#fraud-prevention
Proactive strategies and controls to prevent financial fraud in your business
NEMT providers face a documented audit risk unlike most small businesses — a 2022 federal audit found 72% of sampled New York claims non-compliant, and billing a no-show as a completed trip can trigger False Claims Act penalties starting at roughly $14,000 per claim plus treble damages.
Check fraud losses hit roughly $21 billion in 2023 and mail-receptacle theft rose 139% between FY2019 and FY2023. This guide covers the accounts-payable controls that actually stop check washing — positive pay, weekly reconciliation inside the UCC 4-406 window, gel ink, and separating check-writing from reconciliation.
More than 30 states now let prosecutors combine multiple small thefts into one felony charge under aggregation laws, making dated incident logs and police reports essential for both prosecution and the IRC §165 business theft-loss tax deduction.
How parking lot and garage operators reconcile entry/exit counts, cash drops, and card settlements to catch revenue leakage, plus correct accounting for monthly permits and validations.
Forty-five states require scrap yards to keep seller-ID records, cash caps run as low as $30 (Washington), and IRS Form 8300 is due within 15 days on cash over $10,000. A practical guide to building a purchase ledger that survives police, state regulator, and IRS scrutiny.
No legitimate grant ever requires an upfront fee — the FTC reports nearly 30% of 2026 scam victims were first contacted on social media with losses topping $2.1 billion, and fake grant offers follow a predictable four-step script from unsolicited contact to escalating "release fees."
Visa lowered its VAMP excessive-merchant threshold from 2.2% to 1.5% on April 1, 2026, with fines of $8 per flagged transaction, and Mastercard's Excessive Chargeback Program still triggers at 100+ monthly chargebacks — here's how the ratio math catches small merchants off guard and how to bring it back under the line.
PCI DSS 4.0's transition period ended March 31, 2025, so every merchant assessment from 2026 onward now enforces mandatory payment-page script monitoring, MFA for all cardholder-data access, and authenticated internal vulnerability scans — noncompliance risks $5,000-$100,000 monthly fines from acquiring banks plus an average $173,692 added breach cost per IBM's research.
Positive Pay is a business bank service that matches every check against your issued-check list and flags mismatches the same day, a control most eligible small business accounts still don't use even though checks remain the most-targeted form of payments fraud.
How small businesses can reconcile AI agent-initiated purchases under ACP and AP2, tag agent-channel sales, track transaction fees, and defend against the chargeback risk of non-human checkouts.
Business wire transfers are governed by UCC Article 4A, not Regulation E, meaning a company can be held liable for a fraudulent wire if its bank's security procedure was commercially reasonable, even though 86% of the FBI's $3.05 billion in 2025 BEC losses moved via wire or ACH.
The FBI logged over 22,000 reports of AI voice or video fraud with nearly $893 million in losses in a single recent year; callback verification on a separate channel, a rotating code word, and a dollar-threshold second approver are the three no-cost controls that stop deepfake wire-transfer fraud.
