Control, Risk and Fraud
Transcript of Control, Risk and Fraud
![Page 1: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/1.jpg)
Control, Risk and Fraud
Mark K. Webster, CPA, CCM, PartnerDaniel L. Blumen, CTP, Partner
Treasury Alliance Group LLC
![Page 2: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/2.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 1
Agenda
• Introduction• Check Fraud in the 21st Century• Phishing & Pharming• Internal Fraud
![Page 3: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/3.jpg)
Introduction
![Page 4: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/4.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved
Trends• Credit Card Fraud against consumers declining
– Effective fraud prevention systems
– Synthetic ID fraud; no consumer victim• Thieves moving to other accounts
– New accounts
– Checking accounts
– Corporate Accounts• Rising crime methods
– Cyber attacks against consumers• Desktop & email compromise
– Unauthorized access to credit reports
– Hacks against retailersSource: Gartner
Page 3
![Page 5: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/5.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved
Source: Phoenix-Hechtwww.phoenixhect.com
Upper-Middle Large Corporate
(1=Not important, 5=Most important) 2006 2008 Diff 2006 2008 Diff
Concern about fraud from specific sources
Checks 4.41 4.48 .07 4.51 4.53 .02
ACH debits 3.98 4.04 .06 4.08 4.24 .16*
Wire Transfers 3.67 3.74 .07 3.70 3.78 .08
*Statistically significant change
Corporate Fraud Concerns
Page 4
![Page 6: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/6.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved
Scale 1 to 5 with 5= Very Important Annual Sales
Rate:
$100M-$249M
$250M-$499M
500M-$999M
$1B-$2.49B
Over$2.50B
Increase in concern about check fraud, last two years
24.0% 29.3% 33.9% 35.0% 38.5%
Importance of Positive Pay with payee verification
4.02 4.45 4.52 4.42 4.40
Corporate Fraud Concerns
Source: Phoenix-Hechtwww.phoenixhect.com
Page 5
![Page 7: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/7.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 6
Perpetrators still lead the race!
• Fraudsters persistently probing, collecting information, planning
• A few bright professional criminals
• Multitudes of copy cats• Internet has increased the
problem• Effective, popular scam…
big losses• Banks’ excruciatingly slow
reaction time
![Page 8: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/8.jpg)
Check Fraud in the 21st Century
![Page 9: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/9.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 8
Background
• 64% of corporations have been victimized• 75% of all banks have suffered check fraud
losses• Number 2 on the Top 10 list of crimes that hurt
corporations• Over 175,000 fraudulent checks are presented
every day• Over $5 billion in value annually – and growing
Sources: AFP, KPMG, US Secret Service
![Page 10: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/10.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 9
Check 21• Legalized substitute checks• Became effective October 2004 for ALL checks• DOES NOT require image processing• DOES create foundational framework for image
Fron
t
Bac
k
![Page 11: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/11.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 10
What about fraud?
Are you expecting this?
Or this?
More importantly, what does your local prosecutor expect?
![Page 12: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/12.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 11
New indemnity may help
§ 229.53 Substitute check indemnity. (a) Scope of indemnity. A bank that transfers,
presents, or returns a substitute check or a paper or electronic representation of a substitute check for which it receives consideration shall indemnify the recipient and any subsequent recipient (including a collecting or returning bank, the depositary bank, the drawer, the drawee, the payee, the depositor, and any indorser) for any loss incurred by any recipient of a substitute check if that loss occurred due to the receipt of a substitute check instead of the original check.
![Page 13: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/13.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 12
Check Fraud – Best Practices
• Positive Pay – with payee if possible• Reconcilement• ACH Filters or Blocks• *********• Secure Your Check Stock• Use Secure Check Stock• Eliminate Manual Checks
![Page 14: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/14.jpg)
Phishing & Pharming
![Page 15: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/15.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 14
Phishing
The creation and use of e-mails and websites designed to look like e-mails and websites of well-known legitimate businesses to deceive Internet users into disclosing their bank and financial account information or other personal data such as usernames and passwords
![Page 16: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/16.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 15
Did you hear the one about?
Source: Anti-Phishing Work Group
![Page 17: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/17.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 16
Phishing Attacks by Industry
Source: Anti-Phishing Work Group
![Page 18: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/18.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 17
Pharming
Phishing’s evil twin – If you won’t answer our email, we’ll get you to come to us!
![Page 19: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/19.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 18
Pharming
92.100.01.01
98.155.01.01
98.155.01.01
www.nicebank.com
![Page 20: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/20.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 19
Best Practices
• Educate your staff • Never respond to emails or pop-ups asking for
personal (corporate) info• Avoid the use of links• Type URL of financial sites into the address bar• Don’t send personal or financial info by email• Be aware of the security status of your webpage• Use pop-up blockers and anti-virus software• Report suspicious activity
![Page 21: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/21.jpg)
Internal Fraud
![Page 22: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/22.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 21
The bigger problem…
• 6% of all annual revenues lost to fraud• $660+ billion in U.S. alone• 60% had no or poor internal control • Most are first time offenders• Small firms hit hardest – median loss $98,000• Causes almost 1/3 of all business failures
Sources: Assoc. of Certified Fraud Examiners, US Chamber of Commerce
![Page 23: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/23.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 22
The “Model” Employee
• Comes to work early or leaves late• Works nights and weekends• Seldom takes vacation• Comes in even during brief absences• Asks others to hold work while gone
![Page 24: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/24.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 23
Trust but Verify
The “U-Turn” Concept
Source
Approval(Supervisor)
Payment
Source
Approval(Supervisor)
Payment
![Page 25: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/25.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 24
The Six Signs of Internal Fraud
• Accounting exceptions/anomolies• Internal Control weaknesses• Analytical symptoms• Behavior changes• Lifestyle changes• Tips and complaints
Source: Assoc. of Certified Fraud Examiners,
![Page 26: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/26.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 25
Best Practices
• Know your employees• Enforce vacation policies• Separation of duties• Clear documented policies and procedures• Blow the whistle• Lead by example
![Page 27: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/27.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved
Risk Diagnostic
1. You don’t wire funds to entities outside your organization.2. You don’t use on-line banking tools to initiate wires, ACH, or other
banking transactions.3. Your policies and procedures are well documented and have been
reviewed and updated within the last 18 months.4. You use Positive Pay on all of your disbursement accounts.5. You use ACH debit blocks or filters on all bank accounts.6. ALL bank account reconciliations are up to date (30 days or less).7. You have an internal fraud or ethics hotline.8. You don’t do any business over the internet.9. You rarely overdraw any of your bank accounts.10.You have done a formal Treasury Controls Review within the last
two years.
![Page 28: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/28.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved
Questions and Certification
To obtain a certificate of completion for CPE or other financial certification please email [email protected]
![Page 29: Control, Risk and Fraud](https://reader035.fdocuments.in/reader035/viewer/2022070222/613d05e00c37c14a830d34f7/html5/thumbnails/29.jpg)
©2008 – Treasury Alliance Group LLC – All Rights Reserved Page 28
Mark K. Webster, CCM, CPA, PartnerPhone (216) [email protected]
Daniel L. Blumen, CTP, PartnerPhone (630) [email protected]
Treasury Alliance Group LLCwww.treasuryalliance.com
For further information