Glossary/IT and data

Benford's law

Benford's law says that in many naturally occurring sets of numbers the leading digit 1 appears about 30.1 percent of the time, and auditors use it to flag unusual digit patterns for follow-up.

CORAA TeamUpdated November 5, 2026

Definition

Benford's law describes the expected frequency of leading digits in many real-world data sets that span several orders of magnitude. The probability of leading digit d is the base-10 logarithm of (1 + 1/d). That gives 30.1 percent for 1, 17.6 percent for 2, and about 4.6 percent for 9. Frank Benford published the pattern in 1938, and it has since been applied to accounting data.

Why it matters in an audit or review

A digit test is a screening tool. A departure from the expected pattern does not show fraud. It suggests a population to look at, such as invoices set just under an approval limit. The test is weak for data with assigned numbers, narrow ranges or few items.

Example

Illustrative: 2,000 vendor invoices. Digit 1 is expected in 2,000 x 0.301 = 602 invoices. Observed: 410. The shortfall of 192 is large, so the team reviews the digit 4 and 5 clusters just under a $5,000 approval limit.

Common mistakes

  • Running the test on check numbers or other assigned numbers.
  • Treating a deviation as proof of fraud rather than a lead.

Sources

  • Benford, F., The Law of Anomalous Numbers, Proceedings of the American Philosophical Society, 1938
  • Nigrini, M., Benford's Law: Applications for Forensic Accounting, Auditing, and Fraud Detection (Wiley, 2012)
  • AICPA, AU-C Section 520, Analytical Procedures

Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error

Standards

AU-C 520AU-C 240

Related terms

  • Audit data analytics
    Audit data analytics is the use of automated tools and techniques to analyze whole populations of data for risk assessment, testing and anomaly detection, rather than relying only on samples.
  • Analytical procedures
    Analytical procedures evaluate financial information by studying plausible relationships among financial and nonfinancial data, then investigating fluctuations or relationships that are inconsistent with other information or differ from expected amounts.
  • Journal entry testing
    Journal entry testing is the audit procedure of examining journal entries and other adjustments for evidence of material misstatement due to fraud, required on every audit as a response to management override risk.
  • Fraud examination
    Fraud examination is a structured process for resolving fraud allegations, from predication through evidence gathering, interviews and reporting, as defined and taught by the Association of Certified Fraud Examiners.

Go deeper

All glossary terms →

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required