Fraud: Small Business Clients at Risk


Small businesses are the most vulnerable to occupational fraud and abuse and suffer disproportionately larger losses as a result, according to the 2004 “Report to the Nation on Occupational Fraud and Abuse” prepared by the Association of Certified Fraud Examiners. Compounding the problem, small businesses are less likely to have the ability to survive such losses.

CPAs are often the first resource small businesses contact when they suspect fraud has occurred. This is particularly true for small nonpublic clients that may not have the internal audit or human resource departments that are familiar with the processes and procedures to be followed in such circumstances. How should CPAs advise such clients? First and foremost, they should caution against reaching any conclusions until the alleged incident is investigated thoroughly. Then they should follow this step-by-step process. The CPA can perform steps one and two concurrently.

Step one: Determine the initial facts and circumstances
How did the client become aware of the suspected fraud?
How might this fraud have occurred?
Are the allegations credible?
Can you identify the possible indicators of fraud?
Are others aware of the suspected fraud?
Could others be involved?
Are there changes in the suspected employee’s lifestyle?
Were background checks performed?
What are the estimated losses?
Who are potential witnesses?
Can another employee substitute for the suspect temporarily?

Step two: Seek the advice of legal counsel to avoid potential litigation
Is the suspect an employee at will, or is there a valid employee agreement?
Are policies and procedures in place to deal with termination?
Can the employee be placed on administrative leave?
Are there policies and procedures regarding the expectation of privacy?
Is fidelity bond coverage applicable in this situation?
What procedures should be followed in investigating the allegations?

Step three: Investigate the allegations
Under counsel’s direction, perform office searches, review e-mail correspondence and interview the suspect with at least two people present.
Interview employees and others who may have knowledge of the suspected fraud.
Hire a private investigator and forensic accounting expert, if necessary.
Make copies of, but do not work from or alter, original documents. These may be considered evidence and required in subsequent prosecution/litigation.
Quantify losses.
Consider contacting law enforcement.

Step four: Take precautions
You may have to consider placing the employee on administrative leave or terminating his or her employment.
Deny the suspect access to the physical premises and associated properties.
Secure company credit cards and safety deposit boxes.
Disable the suspect’s computer and network access.
Change signatories on bank accounts for which the suspect employee has signature authority.

Step five: Mitigate the damages
Seek restitution.
File a fidelity bond claim.

Step six: Advise the client on instituting internal controls
Develop written accounting policies and procedures.
Segregate functions and duties.
Limit access to documents, computers and assets to only those who need it.
Review and approve all journal entries and disbursements.
Require dual signatures on all checks.
Prenumber invoices and checks for ease of tracking.
Conduct surprise internal control reviews at intervals.
Ensure that key financial personnel take a vacation annually. Verify or audit their work during their absence.
Secure fidelity bond coverage.
Employ a third-party hotline service to receive tips of suspected fraud.
Institute appropriate preemployment screening processes.

Considering the devastating potential for loss from fraud by small business owners, CPAs need to be well-informed regarding incidents of suspected fraud. Equally important, they should advise small business owners about the need to make fraud prevention a top priority.

Gregory F. Lawson, CPA/ABV, senior partner,
Goodman & Company LLP, Newport News, Va., and
Patrice Schiano, CPA, consultant, Protiviti, New York


Year-end tax planning and what’s new for 2016

Practitioners need to consider several tax planning opportunities to review with their clients before the end of the year. This report offers strategies for individuals and businesses, as well as recent federal tax law changes affecting this year’s tax returns.


News quiz: Retirement planning, tax practice, and fraud risk

Recent reports focused on a survey that gauges the worries about retirement among CPA financial planners’ clients, a suit that affects tax practitioners, and a guide that offers advice on fraud risk. See how much you know with this short quiz.


Bolster your data defenses

As you weather the dog days of summer, it’s a good time to make sure your cybersecurity structure can stand up to the heat of external and internal threats. Here are six steps to help shore up your systems.