Keeping the games clean
This all looks a bit smelly: how do I know it's legitimate – spotting the fraudsters and avoiding hacking
Introduction
Fraudsters assume that charities are soft targets and are easy to defraud. While they may be wrong about that and you may have good systems or processes in place, this perception means that you will continue to be targeted by organised criminals whose methods are constantly evolving and increasingly effective.
In addition, in this economic climate, while some charities are seeing more people turning to them for help than ever before, many are also seeing more 'one off' attempts at fraud by desperate individuals.
As ever these 'fraud' attacks can be in person or online but there are often some red flags or something which doesn't smell right and this session will try to explore how you can spot those and best protect your charity.
Sometimes the fraud is not directed at the charity but involves use of its name and reputation. This is much harder to spot but can be just as important to stamp out given the reputational harm such crimes might cause including the ability to undermine public confidence in charities and charitable giving.
What is a fraudster?
Fraud is defined as a criminal deception committed by a person who acts in a false and deceitful way. There are a string of offences under a variety of legislation (such as the Fraud Act 2006) and essentially the suspect will demonstrate some form of dishonesty and/or deception.
Fraudsters and the frauds they commit are constantly evolving and there are literally hundreds of different types of online fraud.
How to avoid hackers?
Make sure you do the basics as you would at home
- Update anti-viral software
- Do what your IT tells you to do!
- Read your organisations IT or fraud prevention policy carefully.
- Ensure passwords are complex
- Avoid public WI-FI when working
- Avoid clicking on suspicious attachments
The last is the real concern for all of us given the sophistication of what is called phishing attacks. Think about how your role works and in particular how you interact with other external organisations so that you are better prepared to spot requests that are out of the ordinary.
- Do you know what to do with a strange request and who to ask internally?
- Do you feel confident to challenge an email from someone (even one appearing to be from a manager in your organisation)?
- Is this email/request coming at a strange time/when you are rushed/suggesting you must act urgently?
- Does the tone/content/spelling in the email seem strange?
Is it all about hacking?
In BDO's 2023 Charity Fraud report, 50% of frauds were not online/hacking frauds but personal attacks by 'volunteers' and others, sometimes bad apples in an organisation.
As recently as late December last year members of a criminal gang were jailed after collecting hundreds of thousands of pounds from members of the public at supermarkets on the basis that it was going to Children in Need and other good causes. The leader of the gang lied to many of the charities involved and supermarkets about what they were doing often using threats towards staff of supermarkets when challenged to report them to 'head office.' They were caught and the gang are now serving time.
There is a risk that too much attention is focussed on online frauds and not enough on other frauds perpetrated by individuals you come into contact with as part of your job. The good news is that many of the top tips for preventing or spotting online frauds apply equally elsewhere.
Top Tips and questions for preventing / dealing with fraud
Prevention is always better than a cure. It costs far less to prevent a fraud than it does to pick up the pieces, investigate and remedy one which occurs. Here are our top tips for preventing and dealing with fraud.
- Take your time when dealing with financial matters (donations and transactions). Speed here is when mistakes can be made and is what fraudsters rely upon.
- Where possible contact people directly about any financial matter. Phone/Zoom/Teams is a hundred times better than relying on what is supposedly said in an email. If you are transferring money, phone to confirm details and encourage those sending you money to follow your own processes.
- Trust your instincts. Many of you are on the frontline dealing with numerous stakeholders, donors, lawyers, trustees. If something doesn't feel right or look right to you, it probably isn't.
- Act quickly when responding to a fraud. This will help to minimise the harm and maximise your options.
- Don't panic and follow your own internal procedure. Discovering a fraud can be a good thing because you can then do something about it and protect your charity. Do you know now who you need to inform if you suspect a fraud and who you might need to report to externally?
Key contact
Stephen Ross
Partner | London