Most divorces do not have a hidden-asset problem. The cases that do tend to share a profile. One spouse controlled the household finances, the other has limited visibility into where the money actually went, and the reported income on the most recent tax return is meaningfully smaller than the lifestyle the family was living. The non-controlling spouse arrives at the consult with a suspicion and not much else, and the question for the Divorce Financial Coach is whether the suspicion is worth chasing. On the right case, with the right techniques, the answer is almost always yes — and the difference between a thorough forensic investigation and a cursory document review can be the difference between a six-figure understatement and a seven-figure one.
What follows is a working playbook for the forensic side of a divorce engagement. It walks through how to scope the conversation about whether forensics is warranted, the documents and discovery that have to be in the file, the red flags that signal numbers cannot be relied on, the techniques that produce a defensible reconstruction of true income and assets, and the report structure that converts the work into something the court will use.
Having the conversation about whether forensics is warranted.
The discussion that precedes a forensic engagement is as important as the engagement itself. The client suspects something. The attorney has heard the suspicion and is reserving judgment. The Divorce Financial Coach is being asked to advise on whether the suspicion is worth the cost, the time, and the relationship cost of escalating discovery. Five elements have to be covered explicitly before the engagement begins.
Scope is the first. What specifically is the client worried about — unreported cash income, transfers to a paramour, an off-statement business, draws from a 401(k) used for undisclosed purchases, accumulated cryptocurrency holdings, a side venture, a separate set of books? The shape of the suspicion drives the shape of the investigation. A scope statement that says only “my spouse is hiding money” is too vague to engage on. A scope statement that says “my spouse’s business shows $200,000 of net income but we have spent over $600,000 a year for the last three years and I do not know where that came from” is workable.
Expectations are the second. The client needs to understand that a forensic investigation produces a probabilistic conclusion based on the evidence available, not a confession from the other spouse. The investigation may produce strong evidence of hidden assets, weak evidence, or no evidence at all. A clear-eyed client who is told this up front is a better client at the end of the engagement than one who arrives expecting a courtroom confrontation and gets a forensic accounting reconciliation.
Timelines, time involved, and cost are the last three. A meaningful forensic engagement on a complex household is typically a two-to-four-month engagement that consumes between eighty and three hundred hours of Divorce Financial Coach time and produces a written report. The cost ranges from upper four figures to mid-five figures depending on the scope and the document volume. The client and the attorney need to know that going in, because the worst outcome is a half-funded investigation that produces neither a defensible report nor a stopping point.
The document set that has to be in the file.
A forensic investigation is only as good as the document production behind it. The minimum document set on a household with a business interest includes the following categories.
Banking documents — every statement, in full, for every personal and joint account for the analysis period. Statements should be in their native PDF or downloaded CSV form, not screenshots. Cancelled check images are required for any account where checks were used. The analyst will reconcile every deposit and every disbursement, which requires the underlying images.
Credit card statements for every card, including authorized-user accounts and cards opened during the marriage even if subsequently closed. Card statements are how the analyst reconstructs spending patterns, identifies merchant categories, and traces non-obvious activity (jewelry purchases, hotel charges that do not match disclosed travel, recurring subscriptions to platforms that suggest hidden activity).
Tax returns — federal and state for every year in the analysis period, with all schedules and attachments. K-1s received from partnerships and S corporations, with the underlying entity returns where available. The tax return is the cleanest single document showing what was reported; the inconsistencies between the tax return and the deposits in the bank accounts are often where the investigation finds its first traction.
Business records on any closely held entity — internal financial statements (profit and loss, balance sheet, cash flow) by month, general ledger detail (so every transaction is traceable), payroll registers, accounts receivable aging, accounts payable aging, business bank and credit card statements, and the supporting documents for any large or unusual entries. The forensic value of general ledger detail is high — analyst can run queries on vendor names, amounts, and dates that surface anomalies invisible on the summary statements.
Brokerage and investment statements showing all distributions, contributions, sales, reinvestments, and transfers in and out. Statements should be in their downloaded form so the analyst has the transaction-level detail. Many forensic engagements find unreported income in the form of investment activity that does not match the tax return — a sale generating taxable gain that does not appear on the return, a withdrawal that does not surface in the bank deposits, or an internal transfer to an account the non-operating spouse did not know existed.
Peer-to-peer payment platforms — Venmo, Zelle, Cash App, PayPal — and any crypto exchange accounts (Coinbase, Kraken, Gemini, the rest). These platforms now carry meaningful volumes of household cash flow that escape conventional banking review unless the analyst specifically asks for them. The same is true for marketplace platforms (eBay, Etsy, Poshmark, OnlyFans, Substack), which generate income reported on 1099-K but easy to miss if the analyst only follows W-2 income.
Out-of-statement sources are the forensic accelerant. Loan applications submitted in the analysis period contain a sworn statement of income and net worth that almost never matches what the in-spouse is currently representing. Prior depositions in unrelated litigation often contain the in-spouse’s own descriptions of their compensation under oath. DMV records list every vehicle ever registered. Financial statements prepared for non-divorce purposes — business loans, college financial aid forms, prior divorce filings — frequently surface inconsistencies that close a case. A practitioner who knows where to look will find these before opposing counsel does.
Red flags in the numbers themselves.
Before any technique is applied, the analyst should walk through the documents looking for indicators that the reported numbers cannot be relied on. The recurring patterns are these.
Industry-versus-performance mismatch. If the subject business operates in an industry where margins typically run twenty to thirty percent and the subject reports eight percent, something is moving expenses inappropriately or revenue is being underreported. If the industry is contracting and the subject reports growth, the growth source needs to be explained. If the industry is growing and the subject reports flat results, the question is what is being skimmed.
Profitability and margins out of line with peers. Industry benchmarking from sources like RMA Annual Statement Studies, Sageworks, or BizMiner produces median, quartile, and decile margins for businesses of comparable size and code. A subject business consistently in the lowest decile on net margin while reporting comparable revenue is either operating inefficiently or moving cash off the books.
Double-entry of expenses, falsified entries, or expense ratios that drift over time. A vendor that appears multiple times for similar amounts, an expense category that grows disproportionately to revenue without a defensible cause, or a payroll register that lists employees no one can identify — each is a flag.
Overstating or understating of revenue deposits. The relationship between reported revenue, deposits hitting the operating account, and the entries on the general ledger should reconcile within a small margin. Material differences require explanation. Round numbers in revenue (every month exactly $50,000) suggest construction rather than reporting.
Balances and official statements that do not match. The cash balance on the internal financial statement should agree with the bank statement balance after timing differences. Internal financials that consistently understate cash relative to the bank are flagging activity the books are not capturing.
Missing or altered documents. Pages omitted from a statement run, statements with handwritten alterations, statements provided as black-and-white photocopies when color originals exist, original PDFs replaced with manually re-created ones. Each requires a documented response and a renewed request for the unaltered original.
Financials and tax returns that do not match. The tax return is built from the financials. Material differences between the two — different revenue, different expenses, different net income — indicate that either the financials, the tax return, or both are misstated. The analyst should reconcile the two line by line.
Lifestyle that does not match known revenue and income. The household is spending substantially more than reported income supports. The funding source is unreported income, draws from undisclosed accounts, or accumulating debt. Identifying which it is becomes the analytical objective.
Phantom partners or employees on payroll. Names on the payroll register that no one can identify, paychecks deposited into accounts the non-operating spouse cannot access, payments to consulting entities controlled by the in-spouse — each is a routing mechanism for off-book income.
A sudden new accountant or bookkeeper, particularly one engaged in the period leading up to separation. The change of accountant frequently coincides with a change in accounting practice. The new accountant’s working papers should be requested directly.
The forensic techniques that produce defensible conclusions.
Techniques fall into a sequence. Each catches a different category of underreporting; serious engagements apply most of them in some combination.
Follow the money is the foundational discipline. Every deposit in every account is traced to its source. Every disbursement is traced to its use. Inter-account transfers are netted out. The result is a complete inventory of the household’s cash flows for the analysis period. Most forensic findings start with a transfer the analyst cannot source — a $50,000 deposit into a brokerage account that did not come from an identified bank account becomes the starting point for tracing back to its origin.
Tracing of cash, including cash deposits to bank accounts with no matching source on the revenue side of the business. A household where the in-spouse periodically deposits cash into a personal account without a corresponding withdrawal from the business or a documented source needs an explanation. Cash deposits in even round dollar amounts that recur monthly are a particular flag.
Bank deposit method. The analyst computes total deposits across all accounts, subtracts identified non-revenue sources (transfers, refunds, loan proceeds, asset sales), and compares the residual to reported revenue. If the residual exceeds reported revenue, the gap is presumed unreported. The bank deposit method is a workhorse forensic technique because it does not require access to anything more than complete bank statements.
Proof of cash is a more rigorous version of the bank deposit method that ties every deposit and every disbursement to a documented source or use. Proof of cash produces a forensic-grade reconciliation that withstands cross-examination but requires substantially more time than the deposit method alone.
Source and use of cash is the household-level equivalent. Sources of funds during the period (wages, distributions, investment income, loans, asset sales, gifts received) on one side. Uses of funds (expenses, debt service, savings, asset purchases, gifts given, taxes paid) on the other. The two sides must balance. When they do not, the gap is the unidentified funding source — almost always either unreported income or draws from undisclosed accounts.
Cash-T analysis is the abbreviated version of source-and-use, often used as an initial screen. The analyst constructs a T-account showing total cash inflows on one side and total cash outflows on the other for the period. A material imbalance becomes the focus for deeper investigation.
Net worth method. Net worth at the beginning of the period, net worth at the end, change in net worth, plus known consumption equals total income for the period. If the computed total income exceeds reported income, the gap is unreported. The net worth method is particularly effective on cases where the in-spouse has been accumulating wealth without a corresponding tax filing trail.
Horizontal and vertical analysis of financial statements over time. Horizontal analysis tracks each line item across multiple periods looking for unusual changes; vertical analysis expresses each line as a percentage of revenue (or total assets) looking for ratios that drift away from industry norms. Together they surface anomalies that warrant deeper investigation.
Lifestyle analysis correlated to reported income (covered in detail in the lifestyle analysis piece). The output is the household’s true consumption level, which becomes the comparison number against reported income.
Ratio analysis against industry benchmarks. Gross margin, operating margin, current ratio, debt-to-equity, days sales outstanding, days payable outstanding — each compared to industry medians. A subject with materially worse ratios than the industry on revenue side and materially better on expense side is presenting a story the data does not support.
Timeline tracking. Many forensic findings reveal themselves when the analyst maps events on a timeline rather than reviewing them in isolation. A change in accountant in March, a drop in reported revenue starting in April, a new entity formation in May, and a wire transfer to that entity in June form a pattern that no single document on its own would reveal.
Where to look beyond the obvious.
The categories of documents that produce findings beyond bank and tax records include the following. Loan agreements between the business and the owner, between the business and related-party entities, or between the owner and friends and family. Each is a potential vehicle for moving cash off-book under the guise of a legitimate financing transaction.
Over-and-short logs from retail or service businesses. Under-reporting cash income produces persistent shortages that have to be either booked as expense or hidden. Either response leaves a trail.
Electronic books — QuickBooks files exported in full rather than as PDF reports. The exported file shows every modification to every entry, when the modification was made, and by whom. Late-night edits to revenue entries by the owner are an immediate flag.
Internet searches on the in-spouse and on any entity the in-spouse is associated with. Public registrations, business licenses, professional listings, court filings, news mentions, prior employment, current employment described publicly. The information available through routine searches is meaningful and frequently inconsistent with what the in-spouse is representing in discovery.
Social media — the in-spouse’s accounts, the accounts of children, the accounts of business partners and frequent companions. Photos of recent purchases, travel, properties, vehicles, and lifestyle that do not match disclosed income. Posts from business partners about deals, investments, or events. Tagged locations that reveal property the in-spouse does not own on paper.
New developments in the in-spouse’s life since separation — new relationships, new addresses, new business ventures, new investment partners. The financial activity around new developments frequently surfaces the income that funds them.
Writing the report so the court will use it.
The report converts the analytical work into the document the court will rely on. It should follow a defensible structure regardless of whether the case settles or goes to trial.
Words, pictures, and numbers in combination. Narrative explaining what was investigated and what was found, schedules showing the underlying math, flow charts and timelines showing relationships and sequences, and tables comparing the as-reported figures to the as-reconstructed figures. The reader is rarely a forensic accountant. The report has to communicate to a judge, a magistrate, a mediator, and opposing counsel at a level they can absorb.
Summary of assignment up front. What the analyst was engaged to do, what the scope was, what the limitations were, what time period was covered. The summary serves as the framing for everything that follows.
Assumptions used, explicitly. Every analytical step rests on assumptions — the time period, the categorization scheme, the treatment of nonrecurring items, the normalization adjustments applied, the documents relied upon. Each should be stated, justified, and visible to opposing counsel before they have to ask.
Schedules and addbacks from the analysis, presented as exhibits that tie to the narrative. Each schedule should be free-standing — it should make sense on its own as an exhibit, with the source documents cited.
Activity summary, data reports, and a comparative matrix showing the original disclosures, the reconstructed figures, and the magnitude of the differences. The comparative matrix is often the single most consequential exhibit, because it shows the gap at a glance.
Flow charts and timelines showing entity relationships, transaction sequences, and the path of funds through accounts. These are the visual aids that survive cross-examination because they are easy to follow and hard to attack.
Information relied upon, documented as a separate exhibit. Every document, every interview, every external source. This list is what supports the analyst’s conclusions and what opposing counsel will demand on cross.
Resources and references — the professional standards under which the engagement was performed, the analytical techniques used, the credentialing under which the analyst is offering the opinion. This is the cross-examination shield.
Collaborating with experts outside the Divorce Financial Coach scope.
Many forensic engagements require expertise beyond what a Divorce Financial Coach holds. A business valuation analyst with the ABV, ASA, or CVA credential is required to opine on enterprise value. A forensic accountant with the CFE credential is required on cases that may proceed to criminal referral. A digital forensics specialist is required when the case turns on the contents of the in-spouse’s computer or phone. A real estate appraiser is required for material real estate holdings. A vocational expert is required when the case turns on imputed earning capacity. The Divorce Financial Coach’s role is to identify the gap, to recommend the right expert, and to manage the integration of the expert’s work into the financial story the court is being asked to adopt.
How VennBoard removes the operational drag from forensic engagements.
Forensic engagements live in document tonnage. The analyst is working in spreadsheets that reference hundreds of source documents, the attorney is producing and receiving discovery in parallel, the client is providing context that lives in interview notes and emails, and the expert collaborators are producing their own work that has to be folded into the central analysis. The combined working file is the engagement, and when it falls apart between discovery production and trial, the analysis falls apart with it.
VennBoard puts the full forensic engagement inside a matter workspace shared between the family lawyer, the Divorce Financial Coach, the valuation expert, and the client. Source documents are uploaded directly to the matter and tagged by entity, account, period, and document type. The analyst’s working schedules attach each conclusion to its source documents, producing the cross-referenceable working file that withstands cross-examination. The built-in calculators handle the recurring forensic methodologies — bank deposit method, source-and-use, net worth method, lifestyle analysis — alongside the financial-modeling layer the Divorce Financial Coach uses for the support and property division work. The numbers come out of one engine rather than four.
Three operational features earn their keep on these cases. The audio and video transcribe tool produces searchable transcripts of every client interview, witness conversation, and expert deposition, which is where much of the qualitative narrative behind the numbers comes from. The immutable messaging log captures every interaction with opposing counsel, every document request, every supplemental production, and every dispute, which becomes the audit trail when discovery skirmishes turn into discovery motions. And the modern billing layer with Stripe Connect and PayPal Commerce payment links handles the engagement billing on either hourly or fixed-fee terms — meaningful when a forensic engagement runs into mid-five-figure billables and the client is paying through a divorce.
The forensic process is records management dressed up as accounting. VennBoard exists to keep the records side of it from undermining the accounting side. Full professional walkthrough at VennBoard.com, product detail at VennBoard.com.