Audit & Management Advisory Services

Fraud Prevention

As a Tufts University employee, you are responsible for ensuring funds, property and equipment are safeguarded from loss. One important underlying concept to be mindful of is the reality that fraud is possible in your organization. If you do not believe fraud is possible, you will not identify it even if it is clearly evident. Very often fraudulent acts are initially viewed as administrative errors because individuals cannot conceive of the existence of fraud particularly in organizations where there is a longtime affiliation with co-workers.

What is fraud?

Fraud is a deliberate act (or failure to act) with the intention of obtaining an unauthorized benefit by using deception or false statements or suppression of the truth or other unethical means, which are believed and relied upon by others. Depriving another person or the institution of a benefit to which he/she/it is entitled by using any of the means described above also constitutes fraud.

Fraud takes many forms. Some examples include: embezzlement, kickbacks, theft, fraudulent financial reporting, environmental crimes, bid rigging, computer-related crime, identity theft, credit card fraud, check fraud, fraudulent workers compensation claims, ghost employee schemes, expense report schemes, “dummy” vendors, unreported conflicts of interest, etc.

What makes fraudulent activity more likely to occur?

The risk of employee fraud occurring in an organization is contingent upon a combination of factors:

  • Motive – usually caused by personal financial or job performance pressures.
  • Opportunity – caused by poor or non-existent internal controls.
  • Rationalization – the mindset of the individual that results in justifying the fraud.

By removing one or more of the factors, the likelihood of fraudulent activity occurring is reduced.

Who is responsible for fraud prevention at Tufts University?

While AMAS is responsible for independently evaluating the adequacy of the existing systems of internal controls through analysis and testing, university management is responsible for establishing and maintaining adequate systems of internal controls designed to prevent or detect improper activities.

How can I decrease the risk of a fraud occurring in my organization?

There are two approaches to help reduce fraud risk: prevention and detection. The preferred approach is to prevent illegal and inappropriate acts from occurring in the first place.

The following procedures should be adopted to help reduce the risk of fraudulent activity occurring within your organization:

  • Establish a positive internal control environment. A genuine interest and concern related to implementing sound internal controls should be conveyed to all personnel. The major tenets of an internal control system include: (1) separation of duties; (2) physical safeguards over assets; (3) proper documentation; (4) proper authorizations; (5) adequate supervision; and (6) independent validation of transaction accuracy.
  • Identify university assets for which you have responsibility. Examples include: budgeted funds, supplies, computers, office and lab equipment, petty cash, and revenue collections.
  • Identify the risks associated with safeguarding these assets. Ask yourself: (1) How could they be improperly used or stolen? (2) If these assets were misused or stolen, how would I know? (3) What internal controls (policies and procedures and/or checks and balances) exist to prevent or detect any inappropriate use or loss of assets? (4) What additional controls are necessary to ensure that assets are adequately protected from loss?

How can I determine if our organization’s activities are governed by effective internal controls?

To schedule an assurance or advisory review, please reach out to us. Keep in mind that any new or existing internal controls should be reasonable in relation to the risk involved and costs to implement and administer them.

What role do internal auditors play in detecting and investigating suspected fraud?

Many of AMAS’ audit programs contain specific fraud detection procedures. One department member have been designated as a Certified Fraud Examiner by the Association of Certified Fraud Examiners. We are familiar with many aspects of white-collar crime and related audit detection techniques.

What if I suspect or observe suspected fraud at the University?

As a member of the Tufts community, you are expected to report a suspected fraud to the Executive Director of Audit & Management Advisory Services (AMAS). If the suspected fraud is initially reported to a supervisor, chairperson, director, dean, vice president, or other responsible person, that person is to report the instance to the Executive Director of AMAS. Suspected research misconduct should be reported to the Vice Provost for Research. Any theft of physical assets should be reported to Tufts Police at 617-627-6911. For further assistance, please visit our Contact Us page.

It is the policy of Tufts University that any person is free to lawfully disclose whatever information supports a reasonable belief of suspected employee misconduct. The University is committed to protecting employees from interference when they make such disclosures.

Situations may exist where members of our community feel uncomfortable discussing these matters with their colleagues or supervisors. As noted above, to assist with these particular situations, the University has selected EthicsPoint, Inc. to provide you with a simple, risk-free way to anonymously and confidentially report any activity that may involve unethical or otherwise inappropriate behavior in violation of Tufts University’s established policies and the Standards of Professional Conduct and Integrity.