Fraud Risk · Due Diligence · Governance · GCC
You Built Something Worth Protecting
What follows is who we are, how we work, and what we have delivered — for governments, banks, family offices and businesses across the Gulf.
You’re Not the First
These Are the Situations We Are Called Into.
The Difference
The Gulf Is Not Like Anywhere Else.
Neither Is How We Work Here.
- We engage in the language that fits. Arabic, English, or Russian — whatever the client and situation require. Reports prepared in the language local regulators demand.
- 16 years operating in the GCC. Not studying it. The context, the relationships, and the regulatory environment as it actually works — not as it appears from the outside.
- Senior involvement on every engagement. Every mandate is led by Maher Hashash directly. No junior teams, no handoffs, no account managers.
Four Services
One Advisory Relationship. Full Spectrum.
The Lead
Maher Hashash
Founder & Managing Director · Goodwork LLC
- Established UAE Federal Anti-Fraud Guidelines (2018) — still the national standard
- Developed anti-fraud frameworks for the KSA Ministry of Finance
- Led investigations involving hundreds of millions across multiple jurisdictions
- 40+ fraud investigations and audits · $800M+ in matters handled
Senior Advisory
No Junior Handoffs.
Maher Hashash
Founder & Managing Director · CFE
Arabic · English · French
Leads all engagements directly. CFE with 16 years across the GCC.
Farrukh Attamuradov
Client Relationship Director
English · Russian
Former Executive Director, major GCC Development Group. Deep expertise in commercial fraud and procurement risk.
Khaled Zaza
Operations & Regulatory Advisor
Arabic · English
International lawyer specialising in regulatory compliance and company setup. Leads relationships in KSA, Lebanon and Qatar.
Case Studies
When It Mattered, We Delivered
Fresh Mandates. Real Outcomes.
Seven engagements completed or active since Goodwork’s founding — across Saudi Arabia, the broader GCC, and multiple sectors.
Fraud in National Medical Procurement
Full fraud risk assessment across a national medical procurement operation. Scope included fraud perception analysis, controls review, and assessment of the full procurement cycle.
Vendor Integrity Audit — Saudi Aramco Ecosystem
A vendor operating in the Saudi Aramco ecosystem came under suspicion. The client needed an independent assessment that could either confirm the concern or clear the vendor — with findings that would stand up under scrutiny.
Due Diligence. Fintech. Investigations.
Three further engagements — from fintech fraud programmes to cross-border JV investigations.
Counter-Fraud Framework — Saudi Fintech Startup
SAMA alignment and Counter-Fraud Framework development for a growing Saudi fintech that had scaled beyond its existing controls.
Continuous DD & Advisory — Multiple KSA Family Offices
Ongoing due diligence and governance advisory for multiple family offices in Saudi Arabia. Counterparty verification, investment DD, governance advisory, and fraud risk management across GCC operations.
The threat was already inside.
The controls were not.
Two engagements. Different sectors. The same hard truth — by the time the owner suspected something, the damage had been building for years.
Senior Leadership Misconduct — Manufacturing
The CFO had been trusted, senior, and unchecked for years. When the owners suspected something, they had no audit trail and no way to quantify what had been taken. They needed evidence that would stand up before the Public Prosecution, the Police, and a court.
Fraud Function Transformation — Large GCC Bank
Full fraud function process optimisation and automation for a large GCC bank. Full mandate: processes, technology, team capability, and SAMA regulatory alignment. The fraud function was rebuilt, not patched.
The higher the position,
the harder it is to look.
Two engagements where the investigation crossed borders, implicated senior leadership, and demanded findings that could withstand scrutiny in multiple legal systems.
Executive-Level Investigation — Real Estate
Two major real estate development projects — one in UAE, one in Saudi Arabia. In each case, the boards had reason to believe the person running the operation was the source of the problem. At that scale, the investigation had to be unimpeachable.
JV Counterparty Investigation
Investigation into a proposed JV counterparty for a GCC investor. Scope included directorship checks, beneficial ownership, email review, and forensic accounting across jurisdictions.
Most fraud walks in through
the front door — introduced and vouched for.
Two engagements where the risk was not a rogue employee — it was a business relationship that nobody had properly examined.
Foreign Capital, Local Risk — Protected
Two family offices entering UAE markets with serious capital and no independent capacity to assess what they were entering. Both had JV partners and deal structures that looked sound from the outside — none had been independently verified.
Full Fraud Programme — GCC BNPL Company
Full fraud programme built from scratch for a large GCC lending and BNPL company. Mandate covered fraud risk framework, investigation capability, team training, and regulatory alignment.
Finding what went wrong is one thing.
Making sure it cannot happen again is the real work.
Investigations across the GCC’s most operationally complex sectors — where both the fraud and the fix required deep sector knowledge.
Investigations That Did Not End with the Report
Internal investigations across Oil & Gas and Construction clients in the GCC. In every case the investigation was only half the mandate — findings without remediation leave the same door open.
SAMA Counter-Fraud Framework — Saudi Fintech
A Saudi fintech under SAMA regulatory scrutiny needed a counter-fraud framework that met regulatory requirements and that the internal team could actually operate day-to-day.
The frameworks built for governments
set the standard everything else is measured against.
UAE Federal Government · 2018
National Anti-Fraud Guidelines for the UAE
Worked directly with UAE federal authorities to establish the country’s national standard for fraud prevention, detection, and response — policies, procedures, and controls adopted across multiple federal entities.
The national standard. Still the benchmark.
KSA Ministry of Finance · Multiple Years
Anti-Fraud & Compliance Frameworks, Kingdom of Saudi Arabia
Built the frameworks governing fraud risk management, corruption prevention, and misconduct control across public entities throughout the Kingdom — aligned with Vision 2030 governance requirements.
Implemented across ministry operations as standing practice.
GCC Government Ministry · Multi-Billion USD
Government Spending Review & Optimisation
Advisory mandate on a government spending review programme in the GCC. Scope covered procurement governance, vendor management controls, and anti-corruption framework alignment.
Framework adopted. Controls operational.
Start the Conversation
All initial consultations are confidential
No obligation until you decide there is one.
“You built something worth protecting. The right time to act is before something goes wrong — not after it already has.”
Maher Hashash · CFE · Founder, Goodwork LLC