Fraud comes in many shapes and sizes— and it’s growing faster than ever.

EXECUTIVE SUMMARY

* CPAs ARE UNDER ATTACK for not doing enough in the war against fraud, and they are, at the same time, being asked to play an increasingly important role in the detection of fraud. Because CPAs are becoming more educated about the subject, success stories about their helping clients ferret out fraud are becoming more common.

* FRAUD AND WHITE-COLLAR CRIMES are typically committed by older, better-educated offenders. Estimates of the total cost of occupational fraud to the economy are that it equals 6% of the U.S. gross domestic product—over $400 billion. Small businesses experience fraud losses at a rate almost 100 times that of the largest ones.

* THE FIRST “CPAs” WERE SCRIBES in the pharaohs’ courts who were charged with fraud prevention and detection. Their role stayed much the same until the turn of the 20th century. Accrual basis accounting became more common and reporting issues became a top priority for the profession. Fraud detection was no longer the primary focus.

* IN THE 1980s THE ACCOUNTING PROFESSION began investing considerable resources in responding to the fraud problem. The National Commission on Fraudulent Financial Reporting (the Treadway commission) was formed and identified the “expectation gap.” The Committee of Sponsoring Organizations (COSO) issued a report calling for better internal control systems.

* THE PUBLIC OVERSIGHT BOARD in a special report, In the Public Interest, concluded that “the public looks to the independent auditor to detect fraud, and it is the auditor’s responsibility to do so.” These activities culminated in the AICPA’s adopting Statement on Auditing Standards (SAS) no. 82, Consideration of Fraud in a Financial Statement Audit, which confirmed the profession’s commitment to detecting fraud.

JOSEPH T. WELLS, CPA, CFE, is founder and chairman of the Association of Certified Fraud Examiners, Austin, Texas. His e-mail address is: joe@cfenet.com .


Fraud comes in many shapes and sizes— and it’s growing faster than ever.
By Joseph T. Wells
October 2000

Today CPAs are under attack for not doing enough in the war against fraud. For confirmation, look at these news stories: “Last year, a Big Five accounting firm agreed to pay $335 million for failing to detect a half-billion-dollar revenue overstatement during an audit” and “A Denver lending company recently sued its auditors for allegedly failing to detect a $9 million embezzlement committed by the lender’s own president and chief executive officer.”

IN THE BEGINNING

It’s said that accountants’ predecessors were the scribes of ancient Egypt, who kept the pharaohs’ books. They inventoried grain, gold and other assets. Unfortunately, some fell victim to temptation and stole from their leader, as did other employees of the king. The solution was to have two scribes independently record each transaction (the first internal control). As long as the scribes’ totals agreed exactly, there was no problem. But if the totals were materially different, both scribes would be put to death. That proved to be a great incentive for them to carefully check all the numbers and make sure the help wasn’t stealing. In fact, fraud prevention and detection became the royal accountants’ main duty.

But these don’t tell the whole story. CPAs detected countless financial statement frauds, embezzlements and tax offenses before they became serious problems. Take these examples: In one instance a New Jersey CPA helped his client avoid a loss of $2.4 million (and a probable criminal indictment) by advising him not to invest in an illegal tax shelter and, in another, during a review and compilation engagement for a small client, a Nebraska CPA discovered the bookkeeper had embezzled $420,000.

Because CPAs are becoming more educated about the subject of fraud, success stories such as the above are growing more common. It’s a good thing, too, because some experts say changing demographics have led to more white-collar crime. Criminologist Gil Geis, a former member of the President’s Crime Council, says there’s a correlation between crime and age: “Younger people—especially males—are likely to commit more traditional crimes such as robbery, larceny and assault. Conversely, fraud and white-collar crimes are typically committed by older, better-educated offenders.” Our society as a whole is getting older, and young and old alike are getting more sophisticated. On top of that, the use of computers and technology to aid in the commission of crimes has become widespread.

Most CPAs have had little or no antifraud training, so educating them has become critical. This article, the first of a new series on fraud detection, is meant to be a part of that effort. In future issues, we will look at different aspects of fraud methodically—what it is, who commits it, how they do it and how CPAs can respond.
Figures and Facts About
Occupational Fraud

* Small businesses experience fraud losses at a rate of nearly 100 times that of the largest ones.
* Occupational frauds fall into three categories: asset misappropriation, corruption and fraudulent financial statements.
* Asset misappropriations account for more than 80% of cases, but they are the least expensive of the three fraud categories.
* Fraudulent financial statements, which account for less than 4% of fraud litigation, are the most costly occupational frauds.
* Real estate financing has the highest fraud losses; education, the lowest.
* A direct link exists between the age, sex, education and position of the perpetrator and the amount lost. The highest median losses occur with older male executives who are senior officials of their organizations. The smallest losses are with high-school graduates who have been with a company for less than a year.

Source: The Association of Certified Fraud Examiners, Report to the Nation on Occupational Fraud and Abuse, a 1996 survey of 1,523 cases of fraud ranging from $22 to $1.5 billion.

HOW TIMES HAVE CHANGED

From the time of the ancient pharaohs until the turn of the 20th century, auditors were responsible for fraud prevention and detection. In the original edition of Robert H. Montgomery’s classic textbook, Auditing Theory and Practice (1912), the author stated that in “what might be called the formative days of auditing,” students were taught that the primary purposes of an audit were “the detection or prevention of fraud” and “the detection or prevention of errors.” However, later textbooks and accounting theory took a different tack, largely out of necessity. Huge conglomerates had formed and financial transactions became so numerous they could not all be examined. Accrual basis accounting became common and, as a result, reporting issues became a top priority for the profession. Vouching each transaction from “cradle to grave”—which catches and prevents many frauds—was discontinued. Fraud detection or prevention was relegated to a secondary role.

It didn’t take crooks long to take advantage of this new environment; the 20th century has been littered with spectacular financial frauds and embezzlements. Some became famous—the McKesson & Robbins scandal, the Salad Oil swindle, the Equity Funding scam, the Savings and Loan frauds. And one question became a refrain: “Where were the auditors?”

THE TIMES, THEY ARE A’CHANGIN’

In the 1980s the accounting profession began investing considerable resources in responding to the fraud problem. In 1987 the National Commission on Fraudulent Financial Reporting (the Treadway commission) was formed to study the issues. In 1992, the Committee of Sponsoring Organizations (COSO) issued a report calling for better internal control systems to help management meet its goals. The Public Oversight Board in a special report, In the Public Interest, concluded that “the public looks to the independent auditor to detect fraud, and it is the auditor’s responsibility to do so.” The profession engaged in several other initiatives that, in 1997, led the AICPA to issue Statement on Auditing Standards (SAS) no. 82, Consideration of Fraud in a Financial Statement Audi t.” This SAS confirmed the profession’s commitment to detecting fraud.

BY ANY OTHER NAME

Fraud is trickery that falls into two basic categories. Internal fraud is committed by employees and officers of organizations. External fraud is committed by organizations against individuals, by individuals against organizations, by organizations against organizations and by individuals against individuals. For example, an insurance company executive filing a false report with a regulatory authority is committing internal fraud. But a customer of the same insurance company filing a phony accident claim is involved in external fraud. An elderly person who falls victim to a telemarketing scam is caught in an external fraud.

Although both types of fraud are of concern, the CPA normally will find internal fraud more common. Another term to describe it is occupational fraud and abuse. Because the scope is so broad, occupational fraud includes such common violations as asset misappropriations, corruption, fraudulent financial statements, pilferage and petty theft, false overtime, using company property for personal benefit and payroll and sick-time abuses. The term also covers all employees—from the boardroom to the mailroom.

THE STAGGERING COST OF OCCUPATIONAL FRAUD

Determining the actual cost of occupational fraud and abuse may be difficult, if not impossible. That’s because many frauds remain undiscovered and unreported. That should come as no surprise: Most companies, given an alternative, will quietly discharge offenders without reporting the offense to the authorities. Estimates of the total cost of all forms of occupational fraud to the economy are equal to about 6% of the U.S. gross domestic product—more than $400 billion. There are no federal, state or local government figures published on the cost of these crimes.

What is the significance of these numbers to a CPA? It depends on the kind of practice you have. If you primarily serve small businesses, your clients statistically are most likely to be damaged by asset misappropriation. If your clients are large, the greatest risk is fraudulent financial statements. And both large and small businesses run the risk of corruption in which an employee conspires with an outsider to defraud the company. With the knowledge that certain types of fraud prevail in companies of particular size, the CPA is better equipped to look for and find it.

In the following months—in actual case studies—we will examine in detail the three most common methods by which employees commit occupational frauds. And also try to answer the thorny question, Why do “ordinary” people commit occupational fraud?

----------------------------------------
Crazy Eddie and the $120 Million Ripoff

“I’m Crazy Eddie!” a goggle-eyed man screamed from the television set. “My prices are I-N-S-A-N-E!”

If you were anywhere near the East Coast in the 1980s, you undoubtedly saw those TV commercials. The raucous ads saturated the airwaves in the tri-state area and helped Crazy Eddie’s quickly become the dominant consumer electronics retailer in New York, New Jersey and Connecticut.

As it turned out, “Crazy” Eddie Antar, who was behind one of the twentieth century’s most infamous financial statement frauds, wasn’t crazy at all—just crooked. Indeed, the face on the tube wasn’t even his (it belonged to an actor). The real Eddie Antar didn’t have time for acting. He and members of his family were too busy engineering a $120 million rip-off. Much of the ill-gotten loot was placed in secret overseas bank accounts. Once discovered, Antar spent several years on the lam and another several behind bars. According to a senior SEC official, “This may not be the biggest [financial statement] fraud of all time, but for outrageousness, it is going to be very hard to beat.” Even though the fraud is more than a decade old, it provides vivid examples of how these crimes can be pulled off and how auditors can be deceived.

FINANCIAL STATEMENT FRAUD SCHEMES

There are numerous ways to classify financial statement frauds. Our research divided them into five principal, but related, types. One of the most outrageous aspects of the Crazy Eddie’s fraud is that he used all five methods. This is how he did it.

Fictitious revenues. The most common way companies create fictitious revenues is to dummy up sales that did not occur. The accounting transaction created is a credit to sales with an offsetting debit to accounts receivable, which boosts both assets and income. In the Crazy Eddie’s case, the audit trail was easy to fake. Antar’s underlings prepared phony invoices showing merchandise sales. Three major suppliers, beholden to Crazy Eddie’s for large volumes of business, cooperated. When auditors attempted to confirm some of these receivables, the vendors would—at Antar’s behest—lie. Obviously, with such a conspiracy, it would have been difficult—if not impossible—for the auditors to easily uncover such a scheme.

Fraudulent asset valuations. Although any asset can be fraudulently valued, the most frequent manipulations occur in inventory. In the Crazy Eddie’s fraud, Antar overvalued inventory by $80 million, and employed some pretty outrageous tricks to get there. He and his conspirators “borrowed” merchandise from suppliers to boost the ending inventory count. These were the same suppliers who confirmed Crazy Eddie’s phony receivables. Eddie convinced the suppliers to simply ship merchandise to the Crazy Eddie’s stores, and hold the billing until after the end of the accounting period. They also shipped stock from one store to another so it could be double-counted. And, most outrageous of all, they got into the auditors’ desk and altered inventory count sheets in the workpapers to increase the numbers.

Timing differences. Another way companies overstate assets and income is by taking advantage of the accounting cutoff period to either boost sales and/or reduce liabilities and expenses. Antar routinely told his stores to hold the books open past the end of an accounting period to falsely inflate sales revenues. Conversely, as detailed below, the liabilities for any given period were normally not recorded until the next period.

Concealed liabilities and expenses. Unfortunately for the CPA, it is all too easy for a client to conceal liabilities. After all, it is easier to audit something that is there rather than something that isn’t. In the Crazy Eddie’s case, Sam E. Antar, the CFO (and Eddie’s nephew), regularly stashed unpaid bills in his desk. The liabilities would be either entered after the yearend or held for long periods without being recorded. As a result, Crazy Eddie’s never did know what it really owed, and neither did the auditors.

Improper disclosures. Generally accepted accounting principles (GAAP) require adequate disclosure in the financial statements. Any material fact not covered in the financials should be disclosed in accompanying footnotes. Sam Antar—a former CPA and auditor—managed to change accounting methods simply by altering two words. In one year, the footnotes stated that certain income was recognized when received (cash basis). The following year, Sam removed “received” and substituted earned (accrual basis). The deception went unnoticed by the auditors, and it had the intended effect of boosting income. A careful review of the footnotes from year to year would normally detect such a simple—but in this case, effective—scheme.

PAINFUL LESSONS

Fortunately for those of us in the accounting profession, the Crazy Eddie’s case is an aberration. But it does serve to illustrate nearly every trick in the book. It also is a cautionary tale. Auditors did not detect the fraud. The scheme was uncovered when one of Eddie’s disgruntled relatives informed the SEC. Recognizing that hindsight is 20/20, there are some fundamental lessons to be learned.

Know your client. Eddie Antar started young. By the time he was 21, Eddie had already developed a reputation in the retail industry for saying anything to make a sale; some considered him an early master of the “bait and switch” technique. Had the auditors invested the time and expense to investigate Eddie before accepting him as a client, they perhaps would have decided against conducting the Crazy Eddie’s audit. In short, they would have found that Eddie Antar was very, very risky.

Assign proper personnel. The field auditors for Crazy Eddie’s were, according to Sam Antar, young and inexperienced. This is the nature of the audit business—field work typically is assigned to less experienced personnel. Selecting the right auditors for the job, though, is critical in high-risk engagements. Less experienced personnel may be satisfactory in low-risk environments, but detecting the signs of fraud requires maturity and judgment. Therefore senior auditors, fraud examiners and/or antifraud specialists should be considered.

Be careful in inventory observations. In any merchandising concern, inventory is usually the largest single asset. And experience has shown it is the asset of choice in financial fraud cases. In the Crazy Eddie’s case, the auditors inadvertently may have contributed to the fraud by the way the inventory observations were conducted. Rather than climb over boxes in the warehouse, the auditors asked employees to assist them. Crooked employees volunteered. An employee would stand on top of a stack of television sets, for example, and call down the count to the auditors. If there were 10 sets, the worker would claim there were 25. Repeated many times, this clever trick helped to greatly increase the inventory count. The message here is obvious: If you’re supposed to verify the inventory count, then you must observe it.

Provide appropriate security to documents and computers. Crazy Eddie’s auditors were provided a company office during their examination. They had a key to lock the desk—which they kept in a box of paperclips on top of the desk in full view. After the auditors left for the day, Eddie’s cohorts would unlock the desk, increase the inventory counts on the workpapers and photocopy the altered records. Were the auditors stupid? No, just too trusting. After all, no one wants to think the client is a crook. But it happens all too often. That’s why the profession requires auditors to be skeptical.

Try to understand the relationship between the client and its principal suppliers. Crazy Eddie’s bought most of its electronics from one of three wholesalers. All three were in on the scheme to inflate Crazy Eddie’s assets. Did the suppliers know they were helping Eddie cook the books? They may have figured it out, but it’s doubtful they would have asked questions. The reason these suppliers cooperated is simple—Eddie engaged in economic extortion. If they didn’t help him with his schemes, Eddie would change suppliers. This provided them with a significant incentive to cooperate. Perhaps if the auditors had known the extent to which the suppliers were dependent on Eddie, they would have subjected those relationships to closer audit scrutiny. Admittedly, this may be difficult to do. But if the supplier ultimately is material to the financial statements, the auditor may even want to consider visiting the vendor’s operation to further assess risk. Auditors should document any such visits in the workpapers.

Consider extra risks associated with closely held businesses. Every major player in the Crazy Eddie’s case was related to Eddie Antar—and they made up the board of directors. This was a case of family conspiracy and an extreme example of the kind of damage that can be done to a closely held business when its board consists entirely of insiders who also are company officers. The familial relationship becomes important in assessing risk. There is certainly nothing wrong with family- owned and operated enterprises; they are a strong part of our economic base. But the auditor should recognize an obvious fact about human behavior in the risk equation: It is certainly easier to conspire with a family member than with someone unrelated.

Be wary of businesses that buck industry trends. While other electronic retailers were struggling to stay even, Crazy Eddie’s was enjoying double-digit growth. Eddie Antar had people believing those I-N-S-A-N-E commercials were responsible. But now we really know why Eddie was so successful—he was a fake. In other instances of financial statement chicanery, bucking industry trends has been a big red flag, too. The auditor should ask herself or himself, “In today’s competitive international business environment, why is this client doing so much better than everyone else?” If you can’t answer that question to your satisfaction, keep digging. There could be a problem.

The failure to detect Crazy Eddie’s large-scale fraud spawned seemingly endless lawsuits against those involved—some spanning a decade or more. The auditors were sued for malpractice; the principals were sued for fraud. Whatever money was made illegally is long gone—the bones of the company have been picked clean through litigation.

Antar and several of his family members ended up with criminal records. Only Eddie served time—eight years. Ironically, he now clerks in an electronics store. Other family members fared better. Relatives in on the conspiracy all received probated sentences. Both Eddie and his conspirators have millions of dollars in civil judgments against them. In sum: Other than the painful lessons learned, nothing positive for Antar and his cohorts came out of the Crazy Eddie’s case.