analytics
When utility costs scale with square footage, sales commissions track revenue, or freight charges follow tonnage shipped, the auditor needs more than ratio analysis to spot anomalies. PCAOB AS…
- Cypher Patterns for Transaction-Graph Anomaly Detection: Round-Tripping, Layering, and the Cycle-Structure Diagnostic
Article 001 used a graph to model ownership — relatively static data, where the diagnostic question is path traversal under a regulatory threshold. Transaction graphs are different in three operational respects. They...
- From Beneficial-Ownership Lists to Cypher: A Practical Knowledge-Graph Setup for Due Diligence
An ownership chain that nests beyond three levels is the point at which the DD analyst's tooling has to change. This article walks the schema, loading, and Cypher queries for graph-based beneficial-ownership...
- Modeling Journal-Entry Sequences in Production: Encoding the Chart of Accounts, Selecting a Baseline, and Handling the Close-Cycle Shift
The first-order Markov apparatus from Article 001 worked cleanly on a 5-state synthetic dataset with 1,000 transitions and a known baseline. Production audit work breaks each of those assumptions.…
- Same-Same-Different in Excel: Detecting Identical-Value-Different-Date Patterns Across Vendor Files
Duplicate disbursements erode 0.8–1.1% of organizational spending annually (ACFE, *Report to the Nations*, 2024 ed., p. 47). Excel's COUNTIFS function detects these control failures through systematic pairwise comparison: records matching on vendor...
- First-Order Markov Modeling for Transaction-Stream Analysis in Audit
Financial-statement auditors and DD analysts work with sequences: journal-entry posting streams, period-over-period account-reconciliation states, customer-vendor transaction chains, adjusting-entry…
- Benford’s Law in Excel: Setting Up the First-Digit Test for Mass-Transaction Screening
The first-digit distribution of naturally occurring numerical populations follows a logarithmic pattern. Auditors leverage this pattern to screen transaction datasets for anomalies. The…
Buyer's Guide
- The FCA Diligence Checklist for Government-Payment Targets
If your target bills Medicare, Medicaid, a federal contract, or a federal grant, the False Claims Act is a diligence category of its own — because treble…
- The Sealed-Case Blind Spot: Why Standard Diligence Can Miss a Live Whistleblower Suit
Here is the scenario that should worry any buyer of a government-paid business. The target looks clean. The data room is complete. Litigation search…
- Don’t Inherit the Fraud: False Claims Act Exposure as an M&A Deal-Killer
Every buyer understands they are acquiring a company's assets and contracts. Fewer internalize that they are also acquiring its past conduct. When the…
- The FTC Franchise Rule: What It Gives You, What It Does Not, and How to Prepare Before You Sign
The federal rule hands a prospective franchisee a disclosure document, not a verdict. This guide explains what the rule actually requires, why disclosure…
- Before You Sign a Longevity Clinic Franchise: Which Lawyers You Need and When
Franchise review, healthcare-regulatory review, and corporate setup are separate legal workstreams. A buyer should know which one leads before signing, before opening, and during operations.
Case Studies
- Reading the SBA’s Own Loan File
The pandemic produced the cleanest data-miner cases ever filed, because it produced the cleanest dataset: the Small Business Administration published the…
- $250 Million From a Code Review
If you want one story that proves an outsider with a billing rule and a claims dataset can do this — at scale, before the phrase "data miner" even…
- The Firm That Lost Twice, Then Made History
Most case studies in this section are about a method that worked. This one is about a method that failed twice in federal court and then made history…
- Catching Fraud With Public Data: How Outside Analysts Win False Claims Act Recoveries
For most of the False Claims Act's modern history, the prototypical whistleblower was an insider: the billing manager who saw the upcoding, the program…
- Jani-King: When Contracted Billings Are Sold Like Earnings
A public FTC settlement study on cleaning contracts, gross billings, and missing substantiation.
- Tutor Time: Earnings Potential, Opening Delays, and the Missing Hard Facts
A public FTC settlement study on why childcare franchise buyers must verify earnings, timing, and management history before signing.
- Minuteman Press: When the Oral Earnings Pitch Contradicted the Disclosure Document
A public court-tested case study on why a buyer should treat off-document revenue and profit claims as a stop sign.
- Qargo Coffee: When A “License” Still Looks Like A Franchise
A public FTC case study on why buyers should test the substance of a relationship, not just the label the seller uses.
- Xponential Fitness: When The Franchise Sale Hides The Opening Risk
A 2026 FTC settlement shows why buyers must verify opening timelines, closed-unit contacts, executive history, and disclosure timing before signing.
- Burgerim: When the “Business in a Box” Pitch Became a Franchise Buyer Trap
A public FTC case study on refund promises, missing franchise disclosures, and buyers who paid before they could verify the system.
False Claims Act
- The False Claims Act: A Field Guide for Analysts and Acquirers
There is one skill at the center of this entire section: turning public government data into a defensible fraud signal. It is worth real money pointed in…
Small Business & 1099 Reality
- S-Corp vs LLC vs Sole Prop: the actual tax math at three income levels
A freelance consultant grossing $80,000 a year asks her tax advisor whether she should set up an S-Corp. The advisor says yes. A second consultant…
- Why your home office deduction is probably overstated, and the safe-harbor that fixes it
A freelance designer measures her home office as 220 square feet in a 1,600-square-foot home, calculates a 13.75% business-use percentage, applies that…
- The Augusta Rule: legal, legitimate, but used wrong by most advisors who recommend it
A consulting-firm owner's tax advisor recommends the "Augusta Rule" strategy: have your S-Corp rent your personal residence for 14 days a year for board…
- 1099 contractor or W-2 employee? The 20-factor test the IRS actually uses in 2025
A small marketing agency has been paying its bookkeeper, a graphic designer, and a developer on Form 1099-NEC for four years. Each invoices monthly, each…
- S-Corp salary mistakes that get owners audited, the reasonable-compensation problem in 3 numbers
Two S-Corp owners run comparable consulting businesses with comparable $280,000 net income years. The first pays himself a $30,000 W-2 salary and takes…
Wealth, Generation & Crossover
- Backdoor Roth, Mega Backdoor, and the pro-rata rule, when each works, when each blows up
A high-earning software engineer reads a Backdoor Roth IRA guide, contributes $7,000 to a traditional IRA as a non-deductible contribution, immediately…
- Generational wealth transfer: the difference between gifting cash, stock, and a business interest
A parent gifts $100,000 to an adult child. The child uses $100,000 to pay down a mortgage and that's the end of the tax story — no income to the…
- RMDs after SECURE 2.0: the rules that changed, the rules that almost did, and the table you actually need
A retiree turning 73 in 2025 logs into her brokerage account in October expecting to set up her first Required Minimum Distribution. Her custodian's…
- The estate exemption sunset, three pre-sunset moves that hold their value after the reversion
A high-net-worth couple holding a combined estate of $14.5 million sits well within the elevated TCJA exemption that has applied since 2018 (IRC…
- Roth conversions: the two 5-year clocks you have to count from
A taxpayer who opened a Roth IRA in 2018 with $5,500 of regular contribution did a $200,000 Roth conversion from her traditional IRA in 2022. Three years…
White-Collar Tax Crime & Headlines
- What happens after the indictment: how tax-fraud cases actually resolve (with numbers)
A taxpayer is indicted on a tax-evasion charge under IRC §7201. The mainstream coverage of the indictment focuses on the alleged conduct, the dollar…
- Tax Court is not the same as a tax tribunal, three procedural differences that change outcomes
A taxpayer who was the subject of a federal criminal tax case in 2022 — pleading guilty to two §7201 counts, serving 18 months, paying restitution —…
- Bitcoin Jesus and the IRS: the cross-border tax case watchers should be watching
In April 2024, the United States Attorney's Office for the Southern District of California unsealed an indictment against Roger Ver — known in early…
- Conservation easement syndications: why the IRS won the big cases, and what’s still in dispute
A high-net-worth investor receives a pitch in 2018 for a syndicated conservation easement transaction. The pitch claims a $5-to-$1 deduction multiple —…
- What the ERC fraud wave actually looked like, and how the IRS is unwinding it
A small-business owner running a regional logistics firm filed an Employee Retention Credit claim in 2022 based on a promoter's pitch that "every…