Alleged bookkeeping offences: step by step, the route runs through a fixed sequence in Swedish criminal procedure: a report to the police or Ekobrottsmyndigheten, a preliminary investigation led by a prosecutor, a formal notice of suspicion, an interview under caution, a charge decision and, where the prosecutor proceeds, a trial before the district court. Each stage carries its own deadline.
Who this concerns
A bookkeeping offence in Sweden attaches to the person who was actually responsible for the accounting, not only to the company as a legal entity. That means a managing director, a CFO, a sole trader, or in some structures the external accountant who prepared the records, can each become the subject of the investigation independently of what happens to the company itself. A person who has already left the role by the time the referral is made can still be the one investigated, if the alleged failure occurred while they held responsibility.
The referral is rarely a direct complaint from a competitor or customer. In practice it usually comes from one of a small number of sources: a statutory auditor who is under a duty to report suspected offences discovered during an audit, the Swedish Tax Agency identifying irregularities during a tax audit that go beyond a straightforward adjustment, a bankruptcy administrator examining the books for the first time once a company has been placed into bankruptcy, or an internal report through a whistleblowing channel that escalates once the facts point to the records themselves.
This concerns commercial actors across sectors, including companies where no tax loss is ultimately established, since the offence turns on the state of the records rather than on the amount of tax paid. The wider defence context for a company already under scrutiny for suspected economic crime is set out on the economic crime defence hub.
What the law says
Swedish law requires every business, whether a limited company, a partnership, or a sole trader liable to keep accounts, to maintain accounting records of a kind and quality that make it possible to assess the business's financial position and its result at any point during the accounting period and afterwards. A bookkeeping offence arises where that duty is breached in a way that makes such an assessment substantially impossible, whether through records that are missing, records that do not reflect the transactions that actually occurred, or material destroyed or withheld once a duty to preserve it has already arisen.
The offence has a basic form and a more serious, aggravated form under Swedish law as it currently stands, with the aggravated form typically applied where the breach is systematic, concerns a significant sum, or is combined with other economic crime such as a tax offence. Liability is personal: it falls on the natural person who had actual responsibility for the accounting, which in a limited company is usually the managing director rather than the board as a collective body, although board members are not automatically excluded from scrutiny.
The prosecutor carries the burden of proving the offence beyond reasonable doubt, in the same way as for any other criminal charge. This distinguishes the process from a Skatteverket tax reassessment, which runs on a different standard of proof and on a separate track, even where it concerns exactly the same underlying transactions.
How it works in practice
Ekobrottsmyndigheten opens a preliminary investigation
Once a report reaches the Swedish Economic Crime Authority, Ekobrottsmyndigheten, or the ordinary police economic crime unit, a prosecutor decides whether to open a preliminary investigation, förundersökning. This is a formal legal decision, not an administrative filing, and it marks the point at which the matter becomes a criminal case rather than a compliance concern sitting with the company's own advisers.
Production orders, seizure, and the document list
The investigation typically starts with a request for documents or, where there is a risk that material will be moved or destroyed, a seizure. What is asked for commonly covers the general ledger and sub-ledgers, invoices issued and received, bank statements, board and shareholder meeting minutes, correspondence with the external accountant and auditor, and system logs from the accounting software in use. Where records are electronic, the request usually extends to the underlying database rather than to exported reports alone, since exported reports can be edited before export.
Interview under caution and the formal notice of suspicion
The person considered responsible for the accounting is called to an interview under caution, förhör. Attendance as a witness at this stage does not fix that status permanently: it can change to that of a formal suspect during or after the interview itself. The right to say nothing and the right to have defence counsel present apply from the moment suspicion is first communicated, not only once a charge follows. Where the prosecutor concludes there is reasonable cause, the individual is served formal notice of suspicion, delgivning av misstanke, which changes the procedural position materially: from that point, the suspect and defence counsel gain a right of access to the investigation file as it stands, subject to restrictions while the investigation remains open.
The charge decision
At the close of the investigation, the prosecutor decides whether to bring a charge, åtalsbeslut, or to discontinue the case. There is no fixed statutory number of weeks or months set for this stage as a general rule; the timing depends on the volume of records under review, the number of accounting periods covered, and whether the case runs alongside a parallel tax investigation that has to be reconciled with the criminal file.
Trial before the district court
If charged, the matter proceeds to the district court, tingsrätten, with jurisdiction usually determined by where the company or the individual is domiciled. The trial follows ordinary criminal procedure: the prosecutor presents evidence, the defence responds, and the court gives a reasoned judgment. A conviction can carry consequences beyond the sentence itself, including for the individual's ability to hold a director role afterwards.
What to check before responding to any notice
- Confirm the sender. Ekobrottsmyndigheten, the police, and Skatteverket each have a different role, and the document should state clearly which body issued it.
- Confirm the status stated on the document. A summons as a witness is not the same position as a notice of suspicion, and the two carry different rights.
- Read the exact scope of what is requested. A production order naming specific accounting periods does not extend automatically to unrelated years.
- Identify anything in the requested material that could be privileged, such as correspondence with legal counsel, before anything is produced.
- Treat any response date stated on the document as the operative deadline, rather than assuming a standard period applies across all notices.
- Check whether a parallel process, such as a tax audit, a bankruptcy examination, or a creditor's civil claim, is already running on the same facts.
Where a foreign parent, foreign accounts, or a foreign auditor are involved
Where the company's group structure sits partly or wholly outside Sweden, several elements of this sequence change in practice. Accounting records held on a server, or with an accountant, outside Sweden remain within the scope of a Swedish production order, but collecting them typically takes longer and can require cooperation from the foreign entity's own counsel. Where the individual responsible for the accounting is not resident in Sweden, service of a notice of suspicion and scheduling of the interview under caution both take longer, and mutual legal assistance channels are sometimes used to gather material held abroad. None of this changes the substance of the offence, only how long each step takes and what has to be translated and verified before it can be used.
Can an internal whistleblowing investigation turn into a bookkeeping offence case?
Yes. A whistleblowing channel is designed to surface misconduct internally, but once the facts reported point to accounting records that cannot be reconciled, the company has no discretion to keep the matter internal indefinitely; a report to Ekobrottsmyndigheten or the police typically follows. How that internal process is expected to stop, and what triggers the external report, is set out in the guide to whistleblowing channels and internal investigations.
Does an alleged bookkeeping offence trigger asset attachment by creditors as well?
Not automatically, but the two often run close together in practice. A bookkeeping offence is a criminal matter brought by the state, while attachment of assets is a civil enforcement step available to individual creditors once they hold an enforceable claim; a company under criminal suspicion is frequently also facing creditor pressure, particularly where a bankruptcy administrator's report was the original source of the referral. How assets are attached and where creditors rank against each other is explained in the note on attachment of assets and creditor priority.
What happens to correspondence with legal counsel once a notice of suspicion is served?
It should be withheld from production once it is identified as privileged, but the protection only holds if it is flagged clearly and separated from the rest of the material before anything is handed over; privilege is not restored automatically once documents have already been disclosed. The specific deadlines around asserting privilege, and what happens if the point is missed, are set out in the guide to protecting privileged material.
The numbers
There is no single fixed timetable for a bookkeeping offence case, and any specific day count quoted in general terms would not survive contact with a real file. What actually drives how long each stage takes, and what it costs to respond properly, is the volume and format of the records under review: paper archives take longer to work through than an exported database, and a case spanning several accounting years takes longer than one confined to a single period.
Where the same group runs several legal entities and the investigation reaches more than one of them, the file grows accordingly, and coordination between entities becomes its own task. Where a parallel tax reassessment is running on the same transactions, the two tracks have to be reconciled without either side simply adopting the other's conclusions, since the standard of proof differs between them.
The offence is also subject to a statutory limitation period that varies with whether the basic or the aggravated form applies, and that period runs from the point the offence is treated as having been committed, not from the point it is detected. Beyond what is stated on the specific document served in a given case, the pace of the investigation is set by the investigating authority's own resourcing and by how quickly requested material is actually produced.
Where it usually goes wrong
The most common misstep is treating the matter as a bookkeeping clean-up exercise. Attempting to reconstruct or correct records after a notice has already been served can itself create fresh exposure, if it looks to the investigator like an attempt to alter the evidence rather than an honest correction made in good time.
A second is assuming the parallel tax case is a separate, lesser problem. A bookkeeping offence and a tax offence frequently arise from the same underlying transactions, and the two tracks reach conclusions on different timetables using different standards of proof. How that parallel tax case is best handled alongside a bookkeeping offence allegation is addressed in the guide to the parallel tax case.
A third is handing over material without checking for privilege. Correspondence with external legal counsel is protected, but only if it is identified and separated before production, not after the fact. A fourth is treating a witness interview as a fixed status: the same interview can end with the person leaving as a suspect, and anything said during it can then be used against them from that point forward.
A fifth is assuming a stated deadline is negotiable by default. Some deadlines can be extended on request, but only if the request is made before the date passes, never after. And a sixth, specific to groups with an international structure, is assuming that records held abroad, or an individual resident outside Sweden, place the matter outside Swedish jurisdiction. They do not.
What to do next
A company or director can check, without assistance, who sent a given notice, what status it states, what exact material is requested, and what date is written on the document itself. What cannot reliably be assessed alone is whether the aggravated form of the offence could realistically apply, how much of the requested material is genuinely privileged, whether the interview should proceed on the date given, and how the parallel tax exposure should be coordinated with the criminal file.
That is the point at which this moves from a checklist to case strategy, and it is best done before the interview under caution rather than after it. An assessment of the notice and the underlying records against the current state of the file is the practical next step; it can be arranged directly with the firm, and we reply within two hours on business days.