#fraud-prevention
Proactive strategies and controls to prevent financial fraud in your business
Congress set a 10-year statute of limitations for PPP fraud, so a loan funded in 2020 can be charged until 2030 and forgiveness is not a defense. This guide covers False Claims Act liability, the five eligibility tripwires still generating cases, and the six-year record-retention rule borrowers must meet.
A six-week playbook for moving business bank accounts—inventory every ACH, wire, and payroll rail first; seed the new account to dodge Regulation CC holds; move payroll last with a prenote; and run both accounts in parallel with daily reconciliation before closing.
IRS Letter 6042C verifies a specific business return; Letter 5263C verifies the entity itself on file from Form SS-4, and both carry a 30-day response window that, if missed, stalls your returns, refunds, and overpayment applications. This guide explains how thieves obtain an EIN, the tax and non-tax red flags that signal fraud, exactly what to fax back in each case, when Form 8822-B is required within 60 days of a responsible-party change, and a monthly-quarterly-annual monitoring routine that catches misuse early.
ASC 606 treats a right of return as variable consideration, so an $80,000 sales month with a 9% historical return rate is $72,800 of net revenue, a $7,200 refund liability, and a recoverable-inventory asset — not $80,000 booked as final. This guide shows how to build a category-weighted reserve from 12 months of your own data, flag the 5 to 10% of buyers who generate 30 to 40% of returns, and apply graduated account limits that stay documented and defensible.
Rhode Island's SB 3212, signed in June 2026, lets business owners remove fraudulent UCC filings through an administrative complaint, authorizes the Department of State to refuse suspicious filings, and requires misleading "annual report" solicitation letters to disclose that they are advertisements. The same defenses — quarterly UCC searches, entity-record checks, and fee verification — work in every state.
AI-generated fake receipts rose from 0% to 70.8% of detected expense fraud in fourteen months, averaging $101 per claim, and small businesses can counter it by matching receipts to actual transaction records instead of judging document appearance.
A fidelity bond (employee dishonesty insurance) covers employee theft, forged checks, and payroll fraud that general liability and property policies exclude, and it's legally required for anyone handling a 401(k) plan's assets under ERISA.
Nacha's Phase 2 ACH fraud monitoring rule took effect June 19, 2026, requiring nearly every business that originates ACH payments to run a documented, risk-based fraud monitoring process covering account ownership verification, change monitoring, anomaly detection, and audit trails.
The FTC has filed 13 "AI-washing" enforcement cases since September 2024, including a May 2026 action against marketing firms that sold small businesses a fake "AI-powered" listening tool for $930,000 in penalties — here's a vetting checklist before you buy any AI-branded product.
Deepfake fraud cost Arup $25.6 million in one faked video call, and voice cloning now needs just three seconds of audio. This guide shows small businesses how callback verification, two-person approval for banking changes, and periodic vendor-file cleanup stop synthetic vendors, cloned executive voices, and doctored invoices.
U.S. retailers lost $90–112 billion to inventory shrinkage in the latest reporting cycle, an average shrink rate near 1.6% of sales. This guide shows small retailers how to book shrink in a dedicated expense account instead of burying it in COGS — with the exact journal entries, cycle-counting schedules, materiality thresholds, and the process fixes behind the ~70% of shrink that isn't theft.
ASC 606 permits revenue recognition on bill-and-hold arrangements only when four criteria are all met — a substantive reason for the delay, goods segregated for the customer, readiness for immediate transfer, and no seller right to redirect them. This guide walks through each test, a worked allocation example splitting goods revenue from a separate storage obligation, legitimate use cases, and the seller-initiated-delay red flag that draws SEC scrutiny.
