What could you buy with $3.5 trillion?

March 2014 Security Services & Risk Management

At the end of 2012, the Association of Fraud Examiners’ (ACFE) released the findings of a fraud and corruption survey from approximately 1400 respondents in 100 countries (appropriately captioned 2012 Report to the Nations) with the basic message being that fraud in the world today has reached seismic proportions.

Bruce Thornton
Bruce Thornton

The foreword to the results of the survey records that the ACFE estimates that the annual loss to fraud and corruption in the world today sits at around $3.5 trillion. They are quick to qualify this by saying that this estimate was based on nothing more than the results of their survey which recorded that enterprises lose an estimated 5% of revenue to fraud per annum and that the estimated Gross World Product in 2011 was $70.28 trillion. It is clear that the ACFE has used poetic licence to highlight the magnitude of fraud, but even if it is a fraction of this amount, it is still an amount that should be taken seriously by all companies.

Companies should take heed of some of the most important findings from the survey, and take measures to counter fraud and corruption. The more surprising findings are detailed below.

Position of the perpetrator

In surveys performed across the world from the advent of fraud surveys (circa early 1990s), each survey has highlighted one common message: Your employees steal from you. In line with this now accepted fact, the ACFE drilled down into the position held by the employee.

In the cases canvassed in Africa (most of which were in South Africa), an executive was only responsible for 12% of the cases, but the average median loss caused in such instances was $750 000, whereas lower level employees were responsible for approximately 50% of the cases, but the average median loss was $50 000. Therefore, although lower level employees are the greatest source of fraud and theft, the most damaging frauds are perpetrated by executives of companies.

This trend is also evident in Europe (median loss caused by executives is $825 000, whereas median loss caused by lower level employees is $80 000), Latin America and the Caribbean (median loss caused by executives is $10m, whereas median loss caused by lower level employees is $165 000), and Oceana (median loss caused by executives is $2.3m, whereas median loss caused by lower level employees is $55 000).

Furthermore, the worldwide average period taken to detect the fraud committed by executives is much longer (24 months) than the average period taken to detect fraud committed by lower level employees (12 months).

Hence, one of the most important issues to cover in any anti-fraud strategies is the eradication of any senior management overrides of internal controls.

Profile of the perpetrator

Men are more likely to commit fraud than women. The survey recorded that, worldwide, 65% of the perpetrators were men and 35% were women. This trend is greatly exacerbated in Africa where 81% of the frauds were committed by men.

The age of the perpetrator most likely to steal from his company is between the ages of 36 to 45 years old, and is most likely to have been in the employ of his company for a period of one to eight years. The fraudster, in the majority of cases, had a university degree, and the perpetrators of fraud which had the greatest median losses had post-graduate university degrees. The fraudster is also most likely to be operating in the accounts department.

Companies most likely to be affected by fraud

The smallest organisations canvassed by the ACFE in the survey (companies of 100 employees or less) suffered the largest median losses and had the highest rate of instances of fraud. The reason for this is that smaller organisations do not have the financial resources available to implement anti–fraud controls similar to those controls implemented in larger organisations, and very rarely have a department or person dedicated to investigating fraud. With less attention to fraud risk management, smaller organisations are far more vulnerable to fraud.

Companies operating in the banking and financial services sector are the most vulnerable to fraud with 17% of all frauds occurring in this sector, with the public sector and manufacturing sector finishing a close second and third respectively. Although the banking and financial services sectors had the highest instances of fraud, the largest median losses occurred in the mining sector.

Internal controls

The 2012 Report to the Nations also (obviously) highlighted the effectiveness of internal controls. Perhaps the starkest finding is that external audit is not an effective fraud control mechanism (an external audit only identified 3% of the frauds). Hence, reliance on external auditors to identify fraud will be misplaced. Far more robust techniques are required to combat fraud, such as the implementation of a fraud hotline (44% of all frauds were identified via a tip off of some form). In Africa, 52% of the frauds were identified via tip offs. Organisations with some form of fraud hotline in place saw a much higher likelihood that fraud would be detected by a tip off (51%) than organisations without a hotline (35%).

Management review and internal audit also play a major role in detecting fraud. Both management review and internal audit detected 14% of the frauds covered in the survey.

The 2012 Report to the Nations highlighted the magnitude of fraud and corruption in the world today and has also provided some valuable insight. Perhaps the most thought-provoking finding for us is that the fraudsters wreaking most damage in companies are executives and have post-graduate university degrees. They do not call it white-collar fraud for nothing.

For more information contact: Bruce Thornton, associate director, Deloitte Risk Advisory Forensic. +27 (0)83 457 3281, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The line between locking residents out and restricting their access
News & Events Security Services & Risk Management Residential Estate (Industry)
A June 2026 High Court judgment has clarified one of the most contested issues in modern estate governance: when an HOA's digital access restrictions amount to unlawful self-help or spoliation, and when they do not.

Read more...
Modernise field communications with Push-to-Talk over Cellular
Products & Solutions Security Services & Risk Management
Sentiv is bringing Hytera’s Push-to-Talk over Cellular (PTToC) portfolio to organisations that need a more structured and controlled way to coordinate field teams, without extending a full private radio model to every team, site, or function.

Read more...
SAFPS urges taxpayers to remain alert to fraud
Security Services & Risk Management News & Events
The SAFPS warns taxpayers about evolving SARS scams this tax season, highlighting common fraud tactics, practical prevention tips, and trusted reporting channels to stay protected.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...
Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Fire & Safety Security Services & Risk Management Editor's Choice
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
Nimbus remote fire alarm management
Technoswitch Fire Detection & Suppression Security Services & Risk Management Fire & Safety
Nimbus connects key stakeholders to their fire alarm systems, simplifying compliance with fire safety standards and greatly improving visibility into critical events, thereby augmenting first responder processes that save lives and protect assets.

Read more...
Sophos launches AI-native cybersecurity defence system
News & Events Information Security Security Services & Risk Management
Built for a threat landscape reshaped by AI, Sophos Fusion unites security operations, endpoint, network security, identity, email, and cloud into one defence system that prevents, detects, investigates, and responds at AI speed.

Read more...
Stop supplier fraud at the moment of payment
News & Events Security Services & Risk Management
Cape Town-built platform bridges the gap between onboarding and transaction by securing identity inside the live channels where companies exchange invoices and banking details.

Read more...
Ungoverned AI agents and deepfakes pose critical threats
Information Security Security Services & Risk Management
Global study reveals 64% of South African organisations already deploy autonomous AI agents with little to no governance, while 63% of employees admit they are unlikely to be able to spot attacks such as deepfakes

Read more...
A risk-based approach to fire safety
Fire & Safety Security Services & Risk Management Industrial (Industry) Agriculture (Industry)
A report by fire engineering consultancy ASP Fire is challenging blanket assumptions around combustible-core sandwich panels, arguing instead for a rational, risk-based approach that balances fire safety requirements with commercial realities in sectors such as agriculture, manufacturing and industrial processing.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.