Fraud Remains A Concern, But Here’s How SMEs Can Combat It
It’s unhappy to say, however fraud is an on a regular basis incidence in South Africa. Recent reports on the matter indicated that 66% of native companies expertise year-on-year will increase in fraud losses. Unsurprisingly, 77% of companies anticipate extra assaults to return. But fraud assaults don’t simply take the form of an e-mail from some fictitious Nigerian prince or the financial institution demanding you instantly log in on their one-time hyperlink to alter your passwords. Sometimes, it’s hidden in your personal corporate affairs.
“For a small corporate affairs, one fraudulent cost can do greater than create a monetary loss. It can take away cash put aside for inventory, salaries or a provider, and the ensuing disruption might be troublesome to soak up,” says Rendani Singo, Managing Director of MK Fraud Insights.
In this text, he highlights the significance of small companies understanding their digital fraud publicity and methods to cut back their dangers.
The Importance of Fraud Risk For Small Businesses
“A rising corporate affairs could depend on a small variety of people who find themselves anticipated to maneuver rapidly and make choices throughout a number of features, with out the layers of assessment accessible in a bigger organisation,” he notes. “South Africa’s digital fraud publicity makes these choices significantly essential.
“SABRIC’s 2025 Annual Crime Statistics information roughly R2,4 billion in shopper claims regarding digital banking crime throughout banking apps, Internet banking and cell banking channels. These are figures reported by taking part banks, not a measure of SME losses or a whole nationwide whole. They nonetheless present the dimensions of fraud affecting monetary channels that companies use daily.”
Singo reminds entrepreneurs that fraud doesn’t essentially begin with a classy technical assault. It could start with a reputable e-mail, a WhatsApp instruction or a false cost affirmation. “In my view, development deserves specific consideration: as soon as the founder is now not personally checking each cost, buyer adjustment or provider instruction, verification must develop alongside delegated authority,” he warns.
Fraud Readiness for SMEs
Fraud readiness is an organisation’s potential to know the place fraud might have an effect on it, decide whether or not its controls cowl these dangers, recognise suspicious exercise and reply earlier than an incident turns into a bigger corporate affairs drawback. “Awareness helps individuals recognise a risk. Readiness connects that recognition to a call, a accountable particular person and a workable response,” he explains.
Singo makes use of the next instance:
Consider a buyer who sends a cost affirmation after which urgently requests a refund. Staff could know that false confirmations exist, however the corporate affairs nonetheless wants a transparent rule about verifying cleared funds, authority to pause the refund and proof that the test occurred. “Assessing that management is one a part of readiness; administration additionally must know who acts if cash has already left the account,” Singo states.
“An investigation seeks to ascertain what occurred in a suspected incident. Readiness considerations how the corporate affairs prepares to forestall, detect and deal with such incidents. It doesn’t imply fraud is not possible. It means management has a defensible view of its publicity, the controls it depends upon, the individuals accountable and the gaps that deserve consideration.”
Fraud Readiness Is A Management Decision
When actively implementing fraud readiness measures, Singo encourages administration to begin with one transaction that issues to the corporate affairs, not with an in depth coverage train. The objective is to place protocols in place to make sure the best steps are taken when suspicious exercise arises.
“Take a cost to a longtime provider. The bill is real, the products had been acquired, after which an e-mail arrives saying the provider’s account particulars have modified,” he mentions one other instance. “Management ought to set up who could change these particulars, how the change is checked via a trusted channel, whether or not the identical particular person can replace the report and launch a cost, and who can authorise an exception.”
The subsequent step is to determine what wants to alter and the way administration will understand it has modified. “That might imply a callback utilizing a quantity already held on file, a separate assessment of the change and a report of the verification. Allocate an proprietor and a completion date, then assessment a pattern of subsequent adjustments to see whether or not the method is being adopted. Where a separate reviewer is unavailable, determine which funds should watch for unbiased affirmation fairly than permitting urgency to turn out to be the approval rule.”
Singo says that the goal is to prioritise the exposures that might most disrupt the corporate affairs, then work via them. “Fraud readiness turns into a administration self-discipline when dangers result in particular choices, house owners and checks.”
Four Points of Entry for Fraud in a Business
According to Singo, there are 4 factors of entry for fraud in a corporate affairs. These are the areas that have to be examined, however they shouldn’t be seen as the one areas to give attention to. Instead, it ought to be used as a framework that gives a place to begin.
1. The Supplier and Contractor Relationship
This contains fabricated invoices, impersonation, collusion and fraudulent adjustments to cost particulars.
2. Customer-facing Activity
This contains components corresponding to false proof of cost, abusive refunds or returns, and orders launched earlier than funds have cleared.
3. The Movement of Money and Assets inside the Business
This contains inserting transactions beneath the microscope, together with payroll, money, inventory and changes made with out correct authority.
4. People and Digital Access
This is who can act for the corporate affairs, change information, use an account or override a management, and whether or not that authority might be stolen or misused. No one ought to be the one particular person with entry.
Singo notes that these areas overlap. “A compromised worker mailbox can lend credibility to a false instruction, whereas somebody with reputable authority could approve the ensuing transaction. The sensible worth of the framework is in tracing how a request turns into an authorised motion and figuring out the place verification or accountability can fail,” he explains.
Misconceptions about Fraud in a Business
“One false impression about fraud is that it is just a priority for giant organisations or companies holding substantial quantities of money,” he says. “Another is that good relationships with staff and suppliers take away the necessity for checks. Trust issues, however an sincere worker might be deceived, and a trusted insider can intentionally misuse authority. Verification protects the corporate affairs and offers staff a transparent foundation for difficult an uncommon request.”
Singo notes {that a} significantly pricey false impression is {that a} safe checking account or accounting platform means the corporate affairs is protected. “The know-how can carry out as designed whereas somebody makes use of real authority to approve a cost primarily based on a false instruction. An annual audit, a fraud coverage or a once-off coaching session can be no substitute for checking whether or not essential controls function in day by day work.”
The ACFE’s Occupational Fraud 2026: A Report to the Nations identifies absent or overridden controls as recurring weaknesses in investigated instances. “That is world analysis about occupational fraud, dedicated towards an organisation by somebody working for it, not an estimate of South African SME’s losses.
“Fraud can be too simply assigned fully to finance or IT. Procurement, gross sales, human sources and operations all make choices that may create publicity. Management has to know how these choices join.
Steps To Reduce Fraud Risks
For a microbusiness, Singo recommends a number of non-negotiable practices. “Verify modified banking particulars utilizing contact info already recognized to be real, use distinctive passwords and multifactor authentication on e-mail, banking and different essential accounts, affirm that funds have cleared earlier than releasing items towards a cost or issuing a refund, and reconcile transactions commonly,” he explains. “An proprietor who delegates funds ought to assessment them towards supporting information. Where the proprietor does the whole lot, a periodic assessment by an exterior accountant, the place inexpensive, can assist; in the meantime, transaction alerts, financial institution limits and a deliberate verification step earlier than uncommon funds present sensible safeguards.”
Looking at bigger companies like a small enterprise, the subsequent precedence is readability about who could make and approve adjustments. “Separate provider upkeep from cost approval the place potential, set limits for refunds and changes, assessment uncommon transactions, and limit entry to what every function wants,” Singo says. “Remove entry promptly when somebody leaves. Staff want a transparent route for escalating suspicious directions and administration assist when a vital test delays a transaction.”
Singo says a medium-sized enterprise ought to map its important publicity throughout buyer, provider, cost and inside processes. “Management ought to determine the controls it depends on, check whether or not they function, assign duty and deadlines for weaknesses, and assessment exceptions because the corporate affairs adjustments. If full separation of duties stays impractical, doc who independently opinions the higher-risk exercise and the way typically.”
Every corporate affairs additionally wants a brief response plan: who can cease a cost, contact the financial institution instantly, safe a compromised account and protect the related information. “Readiness contains limiting additional loss when prevention fails.”
Singo remarks that the dimensions of the response ought to replicate the character and penalties of the chance. “Owners who need a structured start line can use MK Fraud Insights’ free Fraud Readiness Assessment. It tailors inquiries to the organisation and offers a personal Snapshot primarily based on the solutions submitted. It helps administration determine the place additional consideration could also be wanted; it doesn’t check proof, confirm controls or present an audit or assurance opinion. Detailed paid experiences and individually scoped advisory assist can be found for companies that have to take the work additional,” he concludes.
