The Tip Of The Iceberg
4 comment(s)
Be it bad luck, divine intervention or just the natural evolution of most frauds, the Association of Certified Fraud Examiners states that 25% of fraud is uncovered by accident or chance. Whether an employee calls in sick and their colleague discovers the fraud, an incriminating document is left on printer for the boss to find, or a customer receives their statement and calls to question a transaction that they do not recognize, the fraud surfaces more by chance than systematic detection.
Often, fraudulent transactions are reviewed by multiple people in an organization, yet, no one detects the fraud. Why? The reasons are as varied as the fraud. They don't know what fraud looks like; they don't have time to scrutinize the transaction; or they don't have all of the pieces of data available to identify the fraud. Whatever the reason, failing to appropriately detect and address a fraudulent transaction can prove to be extremely costly.
Depending on the circumstances, once detected, the institution's reaction can range from shock to embarrassment to disbelief to anger. Because the fraud is discovered by chance, no one can really claim credit for stopping the fraud. In fact, the discovery can be a major source of embarrassment for the responsible department. There is nothing more damning for a manager than to be accused of not knowing what is going on in his or her department. However, there is a way to gain the upper hand when fraud is uncovered by accident...
Often one transaction can be the "tip of an iceberg". Once discovered, treat this fraud as an opportunity to understand what's beneath the water line. Failure to act might allow a very large "iceberg to develop unseen and unchecked. Research shows that fraud grows exponentially over time if allowed to do so.
So once a fraudulent transaction is discovered, what should a company do to gain the upper hand? Metaphorically, dive in the water and learn about the rest of the iceberg! How? Use the elements of the accidental discovery to mine the data. Gain the upper hand by adopting an aggressive, proactive approach to detecting transactions with similar elements.
The vast majority of frauds have common elements. Use the data to find those elements in other transactions. The discovery of the fraud is on some level, a gift. If the fraud involved a general ledger, mine the ledger for similar transactions. If the fraud involved a customer account, locate all of the accounts that the fraudster(s) accessed, etc.
Whatever the method, use your institution's data to stop the iceberg from growing out of control. It may be indicative of a huge problem, or a huge problem in training; either way it will not get better if you fail to act. Ignore the tip of the iceberg at your peril.
Have you used the "tip of the iceberg" to uncover fraud?