On this page
Key takeaways
- Procurement fraud is deception in buying for personal or organizational gain, such as kickbacks, fake vendors, inflated invoices and bid rigging.
- The ACFE's 2024 study of 1,921 cases found a typical organization loses 5 percent of revenue to fraud and the median scheme ran for 12 months.
- Corruption appeared in 48 percent of the cases studied, with a median loss of 200,000 dollars.
- Tips caught 43 percent of cases, more than any other method, so a trusted reporting route is a control in itself.
- Red flags are patterns, not proof. Investigate quietly and involve audit or legal before you confront anyone.
Free PDF: Procurement fraud red flag checklist. Get it below
A buyer in a mid-sized company has handled the same electrical contractor for six years. The contractor wins most work above the quote threshold, at prices a little higher than the next bidder's would be if anyone asked them. The buyer drives a better car than a colleague of the same grade and never takes a full week of leave. Nothing here proves anything. Each fact has a harmless explanation. Together they are the pattern auditors learn to recognize.
The scenario is invented, and we describe it to make a point about method: fraud rarely announces itself. It shows up as a cluster of small oddities.
Procurement fraud is any deliberate deception in the buying process to gain an improper benefit, including taking bribes or kickbacks, creating fictitious vendors, inflating or duplicating invoices, rigging bids and splitting orders to avoid approval limits.
How big is the problem?
No study measures procurement fraud alone in a clean way, so we use the best broad evidence. The Association of Certified Fraud Examiners studied 1,921 real cases of occupational fraud in 138 countries between January 2022 and September 2023. A typical organization lost an estimated 5 percent of revenue to fraud each year. The median loss per case was 145,000 dollars, and 22 percent of cases cost 1 million dollars or more. The median scheme lasted 12 months before being found.
Corruption, the family that includes bribery and kickbacks and sits closest to procurement, appeared in 48 percent of cases, with a median loss of 200,000 dollars. The ACFE does not publish a separate share for purchasing schemes in the pages we read, so we do not give one. Use the numbers as context for why controls matter, not as a prediction for your company.
What are the common schemes?
| Scheme | How it works | Where it shows up |
|---|---|---|
| Kickbacks and bribes | A supplier pays a buyer for orders or inflated prices | Same supplier wins repeatedly, price above market |
| Fictitious vendor | An insider sets up a fake supplier and approves its invoices | Vendor with a post box address, no website, matching staff details |
| Inflated or duplicate invoices | A real supplier bills more than delivered, or twice | Repeated amounts, round numbers, invoices just below limits |
| Bid rigging | Suppliers agree who wins, or a buyer shares information with one bidder | Bids that rotate winners, odd similarity between bids |
| Order splitting | A large purchase is cut into small ones to dodge approval | Several orders to one supplier just under a limit |
| Shell company pass-through | A related party adds a middleman and takes a margin | New supplier with links to an employee |
What red flags should you watch for?
Red flags fall into two groups. Neither proves fraud. Each tells you where to look.
Behavior of people
- An unusually close association with a supplier. The ACFE lists this among the common behavioral red flags.
- Living beyond apparent means, or sudden changes in lifestyle.
- Refusing to take leave or to share duties.
- Pushing for one supplier, or against competition, without a clear reason.
- Becoming defensive when questions are asked about a purchase.
Patterns in the data and paperwork
- Approvals just under the limit. A cluster of purchases at 95 to 99 percent of an approval threshold.
- A supplier with no history of competitive bids that wins every time.
- Vendor details that match an employee: address, phone or bank account.
- Invoices with sequential numbers, no purchase order or no goods receipt. See our invoice approval and GRN guide for the controls that close this gap.
- Payments to a new supplier within days of onboarding.
- Unusual increases in price for a stable item.
Free PDF
Procurement fraud red flag checklist
A checklist of behavior and data red flags, five data tests a buyer or analyst can run, and a response guide for what to do first if you suspect fraud.
- Behavior red flags checklist
- Five data tests to run twice a year
- Scheme to red flag reference table
- First response steps for a suspicion
How is it detected?
The ACFE found tips were the most common detection method at 43 percent, ahead of any control or audit. That has a practical consequence. People who see something must know where to report it and trust that the report will be handled. A tip line that nobody believes is a tip line that stays silent. Data checks help too: matching vendor details to employee records, testing for splits just under limits and checking for duplicate payments are simple tests that a buyer or analyst can run.
What should you do first if you suspect fraud?
- Stop and write down what you saw. Date, documents, what looked wrong. Keep it factual.
- Do not confront the person. A warning lets evidence disappear.
- Tell the right people. Internal audit, compliance or legal, per your policy. If your company has none, tell the finance head.
- Preserve records. Do not delete or alter emails, files or system logs.
- Let the investigation run. Do not discuss it with colleagues.
How do you reduce the risk?
- Separate duties. The person who picks a supplier is not the person who approves payment.
- Rotate category ownership every few years, or have a second person review awards.
- Require conflict declarations at every sourcing event, as covered in procurement compliance.
- Test vendor master data against employee data twice a year.
- Publish a reporting route and show what happens to reports.
The procurement audit guide shows how internal audit tests these controls. Fraud also belongs on the register in procurement risk management, and the procurement strategy guide shows where all of it fits.
Sources
- ACFE, Occupational Fraud 2024: A Report to the Nations: 1,921 cases, 138 countries, January 2022 to September 2023. Figures quoted: 5 percent of revenue, 145,000 dollar median, 22 percent over 1 million dollars, 12 month median, 43 percent by tip, corruption 48 percent with 200,000 dollar median.
- The scheme table, red flag lists and response steps follow common fraud examiner practice and are our own summary. Nothing here is legal advice.
Frequently asked questions
What is procurement fraud?
It is any deliberate deception in buying to gain an improper benefit, including bribes and kickbacks, fictitious vendors, inflated or duplicate invoices, bid rigging and order splitting.
What are the most common procurement fraud schemes?
Common schemes are kickbacks and bribes, fictitious vendors, inflated or duplicate invoices, bid rigging, splitting orders to avoid approval limits and shell company pass-throughs.
What are red flags of procurement fraud?
Behavioral flags include a very close association with a supplier, living beyond means and refusing leave. Data flags include approvals just under limits, vendor details matching employees and invoices with no purchase order.
How is procurement fraud detected?
In the ACFE's 2024 study of 1,921 cases, tips detected 43 percent, the highest share. Data tests such as matching vendor and employee details and checking for splits also help.
What should you do if you suspect procurement fraud?
Write down what you saw, do not confront the person, report to internal audit, compliance or legal, preserve all records and let the investigation run.