"Why Us?" The Psychology Behind Fraud, and Why It Is Not Just You

The question comes in almost every first meeting after a fraud is discovered, usually from a promoter or a managing director, and usually with real hurt behind it: why us? Why did this happen to a company that treats people well? And why him, or her, after so many years?

The question deserves a candid answer, and a reassuring one. Both are true at once.

It is not just you

Fraud is found in family businesses and multinationals, in listed companies and private ones, in every sector. The ACFE's Occupational Fraud 2026: A Report to the Nations, based on 2,402 cases across 143 countries and territories, put the median loss per case at USD 104,000 and found that a typical fraud ran for 12 months before it was detected.

Those figures are not a comfort in themselves. The point is that discovering a fraud does not mean a company is unusually careless or unusually unlucky. It means it employs human beings, some of whom will, at some point, face circumstances in which wrongdoing starts to look possible and justified.

What separates companies is not whether they face the risk but how quickly they find out and how well they respond.

Why people do it: the fraud triangle

The fraud triangle, developed from criminologist Donald Cressey's research, remains the most useful way to explain why ordinary, trusted people commit fraud. Three conditions tend to come together.

Pressure

A financial or personal pressure the person feels unable to share: debt, a family medical crisis, a lifestyle that has outrun salary, or pressure from work itself, such as targets that cannot be met honestly. In companies, pressure is often organisational. Aggressive targets, fear of losing a job and a culture that celebrates results without asking how they were achieved all push people towards the line.

Opportunity

Access and the belief that nobody will notice. Opportunity grows with trust and seniority: the long-serving accountant who reconciles their own entries, the plant head whose vendor choices nobody questions, the regional manager who approves their own exceptions. The ACFE found that a lack of internal controls or override of existing controls was the primary weakness in more than half of the cases it studied.

Rationalisation

The story that makes it acceptable: "I'm only borrowing it", "the company owes me", "everyone does it", "the promoter takes far more". Rationalisation is where culture matters most. When small breaches are tolerated, or senior people visibly bend rules, employees have a ready-made justification.

Why the trusted person

Leaders are often most shaken by who did it. But trust is what creates the opportunity. The people who know a process best and are checked least are the people best placed to exploit it. The ACFE's figures show that losses rise sharply with authority: the median loss in schemes by owners and executives was USD 475,000, against USD 50,000 for employees.

This is why character references and loyalty are poor controls. "I have known him for twenty years" describes a relationship, not a safeguard.

What leaders can do

The psychology of fraud can be managed, not eliminated. Each condition in the triangle has a lever:

• Pressure: design targets and incentives that can be met honestly, with quality checks, and offer confidential support to employees in personal difficulty. Watch for the signs: lifestyle beyond means, reluctance to take leave, unusual closeness to a vendor.
• Opportunity: verify rather than trust. Segregate duties, rotate roles, enforce mandatory leave in sensitive positions, and test controls with data. Our view on designing controls for the people who can override them sets out how.
• Rationalisation: make consequences visible and consistent, regardless of seniority. Leaders' own conduct sets the limit of what others can tell themselves is acceptable.

Managing the response, including the anger

The first reactions after discovery are often anger, a sense of betrayal and a strong wish to act immediately. Those feelings are legitimate, particularly for promoters who built the business. They are also the most common cause of avoidable mistakes: confronting the person before evidence is secured, announcing conclusions too early, accepting a quiet resignation to make the problem go away, or filing a complaint that hands control of the timing to others.

Our advice is simple. Acknowledge the anger, then put a plan in charge. Our pieces on the first 72 hours and on recovering from fraud describe what that plan looks like.

Common mistakes

• Treating it as a one-off. If the conditions that made it possible remain, someone else will find them.
• Over-correcting on trust. Suspecting everyone damages the culture that prevents fraud. The answer is verification, not paranoia.
• Looking only at the individual. The question "why him?" matters less than "why was it possible, and why did it take so long to find?"
• Keeping it secret internally. Silence invites rumour. A brief, factual message that the company acted protects morale and deters others.

Where we can help

We help boards and promoters understand what happened and why, through independent fraud investigations and root cause reviews, and we stay alongside them through recovery and remediation. Speak to us in confidence.