FRM Exam Part II · Madoff: A Riot of Red Flags

Madoff Operational and Governance Red Flags Explained

Updated 11 October 2026 · Fact-checked

Operational and governance red flags are structural warning signs that a fund's controls are not independent. In Madoff's case: a tiny unknown auditor (Friehling & Horowitz), self-clearing broker-dealer, custody held by Madoff himself, little transparency, and unusual fees. To answer questions, find the missing independent check and name the risk it creates.

Understand Operational and Governance Red Flags

A fraud needs two things: a story and a way to hide it. Performance red flags look at the story. Operational red flags look at the hiding. They ask one question: who else checks the manager?

In a sound fund, different parties do different jobs. A prime broker or custodian holds the assets. An administrator values the fund and keeps the books. An auditor with enough size and skill checks the accounts. A third-party clearing broker settles trades. Each one is independent of the manager, so each can catch a lie.

Madoff removed these checks. His firm, Bernard L. Madoff Investment Securities, was a self-clearing broker-dealer, so it settled its own trades. It also held the assets itself, so there was no outside custodian to confirm that securities existed. The auditor was Friehling & Horowitz, a very small firm with, as widely reported, one active accountant. It was not credible as auditor of billions of dollars of client assets. Investors could not see the trades because the strategy was opaque and reporting was thin.

Fees were another sign. Madoff was widely reported to have charged feeder funds' clients no standard hedge fund fees, taking only trading commissions, while feeder funds kept the fee income. That meant the person running the strategy was giving up the economics a skilled manager would normally demand. It made little commercial sense unless something else was going on.

The lesson for risk managers is simple. Concentration of roles in one party, with no independent verification, is a red flag by itself. You do not need to prove fraud. You need to see that the controls that would reveal it are absent. This is the core of operational due diligence.

Key formulas to remember

Independence test: Manager ≠ custodian ≠ administrator ≠ clearing broker ≠ auditor; A rule of thumb, not a formula. Each role should sit with a separate, credible party. Any overlap removes a check.
Auditor adequacy check: Auditor size and expertise ≥ complexity and size of assets audited; A tiny auditor for a very large, complex fund is a red flag. It is a judgment test, not a numeric rule.
Red flag classification: Operational flag = missing independent control; Performance flag = results or strategy that do not add up; Exam questions often ask you to sort a given warning sign into one of these two groups.

How to solve Operational and Governance Red Flags questions

Use this method for any scenario question on Madoff or on operational due diligence of a fund.

1List the parties in the scenario: manager, auditor, custodian, administrator, clearing broker.
2For each role, ask whether it is independent of the manager and capable of the task.
3Spot any role that the manager performs itself or gives to a related or tiny party.
4Name the control that is lost, for example asset verification, independent valuation or trade confirmation.
5Link it to the risk: misappropriation, fraud, misreporting or undetected loss.
6Separate operational flags from performance or strategy flags if the question asks.
7Choose the option that names the structural weakness, not one that only describes returns.
8State the due diligence action: demand an independent custodian, a reputable auditor, an administrator, and transparency.

Quickest way: Who checks the manager?

When to use it: Use when you have about a minute per question and the options mix operational and performance points.

Underline the roles the scenario describes.
Ask for each: is a separate credible party doing this?
The option that fixes or flags a missing independent check is usually right.
Reject options that talk only about returns or volatility if the question asks about operational flags.

Common mistakes in Operational and Governance Red Flags

Treating consistent returns as an operational red flag.
Madoff's smooth returns were famous, so students mix up the two categories.
Fix: Smooth returns are a performance and strategy flag. Operational flags are about who holds assets, audits, clears and reports.
Saying the auditor was a red flag only because it was unknown.
The word 'unknown' sticks in memory.
Fix: The issue is capacity and independence: a tiny firm could not credibly audit a very large, complex operation.
Confusing self-clearing with self-custody.
Both mean Madoff did the work himself.
Fix: Self-clearing means settling own trades. Custody means holding the assets. Both removed an independent check, but they are different functions.
Thinking a lack of transparency is only an inconvenience.
Secrecy is common among hedge funds, so it seems normal.
Fix: Some confidentiality is normal. Refusal to share holdings, trade details or strategy while no one else verifies them is a warning sign.
Overlooking the fee structure.
Fees feel like a cost topic, not a control topic.
Fix: Fees that do not match the claimed skill, such as giving up performance fees, signal that the stated business model may not be real.
Concluding that these flags prove fraud.
With hindsight, the answer looks obvious.
Fix: They raise the risk and call for further due diligence or avoidance. Write that they indicate elevated risk.

Worked examples

Example 1

A hedge fund of USD 5 billion says it executes trades, clears them itself, holds all client securities in-house and uses a two-person audit firm. Which feature gives the investor the least independent verification of assets?
A. High trading turnover
B. Fund holds and clears its own assets with no outside custodian
C. Returns are positive in most months
D. Fund charges a performance fee

Show the solution

Ask which option removes an independent check on whether assets exist.
A and D are about activity and pricing, not verification.
C is a performance flag, not an operational one.
B means no outside party can confirm holdings or settlements.

Answer: B. Self-custody and self-clearing remove the independent asset verification that an outside custodian and clearing broker provide.

Example 2

A due diligence analyst reviews a fund and notes: (i) the auditor has one employee, (ii) the manager is also the broker-dealer and custodian, (iii) the manager will not share trade-level data. Explain what these point to and what you would recommend.

Show the solution

Classify each: (i) auditor capacity, (ii) concentration of roles, (iii) transparency. All are operational flags.
Link to the lost control: no credible audit, no independent asset check, no way to verify trades.
State the risk: misappropriation or misreporting could go undetected, as in the Madoff case.
Recommend action: require a reputable auditor, an independent custodian and administrator, and trade-level access, or decline to invest.

Answer: The three points show structural absence of independent controls, so fraud or misreporting could go undetected. Do not invest unless the fund adds an independent custodian, administrator and credible auditor and gives adequate transparency.

Exam tips

Sort every warning sign into operational or performance. Questions often test this split.
Name the missing control, not just the symptom. 'No independent custody' scores better than 'secrecy'.
Remember the five Madoff structural flags: tiny auditor, self-clearing, self-custody, opacity, fees.
Pick answers that recommend verification or independent service providers when asked about due diligence.

Practice questions from Madoff: A Riot of Red Flags

Operational and Governance Red Flags in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Operational and Governance Red Flags: frequently asked questions

Why was Friehling & Horowitz a red flag?

It was a very small, little-known firm auditing a large operation, so it lacked the capacity to verify the assets or be seen as credible. An auditor must be sized and skilled for the job. Investors who checked the auditor's details could have seen the mismatch.

Why does self-clearing and self-custody matter?

Normally an outside custodian or clearing broker confirms trades and holds assets. When the manager does both, nobody else can confirm the securities exist. That makes theft or fake statements much easier to hide.

How is this different from performance red flags?

Performance red flags concern results and strategy, such as returns that look too smooth. Operational red flags concern structure and controls, such as who holds assets and who audits. FRM questions may ask you to tell them apart.

What should a risk manager do when they see these flags?

Escalate and run deeper operational due diligence. Ask for an independent custodian, administrator and reputable auditor, and seek transparency on holdings. If the manager refuses, avoid the investment.