fraud prevention
UK Fraud Home About Fraud Types of Fraud Case Studies Fraud Alerts Fraud News Fraud Prevention Fraud Policies Risks of Fraud Reporting Fraud Fraud Related Links
Asset Risks
Cash Risks
Contractor Risks
Document Risks
Payroll Risks
Purchasing Risks
RISKS ASSOCIATED WITH PURCHASING
Several risks are associated with the operation of purchasing systems. These range from the false input of invoices to the diversion of payments and misappropriation of purchases. This section sets out some examples of controls which should be put in place to reduce the risk of fraud in this area:

Fraud type: Unauthorised use of purchasing systems in order to misappropriate goods or use services for personal gain
Suggested controls: Use sequentially numbered purchase order forms for all orders; carry out independent checks to show that purchase orders are valid and accounted for
Identify authorised signatories with authorisation limits
Before an invoice is certified for payment enure that it is authorised and matched to the original order
Keep stock records up to date so that stocks, stock usage and orders can be monitored
Separate the duties between those ordering, receiving goods, and approving and paying invoices. This separation of duties should be monitored at all times by a supervisory review
Ensure that amendments to standing data, such as the supplier records, are only made by authorised staff
Check the coding of invoices to ensure that the correct budget is debited
Budget holders should check items of expenditure charged against their budgets.


Fraud type: Short deliveries of goods or services may be accepted as a result of collusion
Suggested controls: Check stock records to confirm that deliveries have been accounted for
Do not pay for goods without confirming receipt


Fraud type: Accepting unsolicited goods or expanded orders as a result of fraudulent acceptance of attractions, such as free gifts
Suggested controls: Payment for goods should only be made after confirming that goods were properly ordered and authorised.
Sponsored by Celare - Information Security Specialists