How to Prove Fraud in the UK: The Evidence Investigators Gather

Updated 5 October 2026 by Investigation Bureau

Suspecting fraud is easy. Proving it takes evidence gathered in the right order, preserved in the right way and matched to the legal test that a court, a bank or an employer will apply. This guide explains what fraud means in UK law, the kinds of evidence that prove it, how to preserve them without alerting anyone, the routes to the police, the banks and civil recovery, and the point at which a private fraud investigator changes the outcome.

The most common mistake in a fraud case is to confront the suspect before the evidence is secure. The suspect deletes. The accomplice is warned. The money moves. A case that could have been proved in a fortnight becomes one that cannot be proved at all. Everything below is meant to prevent that.

What fraud means in UK law

The Fraud Act 2006 sets out three ways of committing fraud: by false representation, by failing to disclose information that you have a legal duty to disclose, and by abuse of a position of trust. In each, the person must act dishonestly and intend to make a gain or cause a loss. Dishonesty is assessed in two stages: first what the person actually knew and believed, then whether ordinary decent people would call that conduct dishonest.

Fraud is also a civil wrong. Deceit and fraudulent misrepresentation give the victim a claim to get the money back. The two routes use different standards of proof. A criminal court must be sure. A civil court decides on the balance of probabilities, though judges expect cogent evidence behind an allegation of fraud because the accusation is a serious one.

The distinction shapes the evidence you need. The core is proof that someone lied and gained. Proof that they knew they were lying is what separates fraud from a bad deal, and it usually comes from documents and patterns, not from a confession.

The evidence that proves fraud

Documents. Contracts, invoices, statements, emails, letters, applications, and the discrepancies between them. A false representation is written down somewhere. The work is to find the version that contradicts it.
Communications. Emails, messages, call logs and voice notes, kept with their metadata and not only as screenshots. The order of who said what, and when, is often the proof of knowledge.
Financial records. Your own accounts, ledgers and payment records show the loss and the first place the money went. A suspect's bank statements cannot be obtained privately. They come through the bank's own fraud process, the police or a court order. Our guide on tracing hidden assets explains what lawful asset tracing can and cannot reach.
Company and public records. Companies House filings, dissolved and phoenix companies, undisclosed directorships, property records, court judgments and the digital traces a business leaves behind. All of it is open source, and we cross-reference it with our in-house OSINT tooling.
Digital evidence. File metadata, altered documents, cloned websites, spoofed domains and the infrastructure behind a scam, preserved to an evidential standard. Invoice and payment-diversion fraud is proved almost entirely this way, and our guide to invoice fraud covers the first 48 hours.
Witnesses. Colleagues, suppliers, customers and former associates, interviewed properly and recorded in statements a court can use.
Surveillance. In insurance, lifestyle and sickness-absence fraud, timestamped video of what a person actually does, set against what they have claimed, is often the decisive exhibit.
Expert evidence. Forensic accountants for complex financial patterns, digital forensic examiners for devices, and handwriting and document examiners for forged signatures.

Preserve without tipping anyone off

Keep originals and not just copies. Export emails with their headers, keep files with their metadata, and photograph physical documents where they lie before you move them. Build a dated timeline of events as you go. Do not get into anyone else's accounts, devices or email, however tempting. It is an offence under the Computer Misuse Act 1990 and it poisons the case. Employers should act only within their own policies and data-protection obligations, and should put a hold on the deletion of relevant records before anyone is spoken to. Above all, do not confront the suspect until the evidence is secure and the next step is planned.

The routes once you have evidence

Report to Report Fraud (the national reporting service that replaced Action Fraud), or to Police Scotland, so that the case is logged and linked to others. The police act on the strongest and best-evidenced reports, which is a reason to build the evidence pack first.
Contact your bank immediately if payments were made. Where a payment was authorised under deception, the mandatory reimbursement rules introduced in October 2024 require most UK banks to refund victims in many cases. A recall attempt can sometimes reach the money before it moves on.
Civil recovery through a solicitor can be faster than the criminal process. It includes freezing injunctions to stop assets disappearing, disclosure orders against banks and platforms, and claims in deceit or restitution.
Employers proceed through a fair disciplinary process built on a reasonable investigation. Our guide to the signs an employee is committing fraud explains what that looks like before HR becomes involved.

Where a private fraud investigator fits

An investigator does not replace the police, the bank or your solicitor. An investigator makes each of them more effective. With us, a fraud investigation begins with a free conversation about what you already hold and what would prove the case. A fixed quote in writing follows. The work is independent, which matters to employers and in litigation. It is led by evidence, with every finding cited and preserved. And it reaches things a victim cannot: lawful attribution of the people behind a scam, tracing of where money and assets went and, where needed, surveillance. You receive a report written for use in court. It sets out what happened, how it is proved, what remains unproved and what to do next.

Cost and timescale

A fraud investigation is quoted as a fixed price after a free first conversation. It usually starts with a desk phase, because that is where most fraud is proved. As a guide to typical UK market figures, tracing a person is a fixed fee in the range of £150 to £500, and surveillance costs £500 to £1,200 per operative per day. Verification and due diligence reports are priced by scope. A desk phase typically finishes within days. Cases with surveillance, interviews or overseas elements are given a timetable at the outset.

Frequently asked questions

What evidence do you need to prove fraud?

Three things. Evidence of a false statement, a non-disclosure or an abuse of position. Evidence that the person knew it was false or dishonest. And evidence of the gain or loss that followed. In practice that means documents and communications that contradict what was represented, financial records that show the loss, and public and company records that expose the pattern.

Can a private investigator prove fraud?

An investigator gathers, preserves and presents the evidence that proves it. The work is independent, it is done to a standard that courts accept, and it reaches things a victim cannot lawfully reach alone. The decision that fraud is proved belongs to a court, a bank or an employer's disciplinary process. A good investigation is what puts that decision beyond argument.

How do I report fraud in the UK?

Report to Report Fraud in England, Wales and Northern Ireland, or to Police Scotland. Contact your bank at once if money has moved. If an employee is involved, follow your disciplinary procedure. If the losses are large, speak to a solicitor about civil recovery at the same time, because it can move faster than the criminal route.

Can I get money back that was lost to fraud?

Sometimes. Under the rules introduced in October 2024, authorised push payment fraud is now largely reimbursable by UK banks. A bank recall occasionally reaches money before it moves. Civil claims can recover assets that can be found and frozen. Recovery depends on speed and on tracing where the money went, and no honest investigator guarantees it.

How long does a fraud investigation take?

A desk-based investigation typically takes from a few days to a few weeks. Cases that need surveillance, witness interviews, asset tracing or overseas enquiries are scoped and given a timetable in the free first conversation.

Is it fraud or just a bad deal?

The difference lies in dishonesty and knowledge. A supplier who failed is not a fraudster. A supplier who took payment knowing they could never deliver is. The evidence that separates the two is nearly always documentary, and it is the first thing an investigation looks for.

Suspect fraud and need it proved? The first conversation is free, carries no obligation and is honest about what the evidence you already hold is worth. Tell us about it in confidence.