Protecting organisations against fraud losses caused by ghost employees

Issue 7 2023 Security Services & Risk Management

Several key South African organisations are potentially incurring significant losses due to 'ghosts'; ghost employees who exist on paper within business or government departments, but not in real life.

This issue is criminal rather than paranormal in nature, whereby ghost employees are one of the most prevalent types of occupational fraud, perpetuated through illicit payroll activities, and potentially resulting in substantial losses for the organisations concerned, whether at the level of a business or government entity.

South Africa is not isolated in battling against this type of payroll theft; there have been many instances reported across Africa and even further afield, including the discovery of more than 80 000 ghost workers in the Nigerian police force, 30 000 on the Mozambican government payroll; and ghost employee scams also taking place within Zimbabwe and Kenya.

Ghost workers are not exclusively a challenge for the public sector either; large organisations with diverse environments can be just as vulnerable. To mitigate the risk and protect organisations, leaders need to invest in technology capable of accurately defining positive identity, thereby ensuring transactional validity, assuring trust and data integrity, and enforcing accountability.

The Association of Certified Fraud Examiners (ACFE) is the world's largest anti-fraud organisation, with over 90 000 members. In 2022, a global fraud study by the ACFE found that payroll fraud resulted in substantial financial losses overall and that the presence of ghost employees was a key element of payroll fraud1, accounting for 9%2 of reported cases globally.

The ACFE report notes, "Try as they might, organisations cannot prevent all fraud. If an organisation is operational long enough, eventually an employee will commit fraud. Consequently, the ability to quickly detect fraud is crucial. Our research indicates that the median duration of fraud – that is, the typical time between when a fraud begins and when it is detected – is 12 months. Additionally, the longer a fraud remains undetected, the greater the financial loss3."

How do ghost workers enter the system?

Ghost workers, who are fictitious employees loaded onto payroll and business systems with the simple goal of defrauding the organisation or committing a crime, can enter the system through various methods. These include being loaded or left in the system by corrupt employees, or being introduced by threat actors looking to do more than just defraud the payroll.

Many government institutions battle with the ongoing ghost employee challenge as they manage a vast network of databases, systems and computers that do not adhere to the highest level of data integrity. Tracking the ghosts is a daunting task, assuming that the business even knows they are there.

For public sector organisations and large businesses worldwide, it is imperative to create a comprehensive integrity management system, effectively managing and overcoming the challenges around counting employee heads accurately, and ensuring comprehensive visibility into the complexities of ghost employees, duplicate records and potential insider threats.

Datacentrix, a hybrid ICT systems integrator and managed services provider, encourages organisations to consider a unique transaction security solution, such as its own eDNA identity and access management (IDAM) solution that institutes people accountability across all critical enterprise applications. This solution is designed to eradicate ghost employees and any other forms of fraudulent transactions from public and private entities, validating employees through a fool-proof biometric identification process. This would include forensically examining and assessing specific transactions to ensure that the DNA of the payroll and other critical applications' activities are tied to a physical person, providing legally reputable evidence of every activity undertaken in the systems. This gives organisations an exceptional additional layer of preventative security.

eDNA presents nine steps to trusted data

Datacentrix's eDNA solution follows an authentication and trusted data management process to ensure that an organisation's individual identities and data are secured in the following order:

1. Secure enrolment that is compliant with positive identity governance, POPIA and Electronic Communications and Transactions (ECT);

2. Three-factor digital authentication that uses biometrics, then a PKI certificate, and finally a smartcard;

3. A secure access gateway, where logon is only permitted via eDNA's three-factor digital authentication process;

4. Customer-sensitive data transactions are performed that need to be secured;

5. Business rules are defined for tracking sensitive transaction data;

6. Transactions done with eDNA are signed and sealed at the data's source;

7. Using the basis of a business intelligence and alert system to build customer frameworks for business rule tracking and reporting;

8. The solution allows for the forensic production of legally accepted data evidence;

9. A tamper-proof system that ensures all computing facilities adhere to an end-to-end highest security level data platform and ultimate data protection.

The prevalence of ghost employees reflects broader issues of corruption and unethical behaviour, which can negatively affect society.

As noted by Nigerian Professor of Accountancy, Emmanuel Ikechukwu Okoye, "Fraud has become one of the greatest threats to the world economy. It is a global problem, not only in terms of its impact on our major corporations and key financial institutions, but also its effect on smaller companies and the wider public who indirectly pay for the losses through increased costs of goods and services.”

Rooting out ghost employees and ensuring that systems are in place to ensure they stay banished is an imperative undertaking for any organisation.

For more information on Datacentrix's eDNA offering, contact Rainer Jeske by emailing rjeske@datacentrix.co.za

Resources

[1] https://legacy.acfe.com/report-to-the-nations/2022/

[2] page 12 of the report

[3] page 14 of the report




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

SMARTpod talks to The Risk Management Forum
SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Videos Training & Education
SMART Security Solutions recently released its first SMARTpod podcast, discussing the upcoming Risk Management Forum Conference 2024, which will be held on 26 September 2024 at the Indaba Conference Centre in Fourways, Johannesburg.

Read more...
There is a SaaS for everything, but at what cost, especially to SMEs?
Editor's Choice Information Security Security Services & Risk Management
Relying on SaaS platforms presents significant cybersecurity risks as the number of providers in your landscape increases, expanding your attack surface. It is important to assess the strength of the SaaS providers in your chain.

Read more...
Unlocking new efficiencies in private security
Security Services & Risk Management Transport (Industry) Smart Home Automation Logistics (Industry)
Justin Manson, Sales Director at Webfleet, discusses how the urgent need to protect life, and to do so more efficiently, is driving continuous innovation in holistic home and residential security services in South Africa.

Read more...
Innovation and security go hand in hand
Technews Publishing Facilities & Building Management Security Services & Risk Management
In a world where the demand for tech innovation is matched only by the acceleration of cybersecurity threats, businesses face the challenge of balancing new product development and robust security measures.

Read more...
Bomb threat landscape in South Africa
Editor's Choice Security Services & Risk Management
Over the past 25 years, South Africa has faced thousands of bomb threats and explosive incidents annually, imposing a significant economic burden on the nation, costing billions of rand.

Read more...
Natural catastrophes and fire risks top concerns
Security Services & Risk Management Asset Management Residential Estate (Industry)
Natural disasters are the highest risk in the real estate industry, followed by fire and explosions, and then business interruption. Estates must prioritise risk management and take proactive measures to safeguard their assets, employees, and reputation.

Read more...
Building a solid foundation
Alwinco Security Services & Risk Management Asset Management Residential Estate (Industry)
Understanding the roles of a Risk Assessor and a Risk Manager is like building a solid and secure foundation in the security world. Andre Mundell makes it easy to understand.

Read more...
SA firms take nine months to detect data breaches
Information Security Security Services & Risk Management
A human being can be conceived and brought into the world at roughly the same time a South African small and medium-sized enterprise (SME) becomes aware of and reports a data breach.

Read more...
Be wary of these scams this tax season
News & Events Security Services & Risk Management
As we approach the end of August, millions of South Africans will log onto the SARS eFiling website or visit their closest branch to complete their tax returns, but scammers are also waiting to defraud with tax-related scams.

Read more...
Businesses battle for long-term sustainability
Security Services & Risk Management News & Events
KPMG International’s report reveals the three key risks to growth in 2024 and beyond: geopolitical uncertainty, trade restrictions, and divergence on AI. The energy and natural resources sector is the ‘most exposed’ industry group in 2024.

Read more...