FRM Exam Part II · Performing Due Diligence on Specific Managers and Funds

Operational Due Diligence and Fraud Risk in Hedge Funds

Updated 11 October 2026 · Fact-checked

Operational due diligence (ODD) checks whether a fund's business and controls can be trusted, separate from its investment strategy. You review people, back office, valuation, service providers, legal terms and governance. Then you look for red flags, such as an unknown auditor or no independent administrator, as in Madoff. Any serious red flag can justify rejecting the fund.

Understand Operational Due Diligence and Fraud Risk

Operational due diligence (ODD) asks one question: can this manager run the fund honestly and reliably? Investment due diligence asks a different one: can the strategy make money? A great strategy in a badly controlled firm can still lose everything. Most hedge fund failures come from operational problems, not from bad trades.

ODD covers several areas. Back office and controls: who confirms trades, reconciles positions and cash, and moves money? These duties should be segregated, so the portfolio manager cannot also approve payments. Valuation: are prices independent and consistent, especially for illiquid assets? Look for a written policy and a valuation committee, and be wary when the manager alone marks hard-to-price positions. Service providers: the administrator, auditor, prime broker and custodian act as outside checks. Their quality and independence matter.

Other areas are governance and legal terms (board independence, side letters, redemption terms), compliance and regulation (registration, past litigation, regulatory actions), business risk (key-person dependence, funding of the manager, insurance) and background checks on key staff.

The Madoff case is the standard lesson. Returns were unusually smooth, and the strategy was opaque. The auditor was a tiny, unknown firm for a very large fund. Madoff acted as both broker-dealer and custodian, so there was no independent check on trades or assets. Many investors came through feeder funds that did little real due diligence. Each flag alone may have an innocent explanation. Together they were a warning.

The rule for exams: ODD is about verifying, not trusting. Independent third parties, segregation of duties and transparency reduce fraud risk. Their absence raises it. Fraud risk is often the result of weak controls, incentive pressure and opportunity, so weak oversight is itself a risk factor.

Key formulas to remember

ODD scope: ODD = people + processes + valuation + service providers + legal/governance + compliance; Use this as a checklist to organise any answer. It is not a numeric formula.
Independence test: Independent check = administrator + auditor + custodian/prime broker not controlled by the manager; If the manager controls or is the same entity as these roles, fraud risk rises sharply.
Segregation of duties: Trade initiation ≠ trade confirmation ≠ cash movement ≠ valuation; One person controlling several of these steps is a control weakness.
Red flag principle: Multiple red flags + weak explanations → reject or escalate; A single flag may be explainable. A cluster is stronger evidence. Unresolved serious flags justify a decline.

How to solve Operational Due Diligence and Fraud Risk questions

Use this method for any ODD or fraud question. It keeps you from jumping at a flashy detail.

1Identify what the question asks: list red flags, pick the most serious one, name the missing control, or decide whether to invest.
2Sort the facts in the case into groups: people, back office, valuation, service providers, governance and legal, performance.
3For each fact, ask whether an independent party verifies it. If the manager controls the check, mark it as weak.
4Look for the classic warning signs: smooth returns, opaque strategy, tiny or unknown auditor, no independent administrator, self-custody, key-person concentration.
5Rank the issues. Missing independent custody or administration usually outranks minor documentation gaps.
6Match the answer choice to the control gap, not to the investment story.
7Check the wording: 'most important', 'first step' and 'best mitigant' need different answers.

Quickest way: Independence-first scan

When to use it: Use when you have about a minute and four plausible options.

Ask who verifies assets, trades and valuation. If the answer is the manager, that is the likely flaw.
Pick the option that adds independent verification (administrator, auditor, custodian) over one that adds more reporting by the manager.
Reject options that rely on strong past returns or manager reputation as proof.
If the choice is between a documentation gap and a missing independent check, choose the missing check.

Common mistakes in Operational Due Diligence and Fraud Risk

Treating strong, steady returns as evidence of quality.
Investment due diligence habits make good performance look reassuring.
Fix: Remember Madoff. Returns that are too smooth for the stated strategy are a red flag that needs explanation.
Accepting that a big-name feeder fund has done the due diligence.
Reputation seems to replace your own work.
Fix: Feeder funds often failed to verify the underlying manager. You remain responsible for checking independence and controls.
Treating any single red flag as proof of fraud.
Students overstate the rule.
Fix: A flag signals the need for more questions. Fraud is more likely when several flags appear together and explanations are weak.
Ignoring who provides custody and administration.
Focus goes to the strategy description.
Fix: Always check that custodian, administrator and auditor are independent and credible for the fund's size.
Confusing ODD with investment due diligence.
Both are part of manager selection.
Fix: ODD tests controls, valuation and governance. Investment due diligence tests strategy, edge and risk. Pick the answer matching the question.

Worked examples

Example 1

A hedge fund has USD 800 million in assets. It reports steady monthly gains with almost no losing months. The manager's own broker-dealer arm executes and holds all assets. The auditor is a three-person firm. Which is the most serious operational red flag?

Show the solution

List the facts: smooth returns, self-custody and self-execution, tiny auditor.
Ask which fact removes independent verification of the assets themselves.
Self-custody by the manager's affiliate means no outside party confirms the assets exist.
The small auditor and smooth returns are also concerning, but they are weaker than missing independent custody.
Conclude that the combined role of broker, custodian and manager is the key control failure.

Answer: The most serious flag is that the manager's affiliate executes trades and holds the assets, so there is no independent custody. The other facts add to the concern.

Example 2

You are reviewing a fund of USD 150 million. It uses an independent administrator, a recognised auditor and a prime broker. However, the portfolio manager alone values illiquid positions with no committee. What is the best recommendation?

Show the solution

Note the strengths: independent administrator, auditor and prime broker.
Identify the weakness: valuation of illiquid assets is controlled by the person whose fees depend on performance.
This creates a conflict of interest and risk of overstated NAV.
The fix is a valuation policy with independent review, such as a valuation committee, and administrator verification of prices where possible.
Do not reject the fund outright, because the main service provider structure is sound. Make the valuation fix a condition.

Answer: Require an independent valuation process, such as a valuation committee and administrator price verification, before investing. The conflict over illiquid pricing is the main gap.

Exam tips

Questions are usually case-based. Underline the control that is missing, not the strategy described.
Expect options that sound prudent but rely on the manager's own reports. Prefer independent verification.
Know the Madoff flags by name: smooth returns, opaque strategy, small auditor, self-custody, feeder funds.
'Most important' questions: independent custody and administration usually rank above paperwork gaps.
Read for conditions. A flag that has a credible explanation is weaker than one that does not.

Practice questions from Performing Due Diligence on Specific Managers and Funds

Operational Due Diligence and Fraud Risk in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Operational Due Diligence and Fraud Risk: frequently asked questions

What is operational due diligence on a hedge fund?

It is a review of the manager's business, controls, valuation, service providers and governance. The aim is to judge whether the fund can operate reliably and honestly, separate from investment performance.

What were the main red flags in the Madoff fraud?

Returns were very smooth, the strategy was opaque, and the auditor was a very small firm for such a large fund. Madoff also acted as broker and custodian, so no independent party checked assets. Many investors relied on feeder funds that did little verification.

Does one red flag mean a fund is a fraud?

No. A single flag may have an innocent explanation. Several flags together, especially with weak answers from the manager, make fraud more likely and justify declining or escalating.

Which service providers matter most in ODD?

The administrator, auditor, prime broker and custodian. They give independent verification of NAV, financial statements, trades and assets. Their independence and quality should fit the fund's size and complexity.