ACFE Report to the Nations

See also: Fraud Tree | Occupational Fraud | Red Flags

Occupational Fraud 2024: A Report to the Nations
Publisher	Association of Certified Fraud Examiners (ACFE)
Cases analyzed	1,921
Countries/territories	138
Industry categories	22
Total losses (study sample)	>$3.1 billion
Estimated annual revenue lost to fraud	5%
Median loss per case	$1.7 million
Leading detection method	Tips (43%)
Publication cadence	Biennial

The ACFE Report to the Nations is the flagship biennial study of occupational fraud published by the Association of Certified Fraud Examiners (ACFE), and it is widely treated as the primary benchmark dataset in occupational-fraud research. Unlike self-report perception surveys or media-derived incident counts, the report is built directly from case data supplied by Certified Fraud Examiners (CFEs) who personally investigated each fraud, giving it a distinctive evidentiary grounding among the small handful of large-sample fraud studies published on a recurring schedule. This article summarizes the findings of the 2024 edition, Occupational Fraud 2024: A Report to the Nations,^[1] and situates it against three comparable benchmark surveys published by large professional-services firms — PwC's Global Economic Crime and Fraud Survey, KPMG's Global Profiles of the Fraudster, and EY's Global Forensic Data Analytics Survey — while addressing a common misconception about which firms publish this kind of study at all.

1 Methodology and Scope

The ACFE's 2024 edition analyzed 1,921 real cases of occupational fraud investigated between January 2022 and September 2023, drawn from 138 countries/territories and classified across 22 industry categories.^[1] "Occupational fraud" in ACFE usage refers specifically to fraud committed by an employee, manager, owner, or executive against the organization that employs them — as distinct from fraud committed by outsiders against the organization, or by the organization against outsiders (see Occupational Fraud for the full definitional discussion). Each case in the dataset was submitted by a CFE who directly investigated it, meaning the underlying data reflects confirmed, adjudicated, or internally substantiated fraud rather than suspected or self-reported incidents. This case-sourced methodology is the report's central methodological strength and its central limitation in the same breath: it produces unusually granular, verified case-level detail (loss amount, perpetrator characteristics, detection method, industry, scheme type) but is not a random sample of all fraud in the economy — it necessarily captures only fraud that was detected, investigated, and reported by a participating CFE, leaving undetected or unreported fraud outside the dataset by construction.

2 Headline Findings

The 2024 study's top-line statistics are the numbers most frequently cited across fraud-examination training, corporate compliance materials, and OSINT/forensic-accounting literature:

• Global occupational fraud losses across the study sample exceeded $3.1 billion.^[1]
• Organizations are estimated to lose approximately 5% of annual revenue to fraud.^[1]
• The median loss per case was approximately $1.7 million.^[1]

These figures are typically read alongside the report's breakdown by fraud category (see below), because the aggregate median loss obscures a sharp divergence between how often a scheme type occurs and how costly it is when it does.

3 Fraud Type: Frequency vs. Median Loss

The ACFE organizes occupational fraud into three categories under its long-standing Fraud Tree taxonomy: asset misappropriation, corruption, and financial statement fraud. The 2024 data shows an inverse relationship between how common each category is and how much it typically costs:

Fraud category	Share of cases	Median loss
Asset misappropriation	89%	$120,000
Corruption	48%	$200,000
Financial statement fraud	~5%	$766,000

(Percentages sum to more than 100% because a single case can involve more than one category.) Asset misappropriation — theft or misuse of an organization's resources, such as skimming, check tampering, or expense reimbursement fraud — is by far the most frequent scheme type, occurring in 89% of cases, but it also carries the lowest median loss of the three categories. Corruption schemes, including bribery, conflicts of interest, and illegal gratuities, appear in roughly half of cases with a moderately higher median loss. Financial statement fraud — the deliberate misstatement of an organization's financial reports, as seen in cases such as Enron and WorldCom — is the rarest category by far, appearing in only about 5% of cases, but is by a wide margin the most financially damaging, with a median loss more than six times that of asset misappropriation. This frequency/severity inversion is one of the report's most cited findings, because it implies that the schemes an organization is statistically most likely to encounter (asset misappropriation) are not the ones most likely to threaten its survival (financial statement fraud).

4 Detection Methods and the Role of Tips

Among all detection methods tracked by the ACFE, tips were the leading method by a wide margin, accounting for 43% of frauds detected — more than three times the rate of the next most common detection method.^[1] Tips typically originate from employees, but also from customers, vendors, competitors, and anonymous sources, frequently via a formal whistleblower hotline or reporting mechanism. This finding is consistent across multiple cycles of the ACFE study and is echoed independently in KPMG's fraudster-profile research (see below), which also finds whistleblower tips to be the single most effective detection mechanism, ahead of both internal and external audit. The persistence of this finding across independently conducted surveys is treated in the fraud-examination literature as strong evidence that formal audit procedures and technology-driven controls, while valuable, are not the primary way most real-world fraud actually comes to light — a theme directly relevant to the design of red flag monitoring programs and whistleblower policy.

5 Internal Controls Failure

The 2024 report also found that over half of frauds in the dataset were attributable to either a lack of internal controls or the override of internal controls that did exist.^[1] This finding reinforces a recurring theme across the fraud-examination and forensic-accounting literature: management override of controls is a persistent vulnerability precisely because senior employees with the authority to bypass ordinary safeguards are also the employees best positioned to conceal fraud from routine detection. The finding is consistent with material discussed in Occupational Fraud regarding the role of the fraud triangle's "opportunity" element, and with journal-entry-testing methodology developed specifically to detect control overrides at the point of highest risk — top-side, consolidation-level entries that bypass normal subledger processing.

6 Comparable Surveys: PwC, KPMG, and EY

The ACFE's Report to the Nations is the most granular case-level fraud study published on a recurring cycle, but it is not the only large-sample fraud benchmark survey. Three major professional-services firms publish comparable recurring studies, though each uses a materially different methodology, sample, and framing than the ACFE's case-sourced approach.

6.1 PwC — Global Economic Crime and Fraud Survey

PwC's Global Economic Crime and Fraud Survey (GECS) has run biennially for over 20 years and, unlike the ACFE's CFE-sourced case data, is an executive perception survey.^[2] The 2022 edition surveyed 1,296 executives across 53 countries and regions: 46% of participating organizations reported experiencing fraud, corruption, or other economic crime in the preceding 24 months, with total reported losses of roughly $42 billion across the sample. Cybercrime, customer fraud, and asset misappropriation were the most commonly reported crime types, and nearly 70% of fraud-experiencing organizations cited external or combined external-and-internal collusion as the most disruptive source of loss. The 2024 edition shifted emphasis toward cybercrime specifically, reporting it as both the most prevalent (44% incident rate) and most disruptive (40%) form of economic crime — reflecting the continued digitization of fraud discussed more broadly in the wiki's digital-forensics material.

6.2 KPMG — Global Profiles of the Fraudster

KPMG's Global Profiles of the Fraudster series takes a different angle than either the ACFE or PwC studies: rather than measuring loss totals or incident rates, it analyzes hundreds of actual fraud investigations conducted by KPMG member firms to build a statistical and behavioral profile of the typical occupational fraud perpetrator.^[3] Recent editions find the "typical" fraudster is male (in over 80% of cases), aged roughly 36 to 55, acting against his own employer, and holding a senior management or executive position with more than six years of tenure. Roughly 55% of cases involve collusion among two to five people — a materially higher collusion rate than a purely opportunistic, single-actor model of occupational fraud would predict. The most common fraud type identified is misappropriation of assets, occurring in approximately 52% of cases, broadly consistent with the ACFE's own finding that asset misappropriation is the most frequent scheme category. Primary motivation is financial gain or greed, with opportunism arising from weak controls as a secondary driver. As noted above, KPMG's research independently corroborates the ACFE's tip-detection finding: whistleblowers and tip-offs are identified as the single most effective detection mechanism, ahead of both internal and external audit.

6.3 EY — Global Forensic Data Analytics Survey

EY's Global Forensic Data Analytics Survey is narrower in focus than the other three studies: rather than measuring fraud incidence or perpetrator profiles directly, it examines how organizations use forensic data analytics (FDA) — including robotic process automation and artificial intelligence — to detect and manage fraud, bribery, and corruption risk.^[4] The survey has run biennially since 2014. Its 2018 edition, based on 745 executives across 19 countries, found 78% of respondents increasingly concerned about data protection and privacy compliance in connection with analytics deployment, 39% likely to adopt robotic process automation within a year, and 38% planning to adopt AI for compliance or forensic purposes. Respondents were broadly optimistic about analytics' investigative value — 88% and 87% cited improved risk assessment and improved detection within large datasets, respectively, as top perceived benefits. However, the survey's most frequently cited finding is a persistent capability gap: only 12–13% of respondents felt their organization had the right in-house forensic-data-analytics skills mix. This skills-gap finding is directly relevant to OSINT and forensic-accounting training, since it indicates that the limiting factor in modern fraud detection is often analyst capability and headcount rather than the availability of analytics tools themselves.

7 A Common Misconception: Deloitte and McKinsey

Because PwC, KPMG, and EY each publish a recurring, uniformly branded flagship fraud or forensic-analytics survey, it is a common assumption that the remaining two "Big Four"-adjacent firms — Deloitte and the consultancy McKinsey & Company — publish an equivalent single unified series. This is not accurate, and the distinction matters for anyone citing these firms' research.

Deloitte does not publish one unified "Global Forensic/Fraud Survey" comparable to PwC's GECS. Instead, Deloitte publishes multiple separately branded, regionally scoped surveys — for example, a Middle East Fraud Survey (2021 edition), India Corporate Fraud Perception Survey editions, and a CIS-region "Countering Corporate Fraud" survey — alongside general service-description material rather than one recurring flagship study with a consistent global sample and methodology. Common themes recur across these regional surveys nonetheless: rising fraud risk during and after the COVID-19 pandemic, a substantial share of organizations (41% in the Middle East survey) lacking a dedicated fraud risk management function, and increasing adoption of proactive forensic data analytics.

McKinsey similarly does not run a single recurring, uniformly branded fraud or risk report series. Its Risk & Resilience practice instead periodically publishes standalone insight articles on financial crime topics — for instance, "McKinsey on Risk, Issue 8" (Winter 2019, covering financial crime and anti-money-laundering), "Financial crime and fraud in the age of cybersecurity" (2019), and "A new approach to fighting fraud while enhancing customer experience" (November 2022) — rather than a single benchmark survey with a consistent methodology repeated on a fixed cadence.

The practical implication for an investigator or researcher citing fraud-benchmark statistics: PwC, KPMG, EY, and the ACFE can each be cited as a named, recurring flagship survey with a defined edition year and sample; "a Deloitte fraud survey" or "a McKinsey fraud report" should instead be cited as the specific regional or standalone publication in question, since no single "Deloitte Global Fraud Survey" or "McKinsey Fraud Report" series exists to point to.

8 Why the Benchmarks Diverge

Readers comparing figures across the ACFE, PwC, KPMG, and EY studies should note that the four surveys are not measuring the same thing, and their numbers should not be treated as directly interchangeable:

• The ACFE report is built from case-level data supplied by CFEs who personally investigated each confirmed fraud — a bottom-up, investigator-sourced dataset of substantiated occupational fraud only.
• PwC's GECS is a top-down executive perception survey capturing self-reported experience of economic crime broadly, including crimes committed by outsiders against the organization, not only occupational fraud by employees.
• KPMG's fraudster-profile research is drawn from KPMG's own case files and is oriented toward perpetrator demographics and behavior rather than aggregate loss statistics.
• EY's FDA survey measures organizational analytics adoption and capability, not fraud incidence or loss magnitude at all.

Despite these methodological differences, several findings recur independently across multiple surveys — most notably the primacy of tips/whistleblowers as a detection mechanism (ACFE and KPMG) and the centrality of internal-controls weaknesses to fraud opportunity (ACFE, KPMG, and Deloitte's regional surveys). Findings that appear consistently across independently constructed samples and methodologies are generally treated as more robust than any single survey's result in isolation.

9 Relevance to Investigation Practice

For a fraud examiner or OSINT investigator, the ACFE Report to the Nations functions as a baseline expectation-setting tool: it indicates which fraud category is statistically most likely to be encountered (asset misappropriation), which category poses the greatest financial risk if present (financial statement fraud), which detection channel is most likely to actually surface a scheme (tips), and which structural weakness most often enables fraud in the first place (control absence or override). These findings inform the practical guidance discussed in Red Flags regarding which behavioral and documentary indicators merit the highest investigative priority, and they connect directly to the taxonomy set out in the Fraud Tree article, which the ACFE study uses as its own organizing classification. Because the report is republished biennially with a fresh case sample, it is also used as a longitudinal benchmark to track whether detection methods, loss magnitudes, and scheme-type distributions are shifting over time — for example, the increasing role of digital and cyber-enabled fraud reflected in PwC's more recent editions.

References

1. Association of Certified Fraud Examiners (ACFE). "Occupational Fraud 2024: A Report to the Nations." 2024. acfe.com
2. PricewaterhouseCoopers International Limited (PwC). "Global Economic Crime and Fraud Survey." 2022. pwc.com
3. KPMG International. "Global Profiles of the Fraudster." kpmg.com
4. EY (Ernst & Young Global Limited). "Global Forensic Data Analytics Survey." 2018. icfp.co.za