How to Prove Fraud in the UK: The Evidence Investigators Gather

Updated 6 September 2026 by K3K Investigations

Suspecting fraud is easy. Proving it is a matter of evidence gathered in the right order, preserved in the right way, and matched to the legal test a court, a bank or an employer will actually apply. This guide sets out what fraud means in UK law, the categories of evidence that prove it, how to preserve them without tipping anyone off, the routes to police, banks and civil recovery, and the point at which a private fraud investigator changes the outcome.

The single most common mistake we see is confrontation before evidence. The suspect deletes, the accomplice is warned, the money moves, and the case that could have been proved in a fortnight becomes one that cannot be proved at all. Everything below is designed to avoid that.

What fraud means in UK law

The Fraud Act 2006 defines fraud three ways: by false representation, by failing to disclose information you have a legal duty to disclose, and by abuse of a position of trust. In each case the person must act dishonestly and intend to make a gain or cause a loss. Dishonesty is judged by what the person actually knew and believed, then by whether ordinary decent people would call that conduct dishonest. Fraud is also a civil wrong: deceit and fraudulent misrepresentation give the victim a claim for the money back. The two routes run on different standards of proof. A criminal court must be sure; a civil court decides on the balance of probabilities, although judges expect fraud allegations to be backed by cogent evidence because the accusation is serious.

That distinction shapes the evidence you need. Proving that someone lied and gained is the core; proving that they knew they were lying is what separates fraud from a bad deal, and it is usually established from documents and patterns rather than confessions.

The evidence that proves fraud

Documents. Contracts, invoices, statements, emails, letters, applications and the discrepancies between them. A false representation lives in a document somewhere; the job is finding the version that contradicts it.
Communications. Emails, messages, call logs and voice notes, preserved with their metadata rather than as screenshots alone. The sequence of who said what and when is often the proof of knowledge.
Financial records. Your own accounts, ledgers and payment records, which show the loss and where the money went first. Bank statements belonging to the suspect are not obtainable privately; they are obtained through the bank's own fraud process, the police or a court order, and our guide on tracing hidden assets explains what lawful asset tracing can and cannot reach.
Company and public records. Companies House filings, dissolved and phoenix companies, directorships that were never disclosed, property records, court judgments and the digital exhaust of a business, all open-source and all cross-referenced on our OSINT platform.
Digital evidence. File metadata, altered documents, cloned websites, spoofed domains and the infrastructure behind a scam, preserved to evidential standards. Invoice and payment-diversion fraud is almost entirely proved this way; our guide to invoice fraud covers the first 48 hours.
Witnesses. Colleagues, suppliers, customers and former associates, interviewed properly and documented in statements a court can use.
Surveillance. For insurance, lifestyle and sickness-absence fraud, timestamped video of what a person actually does against what they have claimed is often the decisive exhibit.
Expert evidence. Forensic accountants for complex financial patterns, digital forensic examiners for devices, handwriting and document examiners for forged signatures.

Preserve without tipping anyone off

Keep originals, not copies. Export emails with headers, keep files with their metadata, photograph physical documents in place before moving them. Make a timeline of what happened, dated, as you go. Do not access anyone else's accounts, devices or email, whatever the temptation: doing so is an offence under the Computer Misuse Act 1990 and poisons the case. Employers should act only within their own policies and data-protection obligations, and should place a hold on deletion of relevant records before anyone is spoken to. Above all, do not confront the suspect until the evidence is secured and the next step is planned.

The routes once you have evidence

Report to Action Fraud (or Police Scotland) so the case is logged and linked to others; police act on the strongest, best-evidenced reports, which is an argument for building the pack first. Contact your bank immediately if payments were made: where a payment was authorised under deception, the mandatory reimbursement rules introduced in October 2024 require most UK banks to refund victims in many cases, and a recall attempt can sometimes reach money before it moves. Civil recovery through a solicitor can move faster than the criminal process: freezing injunctions to stop assets disappearing, disclosure orders against banks and platforms, and claims in deceit or restitution. Employers proceed through a fair disciplinary process built on a reasonable investigation, and our guide to the signs an employee is committing fraud explains what that looks like before HR gets involved.

Where a private fraud investigator fits

An investigator does not replace the police, the bank or your solicitor; an investigator makes each of them effective. At K3K a fraud investigation starts with a free conversation about what you already hold and what would prove the case, then a fixed quote. The work is independent, which matters for employers and for litigation; it is evidence-led, with every finding cited and preserved; and it reaches things the victim cannot, from lawful attribution of the people behind a scam to tracing where money and assets went and, where needed, surveillance. What you receive is a court-ready report: what happened, how it is proved, what remains unproved, and what to do next.

Cost and timescale

Fraud investigations are quoted as a fixed price after a free consultation, usually as a desk phase first, because that is where most fraud is proved. As a guide, tracing a person is fixed-fee in the £150 to £500 range, surveillance is £500 to £1,200 per operative-day, and verification products start from £750. Desk phases typically conclude within days; cases with surveillance, interviews or overseas elements are timetabled at the outset.

Frequently asked questions

What evidence do you need to prove fraud?

Evidence of a false statement, non-disclosure or abuse of position; evidence that the person knew it was false or dishonest; and evidence of the gain or loss that followed. In practice that means documents and communications that contradict what was represented, financial records showing the loss, and public and company records that expose the pattern.

Can a private investigator prove fraud?

An investigator gathers, preserves and packages the evidence that proves it, independently and to a standard courts accept, and reaches things a victim cannot lawfully reach alone. The decision that fraud has been proved belongs to a court, a bank or an employer's disciplinary process; a good investigation is what puts the decision beyond argument.

How do I report fraud in the UK?

Report to Action Fraud in England, Wales and Northern Ireland, or to Police Scotland, and contact your bank at once if money moved. If an employee is involved, follow your disciplinary procedure. If losses are large, speak to a solicitor about civil recovery in parallel, because it can move faster than the criminal route.

Can I get money back that was lost to fraud?

Sometimes. Authorised push payment fraud is now largely reimbursable by UK banks under the rules introduced in October 2024, bank recalls occasionally reach money before it moves, and civil claims can recover assets that can be found and frozen. Recovery depends on speed and on tracing where the money went, and no honest investigator guarantees it.

How long does a fraud investigation take?

Desk-based investigations typically conclude within days to a few weeks. Cases needing surveillance, witness interviews, asset tracing or overseas enquiries are scoped and timetabled at the free consultation.

Is it fraud or just a bad deal?

The difference is dishonesty and knowledge. A supplier who failed is not a fraudster; a supplier who took payment knowing they could never deliver is. The evidence that separates the two is nearly always documentary, and it is the first thing an investigation looks for.

Suspect fraud and need it proved? Speak to a senior investigator in confidence — free, no obligation, and honest about what the evidence you already hold is worth. Call 020 3343 7007 (24 hours) or book a call.