Most small business owners don’t even consider that their employees might be stealing from them until it’s too late.
The average small business fraud lasts 24 months and costs $200,000 by the time it’s discovered, according to the Association of Certified Fraud Examiners (ACFE) 2008 Report to the Nation.
Three former employees of PBS&J, a Miami engineering firm, have pleaded guilty in federal court to their role in embezzling $36 million in a scheme that spanned more than 12 years. (According to a September 29, 2006 Miami Herald report.)
The average American business loses 7% of revenue (sales) due to fraud, more than the total profit at many small businesses. There are five main causes of a higher incidence of fraud in small businesses.
1. Trust. Small business owners tend to be closer to their employees, knowing them personally and from a business standpoint. For an employee to steal from you, you must trust him. Employees tend to be more trustworthy in small companies.
. Small workforce. With a small number of employees, many business owners believe controls are impossible. That’s not true. Even with a small number of employees, some controls can be implemented. Even a small number of checks can reduce the likelihood of fraud. For example, the ACFE report indicates that companies with a mandatory vacation/job rotation policy had 61% fewer losses due to fraud.
3. Lack of delegation. Small business owners tend to want to be in control. As a result, employees are hired, given a job, but the owner retains significant parts of the work for himself. As a result, there seem to be controls. Unfortunately, the owner has overloaded himself with too many tasks; and, as a result, they do a poor job of running them. For example, signing checks without thoroughly reviewing the documentation.
4. Overlapping and unclear job responsibilities. In a small business, it often seems like everyone is responsible for everything. If a job needs to be done, everyone is expected to pitch in. Unfortunately, this provides an opportunity for a dishonest person to bypass checks by being able to work in more than one part of the business.
5. Controls are not a priority. Finally, controls just don’t seem to be a priority for most small business owners. There is a pervasive “it can’t happen to me” attitude. Unfortunately, it can happen to you! Spending some money now to install a series of preventative controls should be seen as an investment (just like an insurance policy), not an expense. Like insurance, you hope you don’t need it, but if you do, the controls may be there to help you.
A former Home Depot employee pleaded guilty in a New York federal court to accepting millions of dollars in kickbacks from vendors to ensure the company stocked their products. He shared more than $2.5 million in leftovers with other company employees in a scheme that spanned three years. (According to a Reuters report on June 30, 2008.)
Prevention
1. Recognize the possibility that it could happen to you. Fraud against businesses is rampant and most employers don’t realize it until it’s too late.
2. Know the common indicators of fraud. There are many indicators of fraud. Business owners need to be aware of these red flags and be on the lookout for them. They do not always mean that fraud is taking place, but they do mean that more control may be necessary.
3. Review and strengthen internal controls and take other anti-fraud measures. There are many measures that have proven effective in reducing opportunities for fraud and providing deterrence. The business owner should be aware of the most common controls and other measures for their particular type of business.
4. As the business owner, take personal responsibility for ongoing follow-up. In a small business, the owner himself must accept responsibility for fraud efforts and control. Trusting an employee with this critical task can be a big mistake if that employee turns out to be a con artist. The ACFE Report also shows that the higher up a person is in the organization and the longer they have worked there (ie the more they are trusted), the more fraud they commit before being caught.
A 63-year-old man who worked as the Director of Financial Services for a nonprofit organization pleaded guilty in federal court to diverting more than $400,000 in incoming checks payable to the nonprofit organization to a fictitious bank account. (According to a report from the Washington Post on September 24, 2008.)
Where to get help
Internal audit. If you are a larger company, the first line of defense should be your internal audit department. Under Sarbanes-Oxley, public companies must have an internal audit report directly to a board committee. But even if it’s not a public company, internal audit should report directly to the top. The department with the most fraud incidents is accounting, so it generally doesn’t make sense to have internal audit within the accounting or finance functions.
company lawyer. It is important to actively involve the company’s legal counsel in any anti-fraud programs or investigations of suspected fraud. If you are a larger company, this should be your corporate council. If you are a smaller firm, you need a trusted outside attorney with experience in this area to guide your preventive and reactive actions.
external CPA. Many CPAs have been trained and have experience reviewing controls and recommending improvements. This can be a standalone task or will be done as part of an audit. Remember that accounting controls focus solely on the accounting system. Additional types of controls are needed in other areas to effectively reduce opportunities for fraud. It is important to understand that an accounting audit is not designed to find all fraud, nor is it likely to.
Certified Fraud Examiner (CFE). CFEs are specifically trained and experienced in the area of fraud prevention and investigation. They may also have additional backgrounds in accounting, law enforcement, or other fields.
If you suspect fraud
When the owner (or manager) of a business suspects that an employee is stealing from the company; the most common reaction is emotional. He probably wants to call them into his office, confront them and fire him. In most cases, this reaction will only cause additional headaches and possible financial losses.
In general, it is best to withhold your suspicions until after you have consulted with a qualified professional and legal counsel. There are many possible issues to consider before deciding on a course of action.
Even if the employee actually stole from you (and we usually don’t know for sure yet), the legal system gives you numerous rights. Get professional help right away to avoid exposing yourself to potential liability.
Foreword
A hospital warehouse supervisor in Spokane, Washington, pleaded guilty in federal court to collecting more than $600,000 from his PayPal account by selling stolen hospital supplies on eBay. The fraud continued for more than three years. (According to a report from the seattle times on December 21, 2006.)
If you’re a business owner, the time to act is now, not after you’ve suffered a major loss. Go back to the four steps in the prevention section of this article and start implementing them now.
Not sure how to do it? The right professional assistance can be a wise investment.
As a final thought, remember that although checks can, in some cases, detect fraudsters; they cannot stop a determined thief. A robust and ongoing monitoring program is essential to detect fraud earlier, before it becomes a major loss.
Good luck in your business and in your fraud prevention efforts!