Back to Blog
Corporate Investigation • Fraud Scenarios • Practical Guide

P300 EEG for Corporate Fraud — Real Scenarios and How It Actually Works

Employee theft. Expense fraud. Procurement kickbacks. Intellectual property leaks. These are the situations where businesses actually use P300 EEG lie detection — and where the technology delivers the most tangible commercial value. Here is how it works in practice, scenario by scenario.

Important — Context for Business Leaders

This article is written for HR directors, CFOs, compliance officers and in-house legal teams who are considering P300 EEG as part of a corporate investigation. The scenarios described are representative composites drawn from the types of cases we handle — not attributable to any specific client or investigation.

P300 EEG is a powerful investigative tool — but it is not a replacement for proper HR procedure, legal counsel or the police. We have written this article to be practical rather than promotional, so you can assess whether the technology is appropriate for your situation before making contact.

JM

Dr. James Mitchell

Senior P300 EEG Researcher — DeceptionDetection.co.uk

Dr. Mitchell has conducted P300 EEG investigations for businesses ranging from SMEs to FTSE-listed corporations, covering internal theft, procurement fraud, data breaches and misconduct allegations. He works directly with legal and HR teams to design testing protocols that stand up to scrutiny.

The Problem — Why Traditional Corporate Investigations Stall

Corporate fraud costs UK businesses an estimated £190 billion per year. But the financial loss is only part of the problem. For most businesses that contact us, the real difficulty is that they know fraud is happening — or has happened — but they cannot determine who is responsible with enough certainty to act.

Traditional investigation methods — CCTV review, audit trails, interviews, forensic accounting — are essential. But they frequently narrow the field without resolving it. You end up with three people who had access, two who had motive, and no definitive answer. The investigation stalls. The losses continue. Or a decision is made on insufficient evidence and the business faces an unfair dismissal claim.

P300 EEG does not replace traditional investigation. It resolves the specific question that traditional investigation often cannot: does this individual recognise details about the fraud that only someone involved would know?

That is the fundamental principle. The P300 brainwave response is an involuntary neurological reaction that occurs when the brain encounters information it recognises as meaningful. It cannot be suppressed. It cannot be faked. And it can be measured with clinical precision using medical-grade EEG equipment. In a corporate fraud context, this means we can present a subject with specific details about the method, timing, location or proceeds of a fraud — and determine whether their brain recognises those details.

Six Corporate Fraud Scenarios — And How P300 EEG Is Used in Each

Every corporate fraud case is different, but certain patterns recur. These are the scenarios we see most frequently — and how P300 EEG contributes to each type of investigation.

Scenario 1: Employee Theft — Stock, Cash or Equipment

The situation: A distribution warehouse identifies £45,000 in stock losses over six months. CCTV covers the loading bays but not the internal storage areas. Audit trails show discrepancies in pick records. The shortfall correlates with the shifts of four warehouse operatives — but the evidence is not strong enough to identify which one, or whether more than one is involved.
How P300 helps: We design stimulus sets containing details only the perpetrator would recognise — the specific method used to remove stock (was it concealed in personal bags, loaded onto unauthorised vehicles, or handed to an accomplice at the gate?), the storage area where items were taken from, and what happened to the goods afterwards. Each of the four operatives is tested individually. The brain's P300 response to these details reveals who recognises the mechanics of the theft — and who does not. Combined with the existing audit evidence, this typically provides sufficient basis for disciplinary action and, in some cases, a referral to the police.

Scenario 2: Expense Fraud and False Claims

The situation: A regional sales team of twelve people shows unusual expense claim patterns. Finance has flagged duplicate hotel receipts, inflated mileage claims and claims for client meetings that may not have taken place. The total suspected overpayment is £28,000 over two years. Several team members share routes and territories, making it difficult to isolate the behaviour to specific individuals through financial records alone.
How P300 helps: The stimulus design focuses on the specific mechanics of the fraud — fabricated receipt details, the names of fictitious clients used in claims, the method used to inflate mileage, and whether claims were coordinated between team members. Because the P300 response is involuntary, a subject who recognises these fabrication methods produces a measurable neurological response, regardless of what they say in interview. This allows the business to distinguish between individuals who were genuinely unaware and those who were actively participating.

Scenario 3: Procurement Kickbacks and Supplier Collusion

The situation: A manufacturing company suspects that a senior procurement manager has been awarding contracts to a specific supplier in exchange for personal payments. The supplier's prices are consistently 15–20% above market rate. Internal audit has identified the pattern but cannot prove that the procurement manager received personal benefit — bank records are private and the manager denies any relationship with the supplier beyond the normal commercial arrangement.
How P300 helps: We present stimulus items relating to the suspected financial arrangement — how payments were structured (cash, bank transfer to a third party, gifts in kind), where meetings took place, the names of intermediaries, and the specific mechanism by which contracts were steered. The critical advantage of P300 EEG in procurement fraud is that it bypasses the denial entirely. The manager's brain either recognises the details of the arrangement or it does not. The response is measured neurologically, not verbally. This provides the investigative leverage that financial audit alone could not deliver.

Scenario 4: Intellectual Property Theft and Data Exfiltration

The situation: A technology company discovers that proprietary source code and product roadmaps have appeared in a competitor's product. Digital forensics confirms that the data was accessed internally and transferred via a personal cloud storage account. Six engineers had access. The access logs show all six regularly accessed the relevant repositories as part of their normal duties — the exfiltration cannot be isolated to a single user from the digital evidence alone.
How P300 helps: The stimulus set targets knowledge of the exfiltration method — the specific cloud storage service used, the file naming conventions applied to the exfiltrated documents, whether a personal device was used, and who the data was transmitted to. Because these are details that only the person who performed the exfiltration would know, the P300 recognition response is highly diagnostic. In IP theft cases, speed is critical — the longer the investigation takes, the more commercial value is lost. P300 testing can resolve the question within days rather than the weeks or months a conventional digital forensics investigation might require.

Scenario 5: Insider Threats and Information Leaks

The situation: A financial services firm discovers that confidential client data — including account balances and transaction histories — has been leaked to a third party, potentially a former employee now working for a competitor. The leak has regulatory implications under GDPR and FCA rules. Internal investigation has narrowed the potential sources to a team of eight people with the relevant access permissions.
How P300 helps: The testing protocol focuses on the specific nature of the leaked information, the method of transmission (email, messaging app, USB, printed documents), who it was transmitted to, and whether the subject received any payment or inducement. In regulated industries, the ability to identify the source quickly and with scientific evidence is often essential for satisfying regulatory obligations. A P300 EEG report provides documented, auditable evidence that can be included in regulatory filings and compliance reports.

Scenario 6: Financial Misstatement and Accounting Fraud

The situation: An internal audit at a property management company uncovers irregularities in accounts — inflated revenue figures, fictitious invoices from shell suppliers, and missing client deposits totalling over £300,000. The finance director and two members of the accounts team had the access and authority to make these entries. All three deny involvement and blame the others.
How P300 helps: The stimulus design targets knowledge of the fraud mechanics — the names of the fictitious suppliers, the bank accounts used for the diverted funds, the method used to create false invoices, and the timing of key transactions. When three suspects are each blaming the others, traditional interviews produce circular denials. P300 EEG cuts through this by testing each individual's recognition of the specific details. The person who created the fictitious invoices recognises the supplier names they invented. The person who diverted the funds recognises the bank details they used. This untangles the web in a way that interviews alone cannot.

Why P300 EEG Is Particularly Effective in Corporate Fraud

There are specific characteristics of P300 EEG that make it unusually well-suited to corporate fraud investigations — more so, in many respects, than in personal or relationship contexts.

Corporate fraud produces testable knowledge

Fraud always involves specific, concrete details — account numbers, supplier names, methods, locations, amounts, timing. These details form the basis of the stimulus set. The more specific and varied the details of the fraud, the more diagnostic the P300 test becomes. Corporate fraud tends to produce exactly the kind of detailed, factual knowledge that P300 EEG is designed to detect.

Multiple suspects can be tested under identical conditions

When several employees had access or opportunity, P300 testing allows each to be assessed against the same stimulus set under the same controlled conditions. This eliminates the subjectivity of interview-based assessments, where different interviewers may form different impressions, and where confident liars can outperform truthful but nervous individuals.

It cannot be beaten by coaching or preparation

In high-value corporate fraud, the individuals involved are often intelligent, articulate and well-prepared. They may have retained legal counsel. They may have rehearsed their account. None of this affects the P300 response, because the P300 is an involuntary neurological event — it occurs automatically when the brain encounters recognised information, regardless of what the subject intends to say or do. This is the single most important difference between P300 EEG and traditional polygraph in a corporate context.

In polygraph testing, a well-prepared subject can influence the results through controlled breathing, mental countermeasures and deliberate stress management. In P300 EEG testing, no known countermeasure has been shown to reliably suppress the recognition response. The brainwave is faster than conscious thought — it occurs within 300 milliseconds of stimulus presentation.

Results are documented to evidentiary standard

Our corporate investigation reports include full raw EEG data, electrode-level measurements, statistical analysis with probability scores, artefact rejection records, examiner conclusions and complete protocol documentation. This level of documentation is designed specifically for contexts where the results may face challenge — from opposing lawyers, employment tribunals or regulatory bodies.

How a Corporate P300 EEG Investigation Works — Step by Step

If you are considering P300 EEG as part of a corporate fraud investigation, here is what the process typically looks like from initial contact to final report.

Confidential Briefing

You brief us — either directly or through your legal team — on the nature of the suspected fraud, the evidence gathered so far, the number of suspects, and what specific questions you need answered. This conversation is covered by our strict confidentiality protocols. We assess whether P300 EEG is appropriate for your situation and advise honestly if it is not.

Stimulus Design

This is the most critical step. Our researchers design the stimulus set — the specific items of information that will be presented during the test — based on the details of the suspected fraud. The quality of the stimulus design directly determines the diagnostic power of the test. We work with your investigation team to identify the details that only someone involved in the fraud would recognise, and we structure these carefully to avoid contamination or ambiguity.

Subject Consent and Scheduling

All subjects must provide full informed consent. We provide clear documentation explaining the process, what will be measured, and how results will be used. Testing is typically conducted on-site at your premises, at our facilities, or at a neutral location — whichever is most appropriate for your situation. We can test multiple subjects in a single day.

Testing

Each test session takes approximately 60 to 90 minutes per subject, including setup, calibration and the test itself. The subject sits comfortably while visual stimuli are presented on a screen. No injections, no physical discomfort, no invasive procedures. The EEG cap records brainwave activity across 8 channels throughout the session. The process is calm, professional and designed to minimise anxiety — which is important because excessive stress can introduce noise into the EEG signal.

Analysis and Reporting

Our researchers analyse the raw EEG data, apply artefact rejection protocols, measure P300 amplitude and latency responses to each stimulus item, and calculate statistical probability scores. The final report is delivered as a comprehensive written document — typically within 48 to 72 hours — including all raw data, full statistical analysis, and a clear professional conclusion. The report is structured for use in HR proceedings, legal submissions and regulatory filings.

Post-Report Support

If needed, our examiners are available to provide expert witness statements, attend disciplinary hearings, or respond to challenges from opposing experts. We also offer confidential briefings to your HR and legal teams on how to present and contextualise the findings within the broader investigation.

When P300 EEG Is Right for Your Investigation — And When It Is Not

We believe in being direct about where our technology adds genuine value — and where it does not. Not every corporate investigation benefits from P300 EEG testing, and we will tell you so during the initial briefing.

Strong Fit

Internal theft with multiple suspects and a narrowed but unresolved investigation. Expense or procurement fraud where the perpetrator's identity is uncertain. IP theft or data exfiltration where digital forensics has not isolated a single source. Insider threat or information leaks affecting regulatory compliance.

Good Fit

Pre-litigation evidence gathering where you need documented scientific evidence before commencing legal proceedings. Insurance fraud investigations where a policyholder's account of events is disputed. Misconduct allegations where the facts are contested and credibility is the central issue.

Possible — Discuss First

Cases where only one suspect exists and the investigation is already strong on other grounds. Situations where the fraud details are not sufficiently specific to design a robust stimulus set. Historical fraud where the perpetrator may no longer recall specific details accurately. Cases where the subject is unlikely to consent voluntarily.

Not Appropriate

General "honesty screening" of employees without a specific investigation. Covert testing without the subject's knowledge or consent. Situations where the intention is to bypass fair HR procedure. Criminal prosecution — P300 results are not admissible as proof in UK criminal courts. See our court admissibility guide for more detail.

The Honest Limitations — What P300 EEG Cannot Do in Corporate Fraud

Our credibility depends on being straight with you about what the technology cannot deliver. Here are the limitations you should understand before commissioning a test.

  • P300 EEG cannot determine intent or motive — it detects recognition of specific factual details, not why someone did what they did
  • It cannot work without the subject's voluntary consent — covert testing is not possible, not legal, and not something we offer
  • It cannot compensate for a weak investigation — the quality of the test depends entirely on the quality of the factual details available from the wider investigation
  • It is not a substitute for the police — if a crime has been committed, report it to the police; P300 EEG can support your internal investigation but does not replace criminal proceedings
  • Results are not admissible as proof in UK criminal courts — they can support HR proceedings, civil litigation and regulatory filings, but not criminal prosecution
  • A single test result should never be the sole basis for dismissal — it should be part of a fair, documented investigation process

A provider who tells you P300 EEG can "prove" fraud is overselling the technology. What it can do is provide objective, scientifically robust neurological evidence about whether a specific individual recognises details of a fraud — evidence that is far stronger than what interviews, polygraph or circumstantial audit trails typically produce. That is a significant capability. But it is not omniscience, and treating it as such would undermine both the investigation and the technology's credibility.

Dealing With Suspected Corporate Fraud?

Our corporate investigation team handles cases from initial briefing through to final report and expert witness support. All enquiries are treated in the strictest confidence. Speak to us first — we will tell you honestly whether P300 EEG is right for your situation.

Frequently Asked Questions

Yes. P300 EEG testing determines whether a subject's brain recognises specific details about a theft — the method used, the items taken, where goods were concealed, or who else was involved. It does not detect "guilt" as an abstract concept; it detects recognition of factual details that only someone involved would know. This makes it highly effective in narrowing suspect pools and confirming involvement in internal theft investigations.
Yes — provided the subject gives full informed consent. P300 EEG testing is lawful in the UK when participation is voluntary and properly documented. It cannot be imposed on an employee without their agreement. However, refusal to participate can sometimes itself be noted as part of a broader investigation — though refusal should never be treated as evidence of guilt. We recommend involving your HR and legal teams from the outset to ensure the process is fair and defensible.
Polygraph measures physiological stress responses — heart rate, breathing, skin conductance — which can be affected by anxiety, medication and deliberate countermeasures. P300 EEG measures a specific involuntary brainwave that occurs when the brain recognises meaningful information. It cannot be suppressed or faked through controlled breathing or mental techniques. In corporate settings where subjects may be intelligent, prepared and legally represented, this makes P300 EEG significantly more reliable than traditional polygraph.
P300 EEG results can form part of the evidence supporting a disciplinary decision — including dismissal — when they are part of a fair overall investigation process. HR disciplinary panels are not courts and are not bound by strict evidence rules. However, dismissal based solely on a P300 result, without other supporting evidence and without fair procedure, could be vulnerable to an unfair dismissal claim. Employment legal advice is essential. See our court admissibility guide for more detail on the legal context.
We can typically begin within 24 to 72 hours of the initial briefing. For urgent situations — such as ongoing losses, suspected data exfiltration in progress, or regulatory deadlines — same-day consultation and expedited testing are available. The stimulus design phase usually takes 1 to 2 days, depending on the complexity of the case. We work directly with your legal and HR teams throughout the process. Call us on 0161 524 5513 for urgent enquiries.
Pricing depends on the number of subjects, the complexity of the stimulus design, the location, and whether expert witness support is required. Our corporate investigation packages start from a base rate and scale with case complexity. Given that the average cost of unresolved corporate fraud is many times the cost of investigation, most businesses find the investment justified — particularly when the alternative is indefinite losses or a wrongful dismissal liability. Contact us for a confidential quote tailored to your specific case.
Back to All Blog Posts