The fraud triangle says occupational fraud tends to happen when three conditions meet: a pressure the person feels they cannot share, an opportunity to take money without being caught, and a rationalization that makes it feel acceptable. In a small office handling cash, a reviewer can rarely change pressure or rationalization, but can shrink opportunity.
What does the fraud triangle describe?
The fraud triangle describes three conditions that, together, make it likely a trusted person will commit fraud. The ACFE's Fraud 101 page credits the model to criminologist Donald Cressey, who studied embezzlers, and names the three sides as an unshareable financial need, a perceived opportunity and a rationalization.
The model was built from interviews with people who had abused positions of trust, which is why it fits cash theft by employees so well. It explains why honest-seeming staff steal. It is a way to think about risk, not a test that proves anything about a particular person.
The word "perceived" matters. Opportunity is what the person believes they can get away with, not what is objectively possible. A control nobody performs, such as a reconciliation that is signed but never really reviewed, looks to the person like no control at all.
Pressure in the fraud triangle: signs in a small office
Pressure is the need that pushes someone toward fraud: debt, a medical bill, a gambling problem, a family crisis or the fear of losing status. Cressey's word was "unshareable," meaning the person feels they cannot ask for help. That makes pressure hard for an employer to see, and it is not the employer's business to probe.
Some signs do surface at work: a staff member who never takes leave, asks for payroll advances, or whose lifestyle changes sharply. None of these is evidence. Many people under pressure never steal, and many signs have other causes. A reviewer should notice them, not act on them alone.
Opportunity in the fraud triangle: gaps in cash controls
Opportunity is the chance to take money and hide it, usually created by one person controlling too many steps. In a small office, the same bookkeeper often adds vendors, writes payments, receives the bank statement and does the reconciliation. With all four in one pair of hands, a theft can be hidden for years.
The hiding often happens on the bank statement or the reconciliation. A person who controls the statement can alter it before anyone else sees it; checks for an edited PDF bank statement explain the metadata and arithmetic that expose a changed number. Less visible accounts are another hiding place. A loan account nobody reconciles to the lender's statement can absorb payments booked to the wrong place, which loan reconciliation to the lender's statement is designed to catch.
Which fraud triangle corner can a reviewer actually change?
A reviewer can change opportunity. Pressure belongs to the person's life and rationalization to their thinking; neither responds to a control. Opportunity responds to who does which step, who sees the bank's own records and how often someone checks. Closing gaps there removes the condition the other two depend on.
| Opportunity in a small office | Control that closes it | Review step |
|---|---|---|
| One person adds vendors and pays them | Second person approves new vendors | Monthly list of new vendors, signed by the owner |
| Bookkeeper receives the bank statement first | Statement goes to the owner directly | Owner downloads statements from the bank |
| Reconciliation done and reviewed by the same person | Separate preparer and reviewer | Reviewer ties the balance to the bank's own figure |
| Checks signed by the person who writes them | Dual signature above a limit | Spot-check check images each month |
| Cash receipts counted by one person | Two-person count | Compare deposits with sales records weekly |
| Unreconciled loan or clearing accounts | Reconcile every balance sheet account monthly | Review aged reconciling items |
The table shows examples, and the right controls depend on the office. The owner downloading statements directly is the cheapest and strongest row, because it removes the chance to hand over an altered one. When an owner cannot do that, verifying a bank statement with the bank gives a way to confirm key figures.
Detective tests also shrink perceived opportunity, because people who know transactions are tested act differently. Fraud detection techniques in forensic accounting covers duplicate, gap and Benford's law tests. PreciseBankFlow runs footing, duplicate and check-sequence tests on every statement and lists each exception for a reviewer to sign off.
Rationalization and the fraud triangle's limits
Rationalization is the story that lets a person see the theft as acceptable: "I'm only borrowing it," "they underpay me," "everyone does it." It lowers the moral barrier at the moment of taking money. Rationalization is hard to influence directly, though a clear, enforced policy removes some excuses.
The model has limits worth knowing. It describes the individual employee better than it describes collusion, where two people together defeat a control meant to separate them. It says little about owners and senior managers, who often design the controls they bypass. And it can make reviewers chase motives, which is not their job.
Use the fraud triangle to decide where to spend review effort, and keep the focus on records. Opportunity is visible in who does which step; theft is visible in the bank data. Pressure and rationalization are for investigators, counsel and, in the end, the person involved.