FRAUD
This refers to any intentional deception or misrepresentation made by an individual for personal gain or to cause damage to another individual. In the context of documents, this often involves creating, altering, or using documents in an unauthorized way to deceive or conduct unlawful activities.
Fraud is a punishable crime by law and is defined in the United States Constitution as a civic and criminal offense committed against a victim by unlawful or unfair material, monetary gains, or other benefits by deliberately deceiving the victim. In the year 2006, a review made by the U.S. government found that fraud is the most under-reported crime and some measures to effectively combat it were instituted.
To date, fraud felonies have not yet been effusively fought since fraudsters deceive their victims and disappear. Fraud cases require sufficient evidence for their execution, and that could lead to the victim never getting justice for a delinquency committed against him or her.
Falsification of documents is one of the fraud felonies, mostly engaged in through forging of signatures, use of official letterheads without authorization, deliberate distribution or use of a false document. Fraud in false documents also includes the statement of false information when required to give the correct information, altering or misrepresenting factual information such as prices and in cases of bankruptcy, concealing assets or property.
The fraud crimes could lead to incarceration in a correctional facility or payment of a fine if the fraudster is found guilty. Document falsification, such as illegal modification of tax returns and income statements, is mostly committed by individuals or organizations with broader criminal intention such as tax evasion.
Tax return fraud, under the federal law of the United States, is one of the crimes committed by taxpayers and fraudulent tax preparers who willfully evade assessment or payment of the tax imposed by the federal law through illegal modification of tax returns and income statement or failing to pay the taxes and get big illegal refunds. The tax evasion has been found to be the primary cause of the tax fissure amid what Americans owe in federal taxes and what the federal government receives.
The willful failure to report tips, income from side-jobs, cash receipts and barter trade income are cases that contribute to the existence of the tax gap. Tax evasion has also been facilitated by the existence of tax havens, which taxpayers take advantage from to evade taxes. The United States government has enacted measures to combat and eliminate tax evasion which has been found to date back to 1932 up to now. The tax fraudsters who have been convicted of such offense have been forced to pay monetary fines, imprisonment, and suspension of business activities or closure of their enterprises.
The impact of fraud related to identification documents is profound and multifaceted, affecting individuals, businesses, and the integrity of national security systems. At its core, this type of fraud involves the unauthorized creation, alteration, or use of identification documents such as passports, driver’s licenses, and social security cards. The repercussions of such fraudulent activities are widespread.
- Personal Impact: Individuals become direct victims when their identities are stolen or when fraudulent identification documents are used. This can lead to financial loss, damage to credit scores, and a long, arduous process of restoring one’s good name and financial standing. The psychological toll, including stress and a sense of violation, can also be significant.
- Business Consequences: Businesses suffer when fraudulent identification documents are used to execute financial frauds, such as opening unauthorized accounts or securing loans. These actions can lead to substantial financial losses and tarnish the reputation of affected institutions. Additionally, businesses may face regulatory penalties if they inadvertently facilitate such frauds, not to mention the increased costs associated with strengthening security measures and verifying customer identities.
- Government and Public Security: On a broader scale, the use of fraudulent identification documents poses a severe threat to national and global security. Fake or altered documents can be used to bypass immigration controls, potentially allowing criminals or terrorists to enter a country undetected. Moreover, such fraud undermines the integrity of government-issued identification systems, making it challenging for authorities to ensure the safety and security of their citizens.
- Economic Ramifications: The economic impact of identification document fraud is substantial. It drains resources through the losses incurred from fraudulent transactions, the costs associated with investigating and prosecuting these crimes, and the funds required to improve security and preventative measures. This type of fraud also distorts financial markets and undermines the trust that is fundamental to economic transactions.
The pervasive issue of identification document fraud necessitates robust verification processes and a comprehensive understanding of the key terms and concepts involved. Verification of documents is a critical step in safeguarding personal identities, maintaining business integrity, and ensuring national security. Below is a list of essential terms that are critical in the document verification process:
- Breeder Document: These are foundational documents critical for acquiring other forms of identification. Primary examples include birth certificates and Social Security cards, which are often used to secure further identification like a driver’s license. They are foundational in the sense that they ‘breed’ or facilitate the issuance of subsequent identity documents. The integrity of these documents is paramount as their compromise can lead to the illegal procurement of genuine documents, enabling identity fraud or more severe crimes such as terrorism.
Example: A birth certificate is used by an individual to obtain a passport. The passport is obtained legitimately, but it all relies on the authenticity of the birth certificate. If the latter is fake, then the integrity of all subsequent documents is in question.
- Authentic Document: This is a document that remains in its original form, unaltered since its official issuance by a legitimate authority or agency. It’s a genuine document that has been obtained through lawful means and holds legal validity.
Example: A university diploma issued directly by a recognized educational institution and has not been altered in any way since its issuance. This document is considered authentic because it comes from a legitimate source and has not been modified.
- Authenticating: This is the meticulous process of examining a document to determine its legitimacy. It involves scrutinizing various elements of the document, including material, ink, text, and incorporated security features, to ascertain whether it’s genuine or fake. For a document evaluator, proficient authentication is a fundamental task to prevent fraud.
Example: A bank meticulously examines a check presented for payment, verifying elements such as paper quality, ink, signature, and security seals to confirm that it is not a counterfeit check.
- Identity Theft: The identity theft is the deliberate use of someone else’s identity for self-gain and perhaps to the other party’s disadvantage or loss. The party whose identity has been assumed may suffer adverse consequences if he or she gets apprehended for the perpetrator’s actions. The victim of Identity theft could suffer from financial loss. Determination of the link between data breaches and identity theft is challenging, mainly because identity theft dupes often do not know how their information was acquired. An individual purposely commits identity theft crimes for financial as well as no-financial gains and range from child identity theft, medical identity theft, criminal identity theft and identity cloning which are all crimes punishable by the federal law of the United States.
Example: An individual illegally obtains another person’s social security number and uses it to open credit accounts, incurring debts in the victim’s name without their consent or knowledge.
- Title Washing: This fraudulent activity involves erasing the negative history from a vehicle’s title, such as its salvage, rebuilt, flood, or junk status. It’s typically done either through document manipulation or by transferring the vehicle to a region with lax branding laws. This practice is particularly dangerous as it allows vehicles, which may be unsafe, to re-enter the market and be sold to unsuspecting buyers as if they were in proper condition.
Example: A car that has been declared a total loss after a flood is taken to another state where the requirements for obtaining a clean title are less rigorous. The flood damage history is deliberately omitted from the new title, and the car is sold as if it were in normal condition.
- Fraudulent Document: This is a broad term encompassing both counterfeit and altered documents. Essentially, it refers to any document that’s not genuine, created or modified with the intent to deceive or commit some form of illicit activity.
Example: A forged identification card that looks official but has been entirely created by an unauthorized entity with the purpose of deceiving authorities or other parties.
- Counterfeit Document: This term describes a fabricated document, created from the ground up to mimic or replicate the appearance of a genuine document. Unlike altered documents, these are entirely forged and are not based on an original legitimate document.
Example: A banknote that has been manufactured by an unofficial entity, attempting to replicate all security features and characteristics of the genuine banknote but without any legal authorization for its issuance.
- Altered Document: Refers to any genuine document that has been modified post-issuance by an authorized body. Modifications might include changes to personal data, photo swaps, or the falsification of other details, usually with the intent to deceive.
Example: A legitimate passport in which the original photograph has been replaced with that of another person, in order to allow the bearer to impersonate the legitimate holder of the document.
Why do People Commit Fraud?
- To make money illegally: Individuals may engage in document fraud as a means to generate income through illicit channels. This could involve creating or altering documents to deceive others in financial transactions, such as selling fake identification documents, forging checks, or creating counterfeit currency. The primary motive here is financial gain, obtained without regard for legal boundaries or the harm inflicted on victims.
Example: Mario Medina is a professional driver and has a Class A license, this allows him to handle trucks and heavy cargo, he changed his address, when, he requested via internet the change of address in the Department of Engines and Vehicles of the state where he receives, he received his license by mail, when receiving the same one realizes that it has a photography that is not the one of the same one. This can happen if the document has been illegally issued to another person who cannot obtain this type of license but who uses the fraudulent to obtain benefits.
- To commit a crime: Document fraud can be a preparatory step in the execution of further criminal activities. For instance, altering or fabricating identification documents may enable individuals to purchase weapons illegally, transport contraband, or engage in human trafficking. Here, document fraud serves as a facilitator, enabling individuals to circumvent laws and regulations that are in place to prevent such crimes.
Example: An individual alters their driver’s license to change the age, allowing them to purchase alcohol or enter venues restricted to certain age groups. This alteration of the identification document facilitates the commission of an age-related offense.
- To hide from the law: Individuals who are evading law enforcement may use document fraud to conceal their true identities. This can involve creating new identities or altering existing documents to avoid detection and arrest. This is often seen in cases involving fugitives or individuals wanted for crimes, who seek to live under an assumed identity to continue evading the legal consequences of their actions.
Example: In the United States, drivers who failed to meet the requirements determined by each state were released from 9/11. For this reason, many people looked for driving options. International licenses appeared on the market that were not really licensed. If it was not that, it was a fraudulent industry that issued driver’s licenses from Latin American countries and also from different states of the country. These people use these identifications to drive and request ITIN numbers in a fraudulent form and with changed names.
- To obtain a benefit: US passports are used for the entry of infants of similar physical characteristics to the United States in a fraudulent manner, as well as passports of Puerto Rican citizens that are used by people with similar physical features to obtain driver’s licenses and more benefits within the United States.
Example: A person falsifies income statements and employment records to qualify for a housing loan or government assistance program they would not otherwise be eligible for. By presenting these fraudulent documents, the individual unjustly gains financial benefits or support.
- To escape consequences of an act: A person may commit fraud in order to avoid the label of being a registered sex offender, to continue to drive despite having had his driver’s license suspended or to avoid paying child support. The identity change of these people using false identity documents.
Example: After being involved in a hit-and-run accident, a person forges garage documents and receipts to claim that their vehicle was in the shop during the time of the incident. This act of document fraud is aimed at creating an alibi to avoid legal responsibility and potential penalties for the crime.
Types of Fraud
Fraud refers to deceptive actions conducted with the intent to gain an unfair advantage or to cause harm to an individual or an organization. It can be broadly classified into two main categories, external and internal.
External Fraud
Internal Fraud
This involves the creation, alteration, or misuse of identification documents by individuals within an organization, particularly those who have legitimate access to such documents or the systems that produce them. Employees or officials might produce fake IDs, passports, or employee badges for unauthorized individuals, or they might alter existing documents for purposes of identity theft, unauthorized access, or financial gain.
This type of fraud can also include the misuse of someone’s personal data to create legitimate-looking identification documents without their consent. It’s a severe breach of trust and security, potentially leading to significant legal consequences and damage to the organization’s credibility and security measures.
Fraud Detection Model
There are two major types of secure documents divided according to the material they are made from: paper and plastic. Paper documents are highly rigid and embody some form of printing, introduction of different colors and also composed of different forms of graphics. The features added onto the paper contribute its uniqueness and security against counterfeiting.
On the other hand, plastic documents are more flexible and protected against water. These documents are made using heat or pressure, and a specified combination of plastic polymers to guarantee their security.
The fraud detection model focusing on three core elements (documents, people, and actions) offers a structured approach to identifying and mitigating fraudulent activities. This model emphasizes the interconnectedness of these elements in the landscape of fraud. Here’s an overview of each component:
People
This aspect scrutinizes the nature, frequency, and pattern of the actions or transactions being carried out. It aims to detect irregularities or deviations from the norm that may signal fraudulent intent or activity.
Techniques involve real-time monitoring of transactions, pattern recognition, and anomaly detection to identify unusual or suspicious actions. Advanced statistical models and machine learning algorithms are often employed for this purpose.
Monitoring and analyzing actions help in identifying and mitigating risks promptly. It’s a proactive measure in fraud prevention, enabling organizations to respond swiftly to potential threats before significant damage occurs.
As a document evaluator, you need to ask yourself:
- Is the document holder showing any suspicious behavior?
- Is the document holder giving you the correct answers to your questions?
- Does the photo look like the person presenting the document?
Listen to the person who brings the document to you:
- Listen to the entire response to your questions and watch their behavior.
- Prevent assumption errors by actively listening.
- Get a clear answer for every question you ask.
- Listen carefully for misdirects.
- Listen for inappropriate pauses when the person is answering easy questions.
- Listen for incorrect, contradicting or changing answers.
- Do not ask another question until you receive an answer to the first one.
Documents
The aim is to thoroughly assess the authenticity and integrity of documents, ensuring they are genuine and have not been tampered with or forged. Documents are a common target in fraud schemes and serve as a critical checkpoint in the fraud detection process.
Techniques involve:
- Removing: Safely extracting the document from its protective environment or file to ensure it can be examined without any contextual bias. This might involve taking the document out of a folder, envelope, or any other covering. Removing the document also allows you to examine the document thoroughly by exposing the back, sides and edges of the document.
- Viewing: Conducting a visual inspection of the document under appropriate lighting and possibly using magnification tools. This process includes checking for visual inconsistencies, color discrepancies, or alterations.
- Touching: Physically handling the document to feel for irregularities. This could involve sensing the texture of the paper, feeling for raised characters (like those produced by typewriters or embossers), or detecting any physical alterations that might not be immediately visible. Examples can be:
o Rotate the card to look for security features.
o Feel the photo (for bumps or imperfections).
o Feel the surface of the document. Some paper documents are printed with ink that feels raised; some documents have surface that may feel smooth and glossy.
o Feel for thickness of a document. For example, feel each page of a passport for evenness, or feel the thin plastic on a credit card-style document.
o Feel for separations in the paper or plastic, which could show an altered or counterfeit document.
- Examining: This crucial step involves employing specialized techniques to meticulously scrutinize the document for any signs of fraud. Analysts may use ultraviolet (UV) light to reveal invisible marks or watermarks and infrared light to detect any erasures or alterations. Microscopes might be utilized to inspect microprint or other intricate details closely. Additionally, a critical component of the examination process is the photo matching procedure, where the photograph on the document is carefully compared with the individual presenting it. This comparison focuses on analyzing facial features, aging discrepancies, and other identifiable characteristics to ensure the person in the photo is the same as the person presenting the document, thereby preventing identity fraud and ensuring the legitimacy of the document holder.
The physical examination of documents is a fundamental part of fraud detection. By meticulously removing, viewing, touching, and examining documents, investigators can detect subtle cues of tampering or forgery that might not be evident through automated or cursory checks. This hands-on approach is particularly crucial for high-stakes verification processes or when handling sophisticated forgeries that require a detailed inspection to uncover.
Watch for these behaviors:
- Avoidance or over-use of direct eye contact.
- Nervousness, fidgeting or stammering.
- Repeating questions back.
- Defensiveness or attempts to intimidate.
- Rapid speech.
- Excessive friendliness or rudeness.
- Interruption of speech by either coughing or clearing of the throat.
- Display of physical signs of discomfort.
- Blocking view of the contents of wallet or other belongings.
- Continually looking around.
Ask yourself the following questions:
- Are any changes or alterations immediately visible?
- Are there any irregularities in font, punctuation, spelling, placement or alignment?
- Are there any irregularities in handwriting, ink or pen type?
- Do the information and photos match the person presenting the documents?
- Do the information and photos match across multiple documents?
- Are there any red flags?
Actions
The third and final component of the fraud detection model is Actions. This stage comes into play after thorough examination of the documents and careful screening of individuals involved. At this juncture, based on the findings of the verification process, you are presented with a couple of distinct paths:
- Issue the Document: If all checks and verifications align with the required standards and no signs of fraudulence are detected, the document can be safely issued. This step signifies the successful completion of a rigorous verification process, ensuring the legitimacy and integrity of the document and its holder.
- Addressing Suspected Fraudulent Activity: If, however, discrepancies or signs of fraudulent activity are uncovered during the examination or screening process, it is imperative to take immediate and appropriate action in accordance with your jurisdiction’s established policies and procedures. If you don’t know your jurisdiction’s policies and procedures, please take the time to check with your supervisor.
Symptoms of Fraud
Frauds have symptoms. This should be taken as a basic fact. This is because fraud is simply a tool or a means to an end (achieve financial gain, promotion, prestige, etc.).
There must be some reason why a person, or an employee, has committed a fraudulent act. Must be he / she needed money. The question is: why did he / she need the money?
At this point, the person doing the research can ask the following questions.
- Is the person wasteful?
- Does he / she have many vices?
- Does he / she have any financial problems?
- What about he / she previous records?
Symptoms of Fraud can be separated into six groups:
1. Accounting anomalies
Accounting anomalies result from unusual processes or procedures in the accounting system. Common anomaly frauds involve:
- Irregularities in source documents
- Faulty journal entries
- Inaccuracies in ledgers.
2. Internal control weaknesses
Internal control fraud symptoms include:
- Lack of segregation of duties
- Lack of physical safeguards
- Lack of independent checks
- Lack of proper authorization
- Lack of proper documents and records
- Overriding of existing controls
- Inadequate accounting system.
3. Analytical anomalies
Analytical Fraud symptoms include:
- Unexplained inventory shortages or adjustments
- Deviations from specifications
- Increased scrap
- Excess purchases
- Too many debit or credit memos
- Significant increases or decreases in account balances, ratios, or relationships.
4. Extravagant lifestyle
A person’s lifestyle changes when for example, he or she:
- Embezzled $3 million from their employer
- Bought a $500,000 or more home
- Bought five luxury cars
- Filled home with artwork and glass
- Bought a boat
- Paid cash to have yard landscaped
- Served lobster flown in from the east coast.
5. Unusual behavior

6. Tips and complaints
-
- Complaints and tips are categorized as fraud symptoms
-
- Employees tips may be motivated by malice, personal problems, or jealousy.
-
- Tips from spouses and friends may be motivated by anger, divorce, or blackmail.
- Whenever tips or complaints are received, they must be treated with care and considered as possible fraud symptoms.
Because fraud is a fairly broad concept and can be committed in almost every part of social and economic life, there is no simple fraud detection model.
However, a detection method can be grouped into two: method-based technology and non-technology-based method.
However, whatever the method, it is always important to understand that fraudsters are motivated by certain personal or economic gains and that fraud is simply the means to achieve their goal or purpose.
Based on the above discussion, fraud can be categorized into the following major groups:
- Economic fraud: The purpose is to gain an economic advantage by defrauding others. However, it must be established that almost all fraud is economic in nature.
- Online fraud: Any type of deception or inducement committed by one person to deceive another online, for monetary gain.
- Continued fraud: This is done through committing an unlawful act (altering a genuine driver’s license) in order to pursue another illegal act (use altered driver’s license to obtain a valid passport).
- Occupational fraud: This is committed at the workplace by an employee who uses employee discounts to purchase items for a friend or relative. This means that fiduciary trust is given to an employee and that employee voluntarily breaks it.
- Political fraud: An example of this is fraud when it comes to voting. The nature of this offense is purely political, whether the intent is to obtain money from a politician or to vote for a favorite politician twice or more.
- Academic fraud: This involves dishonesty or academic deception. An example of this is an academic professor who publishes a study that he knows to be false, untrustworthy or unsupported by facts.
Immigration Fraud
Securing work visas, adjusting immigration status and embarking on other immigration matters can be quite confusing, particularly for those who speak English as a second language (or not at all). Unfortunately, there is no shortage of businesses and individuals trying to take advantage of those seeking immigration services. Immigration fraud includes the solicitation of services by those unauthorized to practice law; the sale of immigration forms otherwise offered for free by the U.S. government; promises to expedite immigration petitions for a fee; and related scams.
Some unauthorized practitioners genuinely mean well but many of them intend to rip off unsuspecting clients. Not only can such fraudulent services delay an application or cost petitioners unnecessary fees, but in some cases can lead to removal proceedings or other adverse actions.
This chapter covers the most common forms of immigration fraud, tips for avoiding such scams, resources for reporting immigration fraud, and more.
Common Types of Immigration Fraud
1. Businesses Promising Premium Services
Some businesses may offer premium services, even «guarantees,» of visas, green cards, employment authorization documents, or other processes. Typically, they will charge a higher fee than what the U.S. Citizenship and Immigration Services (USCIS) would charge, regardless of whether or not an actual immigration lawyer prepares the documents on the applicant’s behalf.
Sometimes they even claim the ability to file and process your application or petition faster than going directly through the federal agency. Such claims are always false.
While there are some exceptions to normal USCIS application processing times, supposed immigration service providers have no such ability to influence these times. A licensed immigration attorney would be your best source of information on these matters.
2. Non-Governmental Web Sites
Some web sites offer specific, step-by-step instructions for filling out applications or petitions and solicit downloadable immigration forms for a fee. They often claim to be affiliated with the USCIS, although usually this is not the case.
Even if step-by-step instructions for a given immigration procedure seem correct, make sure you refer to the USCIS web site as an authoritative source. The official USCIS web site offers free downloads of immigration forms, detailed instructions, and information about processing times and filing fees.
You should never pay for blank USCIS forms.
3. Visa Lottery Claims
In an effort to encourage more applicants from countries with low rates of immigration to the U.S., the Dept. of State (DOS) offers 50,000 so-called «diversity visas» (DVs) to those meeting eligibility requirements. They are offered via random selection, so any claim to «guarantee» selection or otherwise improve one’s chances of getting a DV is always fraudulent.
Typically, such fraudulent claims and offers come in the form of unsolicited emails or online advertisements, often referencing the terms «DV lottery,» «visa lottery,» or «green card lottery.» Make no mistake, the only way to apply for the DV lottery is by filing an official application with the Dept. of State, which does not send emails to applicants.
4. Services Offered by «Public Notary»
In the U.S., a notary public is an individual commissioned by the state’s secretary of state to authenticate («notarize») signatures on legal documents, among other duties, but who is not necessarily a legal professional. In Mexico and many other Latin American countries, the Spanish translation of notary public – «notario publico» – refers to a legal professional who is authorized to practice law; mediate or arbitrate disputes; issue judicial opinions; and check the accuracy and integrity of certain legal documents.
If a notary public in the U.S. offers to handle an immigration case beyond the scope of what a public notary is authorized to do, he or she may be illegally practicing law. There may also be some confusion with the term that does not involve outright fraud.
Tips for Avoiding Immigration Fraud
Applying for a visa or adjusting one’s immigration status can be quite daunting, especially for individuals who are unfamiliar with the law, language or culture. Here are some tips to help you avoid some of the more common immigration scams:
1. USCIS never charges a fee to download immigration forms; forms can be found at the USCIS forms page.
2. Read all form instructions carefully and fill in all required fields.
3. Remember to review your form, make sure you fully understand it, and sign it before sending your form to the USCIS.
4. Do not sign blank forms.
5. Filing fees are accepted via money order, certified check or credit card.
6. Keep copies of all documentation, including forms filed with the USCIS.
7. Obtain a receipt for any payment made to an immigration attorney or accredited representative.
8. If you are working with an immigration lawyer, check the bar association of your state to make sure the attorney is eligible to practice law there.
9. If you are working with a non-attorney, make sure that individual is an accredited representative, as recognized by the Dept. of Justice’s Board of Immigration Appeals.
10. Consider seeking a second opinion if you have any doubts about a professional who may be handling your case.
How to Report Immigration Fraud
If you believe you have been the victim of immigration fraud, you may report the alleged scam to the Federal Trade Commission or file a complaint with your state. Simply reporting an incident of immigration fraud will not affect your immigration case, so make sure you take whatever additional steps are necessary to properly handle your application or petition. USCIS provides a state-by-state directory of consumer fraud laws and contact information for reporting suspected cases of immigration fraud.
Get a Free Initial Case Assessment
Immigration fraud can seriously impact a person’s eligibility for a visa or residency. If you have encountered immigration fraud you should speak to a legal professional at the earliest opportunity. Contact a local attorney for a free initial case assessment to discuss how to deal with fraud.
Detection of Immigration and Travel Documents
In the United States, the only federal forensic crime laboratory charged with manipulating and handling document fraud recognition is the Forensic Document Laboratory (FDL) under the Immigration and Naturalization Service (INS). Due to the growing number of immigrants and tourists visiting the country, INS and many other government agencies annually send thousands of questionable documents to the FDL for research. One of the most important units of the FDL is the intelligence section in charge of providing technical information and advice to government officials, domestic and foreign, as to the genuineness or legitimacy of travel documents and identity. Activities of Intelligence Officers include:
- Carry out fraudulent document inspection training programs for immigration and other government officials.
- Update and maintain the storage of FDL document models.
- Create intelligence alerts related to documents.
- Provide important information to the ins and other government agencies.
To handle forensic cases and questionable documents, the FDL follows the following steps:
- When a request for document inspection is received, the FDL includes a case for requesting information in the database of its Automated System of Forensic Cases and Evidence Monitoring (FACETS).
- The FDL then appoints the case to one of its forensic specialists. Here, the examiner chosen to handle the case must be aware of the case being dealt with – the country of origin of the documents, the nature of the document, among others.
- The examiner or examiners assigned to a particular case then conduct the examination of the evidence and documents, and prepare a report of their findings;
- A supervisor or colleague conducts a technical review for administrative processing of the findings of the case.
- After the case is completed, the office closes the case in FACETS, seals and packages the evidence, and sends it with the final report to the requesting agency or department.
The Strategic Method of Fraud Detection
Traditional fraud detection typically begins with an indication or anomaly that something isn’t right, such as anonymous tips, unusual financial statement relationships, or control overrides. These indicators, often called red flags, provide prediction of a possible existing fraud. Management, auditors or fraud examiners investigate these indicators with additional research, computer queries, or interviews to determine whether red flags represent real fraud or are being caused by other factors.
This approach can be viewed as an inductive method: it begins with anomalies brought to someone’s attention and continues by researching additional events and data until it is determined that fraud may be causing the indicators. It is followed by investigations to determine what the actual nature of the anomalies are.
1. Understand the Business
In traditional, inductive fraud detection, fraud examiners typically do not have any specific fraud in mind; rather, they see or learn of an event or anomaly that provides fraud possibility and prompts investigation. Quite differently, the strategic process starts with an understanding of the business or unit being examined. Since each business environment is different–even within the same industry or firm–fraud detection is largely an analytical process. The same fraud detection procedures cannot be applied generically to all businesses or even to different units of the same organization. Rather than rely upon generic fraud detection methods or generic queries, examiners must gain intimate knowledge of each specific organization and its processes. Having a detailed understanding underlies the entire strategic fraud detection process. Understanding processes in an organization or unit is similar to the activities undertaken when performing business process reengineering.
2. Identify Possible Frauds That Could Exist
Once fraud examiners feel confident that they understand the business, they must determine what possible frauds might exist or could occur in the operation being examined. This risk assessment step requires an understanding of the nature of different frauds, how they occur, and what symptoms they exhibit. The fraud identification process begins by conceptually dividing the business unit into its individual functions. Most businesses or even subunits are simply too large and diverse for examiners to consider simultaneously. Dividing the business into its individual functions helps focus the 12-detection process. For example, examiners might decide to focus directly on the manufacturing plant, the collections department, or the purchasing function. In this step, people involved in the business functions are interviewed. Fraud examiners ask questions such as: Who are the players? What types of employees, vendors, or contractors are involved? How do insiders and outsiders interact with each another? What types of fraud could be committed against the company or on behalf of the company? How could employees or management acting alone commit fraud? How could vendors or customers acting alone commit fraud? How could vendors or customers working in collusion with employees commit fraud? During this stage, the fraud detection team should brainstorm potential frauds by type and player. The likely occurrence of the various frauds should be considered, and a laundry list of frauds that will be considered is developed.
3. Catalog Possible Fraud Symptoms for Each Type of Fraud
Fraud is a crime that is rarely seen. Rather, only fraud symptoms are observed. Unfortunately, what often appears to be a fraud symptom ends up being explained by other, non-fraud factors. For example, a company’s accounts receivable balance may be increasing at a rate that appears unrealistically high. While this increase could be the result of fraud, the increasing receivables balance could be the result of major customers having financial difficulties or a change in credit terms. This step of the strategic approach involves carefully considering whether variations of the six types of symptoms could be present in the cataloged frauds identified 13 in Step 2. A matrix, tree diagram, or brainstorming map can be created that correlates specific symptoms with specific possible frauds.
4. Use Technology to Gather Data About Symptoms
Once symptoms are defined and correlated with specific frauds, supporting data are extracted from corporate databases and other sources. While we focus our discussion of this step on relational databases (because of their popularity), data can be similarly extracted from most types of data stores. While traditional fraud-search procedures have prescribed sampling of data, technology-based fraud-detection queries should be run against full transaction populations. Any summarization or sampling that is done to the data before the queries are executed limits the power of the detection process. Because even significant frauds can occur in very few transactions, the use of sampling potentially misses fraudulent records (sampling error) and circumvents the ability of computers to quickly analyze full populations. In conducting this step, fraud examiners should be prepared for bureaucracies and rules that make it difficult to gain direct access to databases. Limiting direct data access to users is well intentioned and critical in organizations. Such limits prevent users from corrupting data or viewing information they should not have access to. However, fraud examiners using the strategic detection approach need to access and analyze all information in a given system. Permission and support of upper management in gaining access is very important for successful detection efforts.
5. Analyze and Refine Results
Once relevant data are retrieved, they should be compared against expectations and models. Since very large data sets–normally composed of thousands of smaller subsets–are often analyzed, computer programs should be written to perform automated analyses. These algorithms examine records and highlight anomalies, unknown values, suggestive trends, or outliers that can then be analyzed directly by examiners. While specific analyses are unique to the business being examined and the type of fraud being searched for, most searches include time series models. This is because fraud is often discovered by examining changes over time. Historical patterns within the data, rather than outside factors, often set the standard that data are measured against. Sharp and unexpected increases in spending, purchases, or labor often signal possible fraud.
6. Investigate Symptoms
Once anomalies are highlighted and determined to be indicators of fraud, they are investigated either using traditional or technology-based approaches. Investigation of leads should only be done on anomalies that cannot be explained through continued analysis. Many times, traditional investigation into symptoms provides new insights that allow further refinement of algorithms and queries. Information about one anomaly often clears up other highlighted results. These serve to “purify” the computer-based methods and provide increasingly meaningful results.
7. Follow Up and Iterate the Cycle
Fraud examiners should follow up on all identified symptoms. While finding fraud is certainly the primary objective of follow up efforts, the process often highlights control weaknesses, ineffective systems, undocumented policies, and data errors. Each of these anomalies can be corrected to make company processes more efficient and effective.
The fraud detection process described thus far provides valuable information that helps investigators, auditors, and managers better understand a business and the types of frauds that could be occurring. After the cycle has been completed, the detection team should review what has been learned and determine how it can be improved. With greater understanding, new tools, and a set of tested algorithms, the strategic fraud detection process can be started again. Each iteration through the process should be more efficient and effective than the prior one. The end result is a mature, tested process for detecting fraud and other anomalies.
8. Automate Detection Procedures (Optional)
Since much of the detection process is computerized, subsequent iterations are normally faster because analyses, algorithms, and models are already programmed. As analyses become more and more refined, they can be integrated directly into business processes. They can be programmed into new systems to stop problems at the time of data entry or transaction. They can be used to prevent anomalies before they occur. In addition, detective measures can be run at specified periods automatically. They can be run against databases during off-peak hours to minimize their effect on corporate systems. Procedures can be programmed to highlight errors and send results to security personnel.