WorldCom: A Simple Entry, and the Law That Followed

The WorldCom fraud is often described as complex. It was not. The central entry was one a second-year accounting student could identify: an operating expense recorded as a capital asset.

That is what makes it worth studying rather than a more ingenious fraud would be. Nothing about the accounting defeated anyone’s technical ability. What failed was the set of arrangements that were supposed to ensure somebody competent, independent and empowered looked at the entry and asked why. The response, when it came, was a law about who signs, who tests and who is protected for speaking, and not a law about accounting.

Key Takeaways

• WorldCom capitalised line costs, an operating expense, as capital assets, moving them off the income statement.
• More than $3.8 billion was disclosed in June 2002 and a similar amount from improper reserve releases in August. The restatement is generally put at around $11 billion.
• The entry inflated reported income, assets and operating cash flow, but left free cash flow unchanged because it moved cash flow between sections.
• Detection came from internal audit acting outside its assigned scope, not from a control functioning as designed.
• Sarbanes-Oxley answered the governance failures directly: certification, control testing, audit committee independence, whistleblower protection and auditor oversight.
• No provision changed the accounting rule, because the rule was never the problem.

What actually happened, in accounting terms

WorldCom paid other telecommunications companies for the use of their networks. These payments were called line costs, and they were the company’s largest single expense. They were a cost of doing business in the period they arose, and under any reading of the rules they belonged on the income statement as an operating expense.

From 2001, WorldCom began recording a portion of them as capital expenditure instead, moving them off the income statement and onto the balance sheet as long-lived assets. On 25 June 2002 the company announced that more than $3.8 billion of line costs had been misclassified this way. On 8 August it disclosed a second set of irregularities, of a similar magnitude, involving the improper release of reserve accounts. The eventual restatement is generally put at around $11 billion.

On 21 July 2002, between those two announcements, WorldCom filed for Chapter 11 protection with $103.8 billion of assets and $41 billion of debt, the largest bankruptcy in United States history at the time.

The context matters for understanding the pressure. WorldCom had grown through a long sequence of acquisitions, and its share price depended on continuing to report the growth that acquisition strategy implied. When its proposed merger with Sprint was blocked by regulators in 2000 and the telecommunications sector turned down at the same time, the growth that the market had been told to expect became very hard to produce honestly. The fraud began in the period when the gap between expectation and reality opened, which is the ordinary shape of these cases.

The entry, and what it did to each statement

Capitalising an expense does two things at once. It removes a cost from the current income statement, and it creates an asset that will be charged against future income slowly, through depreciation. The first effect is immediate and large. The second is delayed and small.

Figure 1. Where $500 million of line costs went

The one number the fraud could not touch

Look at the cash flow rows in the figure again. Operating cash flow improved by $500 million and investing cash flow deteriorated by exactly $500 million. Total cash did not move, because no cash behaved any differently. Only the section it was reported in changed.

That has a direct consequence. Free cash flow, defined as operating cash flow less capital expenditure, nets the two sections together, so the entry cancels inside it completely. Free cash flow was identical whether the costs were expensed or capitalised.

A second signal sat in the ratios. Capital expenditure as a percentage of revenue was rising at WorldCom during a period when the telecommunications industry was cutting capital spending hard after the bust. And the ratio of line costs to revenue, the key operating metric in the sector, held remarkably steady while competitors reporting honestly saw theirs deteriorate. Neither observation proved anything on its own. Both were the kind of question an analyst is paid to ask.

None of these amounted to proof and none of them required access to anything private. Each was a question an outside analyst could have asked from published statements, and the value of the case for a candidate is precisely that it is reconstructable from public information after the fact.

The second half: the reserve releases

The line cost capitalisation is the part everyone remembers. The August 2002 disclosure concerned a different technique of similar size, and it is worth understanding because it is far more common in practice.

A company sets aside reserves, or accrued liabilities, against expected future costs: disputed bills, restructuring, doubtful receivables. Those estimates involve judgement, and a reserve established generously in a good year can be released in a bad one, reducing reported expenses and lifting income. Nothing about the business has changed. The company has simply moved an estimate.

WorldCom released reserves to reduce reported line costs. Because reserves are estimates by nature, each individual release could be defended as a revision of judgement, and only the pattern across many periods reveals what is happening.

Why it survived as long as it did

Given how simple the entry was, the interesting question is not how it was done but how it went unchallenged. Every element of the answer is a governance element, and none of them is technical.

The entries were directed from the top of the finance function, so the people who would normally query an unusual classification were being instructed by the person who authorised it. Internal audit reported in a way that gave the Chief Financial Officer influence over what it examined, which meant the function most likely to find the problem was, in practice, scoped by the person creating it. The external auditor was Arthur Andersen, a firm that had by then already collapsed under the Enron failure. And the board’s oversight was weak enough that questions of this kind did not reach it independently.

There is a further point that is easy to skip past. An accounting entry of this size does not stay with one person. Several people in the finance organisation had to prepare, review and post these entries across many quarters, and a number of them are documented as having raised objections and then complied. That is the ordinary anatomy of a control failure: not a single bad actor working alone, but a chain of individuals each of whom judged that objecting was somebody else’s job, or too costly. Controls that depend on somebody within a reporting line disagreeing with their own management are weak controls, whatever the manual says.

What eventually broke it was a person rather than a system. Cynthia Cooper, who led internal audit, pursued the line cost entries with her team in May 2002, working outside the scope she had been given, and took the findings directly to the audit committee. She was later recognised alongside two other whistleblowers as Time’s Persons of the Year for 2002.

That is an uncomfortable conclusion for anyone designing controls. The control that worked was not a control. It was an individual willing to accept professional risk, and no framework can rely on that being present.

The response: Sarbanes-Oxley

The Sarbanes-Oxley Act was signed on 30 July 2002, nine days after the bankruptcy filing and five weeks after the first disclosure. Read against the failures above, its provisions map almost one to one.

Notice what is absent. No provision changes the accounting rule on when a cost may be capitalised, because that rule was never unclear and was never the problem. Sarbanes-Oxley is a statute about accountability: who has to sign, who has to test, who oversees, and who is protected for reporting.

Prosecutions followed. Bernard Ebbers, the former chief executive, was convicted in 2005 and sentenced to 25 years. Scott Sullivan, the chief financial officer, pleaded guilty and cooperated, receiving a substantially shorter sentence. The gap between the two outcomes became part of the deterrent argument for the certification provisions: an executive who signs can no longer say the numbers were somebody else’s work.

What to take from it

Three things, and they generalise well beyond this case.

First, most large frauds are simple. Sophistication is rarely necessary, because the constraint is not the difficulty of the entry but the willingness of the people around it to ask. Risk frameworks that concentrate on modelling complexity while leaving reporting lines unexamined are protecting the wrong flank.

Second, choose measures that cross the boundaries an entry can move things within. Free cash flow survived WorldCom because it spans the operating and investing sections. The same logic applies far outside accounting: a metric that can be improved by relabelling will eventually be improved by relabelling.

There is a related habit worth building around incentives. WorldCom’s growth expectation was set by its acquisition strategy and reinforced by its own guidance, and the fraud started when that expectation could no longer be met by trading. Before examining a company’s controls, it is worth asking what the organisation has committed to producing and what happens to the people responsible if it does not appear. That question predicts where the pressure will fall long before any control tests it.

Third, notice how differently regulators responded here and to the 2008 crisis. WorldCom and Enron produced a control regime, because the failure was one of governance and reporting. The financial crisis produced a capital regime, because the failure was one of measurement and loss absorption. Both are correct responses to different diagnoses, and confusing them is how institutions end up with heavy controls against risks they do not face.

The comparison with Enron sharpens all three points. Enron’s failure ran on special purpose entities, off balance sheet structures and aggressive mark to market accounting, and it genuinely was difficult to unpick from the outside. WorldCom’s ran on an entry any qualified accountant would recognise. Two failures at opposite ends of the sophistication scale produced one statute, because the thing they had in common was not the accounting. It was a finance function that was not effectively challenged by anyone whose job it was to challenge it.

The short version

• WorldCom capitalised line costs, an operating expense, as capital assets, moving them off the income statement.
• More than $3.8 billion was disclosed in June 2002 and a similar amount from improper reserve releases in August. The restatement is generally put at around $11 billion.
• The entry inflated reported income, assets and operating cash flow, but left free cash flow unchanged because it moved cash flow between sections.
• Detection came from internal audit acting outside its assigned scope, not from a control functioning as designed.
• Sarbanes-Oxley answered the governance failures directly: certification, control testing, audit committee independence, whistleblower protection and auditor oversight.
• No provision changed the accounting rule, because the rule was never the problem.

Frequently Asked Questions