Fraud happens in small businesses just like in other places. Fraud is more prevalent in small businesses, compared to larger ones, because:
Small business owners focus less on controls; they instead focus more on sales
Many employees assume additional tasks which are not properly segregated
The largest fraud factor is entrusting one employee with a large amount of responsibility. Time and time again, small business owners try to offload responsibility to others who take advantage of this opportunity.
HOW TO MINIMIZE THE RISK OF FRAUD
I recommend this two-tier approach, for owners and employees, in the following areas:
Cash management
Owner: set-up and manage banking users and create all payment templates; be the only authorized bank account signers (via the company banking resolution).
Employees: make payments using approved bank payment templates; one employee inputs payment (into the banking system) and a second employee approves payment.
Accounts payable
Owner: set-up purchase orders, and make supplier changes of address/bank information.
Employees: make payments using authorized purchase orders; one employee inputs system payment (ex: in QuickBooks) and a second approves payment.
Accounts receivable
Owner: ensure all receipts (checks, wires, ACHs) are sent directly to the bank (and that no receipts are received at the office). Provide AR-application employees with read-only access to apply cash received to customer sub-accounts.
Employees: apply cash received to customers’ accounts (using online banking) daily. The cash received should equal the cash applied. If checks/cash are received at the company, an administrator should write up and total each daily deposit, while a second employee completes the bank deposit.
Cybercrime: Email and internet fraud
Owner: Create a basic employee rewards program for identifying potential fraud issues. For example, each quarter raffle off a $100 gift card for employees who identify potential email/internet threats.
Employees: Participation in the employee rewards program (by identifying threats).