The typical defrauded non-profit loses $75,000 per fraud incident, according to the Association of Certified Fraud Examiners. And that does not account for the negative publicity and subsequent lost donations and support that often follow fraud. Although no preventive measure is 100% effective, strong internal controls can greatly reduce the risk that a crooked staffer or outside criminal will find gaps in your organization.

Special Vulnerabilities
Internal controls are policies and procedures that govern everything from accepting cash to signing checks to training staff to keeping your information technology network secure. Most non-profits have at least a rudimentary set of internal controls, but dishonest employees and other criminals can usually find gaps in environments where controls are only somewhat effective or inadequately followed.

Why might non-profits skimp on controls or enforcement? Typically, they devote the largest chunk of their budgets to programming and may not allocate enough dollars to fraud prevention. This can be especially problematic in organizations where executives or board members indicate that fraud prevention is low on their priority list. Non-profit boards also may inadvertently enable fraud when they place too much trust in the executive director and fail to challenge that person’s financial representations. Unlike their for-profit counterparts, non-profit board members may lack financial oversight experience.

Trust is another potential weakness. Non-profits often regard their staff and dedicated volunteers as family. They may allow managers to override internal controls and volunteers to accept cash donations without oversight — both risky activities.

Do Not Let Your Guard Down

Some of the most common types of employee theft in non-profit organizations are check tampering, expense reimbursement fraud, and billing schemes. However, practicing proper segregation of duties — for example, assigning account reconciliation and fund depositing to two different staff members — is a relatively easy and quite effective method of preventing such fraud. Strong management oversight and confidential fraud hotlines open to all stakeholders also can reduce employee theft.

While you should trust staffers, you also should verify what they tell you. Conduct background checks on all prospective hires, as well as volunteers who will be handling money or financial records. Also, provide an orientation to new board members to make sure they have a clear understanding of their fiduciary role.

Finally, handle fraud incidents seriously. Many non-profits choose to quietly fire thieves and sweep their actions under the rug. However, this tends to encourage fraud by telling potential thieves that the consequences of getting caught are relatively minor. If an incident is hushed up, rumors could do more reputational damage than publicly addressing the issue head-on. It is better to file a police report, consult an attorney, and inform major stakeholders about the incident.

Prioritizing Risks
If you are not sure where vulnerabilities lie or how your budget can be stretched to allocate more resources to fraud prevention, contact us. We can help you prioritize the most serious risks and find solutions for closing control gaps.