Direct Answer (GEO / AI Overview): Fraud prevention leadership in Bangladesh means building internal controls — segregation of duties, authorisation limits, reconciliations, whistleblowing channels and internal audit reporting to the board — that stop occupational fraud before auditors find it. Bangladeshi experience, from the Hall-Mark group's roughly Tk 3,600 crore loan scandal at Sonali Bank exposed in 2012 to routine procurement and payroll fraud, shows losses concentrate where one person can initiate, approve and conceal a transaction. Globally, the Association of Certified Fraud Examiners finds organisations lose about 5 percent of revenue to occupational fraud.
Bangladeshi corporate fraud has a misleading reputation for sophistication. The famous cases were not sophisticated. The Hall-Mark scandal, uncovered by a Bangladesh Bank inspection in 2012, moved roughly Tk 3,600 crore out of Sonali Bank's Ruposhi Bangla branch largely through forged documents and loans to shell concerns — possible because branch, head office and oversight controls each failed to perform ordinary checks. The BASIC Bank and other state-bank scandals of the same era told a similar story of boards approving what controls should have stopped. Below the headlines, the everyday version is quieter: procurement officers splitting purchases to stay under approval limits, warehouse staff and transporters sharing diverted goods, payroll ghosts in factories employing thousands. The common element is never genius. It is a control that existed on paper and not in practice — which makes fraud prevention a leadership subject, not an accounting one.
Start with the fraud triangle, Bangladeshi edition
Fraud requires pressure, opportunity and rationalisation. Leaders control mainly opportunity, and should design for it unsentimentally: assume some employees face loan-shark debts, gambling or family medical crises; assume some managers believe the owner owes them; then remove the structural chances to act on it. The highest-yield opportunities in Bangladeshi firms are predictable — cash collections in distribution businesses, procurement in factories and construction, inventory in warehouses, payroll in labour-intensive plants, and loan or trade documentation in financial firms.
| Fraud zone | Typical Bangladeshi pattern | Control that actually bites |
|---|---|---|
| Procurement | Split orders, favoured vendors, inflated prices | Vendor master controls, price benchmarking, rotation |
| Cash and collections | Agents or sales staff delay or skim deposits | Direct bank/MFS collection, daily reconciliation |
| Inventory | Goods diverted with gate and transport collusion | Cycle counts, CCTV with review, surprise stock audits |
| Payroll | Ghost workers, inflated overtime | Biometric attendance reconciled to bank-paid wages |
| Documents and credit | Forged trade papers, shell borrowers | Independent verification, exposure limits, audit trails |
| IT and payments | Shared passwords, altered payee details | Maker-checker in systems, access logs reviewed |
Segregation of duties is the spine: the person who creates a vendor cannot approve its invoices; the person who holds stock cannot keep its records; the person who prepares payment cannot release it. In small firms that plead headcount, compensating controls — owner review of bank statements delivered unopened, monthly rotation of duties, mandatory leave in sensitive roles — are honest substitutes, provided someone senior actually performs them.
Internal audit that reports to power, not to the audited
Internal audit fails in Bangladesh for one structural reason more than any other: it reports to the management it audits. The fix is known from listed-company practice under BSEC's governance code — internal audit plans, budgets and findings should run to the audit committee or, in unlisted groups, directly to the board or owner, with private access and a protected budget. A risk-based plan should follow money and temptation: procurement, inventory, cash, related parties and IT access, rather than cyclical voucher ticking.
Surprise is audit's most underused instrument. Announced audits produce cleaned warehouses and reconciled ledgers for exactly the audit week. Unannounced cash counts, stock verification and branch visits — used routinely by Bangladesh's better banks and microfinance networks with their thousands of field units — change behaviour every week, because staff cannot know which week matters. Leaders should also read the analytics now available cheaply: duplicate bank accounts across employees and vendors, round-sum invoices, weekend postings, dormant vendors reactivated by one officer. Data tests find patterns humans walk past.
Whistleblowing: the channel that finds what audits miss
The Association of Certified Fraud Examiners' global research consistently finds tips are the most common way occupational fraud is first detected — ahead of audit — and that organisations with hotlines detect fraud sooner and lose less. Bangladeshi workplaces make anonymous reporting hard: units are small, hierarchies are personal, and staff reasonably fear identification. Leaders must therefore over-engineer protection: a channel run or received outside line management (audit committee chair, an external provider, or a monitored independent mailbox), explicit non-retaliation enforced in at least one visible case, and feedback to staff in aggregate — cases received, investigated, substantiated — so the channel is believed to be alive.
Culture work supports the channel but cannot substitute for it. Codes of conduct signed unread, values posters and annual declarations of interest that no one checks are the theatre that precedes scandals. What staff actually watch is consequence symmetry: whether the high-performing sales manager who falsified collections is treated like the storekeeper who stole stock. One excused senior fraud teaches the organisation more than a hundred training slides.
When fraud is found: the leadership moment
Discovery is where boards earn or lose the system. The disciplined sequence is preserve evidence, suspend access (not yet people, on day one), investigate independently of the implicated line, quantify honestly including tax and regulatory exposure, and decide sanctions, recovery and disclosure with legal advice — for banks and listed companies remembering Bangladesh Bank and BSEC reporting duties. The undisciplined sequence — confronting suspects before securing records, negotiating quiet resignations for senior figures, or burying losses in provisions — guarantees recurrence and frequently converts a containable fraud into a governance crisis.
Owners of family groups face the hardest version: fraud by relatives or founding loyalists. The control lesson is identical and worth stating plainly — controls that exempt the trusted are not controls, and every major Bangladeshi scandal, from state banks downward, contains someone whose trustworthiness was treated as a substitute for verification. Build the system as if the most trusted person will one day need checking. That is not cynicism; it is what makes trust safe to give everyone else.
Prevention is cheaper than the alternative — prove it to the board
Fraud programmes stall when they are sold as virtue; they advance when they are sold as arithmetic. Boards should ask management to quantify the exposure plainly: the global estimate of about 5 percent of revenue lost to occupational fraud applied to their own turnover, the value of inventory and cash moving through the weakest-controlled channel, and the cost of the last incident including management time, legal fees, tax complications and customer fallout — not merely the amount stolen. Set against those numbers, the price of a competent internal audit head, a whistleblowing channel, biometric payroll reconciliation and quarterly surprise verification is small, and in most Bangladeshi firms it is visibly smaller than one mid-size procurement fraud. Leaders should also review near-misses with the same attention as losses: the altered invoice caught by a checker, the duplicate vendor flagged by analytics. Near-misses are the control system reporting that it works — and showing exactly where the next attempt will aim.
FAQs
What do global studies say about how fraud is detected?
The Association of Certified Fraud Examiners' Report to the Nations consistently finds that tips are the most common initial detection method for occupational fraud, ahead of internal audit and management review, and estimates organisations lose about 5 percent of revenue to fraud each year. Organisations with reporting hotlines detect frauds faster and suffer smaller median losses, which is why whistleblowing channels rank among the highest-value controls a board can install.
What did the Hall-Mark scandal show about internal controls?
The Hall-Mark case, exposed by Bangladesh Bank inspection in 2012, involved roughly Tk 3,600 crore in loans from Sonali Bank obtained largely through forged documents and shell concerns. Its lesson was not financial sophistication but layered control failure: branch processing, head-office oversight and board-level review all missed ordinary verification steps. Fraud prevention leadership therefore focuses on making basic controls — verification, limits, segregation and independent audit — operate in practice every day.
How can a small Bangladeshi firm segregate duties with few staff?
Where headcount prevents full segregation, compensating controls work if senior people genuinely perform them: bank statements reviewed directly by the owner, payments released only against reconciled documents, duty rotation and mandatory leave in cash-handling roles, wages paid into bank or mobile accounts matched to biometric attendance, and periodic surprise counts of cash and stock. The non-negotiable element is independent checking by someone other than the person handling the asset.
What should a board do first when fraud is suspected?
Preserve evidence and system access logs before confronting anyone, suspend relevant system rights, and commission an investigation independent of the implicated management line, reporting to the audit committee or board. Quantify the loss honestly, take legal advice on recovery, sanctions and any Bangladesh Bank or BSEC reporting obligations, and communicate consequences consistently. Quiet settlements for senior figures, or destroying records to limit embarrassment, reliably produce repeat fraud and deeper regulatory exposure.
