Business fraud is any deliberate deception carried out for financial gain within or against a company — by employees, managers, suppliers, customers or outsiders. It ranges from inflated invoices and ghost employees to procurement kickbacks, inventory theft and cyber-enabled payment scams. Because fraud is usually concealed and often committed by trusted insiders, many businesses only discover losses months after the money is gone.
Prevention matters because the damage goes beyond money: fraud erodes trust, disrupts operations, attracts regulatory scrutiny under laws such as the Companies Act and POPIA, and can leave directors personally exposed. An effective prevention strategy combines internal controls with an understanding of what fraud looks like and how to respond when it is suspected.
Common Types of Business Fraud
- Invoice and billing fraud — fictitious, duplicated or inflated supplier invoices
- Payroll fraud — ghost employees, inflated hours or unauthorised salary changes
- Procurement and vendor fraud — kickbacks, collusive tenders or undisclosed conflicts of interest
- Expense claim fraud — personal spending disguised as business costs
- Cash and inventory theft — skimming, stock shrinkage and asset misappropriation
- Executive and accounting fraud — manipulated records or diversion of company funds
- Payment redirection — criminals impersonating suppliers or executives to redirect bank payments
Warning Signs to Watch For
Fraud rarely announces itself, but patterns often emerge:
- Employees living beyond their visible means or resisting leave and job rotation
- Suppliers who share addresses, bank accounts or directors with employees
- Unexplained gaps in records, missing documents or misplaced devices
- Transactions just below approval limits or repeated round amounts
- Journal entries posted late at night, at month-end, or by staff who bypass controls
- Vendors complaining about changed banking details they never requested
How a Professional Investigation or Forensic Review Works
When internal checks are not enough, an independent investigation can establish the facts while preserving evidence. A typical forensic process involves scoping the allegation, securing systems and records, collecting evidence lawfully, and documenting a defensible chain of custody. Depending on the matter, the evidence examined may include:
- Financial records — bank statements, ledgers, invoices and payroll data
- Electronic evidence — email, messaging apps (including WhatsApp), device images and server or access logs
- Procurement files — tender documents, vendor master data and approval trails
- Physical evidence — CCTV footage, access control records and asset registers
Findings are compiled in a report that can support internal disciplinary action, civil recovery or a criminal complaint to the SAPS. Forensic work must comply with POPIA and other applicable law, and evidence gathered improperly may be challenged later.
Practical First Steps for Business Owners
- Separate duties so no single person controls ordering, payment and reconciliation
- Enforce dual authorisation for payments and verify bank-detail changes by phone
- Reconcile accounts monthly, rotate leave and review audit logs
- Screen employees and vendors who handle money, and require declarations of interest
- Secure data with least-privilege access, multi-factor authentication and prompt offboarding of departed staff
- If fraud is suspected, secure records before confronting anyone — premature accusations can tip off the offender and destroy evidence
For more guidance on related topics, visit the Knowledge Centre.
No control eliminates fraud entirely, but layered prevention and a measured response can sharply reduce both financial loss and legal risk, and early, properly documented action keeps more recovery options open.