Knowledge base · Fraud investigation
What is the fraud triangle?
Short answer
The fraud triangle is a model that explains why otherwise ordinary people commit fraud. It holds that three conditions are usually present together: a pressure or incentive, such as debt or targets; an opportunity, typically weak or overridden controls; and a rationalisation that lets the person justify the act to themselves.
Definition of Fraud Triangle (also: Cressey's fraud triangle, fraud theory triangle)
The fraud triangle is the most widely used explanation of why trusted employees and managers commit fraud. It grew out of the work of criminologist Donald Cressey, who studied people convicted of embezzlement and found the same three conditions recurring in their stories. Fraud examiners, auditors and compliance teams still use it to structure risk assessments and investigations.
What are the three sides of the fraud triangle?
Pressure (or incentive)
Pressure is the motive: a need the person feels cannot be shared or solved legitimately. It may be personal (debt, medical costs, gambling, a lifestyle to maintain) or organisational (aggressive sales targets, bonus thresholds, covenant tests, pressure to show growth before a fund-raise). Organisational pressure is a common driver of financial statement fraud.
Opportunity
Opportunity is the means: the ability to commit the fraud and conceal it. It arises from weak internal controls, poor segregation of duties, unchecked system access, blind trust in long-serving staff and management's ability to override controls.
The data supports the focus on this side. In the ACFE's Occupational Fraud 2026 report, a lack of internal controls was the primary weakness in 33% of cases and override of existing controls in 19%, together more than half.
Rationalisation
Rationalisation is the internal story that makes the act acceptable: "I am only borrowing it", "the company owes me", "everyone does it", or "this is the only way to save jobs". It allows people who see themselves as honest to act dishonestly. Culture strongly shapes it, which is why tone at the top matters. We explore the psychology further in "Why us?" The psychology behind fraud.
How is the fraud triangle used in practice?
In prevention. A fraud risk assessment asks, process by process, where pressure is high, where opportunity exists and where rationalisation is likely. Controls are then designed mainly to remove opportunity.
In investigation. When an allegation arrives, the triangle helps investigators form hypotheses: who had access, who was under pressure, and how the scheme could have been hidden. It shapes data tests, document requests and interview plans, but it is never a substitute for evidence.
In governance. Under s. 134(5)(e) of the Companies Act 2013, directors of listed companies must confirm that internal financial controls are adequate and operating effectively. The statutory explanation includes preventing and detecting frauds and errors, which is the opportunity side of the triangle in legal terms.
What warning signs map to each side?
| Side | Typical warning signs |
|---|---|
| Pressure | Known financial difficulty, living beyond apparent means, unrealistic targets tied to bonuses |
| Opportunity | One person controlling a process end to end, shared passwords, approvals never reviewed, no mandatory leave |
| Rationalisation | Resentment over pay or promotion, dismissive attitude to rules, frequent minor policy breaches |
How does it relate to other concepts?
The fraud triangle explains individual behaviour behind occupational fraud. It is less effective at explaining organised or collusive schemes, where several people coordinate, or at describing an insider threat driven by revenge or external recruitment. Extensions such as the fraud diamond add capability as a fourth factor.
Spectra Forensics' fraud and whistleblower investigation service applies these principles when scoping investigations and recommending control improvements.
Frequently asked questions
Which side of the fraud triangle can an organisation control?
Opportunity is the side an organisation influences most directly, through internal controls, segregation of duties, approval limits, reconciliations and monitoring. Pressure and rationalisation are personal, but culture still matters: unrealistic targets add pressure, and visible tolerance of minor misconduct makes it easier for people to justify larger wrongdoing. A good programme works on all three, with controls as the foundation.
What is the fraud diamond?
The fraud diamond is a later extension of the fraud triangle that adds a fourth element: capability. It recognises that pressure, opportunity and rationalisation are not enough on their own; the person must also have the position, knowledge, confidence and ability to exploit the opportunity and conceal the act. It is especially useful when assessing senior management and IT administrators.
Can the fraud triangle prove that someone committed fraud?
No. The fraud triangle is a risk and explanatory model, not evidence. Financial pressure or access to systems does not show that a person did anything wrong. Investigators use it to decide where to look and what questions to ask, but findings must rest on documents, data, transaction trails and admissions, tested against the legal elements of the alleged offence.
Sources
Go deeper
Related insights
Fraud investigation18 Aug 2026
Investigating Employee–Vendor Conflicts of Interest: A Practical Guide
How Indian companies can detect and investigate undisclosed employee and director interests in vendors, from s. 184 and s. 188 to data matching and interviews.
Fraud investigation15 Aug 2026
Procurement Fraud Red Flags: How to Spot Bid Rigging, Kickbacks and Fictitious Vendors
Red flags for procurement fraud at each stage of the procure-to-pay cycle, from rigged specifications and bid rigging to kickbacks and inflated invoices.