Investigations

When mining operations should engage independent investigators

Not every reconciliation discrepancy needs an independent investigation. But there are specific situations where in-house teams cannot effectively run an inquiry, either because of role conflicts, capability gaps, or evidentiary requirements that the operation is not set up to handle. Independent investigations are usually indicated when one or more of the following is present:

• Reconciliation variances that have persisted across multiple periods and cannot be explained by metallurgical accounting alone;
• Specific intelligence from informants, supplier channels, or law-enforcement contacts pointing to insider involvement;
• Discovery of physical evidence (concealed gold-bearing material, sampling tools modified for theft, unauthorised access to controlled areas) that requires forensic preservation;
• Allegations involving senior personnel where internal investigation creates obvious conflict-of-interest issues;
• Loss events significant enough to trigger insurance claims, board reporting, or regulatory disclosure;
• Situations where evidence may need to support prosecution, internal investigations rarely meet the chain-of-custody and procedural standards required by courts.

In each of these cases, a structured external investigation protects both the integrity of the inquiry and the position of the operation if matters escalate.

The Hartley Garland investigation methodology

Specialist mining investigations differ from general corporate or forensic investigations because the subject matter, the evidence types, and the operational context are highly specific. Our methodology has been refined across investigations involving gold theft, sampling fraud, reconciliation manipulation, and insider collusion at gold operations across Australia and overseas.

Scoping and engagement structure

Every investigation begins with a structured scoping engagement: what is alleged, what evidence already exists, who can be interviewed, what operational records are available, and what outcome the operator is seeking. Investigations conducted without disciplined scoping consistently fail to deliver actionable findings or expand uncontrollably into unrelated areas.

Evidence preservation and chain of custody

Before any interviews are conducted, physical and digital evidence must be preserved in a form that will withstand subsequent legal scrutiny. This includes operational records, sampling data, weighbridge logs, access control records, CCTV footage, plant DCS data, and any physical material recovered. We work to forensic standards from the first day of an engagement because evidence handled informally early in an inquiry is frequently inadmissible later.

Operational and metallurgical analysis

Gold theft investigations almost always involve reconstructing what should have happened operationally and metallurgically against what actually occurred. This requires investigators who can read mass-balance reconciliations, interrogate metallurgical accounting, and identify where the technical record diverges from physical reality. This is where general forensic investigators typically fall short, the technical literacy required is specific to gold operations.

Structured interviewing

Interviews are conducted by experienced investigators using structured frameworks designed to elicit reliable information while protecting the operation against later claims of procedural unfairness. Sequence, scope, and recording standards all matter. We do not conduct interviews until evidence preservation and analytical work has reached a point where the interview can be effectively framed.

Reporting

Reports are structured to serve multiple downstream uses, board reporting, insurance claims, employment action, civil recovery, and where appropriate criminal prosecution. Each finding is supported by the underlying evidence, and limitations of the inquiry are explicitly stated.

Types of investigations HGC conducts

Gold theft investigations

The core of our investigations practice. Insider theft, opportunistic theft, organised collusion, and external theft each carry different evidence profiles and require different investigative approaches. We work across the full spectrum from single-incident inquiries to systemic loss investigations spanning years of operational history.

Reconciliation discrepancy investigations

Where mass-balance reconciliation has surfaced a persistent variance that cannot be explained metallurgically, structured investigation is required to determine whether the variance reflects theft, accounting error, or sampling failure. (Our gold security advisory service helps prevent these variances accumulating in the first place; this service investigates when they have.)

Sampling and assay fraud

Manipulation of sampling protocols, biased assay results, and chain-of-custody compromise on metallurgical samples are mechanisms by which theft can be concealed at scale and for long periods. Investigations in this category require investigators with deep technical understanding of sampling theory and assay process.

Insider collusion and procurement fraud

Investigations involving collusion across multiple departments, operations, metallurgical accounting, weighbridge, dispatch, or fraud involving supplier and contractor relationships sit alongside theft investigations and frequently surface during gold theft inquiries.

Security breach and incident review

Following a substantiated security incident, structured post-event review establishes how the breach occurred, whether existing controls operated as designed, and what changes are required. This is distinct from a theft investigation but uses similar disciplines.

Working with law enforcement

Where investigations produce evidence of criminal conduct, we work directly with state and federal police, occupational fraud units, and where relevant overseas law enforcement liaisons. Effective handover requires evidence to be assembled to a standard prosecutors will accept, witness statements prepared in formats compatible with subsequent criminal process, and a chain-of-custody trail that can be defended under cross-examination.

Not every investigation should be referred to police. The decision to refer is operationally significant, it transfers control of the timeline and the evidentiary trail to a public-prosecution process and limits the operator’s discretion over subsequent action. Where referral is appropriate, we manage the handover to preserve the operator’s position; where it is not, we structure the inquiry for internal action and civil recovery.

Recovery, deterrence, and lessons learned

Investigations have three potential outcomes beyond the immediate finding of fact. Each requires deliberate planning at the start of the engagement, not as an afterthought:

• Recovery of stolen material or proceeds, where this is realistic. In gold theft cases recovery is frequently impossible due to the speed of re-melt and resale, but in fraud and procurement cases substantial recovery is often possible through civil action.
• Deterrence through visible action. Substantiated investigations that result in termination, prosecution, or civil judgment carry significant deterrent value across the broader workforce. Investigations concluded quietly miss this opportunity.
• Lessons learned, specifically, identification of the control failures that allowed the conduct to occur, and recommendations for remediation. Investigations that surface “what happened” but not “why it was possible” leave the operation exposed to repetition.

HGC works with operators across all three outcomes, with the balance determined by the operator’s strategic priorities and the specific circumstances of the matter.