AMF ADVISORS BLOG
The Auditor Who Never Actually Audited: Madoff's 17-Year Blind Eye
For 17 years, a two-person accounting firm in a Rockland County office signed off on audits of a business claiming tens of billions in assets — without ever doing the work an audit actually requires. This is the story of the accountant behind Bernie Madoff, and the loophole that let him go unchecked.
Bernie Madoff ran the largest Ponzi scheme in history. But Madoff didn’t audit himself — that job belonged, on paper, to David Friehling, a CPA running a tiny family firm out of New City, New York. For 17 straight years, Friehling signed clean audit opinions on Madoff’s business. The real story isn’t that he lied about what he found. It’s that he never actually looked.
A Confession Over Breakfast
On December 10, 2008, as the financial crisis pushed investors to pull roughly $7 billion out of his investment business, Bernie Madoff told his two sons the truth: the whole thing was “one big lie,” a Ponzi scheme with nothing real behind it. His sons called a lawyer. The FBI arrested Madoff the next morning. He would eventually be sentenced to 150 years for a fraud that told investors they held roughly $65 billion, though the real cash investors put in and lost is closer to $17.5–20 billion — still one of the largest financial frauds ever uncovered.
The Auditor Nobody Had Heard Of
Behind that fraud sat an audit firm almost nobody in finance had heard of: Friehling & Horowitz, CPAs, based in New City, New York, in Rockland County. It consisted of David Friehling, his semi-retired father-in-law Jerome Horowitz, and a part-time secretary. Horowitz had retired to Florida in 1991 and handed the Madoff engagement to his son-in-law. For roughly $12,000 to $14,500 a month, Friehling signed the audit opinions that let a business claiming tens of billions in client assets look, on paper, like any other properly audited financial firm.
An Audit That Never Happened
A real audit under generally accepted auditing standards requires independently confirming that assets a firm claims to hold actually exist, verifying custody with an outside custodian, testing internal controls, and reviewing the accounts money actually moves through. According to the SEC’s civil complaint and the criminal charges against him, Friehling did essentially none of this. He never confirmed Madoff’s claimed securities existed. He never independently verified assets. He never reviewed a material source of the firm’s revenue or examined the bank accounts billions of dollars moved through. He kept no audit documentation, because there was no real audit to document.
He also wasn’t independent in the first place — he and his family held a personal brokerage account at Madoff’s firm that the SEC said exceeded $500,000, a direct conflict of interest for the person supposedly checking that firm’s books.
The Loophole That Let It Slide
Here’s the part that explains how this went unchecked for so long: before 2010, the Public Company Accounting Oversight Board — the body created after Enron specifically to inspect audit firms — had no authority to inspect auditors of broker-dealers unless that broker-dealer was also a publicly traded company. Madoff’s business was a broker-dealer and investment adviser, not a public company, so Friehling’s audits fell entirely outside PCAOB inspection.
The remaining oversight, in theory, was peer review through the AICPA. Friehling avoided even that by telling the AICPA for years that he simply didn’t perform any audits at all. The result: a firm auditing an operation that claimed tens of billions of dollars under management answered to no external inspection regime whatsoever — not the PCAOB, which had no jurisdiction, and not the AICPA, which he’d lied his way out of.
The Man Who Did the Math
None of this required forensic sophistication to catch — a financial analyst named Harry Markopolos had already done the math, for free, years earlier. Starting around 1999, Markopolos concluded Madoff’s returns were mathematically impossible: the options strategy Madoff claimed to run would have required trading volume vastly larger than actually existed in that market. He submitted detailed warnings to the SEC in 2000, 2001, 2005, 2007, and 2008, including a 2005 memo bluntly titled “The World’s Largest Hedge Fund Is a Fraud.”
The SEC’s own internal watchdog later published a report admitting the agency had multiple credible, detailed tips over nearly a decade and botched every examination that followed. The audit procedures that would have caught the fraud — confirming trades with counterparties, checking settlement records, verifying custody independently — are first-year auditing training, not advanced forensic technique. Nobody with the authority to check ever actually checked.
Nine Counts, No Prison
Friehling was charged in March 2009 and pleaded guilty that November to a nine-count information covering securities fraud, investment adviser fraud, filing false audit reports, and obstructing IRS administration — facing a statutory maximum of 114 years. He entered a cooperation agreement and testified for the government. In May 2015, Judge Laura Taylor Swain sentenced him to no prison time at all: two years of probation, one year of home detention, and 250 hours of community service, plus forfeiture of $3,183,000. The judge called his conduct “a complete abdication of his duties” while crediting his cooperation as crucial to the broader prosecution. He lost his CPA license in 2010.
It’s worth being precise about what he was and wasn’t found to have done: Friehling maintained, and the record supports, that he didn’t know Madoff’s business was a Ponzi scheme. His crime was certifying audits he never performed and violating independence rules — professional fraud that enabled a much larger fraud, not knowing participation in the Ponzi mechanics themselves.
Closing the Gap
The Dodd-Frank Act, passed in 2010, closed the exact loophole that let Friehling operate unchecked — giving the PCAOB authority to register, inspect, and discipline auditors of all SEC-registered broker-dealers, not just those tied to public companies. The SEC amended its own rules in 2013, and the PCAOB adopted new attestation standards specifically for broker-dealer audits, phased in for fiscal years starting in 2014. An entire category of financial firm that had operated with zero independent audit oversight for decades finally got one.
The unsettling part of the Friehling story isn’t that a corrupt accountant covered up a fraud — it’s that he didn’t need to be clever about it. There was no oversight body checking his work, no peer reviewer he couldn’t simply lie to, and no client pushing back on a rubber stamp that let billions of claimed assets go unverified for 17 years. An audit is only worth what the auditor actually did to earn the opinion at the bottom of it — and for nearly two decades, in this case, that was nothing at all.
An Audit Is Only as Good as the Work Behind It
A clean opinion should mean something. AMF Advisors builds real financial oversight for small businesses — the kind that actually verifies the numbers, not just signs off on them.