nowhere to hide: detecting and investigating · pdf filenowhere to hide: detecting and...

96
Nowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 | 2:00pm – 3:15pm | 1.5 CPE Sara Jantz, Director of Accounting, Sedgwick County, KS Karin Smith, Partner, Heinfeld, Meech & Co., P.C. Daniel Porter, Legislative Investigative Auditor, Comptroller of the Treasury, State of Tennessee

Upload: dinhkhanh

Post on 13-Mar-2018

214 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Nowhere to Hide: Detecting and Investigating Fraud

Tuesday May 24, 2016 | 2:00pm – 3:15pm | 1.5 CPE

Sara Jantz, Director of Accounting, Sedgwick County, KS

Karin Smith, Partner, Heinfeld, Meech & Co., P.C.

Daniel Porter, Legislative Investigative Auditor, Comptroller of the Treasury, State of Tennessee

Page 2: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Session  Review  

Fraud  -­‐  Facts  and  Figures    

Conduc5ng  a  Risk  Assessment  

Conduc5ng    Effec5ve  Interviews  

Page 3: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

FRAUD  FACTS  AND  FIGURES  

Report  to  the  Na5ons  on  Occupa5onal  Fraud  and  Abuse:  2016  Global  Fraud  Study      ©Associa5on  of  Cer5fied  Fraud  Examiners,  Inc.    www.acfe.com    

Page 4: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Types  of  Fraud  

Page 5: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Fraud  Detec5on  

Page 6: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Control  Weaknesses  

Page 7: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Red  Flags  

Page 8: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

The  Fraud  Triangle  

Page 9: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Pressure/Incen5ve  

Living  beyond  their  means   Overwhelming  desire  for  personal  gain  

High  personal  debt   Close  associa5on  with  customers  

Feeling  pay  not  commensurate  with  

responsibility  Wheeler-­‐dealer  aVtude  

Strong  challenge  to  beat  the  system   Excessive  gambling  habits  

Undue  family  or  peer  pressure  

No  recogni5on  for  job  performance  

Page 10: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Opportunity  Placing  too  much  trust  in  key  

employees  Lack  of  proper  procedures  for  authoriza5on  of  transac5ons  

Inadequate  disclosures  of  personal  investments  and  

incomes  

No  separa5on  of  authoriza5on  of  transac5ons  from  custody  of  

related  assets  

Lack  of  independent  checks  on  performance   Inadequate  a[en5on  to  details  

No  separa5on  of  custody  of  assets  from  the  accoun5ng  for  

those  assets  

No  separa5on  of  du5es  between  accoun5ng  func5ons  

Lack  of  clear  lines  of  authority  and  responsibility  

Department  that  is  not  frequently  reviewed  by  internal  

auditors  

Percep&on  of  detec&on  is  biggest  deterrent  to  fraud  

Page 11: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Ra5onaliza5on  

Not  about  jus5fying  the\  that  has  already  

occurred  

Necessary  component  of  crime  before  it  takes  place  

Part  of  the  mo5va5on  for  the  crime  

A\er  criminal  act  has  taken  place,  

ra5onaliza5on  will  o\en  be  abandoned  

Once  line  is  crossed,  illegal  acts  become  

more  or  less  con5nuous  

Page 12: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

CONDUCTING  A  RISK  ASSESSMENT  

Page 13: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Fraud  Risk  Assessment  

Employee  

Physical    Controls  

Skimming   Check  Tampering  

Purchasing  and  Billing  

Payroll   Expenses  

Conflict  of  Interest  

Page 14: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Employee  Assessment  

Formal  Wri[en  Job  Descrip5ons  

Organiza5on  Chart  –  Lines  of  Responsibility  

Wri[en  Accoun5ng  Policies  and  Procedures  

Ethics  Statement  

Fraud  Policies  and  Procedures    

Page 15: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Physical  Controls  Assessment  

Restrict  Access  

Video  Recording  

Random  Audits  

Background  Checks  

Inves5gate  Accusa5ons    

Page 16: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Skimming  Schemes  Assessment  

Inventory  of  receiving  records  

Segrega5on  of  Du5es  

Uncollectable  accounts  

Review  of  Sales  

Review  of  Write-­‐offs  

Safeguarding  of  Cash  

Page 17: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Check  Tampering  Assessment  

Unused  Checks  

Posi5ve  Pay  

Check  Signers  Bank  Reconcilia5ons  

Voided  and  Missing  Checks  

Page 18: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Purchasing  and  Billing  Assessment  

Organiza5onal  Structure  

Vendor  Informa5on  

Procurement  Receiving  Reports  

Page 19: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Payroll  Assessment  

Segrega5on  of  Du5es  

Terminated  Employees  

Payroll  Register  =  GL   Payroll  Lists  

Deduc5ons  

Check  Stock  

Page 20: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Expenses  Assessment  

Expense  Accounts  

Employee  Reimbursements  

Receipts  

Review  

Page 21: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Conflict  of  Interest  Assessment  

Vendor  vs  Employee    

Prior  Employees   Disclosure  

Vendor  Agreement  

Vendor  Audits  

Page 22: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Karin  M.  Smith,  MBA,  SFO,  CFE  Heinfeld,  Meech  &  Co.,  P.C.  

602-­‐277-­‐9449  [email protected]  

Page 23: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Fraud Interviewing

GFOA Daniel Porter, CFE

2016

23

Page 24: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

This presentation represents the opinion of the presenter only. The materials presented herein do not necessarily reflect the opinions of the State of Tennessee or any part thereof, and have not been reviewed or approved by the State of Tennessee or any part thereof.

The information presented does not constitute legal advice and is based upon the presenter’s personal experience conducting interviews and interrogations.

Page 25: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

We all seek reliable information

(Parents, Managers, & Investigators)

My Purpose: To help you obtain

Reliable Information &

To help you recognize when you are Being Deceived (Plus have some fun)

25

Page 26: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Why Is Reliable Info Important to a Parent?

26

Page 27: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Why Is Reliable Info Important to a Hiring Manager?

27

Page 28: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Why Is Reliable Info Important to a Fraud Investigator?

I figure out what she did She tells me what she did

28

Page 29: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

What is an Interview?

“A conversation with an agenda”

What’s the Agenda?

“to Gather Information”

Page 30: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Data is Raw Facts

30  

Page 31: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Information is Processed Data Cash  Overage  /  Shortage  Report  

Dept.   2/1   2/2   2/3   Balance  Shoes   $(20.00)   $15.00   $0.00   $(5.00)  Men’s   $0.00   $5.00   $0.00   $0.00  Children’s   $2.25   $(2.00)   $0.00   $0.25  Jewelry   $0.00   $(67.58)   $0.00   $(67.58)  Fragrance   $(12.00)   $7.00   $19.00   $14.00  

$(58.33)  

31  

Page 32: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Establish Rapport Atmosphere of mutual trust and understanding

• If relaxed, you get better index of truthful behavior

• If trusted, more likely to get good information

You attract more flies with honey

than you do with vinegar

Page 33: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

• Polite • Make a connection

How Do I Establish Rapport?

Page 34: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Get Them Communicating Hi Steve, I’m Daniel and I’m with the State Comptroller’s Office. Can I call you Steve? Sure. Steve, we’re her to do an audit of the city’s records. You don’t mind helping us out do you? Not at all. Great. Now what is your title. I’m the Controller. We know you do a lot, so just tell us about what you do here. Well, I open the mail, pay the bills, reconcile bank statements, collect payments, handle the deposits, purchasing. Wow, that is a lot. Sounds like you don’t have much help around here. Nope, I pretty much do it all.

5

Page 35: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Talk a Little

Page 36: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Listen A Lot

Page 37: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Hearing & Listening Hearing

• Perceiving sounds

• Automatic

• “I hear you”

Listening • Processing sounds

• Requires effort

• “I’m listening”

Page 38: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

• Daydreaming

Conference Listening

Page 39: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

• Processing very little

Husband Listening

Page 40: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

• Not processing content.

• Too busy moving on to the next question

• Creating reply

Bone on Your Nose Listening

Page 41: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

• Processing • Understanding content • Interested • Encouraging

Active Listening

Page 42: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Don’t Ask Closed Questions

John Candy & Macaulay Culkin in Uncle Buck

Page 43: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

8 Closed Questions 1.  Where do you live? 2.  Do you have a house? 3.  Own or rent? 4.  What do you do for a living? 5.  Where’s your office? 6.  Where’s your wife? 7.  Do you have kids? 8.  Are you my dad’s brother?

20

seconds

Page 44: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

1 Open Question Tell me about yourself… Well…I had a little too much fun in college and decided I wanted to take a break. I moved to the city to drive a cab, but me and the boss got into it… I was married but she never appreciated that I was finding myself…

Page 45: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Closed Questions May Lead Your Subject

• Did you see the red car run the light? • Did you see the drunk guy get out of the driver’s seat?

• Do you think the red car was speeding? OR

• What did you see?

45

Page 46: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Closed Questions • Can be answered in a single word or a short phrase • Don’t require thought

Do you count the drawer? Yes. Do you put the cash in a deposit envelope? Yes. Does the head cashier verify your count? Yes.

5 words = 83% 1 word = 17%

9 words = 90% 1 word = 10%

7 words = 88% 1 word = 12%

Page 47: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Open Questions •  Likely to receive a long answer •  Requires thought •  Socratic method - asking questions to draw out answers What are your closing procedures? At 4:00 PM I count my drawer, then I put the cash in a deposit

envelope and give it to the head cashier to count while I go take a smoke break. When I come back she tells me if my count was right or not. If it was right, then I initial it and leave.

5 words = 10% 52 words = 90%

Page 48: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Open Questions • How does this work?

• What is the process?

• Who is involved in this process?

• What is your normal day like?

Page 49: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Information Seeking Predicates

• Tell me about…

• Help me understand…

• Explain how this works…

• Walk me through…

• Describe…

?  

Page 50: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

What if they lie? Former Rep. Anthony Weiner

50

Page 51: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

People lie to protect themselves from:

• Uncomfortable situations

51

Why Do We Lie?

Lies are the lubricant of coexistence

Page 52: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

People lie to protect themselves from:

• Embarrassment

52

Why Do We Lie?

Page 53: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

People lie to protect themselves from:

• Consequences

53

Why Do We Lie?

Page 54: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

• Lying causes stress in most people

Stress is the Result of Lying

Page 55: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Stress

Consequences Truth

Page 56: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Truthful No Stress

Page 57: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Lie

Page 58: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Lie Lie

Page 59: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Lie Lie Lie

Page 60: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

A.  Dig  B.  Analyze      C.  Get  Out  D.  Interview  E.  Interrogate        

Lie

Lie

Page 61: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Lying Causes Stress and You Communicate That Stress

Page 62: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

How We Communicate

62

7%

Verbal

38%

Paralinguistic

55%

Non-verbal Mehrabian, Albert (1971) “Silent Messages”

Page 63: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Note whether she changes color while you are giving her my message . .

note her every action and movement… exterior signs of this sort are the most

reliable couriers that there are, bringing news of what goes on inside

the heart.

Don Quixote to Sancho, 1605

Nonverbal Communication

Page 64: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Nonverbal Communication 55% Body Language  TRUTHFUL

• Upright • Open and relaxed • Lean forward on occasion • Casual posture changes • Others?

64

Page 65: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

 DECEPTIVE • Slouching/closed • Very rigid • Runner’s position • Lack of interest • Erratic and rapid posture changes • Others?

Nonverbal Communication 55% Body Language

65

Page 66: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Behavior is Universal

Page 67: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

That’s cool, but so what?

Page 68: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

TRUTHFUL TRUTHFUL TRUTHFUL

Observe the Behaviors that Accompany Truthful Responses

And Create an Index of Those Behaviors

Page 69: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

TRUTHFUL TRUTHFUL TRUTHFUL

Then Look for Changes in Response Behaviors

Page 70: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Paralinguistic Behavior Symptoms 38%

• Behavior that accompanies a response

70

Page 71: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Are You a Right Brain or Left Brain Person?

Page 72: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Do you see the dancer turning

clockwise or counter clockwise?

Page 73: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

COUNTER-CLOCKWISE LEFT

BRAIN FUNCTIONS

uses logic detail oriented

facts rule words and language math and science

knowing acknowledges reality based

forms strategies practical

CLOCKWISE RIGHT

BRAIN FUNCTIONS

uses feeling "big picture" oriented

imagination rules symbols and images philosophy & religion

believes appreciates

fantasy based presents possibilities

impetuous

Page 74: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Exercise Left = Recall Right = Create Up = Visual Down = Feelings

74

Page 75: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Visual Recall

Auditory

Recall

Feelings Recall

Visual Create

Auditory

Create

Feelings Create

Page 76: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

76

Page 77: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Joey’s Tell

77  

Page 78: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

What’s your hire date?

Page 79: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Latency in Response

• Do I Lie? • Do I tell the truth? • How much truth? • What do they know?

Page 80: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Gestures

Grooming Created job Head nod or shake Posture shifts Leg bounce Rocking

80

Page 81: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

John Edwards says yes but shakes head no…

Page 82: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Verbal Behavior Symptoms 7%

82

Page 83: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Qualifiers

 “If my memory serves me right,”  “I may be mistaken, but…”  “It is my understanding,”

 “As far as I know,”

 Protective Verbal Coating 83

Page 84: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

No. 1: Equivocation

• Avoiding the question • Not answering the question asked • Providing an answer they think you’ll accept

84

Page 85: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Stress

Consequences Truth

Equivocation

Page 86: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Sarah Palin equivocates Do you agree with the Bush doctrine?

YES or

NO

In what respect? His world view?

Page 87: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Don’t Accept the Wrong Answer

• Wrong does not mean INCORRECT

• The Wrong Answer does not answer YOUR Question

Page 88: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Getting the Right Answer

Page 89: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Getting the Right Answer

Page 90: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Getting the Right Answer Q: Did you approve her to use the credit card for personal purchases?

A: We’ve got a policy against that.

Q: I understand that, but did you approve her to use the credit card for personal purchases?

A: We shouldn’t be doing that.

Q: Okay, so you DID approve her to use the credit card for personal purchases?

A: Well, no I didn’t do that.

…So, no he didn’t.

…So, no he didn’t.

Page 91: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Reinforcers

I swear this is the truth I am a good Christian I’m going to heaven.

91

Page 92: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

What did you learn?

Verbal Non-verbal

Paralinguistic

Page 93: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Listen & Look For Clusters

55 % Nonverbal

Slouch

Closed

38 % Paralinguistic

Grooming

Eye shift

7 % Verbal

Equivocation

No contractions Equivocation

Eye shift

Would she be lying?

Shift

Page 94: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Don’t Try This on Your Significant Other

• 20/20

• 48 Hours

• Kids

94

Page 95: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Summary Obtain reliable information by: • Establishing rapport • Asking open-ended questions Observe and Listen for deceptive behaviors: • Non-verbal • Verbal • Paralinguistic

95

Page 96: Nowhere to Hide: Detecting and Investigating · PDF fileNowhere to Hide: Detecting and Investigating Fraud Tuesday May 24, 2016 ... Skimming ’ Check’ Tampering ... MBA, SFO, CFE

Questions? Karin Smith, MBA, SFO, CFE Partner Heinfeld, Meech & Co., P.C. CPAs and Business Consultants (602) 277-9449 [email protected] Daniel Porter, CFE Legislative Investigative Auditor Special Investigations Unit Comptroller of the Treasury State of Tennessee (615) 401-7905 [email protected]