Fraud teams feel busier every year, yet losses still rise. The numbers back up that feeling.
- The United Nations Office on Drugs and Crime estimates that 2 to 5 percent of global GDP gets laundered each year. That equals hundreds of billions, even more than a trillion dollars pushed through illicit channels.
- New Federal Trade Commission data shows that consumers in the United States reported more than 12.5 billion dollars in fraud losses in 2024, up about 25 percent from the year before.
- The ACFE 2024 Report to the Nations found a median loss of 145,000 dollars per occupational fraud case, with more than one in five cases topping 1 million dollars.
- Juniper Research expects online payments fraud to cost over 362 billion dollars between 2023 and 2028.
So financial crime is not shrinking. It is adapting.
A big part of the problem sits in how leaders think about fraud prevention. Certain myths keep programs focused on yesterday’s risks while lesser-known schemes move quietly through gaps in process, data, and culture.
A detailed breakdown of those lesser-known schemes, from trade based money laundering to ghost employee fraud, appears in a comprehensive look at the lesser-known financial crimes from Flagright articles. The focus here is different. This guide looks at the myths that allow those crimes to grow inside firms that believe they have fraud “under control”.
Myth 1: “Real fraud is big, obvious, and rare”
Headlines train people to think of fraud as spectacular events. A global Ponzi scheme. A huge sanctions breach. A major insider trading case.
Inside most organizations, the picture looks different. Losses often come from many small schemes that seem minor when viewed one by one.
How small patterns quietly add up
Common examples include:
- Low value unauthorized refunds or rebates
- Duplicate or inflated invoices that slip past busy accounts payable teams
- Slightly padded time sheets or expense claims
- Ghost employees buried inside a large payroll file
Individually, these cases may not attract board level attention. Over twelve or eighteen months, they mount into seven or eight figure losses. ACFE data shows that the median duration of occupational fraud schemes is about one year, which gives quiet patterns plenty of time to grow.
How lesser-known crimes use this myth
Lesser-known financial crimes reward patience.
- Trade based money laundering relies on small pricing differences, unusual shipment details, or repeated mis-invoicing.
- Bust-out credit fraud involves months of “good” repayment behavior before a final rapid drawdown.
- Invoice factoring fraud often starts with a handful of questionable invoices that seem harmless against a long customer list.
When leaders assume that “real” fraud would look dramatic, they underinvest in tools and reviews designed to pick up subtle anomalies. Patterns that deserve close attention get written off as noise.
Myth 2: “Strong onboarding checks are enough”
Many firms pour energy into customer due diligence at the start of a relationship. They verify documents, run names through sanctions lists, and screen for politically exposed persons. That work matters, but it does not close off key threat vectors.
Synthetic identity fraud slips past traditional checks
Synthetic identity fraud blends real and fake information to build a new identity. A real social security number or national ID, often taken from a child or someone with little credit history, gets paired with a different name, address, or date of birth.
Industry analysis suggests synthetic identity fraud losses passed 35 billion dollars in 2023, and this type of fraud now represents a growing share of digital credit losses.
Onboarding checks that only verify each data point in isolation have trouble spotting these identities. Nothing appears obviously fake, and early usage often looks responsible.
Hidden ownership weakens KYC
Even when customer data is genuine, ownership can still be opaque. Beneficial ownership abuse uses shell companies, nominee directors, and layered corporate structures to hide who really controls an entity.
This matters for:
- Sanctions evasion
- Tax fraud
- Trade based money laundering
- Bribery and corruption risk
If onboarding focuses only on legal ownership and stops there, it may satisfy formal rules while leaving fraud and AML exposure intact.
A better approach
Onboarding should be the first gate, not the only one. Strong programs:
- Combine documentary checks with behavioral data from the first months of activity
- Use device intelligence and digital identity tools to link applications that share hidden traits
- Refresh beneficial ownership information on a risk based schedule, not only when regulations demand it
Myth 3: “Fraud is mainly an outside threat”
External threat actors receive most public attention, yet internal fraud and collusion still cause deep damage.
Where internal fraud usually hides
Internal schemes often exploit routine processes that no one wants to slow down:
- Payroll: Ghost employees, inflated overtime, and abuse of allowances
- Procurement and payables: Fake vendors, split invoices, and collusion with suppliers
- Loan and credit operations: Manipulated applications, misused internal override rights, or selective enforcement of policy
- Data access: Unauthorized updates to limits or customer records, which then enable theft or cover tracks
The ACFE notes that nearly half of occupational fraud cases involve people with one to five years of tenure. Losses rise even higher when the perpetrator holds a senior role with more authority.
Why internal fraud feels “less likely” than it is
Several biases protect this myth:
- Managers overestimate their ability to judge character
- Teams do not want to believe that a colleague could exploit them
- Organizations praise staff who “get things done”, even when that means sidestepping controls
Fraudsters exploit that trust. They learn which review steps always get rushed. They copy the approval language that managers like to see. They adjust schemes to stay just below threshold values that trigger extra checks.
Bringing internal fraud out of the shadows
Stronger control environments treat internal activity with the same level of data driven scrutiny that they apply to card transactions or online banking. Useful steps include:
- Independent reviews of payroll and vendor master data
- Analytics that flag shared addresses, bank accounts, or tax identifiers across staff and vendors
- Rotation of duties and forced vacation policies in high risk roles
- Direct reporting channels for staff who spot unusual behavior
Myth 4: “More technology means less fraud”
Technology is a powerful ally, but not a cure on its own. Many fraud programs now rely on machine learning models, behavioral analytics, and device intelligence. Yet losses still rise.
Why tools alone fall short
Fraud technology fails when:
- Models train mainly on yesterday’s attacks and miss new combinations
- Data streams lack context, so investigators drown in low quality alerts
- Business units push for frictionless customer journeys without matching investment in fraud logic
- Fraud and cyber teams work separately, so social engineering attacks slip between them
Generative AI adds another twist. The same tools that help analysts sift through alerts can also help criminals craft better phishing messages, create fake documents, or generate synthetic voices that trick call center staff.
Making technology work as part of a system
Stronger programs use technology to extend human judgment instead of replacing it. Practical moves:
- Keep a clear library of “fraud stories” that show investigators how certain schemes behave from the first alert to confirmed case
- Include fraud teams in product design so controls start at the design stage instead of bolted on later
- Use champion challenger testing so new models run in parallel before they replace current rules
- Track not only detection rates but also how long it takes to reach a decision and how much effort each case needs
When technology fits into a clear strategy, it amplifies human insight instead of hiding it. Many firms support that shift with financial crime compliance solutions that connect monitoring, case handling, screening, and investigation workflows in one system.
Myth 5: “Good policies on paper equal strong prevention”
Many firms have thick policy binders, detailed procedure manuals, and thorough training slide decks. Yet fraud still slips through daily operations.
Where the policy gap appears
Policy says: two people must approve new vendors.
Practice looks like: the second approver clicks “approve” on dozens of requests at the end of a long day.
Policy says: staff must verify changes to payment details through an independent channel.
Practice looks like: a rushed email check that uses the same thread as the original request.
Policy says: the firm applies heightened due diligence to high risk customers.
Practice looks like: recycled answers in long questionnaires that no one cross checks against transaction behavior.
Fraudsters watch actual behavior, not written procedures. They notice which controls slow work and which ones staff bypass to hit sales or processing targets.
Turning policy into real control
To close this gap, leaders can:
- Align incentives so quality of fraud decisions counts as much as speed and volume
- Use walk throughs where auditors follow live cases from start to finish to see where controls break
- Simplify rules so staff truly understand which steps matter and why
- Test controls with red team exercises that mimic real fraud attempts
A smaller set of well enforced rules usually protects better than a complex framework that people work around.
Key questions leaders should ask about fraud prevention
Search data and board discussions often circle around similar questions. Structuring internal reviews around these helps connect fraud strategy with real risk.
What types of fraud hurt firms the most today?
Do not rely only on what hits the news. Combine:
- External data on trends, such as loss figures and payments fraud forecasts
- Internal loss data across products, regions, and channels
- Near miss logs, customer complaints, and internal reports that hint at patterns even when losses stayed low
Look for crimes that rarely appear in headlines but show up in loss reports, such as invoice fraud, payroll manipulation, and synthetic identity driven defaults.
Where do preventative controls fail more often?
Map fraud cases back to the first point where the firm could have stopped them and ask:
- Was relevant data available but ignored
- Did people spot red flags but feel unable to escalate
- Did no one own the risk at that stage of the customer or transaction life cycle
The answers show where myths about “obvious fraud” or “safe internal processes” still guide behavior.
How well do teams join the dots across fraud, AML, and cyber risk?
Fraud, AML, and cybersecurity now overlap in many cases. A single scam can include:
- Phishing or voice cloning to trick staff into bypassing controls
- Account takeover or mule recruitment
- Suspicious payment flows that mix scam proceeds with other funds
Cross functional playbooks, shared investigation tools, and joint training sessions help teams see the full pattern instead of only their part.
Are frontline staff trusted to pause activity when something feels wrong?
Staff on the phones or in branches often receive the first signals that something does not add up. They may hear a coached customer, see pressure from a third party, or notice that a transaction looks odd compared with past behavior.
If those staff feel judged only on speed and sales, they will keep moving even when their instincts say “stop”. Training, clear escalation paths, and leadership messages that praise cautious decisions can flip this dynamic.
Practical actions to reset fraud strategy
Turning insights into action does not need a complex multi year program. A few targeted moves can start to shift outcomes.
- Run a myth busting workshop with real cases
Gather recent internal incidents and public case studies. For each one, ask which myths allowed the scheme to grow. Use these stories in board packs and staff training instead of generic examples. - Build a single view of fraud and financial crime events
Unify data from chargebacks, AML alerts, internal investigations, and customer complaints. A shared case system or data warehouse view helps teams spot patterns that cross business lines. - Add lesser-known crimes to the risk register
Make sure trade based money laundering, beneficial ownership abuse, synthetic identity fraud, and internal payroll or vendor schemes sit explicitly in risk assessments, not just as vague references. - Test high risk processes often
Regularly review onboarding flows, trade finance, invoice processing, payroll, and refunds. Mix data analytics, surprise checks, and control testing. Focus more on outcome than on documentation. - Treat fraud prevention as a customer trust topic
Clear communication, timely refunds where appropriate, and visible security steps shape how customers feel about safety. Firms that handle fraud transparently often see stronger loyalty than those that treat it only as a back office issue.
Fraud is not going away, but the mix of risks can shift in favor of firms that question old assumptions. Leaders who challenge these myths, study lesser-known crime types, and link policy, culture, and technology into one clear strategy give their organizations a better chance to protect both balance sheets and customer trust in the years ahead.
