How fraud actually happens in a SACCO, and the controls that stop it

Fraud in a SACCO rarely looks like fraud. It looks like a helpful loan officer, a teller covering for a colleague, or a borrower whose file is always complete. That is why it survives so long.

Where it actually happens

• Fictitious borrowers. Loans raised in the names of people who do not exist, or who never asked for the money.
• Loan diversion. Funds approved for one purpose, applied to another, often to repay the officer's own exposure elsewhere.
• Multiple borrowing concealed across branches so no single officer sees the full debt.
• Collateral fraud and restructuring manipulation. Valuations that never happened, and loans quietly rolled to hide arrears.
• Unauthorised write-offs. Losses removed from the book without a board decision.
• Teller and transaction reversals. Cash taken and the record adjusted after the member has left the counter.
• Dormant-account fraud, drawn from members who no longer check their statements.
• Payroll, procurement and related-party transactions, where the institution buys from its own staff.
• Mobile money fraud, the fastest-growing category, because the audit trail ends at a phone.

What makes an institution vulnerable

Fraud needs three things at once: pressure on the person, a rationalisation that makes it feel acceptable, and the opportunity. The first two are human and largely outside your control. The third is entirely yours, and it is where every serious control programme starts.

The controls that actually hold

Segregation of duties. The person who approves should not be the person who disburses, records or reconciles.

Maker-checker. Two sets of eyes on every transaction above a low threshold, enforced by the system rather than by good manners.

Authorisation limits that are documented, low enough to matter, and known to everyone who can approve.

A fraud-risk assessment done before the loss, not after, covering each scheme above and naming who could carry it out.

Evidence that is preserved, because a suspicion that cannot be documented is a suspicion you cannot act on.

The red flags worth watching

An officer who never takes leave. A branch whose cash reconciles only when one particular person is on duty. Borrowers who cannot be visited. Repayments received in cash and receipted late. Documents that arrive already signed.

None of these is proof. All of them are worth a question, and the questions cost nothing.

The finding

If your board cannot say today which of these controls exists in your institution and who owns it, that is the finding. The scorecard on this site will tell you where the gap sits in about fifteen minutes, and what your institution should be able to show an auditor.