11.5 Due Diligence, Fraud Indicators & Transaction Risk Analysis
Key Takeaways
- Due diligence answers a different question from a background check: not 'who is this person' but 'what is the risk in this transaction', so the deliverable is a risk register with sources, not a dossier.
- Entity status is the first check and the most commonly skipped: under Revenue and Taxation Code § 23301 a suspended or forfeited taxpayer may not exercise corporate powers, and contracts made while suspended are voidable at the other party's election under § 23304.1.
- Verify licences with the issuing regulator directly — DCA licence search, CSLB, DRE, and the Department of Insurance — because a licence number on a website proves only that someone typed it.
- Structural fraud indicators cluster: recent formation with a virtual or mail-drop address, officer overlap across related entities, round-dollar transactions, circular payments, and a refusal to allow independent verification.
- Report findings and their sources, and state what could not be verified; a due diligence report that omits its own limits misleads by silence and risks the BPC § 7539(b) false-report prohibition.
Due Diligence, Fraud Indicators & Transaction Risk Analysis
Core Practice Standard: Due diligence is investigation pointed at a decision. The client is about to invest, acquire, lend, franchise, partner, or sign, and needs to know what the risk is before money moves. The BSIS outline captures this as Task T16, and the associated knowledge statements are explicitly about credibility, risk, and exposure — not about compiling facts for their own sake. That framing should shape the deliverable: a risk register, each item sourced and rated, plus an explicit statement of what could not be verified.
Background Check Versus Due Diligence
| Background check | Due diligence | |
|---|---|---|
| Question | Who is this person? | What is the risk in this transaction? |
| Subject | An individual | An entity, its principals, and the deal structure |
| Output | Verified attributes | Rated risks with sources and gaps |
| Consumer statutes | ICRAA/FCRA usually engaged | Usually not, where the purpose is commercial rather than employment or credit |
| Failure mode | Missing a record | Verifying the wrong entity |
That last row is the practical hazard. California has many similarly named entities, and confirming the wrong "Pacific Coast Holdings, LLC" produces a report that is accurate and useless. Anchor every finding to a Secretary of State entity number, not a name.
The Verification Stack
+---------------------------------------------------------------------------+
| 1. IDENTITY Does the entity exist, and is this the right one? |
| -> SOS bizfileOnline entity number, formation date, jurisdiction |
+---------------------------------------------------------------------------+
| 2. STANDING Is it entitled to do business right now? |
| -> Active / suspended / forfeited (Rev. & Tax. Code § 23301) |
| -> Statement of Information current? Agent for service real? |
+---------------------------------------------------------------------------+
| 3. AUTHORITY Is the signer authorised to bind it? |
| -> SI-550 / LLC-12 officers and managers; operating agreement recitals |
+---------------------------------------------------------------------------+
| 4. LICENSING Is the regulated activity actually licensed? |
| -> DCA licence search, CSLB, DRE, Dept. of Insurance, BSIS |
+---------------------------------------------------------------------------+
| 5. LITIGATION What is the dispute history? |
| -> County superior court indexes, PACER, judgment abstracts, liens |
+---------------------------------------------------------------------------+
| 6. ENCUMBRANCE What is already pledged or claimed? |
| -> UCC-1 filings, recorded deeds of trust, tax liens |
+---------------------------------------------------------------------------+
| 7. REGULATORY Any securities, sanctions, or exclusion exposure? |
| -> SEC EDGAR, FINRA BrokerCheck, OFAC SDN list, federal exclusions |
+---------------------------------------------------------------------------+
| 8. PHYSICAL Does the operation exist as described? |
| -> Site visit, premises photography from public vantage, staffing signs |
+---------------------------------------------------------------------------+
The Suspension Check Is Not Optional
Revenue and Taxation Code § 23301 provides that the powers, rights, and privileges of a domestic taxpayer may be suspended, and those of a foreign taxpayer forfeited, for unpaid tax, penalty, or interest, or for failure to file. The consequences are commercially serious: a suspended corporation cannot prosecute or defend an action, and under Revenue and Taxation Code § 23304.1 a contract made while the taxpayer's powers were suspended or forfeited is voidable at the instance of the other party. A client about to sign with a suspended entity needs that fact before signing, not after — and it takes ninety seconds to check.
Licence Verification Means the Regulator
A contractor licence number printed on a proposal proves nothing. Check the Contractors State License Board for status, classification, bond, and workers' compensation coverage; the Department of Real Estate for broker and salesperson licences; the Department of Insurance for producers; the Department of Consumer Affairs search for the several hundred DCA-regulated professions; and BSIS itself for private patrol, alarm, locksmith, repossessor, and private investigator licences. Confirm the licence is held by the entity contracting, not by an individual who happens to work there.
Fraud Indicators That Cluster
No single indicator proves fraud. Clusters do the work.
| Indicator | Why it matters |
|---|---|
| Entity formed weeks before the transaction | No operating history to verify; a shell built for the deal |
| Registered address is a mail drop or a virtual suite | Physical operations may not exist |
| Agent for service is the principal at a residence | Small, undercapitalised, or evasive service posture |
| Same officers across multiple related entities | Circular dealing, asset shuffling, related-party transactions |
| Statement of Information years out of date | Entity is dormant or deliberately opaque |
| Round-dollar invoices and payments | Fabricated documentation rarely produces odd cents |
| Returns markedly above market with "no risk" language | The single most reliable investment-fraud signal |
| Pressure to close before verification completes | Urgency is the fraudster's principal tool |
| Refusal to allow direct contact with the bank, auditor, or references | Verification is being routed through the subject |
| References answering at mobile numbers the subject supplied | The reference may be the subject's confederate |
| Suspended or forfeited entity status | Contracts voidable under Rev. & Tax. Code § 23304.1 |
Verification routing is the tell. In most transaction frauds the subject controls every channel through which the client could verify — the accountant, the escrow, the references, the "bank contact." An investigator's single most valuable contribution is to obtain the same facts through a channel the subject does not control: the regulator's own website, the county recorder's own index, a phone number obtained independently.
Scoring and Reporting Risk
Rate each finding on likelihood and impact, and record three things for every entry: what was found, where it came from, and how confident the source makes you. Then state the gaps explicitly. Language such as "no litigation was identified in Los Angeles, Orange, and Riverside County superior court indexes; other counties and federal courts were outside the agreed scope" is precise, defensible, and prevents the client from reading absence of evidence as evidence of absence.
Two discipline points from Content Area 4 apply directly:
- Do not give investment, legal, or accounting advice. Report the facts and the risks; the decision and its professional analysis belong to the client and its advisers.
- Do not overstate. A report that says "the principal has a history of fraud" on the strength of an unserved civil complaint is a knowingly-imprecise report under BPC § 7539(b) and defamatory in a way the litigation privilege will not reach, because a pre-transaction due diligence report is not a communication in a judicial proceeding under Civil Code § 47(b).
Case Example: The Ninety-Second Check
Scenario: A client is three days from wiring $400,000 to a California LLC for an equipment-leasing venture. The principal supplies audited financials, three enthusiastic references, and a licence number.
What the stack returns. The Secretary of State record shows the LLC formed eleven weeks earlier with a registered address matching a mail-forwarding suite, and status FTB suspended. The Statement of Information has never been filed. The "licence number" belongs to a different entity with a similar name, active, in a different county. Two of the three reference numbers are mobile numbers with no independent listing; the third is a company whose Secretary of State record shows the same manager as the subject LLC. A UCC search shows no filings, which is inconsistent with a leasing business that should own or finance equipment.
The report. Not "this is fraud" — that is a legal conclusion the investigator should not draw. The findings, each sourced: eleven-week-old entity; suspended status with the § 23304.1 voidability consequence; no Statement of Information; licence number belonging to a different entity; two references unverifiable independently and one with common management; no UCC filings consistent with the claimed business model. Gaps stated: audited financials not independently confirmed with the named accountant because the client had not authorised contact. The client's decision follows easily from facts, which is the point.
A due diligence check shows the counterparty LLC is 'FTB suspended' in Secretary of State records. Why does this matter to the client's transaction?
Which pattern is the strongest structural signal that a client is being steered away from independent verification?
A due diligence report identifies no litigation involving the counterparty. How should this be stated?
An investigator finds an unserved civil complaint alleging fraud against a transaction principal. How should the report treat it?