Occupational fraud cost organizations at least 3.1 billion dollars in confirmed losses, according to the Association of Certified Fraud Examiners’ most recent global study, and that figure only reflects cases that were actually caught. The typical organization loses about 5% of annual revenue to fraud every year. What’s more telling: 84% of fraudsters displayed at least one recognizable behavioral red flag before their scheme was discovered.

After years of working fraud investigations across industries, we keep seeing the same fraud red flags repeat, case after case. Fraud rarely announces itself with a smoking gun. It shows up quietly, in small inconsistencies dismissed as coincidence until losses become too large to ignore. Here are the fraud red flags we see most consistently, and what your organization can do about them.

1. Living Beyond Obvious Means

The most common fraud red flag, appearing in roughly 39% of cases, is an employee whose lifestyle no longer matches their salary. A manager suddenly driving a new luxury vehicle or taking frequent overseas vacations isn’t proof of wrongdoing alone, but it is one of the clearest fraud red flags an organization can observe.

Practical steps:

• Include lifestyle awareness in routine fraud risk training for managers
• Build a culture where unusual spending can be raised without accusation
• Pair the observation with financial data, never act on lifestyle alone

2. Financial Pressure Behind the Scenes

Financial difficulty shows up in around 27% of cases as a contributing factor. Divorce, medical debt, or a spouse’s job loss can push an otherwise trustworthy employee toward rationalizing theft, the classic “pressure” corner of the fraud triangle.

Job stress compounds this. Nearly 45% of perpetrators were dealing with a poor review or fear of job loss right around when their scheme began. Organizations that maintain confidential employee assistance programs often catch these situations before pressure turns into fraud.

3. Unusually Close Relationships with Vendors

Around 20% of cases we review involve an employee who has grown unusually close to an external vendor or customer, accepting frequent gifts or consistently steering business toward one supplier without documented justification.

These relationships often start innocently, which is exactly why they slip past standard reviews. Rotating vendor relationships, requiring documented competitive bidding, and mandating conflict of interest disclosures are among the most effective tools for interrupting this pattern early.

4. Weak or Overridden Internal Controls

This fraud red flag is structural rather than behavioral, but it enables nearly every scheme we investigate. A lack of internal controls contributes to roughly 32% of cases, and management override of existing controls accounts for another 19%. Together, weak or bypassed controls appear in close to half of all occupational fraud.

Common gaps we identify repeatedly:

• Inadequate segregation of duties between initiating and approving transactions
• Missing or inconsistent account reconciliation
• Access privileges that outlive an employee’s actual job function
• Executives who can override approval workflows unchecked

An internal audit function that actually tests these controls, not just confirms they exist on paper, is one of the strongest defenses available. We saw this gap close a case recently in the bookkeeper’s mistake that turned out to be theft, caught by a routine reconciliation. Smaller organizations face this risk more acutely, covered in our guide to small business embezzlement.

5. A Pattern of Small, Repeated Anomalies

The final red flag is the hardest to spot because no single instance looks alarming. It’s the pattern, not the transaction, that matters. Round dollar invoices repeating monthly, expense reports landing just under approval thresholds, or a vendor address matching an employee’s home address are all fraud red flags that only become visible when viewed together.

Data analytics changes the equation here. Rather than relying on memory across hundreds of transactions, analytics tools flag duplicate payments and unusual timing automatically. Organizations combining analytics with a functioning tip line detect fraud faster and at lower cost. Tips remain the single most effective detection method, responsible for roughly 43% of discoveries, more than three times any other method. See our breakdown of expense report fraud for how these anomalies show up in reimbursement claims.

Turning Awareness Into Action

Recognizing fraud red flags only helps if an organization has a clear process for what comes next. A well designed ethics and integrity program gives employees a confidential way to raise concerns and gives leadership defensible documentation if an investigation becomes necessary.

If you’ve already spotted one or more of these red flags, the next step matters more than people expect. Our guide on what to do if you suspect employee theft before confronting them covers the documentation and legal groundwork that should happen before any conversation with the employee.

Frequently Asked Questions

What is the most common fraud red flag organizations should watch for?

Living beyond one’s apparent means is consistently the most frequently observed red flag, showing up in roughly 39% of cases. It isn’t proof of wrongdoing alone, but paired with other indicators it warrants a closer, discreet look.

How long does fraud typically go undetected?

Occupational fraud schemes run for a median of about 12 months before detection, sometimes far longer when internal controls are weak. After reviewing 50 of our own cases, we found detection timelines varied widely by which controls were in place, detailed in our analysis of how long theft went undetected across 50 real cases.

Should we confront an employee directly if we notice a red flag?

No. A single red flag should trigger a quiet internal review or consultation with a fraud examiner, not direct confrontation, which can compromise evidence and create legal risk. A structured process protects both the organization and the employee if the concern turns out to be unfounded.

Do small businesses need formal fraud detection programs?

Yes, arguably more than large organizations, since smaller businesses often have fewer staff to separate financial duties and typically experience proportionally larger losses relative to revenue. Even basic controls, like requiring dual approval for payments, meaningfully reduce risk.

What role does an anonymous tip line actually play?

Tip lines are the leading method of fraud detection by a wide margin, outperforming internal audits, external audits, and management review combined. Organizations with a functioning hotline consistently report smaller losses and faster detection.

How does FraudOrder approach a new fraud investigation?

Every engagement starts with a structured review of financial records, internal controls, and behavioral indicators, followed by a clear findings report for leadership or legal counsel, the same process we outline in what happens during a forensic accounting investigation.

Protect Your Organization Before Small Signals Become Major Losses

Fraud red flags rarely appear in isolation, and by the time losses are obvious, the damage is often already substantial. Building a culture of awareness, paired with real internal controls and a working tip line, gives organizations their best chance at catching problems early. If your organization needs an experienced team to review a concern, strengthen internal controls, or conduct a full investigation, visit https://fraudorder.co/ to learn how we can help.

References

1. Association of Certified Fraud Examiners. (2024). Occupational Fraud 2024: A Report to the Nations. https://legacy.acfe.com/report-to-the-nations/2024/
2. Association of Certified Fraud Examiners. (2024). 2024 Report to the Nations Press Release. https://www.acfe.com/about-the-acfe/newsroom-for-media/press-releases/press-release-detail?s=2024-Report-to-the-Nations
3. Federal Bureau of Investigation. White Collar Crime. https://www.fbi.gov/investigate/white-collar-crime
4. Federal Trade Commission. Consumer Sentinel Network Data Book. https://www.ftc.gov/news-events/data-visualizations/consumer-sentinel-network-data-book
5. U.S. Department of Justice. Fraud Section. https://www.justice.gov/criminal-fraud
6. Institute of Internal Auditors. Global Internal Audit Standards. https://www.theiia.org/en/standards/
7. American Institute of CPAs. Forensic and Valuation Services. https://www.aicpa-cima.com/topic/forensic-accounting
8. Journal of Forensic and Investigative Accounting. (2025). Internal Control Weaknesses and Occupational Fraud. https://s3.us-east-1.amazonaws.com/web.nacva.com/JFIA/Issues/JFIA-2025-No2-2.pdf
9. Wolters Kluwer. Strengthening Internal Controls to Prevent Fraud. https://www.wolterskluwer.com/en/expert-insights/strengthening-internal-controls-prevent-fraud
10. Government Accountability Office. Standards for Internal Control in the Federal Government. https://www.gao.gov/assets/gao-25-107721.pdf

Disclaimer: This article is for informational purposes only and does not constitute legal, financial, or professional advice. It does not create a client relationship with FraudOrder or any of its team members. Organizations facing a specific fraud concern should consult a qualified fraud examiner, attorney, or compliance professional. For questions about FraudOrder services, visit https://fraudorder.co/