Search

Purpose To explain the fraud schemes known as business email compromise (BEC) and executive impersonation that are growing in popularity, and the threat they pose to financial institutions. Design/methodology/approach This article explains BEC and executive impersonation and how they are carried out, and discusses how regulations and practical operational steps are trying to address this fraud issue. Findings Financial institutions should understand the potential for legal and regulatory risks posed by BEC and executive impersonation, and consider taking steps to create a proactive, culture of skepticism and heightened awareness to combat this type of fraud. Originality/value This article is adapted from the original report issued by the American Institute of CPAs and has been updated to address specifics concerning financial institutions.

While the major “eye‐popping,” headline‐grabbing financial statement frauds have captured the attention of the investing public in recent years, little heed has been given to the smaller‐dollar, more repetitive frauds that occur in organizations year in and year out ‐ misappropriation of an entity’s assets, repeated during any given accounting period (e.g., month/year) in an amount insufficient to be detected by the entity’s system of internal controls. The purpose of this article is to examine the factors that allow fraud to flourish at a low level, or “under the radar” of internal controls; describe some of the more common schemes that occur; and propose responses that management can implement to prevent fraud from occurring in the future.