Corporate fraud is dishonest conduct carried out within, against or by a company for personal or improper gain. It can be committed by executives, employees, suppliers or outsiders — frequently through collusion — and it typically hides inside legitimate-looking transactions, invoices and records. It matters because the financial damage is often compounded by regulatory exposure, litigation risk, morale problems and lasting reputational harm, and because fraud concealed within a company's own systems can run undetected for years.
This article explains what corporate fraud looks like, how a professional investigation works, and the practical steps a board, business owner or attorney should consider when suspicion arises.
Common Types of Corporate Fraud
Most corporate fraud investigations involve one or more of the following patterns:
- Asset misappropriation — theft of cash, stock, equipment or intellectual property.
- Payroll fraud — ghost employees, inflated overtime or unauthorised salary adjustments.
- Procurement and vendor fraud — kickbacks, shell suppliers, inflated or fictitious invoicing.
- Expense and invoice fraud — false claims, duplicate billing or altered banking details.
- Financial statement fraud — manipulation of accounts to mislead shareholders, lenders or regulators.
- Bribery and corruption — improper inducements connected to contracts or decisions.
- Conflicts of interest — undisclosed interests in suppliers, customers or competitors.
- Cyber-enabled fraud — business email compromise and diverted payments.
- Data theft — misuse of customer or company information, with possible POPIA consequences.
Warning Signs Worth Investigating
No single sign proves fraud, but a combination of indicators justifies closer scrutiny:
- Missing, altered or incomplete financial records.
- Transactions split to stay just below approval thresholds.
- A lifestyle clearly inconsistent with known income.
- Employees who resist taking leave, delegating duties or being audited.
- Unexplained adjustments, balancing entries or margin erosion in one division.
- Over-reliance on a particular employee, supplier or bank account.
- Whistleblower complaints or internal tip-offs.
What a Professional Investigation Involves
An independent investigation is usually structured in phases so that evidence is preserved before anyone is alerted:
- Scoping — clarifying the allegations, the period and the systems involved.
- Evidence preservation — securing devices, accounts and records before they can be altered.
- Forensic accounting — tracing transactions, reconciling records and quantifying losses.
- Digital forensics — imaging and analysing computers, phones, email, servers and cloud accounts.
- Interviews — structured interviews with witnesses and, where appropriate, implicated parties.
- Background and OSINT checks — verifying suppliers, counterparties and undeclared interests.
- Reporting — a documented, defensible report suitable for internal action, insurers, attorneys or court.
Evidence Commonly Examined
Investigators may examine financial records and ledgers, emails and messaging data, metadata showing who created or altered a document, deleted files, access logs, CCTV footage and mobile devices. Every item is handled under a documented chain of custody so that it remains admissible, and personal information is processed in line with the Protection of Personal Information Act (POPIA).
The South African Legal Context
Depending on the facts, corporate fraud in South Africa may engage the Prevention and Combating of Corrupt Activities Act, the Companies Act and, for public entities, the Public Finance Management Act. Criminal conduct can be reported to the SAPS, while civil recovery, disciplinary action and insurance claims may run in parallel. An experienced investigator can help attorneys and management choose the right sequence.
Practical First Steps
- Do not confront the suspected party before evidence is secured.
- Preserve records, devices and access logs rather than opening or copying files yourself.
- Restrict system access where appropriate and monitor quietly.
- Document a factual timeline of what was noticed and when.
- Brief an attorney and engage an independent investigator early.
- Assess POPIA obligations if personal information was exposed.
Corporate fraud is disruptive, but a calm, methodical response protects both the evidence and the organisation. For more plain-language guides, visit the Knowledge Centre.