Fraud Tree

The Fraud Tree
Author	Association of Certified Fraud Examiners (ACFE)
Full name	Occupational Fraud and Abuse Classification System
Top branches	Corruption; Asset Misappropriation; Financial Statement Fraud
Benchmark data	ACFE Report to the Nations 2024

The fraud tree is the informal name for the Association of Certified Fraud Examiners' Occupational Fraud and Abuse Classification System, a taxonomy that organizes the many forms of internal (occupational) fraud into a branching hierarchy. Developed by the ACFE and its founder Joseph T. Wells, the fraud tree divides occupational fraud into three primary categories, corruption, asset misappropriation, and financial statement fraud, and then subdivides each into progressively specific schemes.^[1] It is the standard vocabulary of forensic accounting and pairs naturally with the fraud triangle, which explains why fraud occurs while the tree catalogs how.

1 The three primary branches

The tree covers occupational fraud, defined as the use of one's occupation for personal enrichment through the deliberate misuse or misapplication of the employing organization's resources or assets.^[2] Its three trunks differ markedly in how often they occur and how much they cost. As a rule of thumb, the more frequent a scheme type is, the smaller its typical loss; the rarest branch, financial statement fraud, is by far the costliest per case.

The value of the taxonomy is threefold. First, it gives investigators, auditors, and academics a common language, so that a "billing scheme" or a "kickback" means the same thing across organizations and jurisdictions. Second, it supports risk assessment: because each scheme type has characteristic controls that defeat it, mapping an organization's exposure onto the tree points directly to the controls it most needs. Third, it enables consistent measurement, which is what makes the ACFE's biennial loss statistics comparable over time. The tree is deliberately built from the perpetrator's method rather than the victim's industry, so the same branches apply to a hospital, a bank, or a municipal government. Each branch below can be read as a hypothesis an examiner tests against the evidence, working from an observed red flag toward the specific scheme that would explain it.

2 Corruption

Corruption schemes involve an employee wrongfully using influence in a business transaction to obtain a benefit contrary to the employer's interest, usually in collusion with an outside party. The ACFE tree divides corruption into four sub-branches:^[1]

• Bribery — offering, giving, receiving, or soliciting something of value to influence a business decision, including kickbacks (a vendor returns part of an overbilled amount to the complicit insider) and bid rigging (manipulating a competitive procurement so a favored bidder wins).
• Conflicts of interest — an employee has an undisclosed economic interest in a transaction that harms the employer, such as purchasing schemes or sales schemes routed through a hidden related party.
• Illegal gratuities — giving or receiving something of value after a decision, as a reward, without the up-front quid pro quo of bribery.
• Economic extortion — an employee demands payment from a vendor as a condition of a favorable decision (the mirror image of bribery).

Corruption schemes typically require collusion, which makes them hard to detect through internal controls alone and elevates the value of open-source intelligence, anti-corruption OSINT, and tip-based reporting. Cross-border corruption engages statutes such as the U.S. Foreign Corrupt Practices Act (FCPA) and the UK Bribery Act.^[3]

3 Asset misappropriation

Asset misappropriation, the theft or misuse of an organization's assets, is the largest branch by number of sub-schemes and by frequency. It splits into cash and non-cash misappropriation.^[1]

• Skimming — theft of cash before it is recorded in the books ("off-book" fraud), for example pocketing a customer payment and never entering the sale. Because the money never enters the records, skimming is notoriously hard to detect.
• Cash larceny — theft of cash after it has been recorded ("on-book").
• Fraudulent disbursements — causing the organization to pay out money improperly. Sub-types include billing schemes (shell companies, personal purchases), payroll schemes (ghost employees, inflated hours), expense-reimbursement schemes, check tampering, and register disbursements (false voids or refunds).
• Non-cash misappropriation — theft or misuse of inventory, equipment, information, or securities.

Because much of asset misappropriation leaves traces in disbursement and payroll data, it is a prime target for analytical review, Benford's Law testing, and journal-entry analysis. The distinction between on-book and off-book schemes is central to detection strategy: on-book schemes such as cash larceny and most fraudulent disbursements leave a record that can be data-mined, whereas off-book skimming leaves no direct entry and must instead be inferred from indirect evidence, such as declining margins, customer complaints about unposted payments, or shortfalls surfaced by the net-worth method. This is one reason skimming, though individually small, is disproportionately difficult to uncover.

4 Financial statement fraud

Financial statement fraud is the deliberate misrepresentation of an organization's financial condition, usually by management, through intentional misstatement or omission. It is the rarest branch but the most damaging per case. Typical mechanisms include improper revenue recognition (the most common), overstated assets, understated liabilities and expenses, and improper disclosures. These techniques are examined in detail, with real examples such as Enron and WorldCom, in Financial Statement Fraud and Case Studies.^[4]

The three trunks are not mutually exclusive. A single scheme frequently spans branches: a corrupt executive taking kickbacks (corruption) may also falsify the books to hide the resulting cost overruns (financial statement fraud), and a billing scheme (asset misappropriation) may be concealed by manipulating expense accounts. This is why the ACFE reports that a substantial share of cases involve more than one category, and why an examiner who has confirmed one branch should actively look for the others.

5 Frequency and cost (ACFE 2024)

The ACFE's Occupational Fraud 2024: A Report to the Nations (13th edition, based on 1,921 cases from 138 countries) quantifies how the three branches compare. Note that the frequency percentages sum to more than 100% because many cases involve more than one scheme category.^[2]

Primary category	% of cases (frequency)	Median loss per case	Character
Asset misappropriation	89%	$120,000	Most frequent, lowest median loss
Corruption	48%	$200,000	Common, moderate loss; usually collusive
Financial statement fraud	5%	$766,000	Rarest, costliest per case

The inverse relationship between frequency and severity is one of the most cited findings in the field: the schemes an organization is most likely to suffer are individually the cheapest, while the rare financial-statement frauds can be catastrophic. Overall, the same report estimates a typical organization loses about 5% of revenue annually to occupational fraud, with an all-cases median loss of $145,000.^[2] These headline figures are developed further in Occupational Fraud.

See also: Occupational Fraud, Fraud Triangle, Financial Statement Fraud, Red Flags.

References

1. ACFE Occupational Fraud and Abuse Classification System ("the fraud tree"), as described in the ACFE fraud-examination literature and summarized in Dwiputri (2025), Fraud and Forensic Accounting.
2. ACFE (2024). Occupational Fraud 2024: A Report to the Nations (13th ed.; 1,921 cases, 138 countries). acfe.com
3. AICPA Essentials (Crain, Hopwood, Pacini & Young, 2015), citing the FCPA and UK Bribery Act.
4. Healy, P. M., & Palepu, K. G. (2003). "The Fall of Enron." Journal of Economic Perspectives 17(2). DOI 10.1257/089533003765888403.