What Happened: A High-Level Overview
The company involved grew rapidly and was considered a regional success story. However, independent investigations later uncovered significant financial manipulation, including:
- Revenue inflated by more than half through fictitious or related-party transactions.
- Operational assets overstated by almost twenty times.
- Use of shell companies and controlled counterparties to circulate funds and create fake business activity.
- Dual reporting systems: one set of records for insiders and a cleaner version provided to auditors and investors.
These findings indicate deliberate management override, control failures, and a long-running scheme that succeeded because external parties relied heavily on documents produced by the company itself.
Why Traditional Audits Missed the Fraud
The case highlights several weaknesses that can arise when audits and due diligence become overly document-driven.
1. Over-reliance on management documents
Auditors reportedly relied on stamped contracts, invoices, and system data that were created by the company. Without independent verification, these documents provided a false sense of comfort.
2. Insufficient related-party analysis
Many transactions involved entities indirectly controlled by insiders. Weak related-party identification allowed the scheme to look like legitimate third-party sales.
3. Limited testing of operational data
The company claimed hundreds of thousands of operational devices, but only a small fraction were actually in use. Audits that focus on records rather than physical or external verification can miss this type of discrepancy.
4. Lack of forensic-style skepticism
High-growth tech companies often leverage digital systems that can be manipulated. Traditional compliance-focused audits may not detect fabricated digital metrics, usage data, or dashboards.
The lesson: an audit gives reasonable assurance not a guarantee especially when management is actively concealing information.
How Proper Financial Due Diligence Should Differ
Investor-commissioned due diligence is not an extension of the audit. It must be substantive, investigative, and commercially grounded. The Southeast Asia case illustrates where enhanced procedures are needed.
a. Independent validation of customers and revenue
Instead of relying on documents, due diligence should include:
- Direct calls, site visits, or back-channel checks with real customers.
- Confirming whether goods or services were actually delivered.
- Reviewing revenue concentration for unusual patterns.
- Testing whether major customers share beneficial ownership with management.
b. Reconciliation of operational KPIs
Where a business claims large user numbers, devices, or platform activity, investors should require:
- Geotagged and time-stamped asset data.
- Randomized field inspections.
- Reconciliation between maintenance logs, user activity, and device serial numbers.
- Cross-checking platform metrics with telecom data, logistics partners, or payment processors.
c. Deep review of working capital and cash movement
Round-tripping schemes often leave tell-tale signs:
- Cash moving in circles among related parties.
- Receivables that grow much faster than revenue.
- Customers that pay unusually fast or unusually slow.
- Bank statements that do not match trading volume.
d. Focus on governance and fraud risk
When a company grows quickly and raises large amounts of capital, investors should evaluate:
- Related-party risks and UBO (ultimate beneficial owner) mapping.
- Override of internal controls by founders or senior management.
- Whistleblower activity or staff concerns.
- Whether the company restricts access to raw financial data.
Key Lessons for Thai M&A and Deal Advisory Work
This regional case provides several lessons for investors in Thailand:
- Audits are not proof of economic reality. They are a baseline not a validation of all transactions.
- Management fraud can defeat standard procedures. Only independent verification can pierce sophisticated schemes.
- High-growth businesses require enhanced diligence. Especially where digital metrics, platforms, or device counts drive valuation.
- Commercial plausibility matters. Ask whether business activity makes sense operationally not just financially.
- Due diligence must look outside the target. Banks, customers, suppliers, and even competitors can confirm or contradict management claims.
Conclusion
Recent events in Southeast Asia show that even large audits and traditional due diligence can miss material fraud when they rely too heavily on management information. For investors in Thailand, thorough financial due diligence must go beyond documents, challenge business reality, and independently test every key assumption.
Need support? Contact our M&A Advisory team today.