#fraud-prevention
Fraud Prevention
Proactive strategies and controls to prevent financial fraud in your business
AI-Generated Fake Receipts Now Drive Most Expense Fraud: A Small Business Guide
AI-generated receipts jumped from 0% to 70.8% of fraud flags between March 2025 and May 2026, per AppZen data covering 1,471 fake receipts across 174 companies — and the average claim dropped to $101 as fraudsters shifted from a few large fakes to many small ones under auto-approval thresholds.
Church Fund Accounting: How to Manage Restricted and Unrestricted Funds
An estimated $86 billion is lost to fraud inside churches worldwide each year, and most of it starts with one bookkeeping mistake — treating restricted and unrestricted funds as one pool. This guide explains how FASB ASC 958 classifies donor-restricted gifts, the three errors that get church treasurers in trouble, and the monthly habits that keep ministry books compliant and transparent.
DOJ's PPP Fraud Dragnet: Why AI Data Mining Is Reviving False Claims Act Cases in 2026
DOJ's Civil Division is using AI data-mining relators to flag 2020 PPP loans for False Claims Act violations under the SBA affiliation rule, with the six-year statute of limitations starting to expire in April and May 2026 and real fraud exposure running a full ten years.
GAO Report: SBA Still Hasn't Fixed 14 of Its 17 Flagged Problems — What It Means If You're Relying on an SBA Loan or Portal
GAO's June 2026 follow-up (GAO-26-108956) finds SBA has implemented only 3 of 17 priority recommendations, leaving 14 open — including fraud-control gaps that produced ~2 million unusable COVID-EIDL fraud referrals and a Unified Certification Platform lacking basic risk and cybersecurity plans. Here's what that means for loan and certification applicants, and why airtight records are your best defense.
Nacha Raises the Same Day ACH Limit to $10 Million: What It Means for Small Businesses
Nacha will raise the Same Day ACH per-payment limit from $1 million to $10 million on September 17, 2027, matching RTP and FedNow. Here's how the change affects small-business payments, why business accounts lack Regulation E fraud protections, and five controls to put in place before the new ceiling arrives.
PCAOB Bars Auditor Jennifer Crofoot Over Skipped Engagement Quality Reviews: What It Teaches You About Vetting an Audit Firm
In December 2025 the PCAOB barred CPA Jennifer Crofoot for at least three years and fined Fruci & Associates $50,000 after four public-company audits were released without the mandatory engagement quality review under AS 1220. Here is what the second-reviewer requirement actually protects against, and five concrete questions to ask before relying on any firm's audit opinion.
PCAOB Bars Zwick CPA Over Fabricated Genie Energy Workpapers: What Audit Quality Failures Mean for Small Businesses
The PCAOB revoked Zwick CPA's registration and fined the firm $50,000 after finding its 2022 Genie Energy audit relied on the predecessor auditor's recycled workpapers with swapped names and fabricated documentation. With 61% aggregate deficiency rates at triennially inspected firms, here's how small businesses can vet the audits they rely on — and keep their own books diligence-ready.
FTC Bans Air AI From Selling Business Opportunities: What the $18M AI-Washing Case Means for Buyers
The FTC's March 2026 settlement permanently bans Air AI and its owners from marketing business opportunities after buyers lost up to $250,000 on exaggerated AI earnings claims. Here's what the $18 million judgment covers, how the Business Opportunity Rule's seven-day disclosure and Earnings Claim Statement protect buyers, and a practical checklist for vetting any AI-powered business pitch.
IRS Contractor Data Security Failures: What the 2026 TIGTA Report Found — and How to Protect Your Tax Data
A 2026 TIGTA audit found 1,375 unauthorized entries into restricted taxpayer-document areas and critical vulnerabilities left unpatched an average of 223 days at IRS scanning contractors. Here is what the watchdog found, how the IRS responded, and the concrete steps — IP PIN enrollment, early filing, e-filing — that reduce your exposure.
North Korean 'Laptop Farm' Fraud: How Fake Remote Hires Infiltrated 100+ U.S. Companies — and the Red Flags to Check
Two U.S. nationals were sentenced to 108 and 92 months in federal prison for running a "laptop farm" that let North Korean IT workers pose as remote hires at more than 100 U.S. companies, funneling over $5 million to the regime. This guide explains how the scheme worked, why small businesses are prime targets, and the specific red flags — last-minute shipping-address changes, mismatched interview identities, unusual payment requests — to check before your next remote hire.
Shadow AI on the Corporate Card: The Spend Category Your Books Are Missing
Shadow AI usage has grown 156% since 2023, and unsanctioned AI tools sit on company cards an average of 400+ days before detection. A practical guide for small businesses on finding unapproved ChatGPT, Jasper, and Perplexity charges, plus a five-step quarterly AI spend audit.
Falco v. Intuit: What the Credit Karma Money Lawsuit Reveals About Fraud Protection for Business Accounts
A June 2026 class action alleges Intuit and Credit Karma failed to investigate unauthorized withdrawals within EFTA deadlines. Regulation E caps consumer fraud liability at $50 and requires provisional credit within 10 business days — but business accounts get none of those protections, a gap every freelancer banking at a neobank should understand.