Fraud Triangle
| Fraud triangle | |
|---|---|
| Originator | Donald R. Cressey (1953) |
| Three legs | Pressure, Opportunity, Rationalization |
| Core insight | The "non-sharable financial problem" |
| In auditing | Embedded in SAS 99 (AU-C 240) |
| Extensions | Fraud diamond; fraud pentagon; Fraud Detection Triangle (2024) |
The fraud triangle is a model that explains the factors present when a person commits occupational fraud. It was derived from the criminologist Donald R. Cressey's doctoral study of embezzlers, published as Other People's Money (1953), and has become the single most widely taught framework in forensic accounting and fraud examination.[1] The model holds that fraud is most likely when three conditions coincide: a pressure or incentive, an opportunity, and a rationalization. Because all three are usually necessary, the triangle is both an explanatory theory and a practical guide: remove any leg and the likelihood of fraud falls sharply.
1 The three legs
Pressure (incentive). This is the motive: a problem the individual feels compelled to solve through illicit means. Pressures are commonly financial, such as personal debt, medical bills, gambling or addiction, an unsustainable lifestyle, or the need to meet an earnings target. In financial statement fraud the pressure is often institutional rather than personal, for example the need to hit analyst expectations or trigger a bonus.[1]
Opportunity. This is the means: a weakness in controls or a position of trust that lets the person commit and conceal the act with a perceived low chance of detection. Weak segregation of duties, unchecked authority, override of controls, and poor oversight all enlarge opportunity. Of the three legs, opportunity is the one an organization can most directly reduce, which is why internal control is central to fraud prevention.[2]
Rationalization. This is the mindset: the psychological justification that lets an otherwise law-abiding person reconcile the act with their self-image. Common rationalizations include "I'm only borrowing it," "the company owes me," "everyone does it," and "I'll pay it back before anyone notices." Rationalization typically precedes the first act; once the fraud becomes habitual, offenders often abandon the justification.[1]
An important practical corollary is that the three legs vary in observability. Pressure and rationalization are internal to the individual and largely invisible to an outsider until they manifest as behavior, whereas opportunity is a property of the organization's control environment and can be assessed directly. This asymmetry shapes both prevention and investigation: prevention concentrates on the visible, controllable leg, while investigation works backward from the traces the other two legs leave behind, such as a lifestyle beyond apparent means (a symptom of pressure) or defensiveness under questioning (a symptom of strained rationalization).
2 The non-sharable problem
Cressey's central and most original finding is captured in the phrase "non-sharable financial problem." Studying convicted embezzlers, he observed that the trusted violators he interviewed all faced a financial difficulty they felt unable to share with others, owing to shame, status, or the illicit nature of the underlying obligation (for example, gambling debts). The problem's non-sharable quality is what pushed the individual, who already had a position of trust (opportunity) and could construct a justification (rationalization), across the line into violation.[1] This insight distinguishes the fraud triangle from a naïve "greedy people steal" account: Cressey's violators were people of previously good character whose secret pressure, rather than raw avarice, set the sequence in motion.
3 The heat-fuel-oxygen metaphor
Fraud examiners frequently teach the triangle by analogy to the fire triangle of combustion, which requires heat, fuel, and oxygen simultaneously. Just as removing any one element extinguishes a fire, removing any one leg of the fraud triangle prevents the fraud from "igniting."[2] The analogy is pedagogically useful because it stresses the conjunctive nature of the model, all three conditions ordinarily present together, and because it points managers toward the leg they can most readily control. An organization cannot easily eliminate its employees' personal pressures or police their private rationalizations, but it can starve the fire of oxygen by tightening opportunity through internal controls, segregation of duties, and monitoring. This maps directly onto the detection-and-prevention guidance discussed under Red Flags and Occupational Fraud.
4 Use in auditing standards (SAS 99)
The fraud triangle is not merely academic; it is embedded in professional auditing standards. In the United States, Statement on Auditing Standards No. 99, Consideration of Fraud in a Financial Statement Audit (2002, now codified as AU-C 240), adopted the triangle's structure, directing auditors to assess fraud risk in terms of incentives/pressures, opportunities, and attitudes/rationalizations.[3] SAS 99 was itself the successor to SAS 82 and SAS 53 and expanded the auditor's fraud responsibilities in the wake of the Enron-era scandals.
SAS 99 and the surrounding literature enumerate a widely cited catalog of roughly 42 fraud risk factors ("red flags"), which practitioners organize along the three legs of the triangle: pressure-related flags (e.g., excessive management incentive compensation tied to results, aggressive earnings targets), opportunity-related flags (e.g., weak internal controls, complex or unusual related-party transactions, domination of management by a single person), and rationalization/attitude-related flags (e.g., management's known disregard for regulation, strained auditor relationships, a history of violations).[3] Mapping observed anomalies back onto the triangle helps an examiner move from a suspicious pattern to a testable hypothesis about motive and means. The full taxonomy of these indicators appears in Red Flags.
5 Extensions and criticisms
The fraud triangle has been extended repeatedly. The best known revision is the fraud diamond (Wolfe & Hermanson, 2004), which adds a fourth element, capability, the perpetrator's personal traits and skills (position, intelligence, confidence, and ability to handle stress) that turn a mere opportunity into a realized fraud.[2] Some later authors add a fifth element to form a fraud pentagon, incorporating arrogance or competence.
More recent scholarship reconsiders the model for a data-rich, machine-learning era. Gepp and colleagues (2024) propose a "Fraud Detection Triangle," reframing the classic model from the offender's perspective toward the detector's, and integrating it with quantitative signals such as Benford's Law digit distributions to sharpen automated detection.[4] This complements a broader 2024–2026 research current combining traditional fraud theory with machine learning and deep-learning detection.
Critics note that the triangle describes conditions correlated with fraud rather than a validated predictive mechanism, that rationalization and pressure are difficult to observe ex ante, and that the model was built from a specific mid-twentieth-century population of embezzlers. Even so, it remains foundational because it usefully organizes both prevention (attack opportunity) and investigation (reason backward from an anomaly to motive and means). It underpins the ACFE's fraud tree taxonomy and the broader practice of forensic accounting.
See also: Fraud Tree, Red Flags, Occupational Fraud, Benford's Law.
References
- Cressey, D. R. (1953). Other People's Money: A Study in the Social Psychology of Embezzlement. Summarized in Dwiputri (2025), Fraud and Forensic Accounting.
- Wolfe, D. T., & Hermanson, D. R. (2004). "The Fraud Diamond." Discussed in AICPA Essentials (Crain, Hopwood, Pacini & Young, 2015) and the ACFE fraud-examination literature.
- AICPA, Statement on Auditing Standards No. 99 (2002; AU-C 240). See also Colbert, J. (2007), "What the 10 New Auditing Standards Mean for Forensic Accountants," Forensic Examiner 16(4); Moyes, G. D. (2008), "CPAs' Perceptions of Red Flags Used in Detecting Fraud," Icfai Journal of Audit Practice 5(1).
- Gepp, A., et al. (2024). "The Fraud Detection Triangle" (with Benford's Law). Accounting & Finance. DOI 10.1111/acfi.13192.