Applying the Fraud Triangle to Fraud Risk
5 minutes
5 Questions
The Fraud Triangle, developed from Donald Cressey's research, is a foundational model used by Certified Fraud Examiners to understand why trusted individuals commit fraud. It identifies three conditions that are typically present when occupational fraud occurs: pressure (or incentive), opportunity, and rationalization. In fraud risk management, the triangle serves as a practical lens for identifying, assessing, and mitigating fraud risks across an organization. Pressure refers to the motivation behind fraudulent behavior, often a non-shareable financial problem such as personal debt, addiction, medical expenses, or unrealistic performance targets. From a risk management perspective, organizations should recognize that aggressive bonus structures, unattainable sales goals, or financial distress among employees can elevate fraud risk. Monitoring these pressures, through employee support programs and reasonable incentive design, helps reduce motivation. Opportunity is the condition that allows fraud to occur, usually arising from weak internal controls, poor segregation of duties, inadequate oversight, or excessive trust in a single individual. This is the element most directly controllable by management. Fraud risk assessments should map where opportunities exist, for example, who can initiate and approve payments, who has access to sensitive data, and whether reconciliations are independently reviewed. Strengthening controls, implementing authorization limits, and conducting surprise audits directly shrink opportunity. Rationalization is the internal justification that allows a perpetrator to view the fraud as acceptable, such as believing they are underpaid, merely borrowing, or that everyone does it. Organizations address this through a strong ethical culture, a clear code of conduct, visible tone at the top, anti-fraud training, and consistent disciplinary action that reinforces that fraud is never justified. By analyzing each identified fraud risk against these three legs, fraud examiners can prioritize risks where all conditions converge, design targeted controls, and allocate anti-fraud resources effectively. The Fraud Triangle thus transforms abstract risk into actionable prevention and detection strategies.
Applying the Fraud Triangle to Fraud Risk: A Complete CFE Exam Guide
1. Why This Topic Matters
The Fraud Triangle is the single most referenced theoretical model in the entire CFE curriculum. It appears in the Fraud Prevention and Deterrence section, but its logic also underpins the fraud risk assessment process, anti-fraud control design, interviewing strategy, and even the auditing standards (AU-C 240 / ISA 240 and the COSO-ACFE Fraud Risk Management Guide) that fraud examiners rely on. If you understand why people commit fraud, you can predict where fraud is likely to occur, who is most at risk of committing it, and which controls will actually reduce the likelihood. On the exam, the ACFE tests not only whether you can recite the three legs of the triangle, but whether you can apply them to realistic scenarios: classifying a red flag as pressure, opportunity, or rationalization, and identifying which leg an organization can most effectively control.
2. What the Fraud Triangle Is
The Fraud Triangle was developed by criminologist Donald R. Cressey in the 1950s. Cressey interviewed roughly 200 incarcerated embezzlers, whom he called trust violators, and concluded that three conditions were present in every case where a person in a position of trust violated that trust:
(a) Perceived Pressure (Incentive / Motive)
Cressey described this as a non-shareable financial problem: a problem the person feels they cannot share with others who might be able to help, often because of shame, pride, or fear of losing status. The key word is perceived. The problem does not have to be objectively serious; it only has to feel serious and unshareable to the individual. Cressey identified six categories of non-shareable problems:
• Violation of ascribed obligations (a trusted person has lost or misused money and cannot admit it)
• Problems resulting from personal failure (bad investments, poor judgment)
• Business reversals (economic downturn, inflation, business losses outside the person's control)
• Physical isolation (no one to turn to for help)
• Status gaining (living beyond one's means to keep up appearances)
• Employer-employee relations (resentment over pay, promotion, or perceived unfair treatment)
In modern fraud risk management, pressure is broadened to include non-financial incentives such as meeting earnings targets, bonus thresholds, analyst expectations, or avoiding job loss.
(b) Perceived Opportunity
The person must believe they can commit the fraud and not get caught. Cressey found opportunity has two components: general information (knowledge that the position of trust can be violated, often learned from seeing others do it or from weak controls) and technical skill (the ability to actually carry out the act, which usually comes from the person's normal job duties). Again, the operative word is perceived. Strong controls that are not visible to employees do little to reduce perceived opportunity; the perception of detection is what deters.
(c) Rationalization
Most occupational fraudsters are first-time offenders who do not see themselves as criminals. Before (not after) committing the act, they construct a justification that lets them keep a self-image as an honest person: 'I'm only borrowing it,' 'I'll pay it back,' 'They owe me,' 'Everyone does it,' 'It's for my family,' 'The company won't miss it.' Cressey stressed that rationalization is an integral part of the decision, not an afterthought. Once a fraudster has committed the act repeatedly, the need to rationalize often fades and the behavior becomes habitual.
3. Related Models You Must Recognize
The exam frequently contrasts the Fraud Triangle with later refinements:
• Fraud Scale (Albrecht, Howe & Romney): replaces rationalization with personal integrity. Fraud likelihood is a function of situational pressure, perceived opportunity, and the person's integrity; when pressure and opportunity are high and integrity is low, fraud is more likely.
• Fraud Diamond (Wolfe & Hermanson): adds a fourth element, capability: the position, intelligence, ego, coercion skills, ability to lie, and stress tolerance needed to pull off a fraud.
• MICE: a model of motives: Money, Ideology, Coercion, Ego.
• Hollinger-Clark study: found that job dissatisfaction was a stronger predictor of employee theft than economic need, and that perception of detection was the strongest deterrent.
Know which author goes with which model; this is a classic exam distinction.
4. How the Fraud Triangle Is Applied to Fraud Risk Management
The Fraud Triangle moves from theory to practice when it is used as the framework for a fraud risk assessment. The COSO-ACFE Fraud Risk Management Guide and auditing standards instruct practitioners to evaluate fraud risk factors in three categories that map directly onto the triangle: incentives/pressures, opportunities, and attitudes/rationalizations.
Step 1: Identify Pressures
Ask: who in the organization faces incentives that could push them toward fraud? Examples: aggressive sales quotas, bonus plans tied to a single metric, unrealistic budgets, pending layoffs, employees with known personal financial problems, management under pressure to meet debt covenants or analyst forecasts. High-pressure roles and periods (year-end, quarter-end) get higher risk ratings.
Step 2: Identify Opportunities
Ask: where could someone commit fraud and conceal it? Examples: inadequate segregation of duties, one person controlling an entire process end to end, weak or absent supervision, no independent reconciliations, unrestricted system access, override ability, dormant accounts, related-party transactions, lack of a hotline, no mandatory vacations or job rotation. Opportunity is assessed scheme by scheme (billing schemes, skimming, payroll, financial statement manipulation, corruption).
Step 3: Identify Rationalization Risk (Attitudes and Culture)
Ask: does the environment make it easy to justify dishonesty? Examples: poor tone at the top, management that bends rules itself, perceived unfairness in compensation or discipline, no code of conduct or no enforcement of it, inconsistent treatment of violators, a culture of 'results at any cost,' low morale, lack of ethics training.
Step 4: Design Controls Targeted at Each Leg
This is the heart of the application, and the exam loves it:
• Opportunity is the leg the organization has the most direct control over. Reduce it with internal controls, segregation of duties, access restrictions, supervision, independent reconciliations, surprise audits, mandatory vacations, job rotation, and especially by increasing the perception of detection (hotlines, publicized audits, prosecution of offenders).
• Pressure cannot be eliminated but can be influenced: realistic performance targets, balanced compensation plans, employee assistance programs, open-door policies so that problems become shareable, fair treatment, and monitoring of lifestyle red flags.
• Rationalization is countered through ethical culture: a clear code of conduct, ethics training, management modeling honest behavior, consistent and visible discipline, fair employee treatment, and removing the 'everyone does it' excuse by prosecuting and publicizing consequences.
Step 5: Use the Triangle in Detection and Investigation
Red flags are categorized by leg: living beyond means and financial difficulties (pressure); control over a process and refusal to take vacation (opportunity); 'wheeler-dealer' attitude, complaints about pay, or defensiveness (rationalization). In admission-seeking interviews, the examiner offers the subject a rationalization (a face-saving theme) precisely because Cressey showed that fraudsters need one. Understanding the triangle therefore shapes both prevention and interview technique.
5. Key Nuances the Exam Tests
• All three legs are generally present for a trust violation to occur, but their relative weight varies; weak controls plus strong pressure can overcome a weak rationalization and vice versa.
• Perceived pressure and perceived opportunity are what matter, not objective reality.
• Cressey's model was built from embezzlers (occupational fraud by trusted insiders), not predators or organized criminals; predatory fraudsters need little pressure or rationalization, which is one critique that led to models such as the Fraud Diamond.
• Rationalization occurs before the first act and is part of the motivation, not an excuse invented afterward.
• The non-shareable nature of the problem is central: a problem the person is willing to disclose and seek help for is not a fraud triangle pressure in Cressey's sense.
• Organizations influence pressure and rationalization indirectly, but reduce opportunity directly; when a question asks which element management can best control or which element anti-fraud controls primarily address, the answer is opportunity.
• The most effective deterrent identified in research is increasing the perception of detection, which attacks perceived opportunity.
6. Exam Tips: Answering Questions on Applying the Fraud Triangle to Fraud Risk
Tip 1: Classify the fact pattern first. Most scenario questions describe a situation and ask which leg it represents. Use this test: Is it a reason the person needs or wants the money or result? That is pressure. Is it a weakness that lets them do it or hide it? That is opportunity. Is it a belief or attitude that makes the act feel acceptable? That is rationalization. Lifestyle changes, gambling, debt, divorce, and bonus targets are pressure. Lack of segregation of duties, sole custody of assets, poor oversight are opportunity. Resentment, 'borrowing' language, poor tone at the top, and 'everyone does it' are rationalization.
Tip 2: Watch for the word 'perceived.' If an answer choice omits perception and describes an objective condition, be cautious. The triangle is about what the individual believes about their problem and their chances of getting caught.
Tip 3: Remember 'non-shareable.' Questions on Cressey's original research will specifically test that the financial problem must be one the person feels unable to share. Choose the answer containing this concept when asked about Cressey's definition of pressure.
Tip 4: Know the author-model pairings. Cressey = Fraud Triangle (pressure, opportunity, rationalization). Albrecht = Fraud Scale (adds personal integrity in place of rationalization). Wolfe & Hermanson = Fraud Diamond (adds capability). Hollinger & Clark = job dissatisfaction and perception of detection. Mixing these up is a common way to lose easy points.
Tip 5: When asked what the organization can control, answer opportunity. Internal controls, segregation of duties, and visible detection mechanisms directly shrink perceived opportunity. Pressure and rationalization are addressed through culture, compensation design, and support programs, which the organization can influence but not eliminate.
Tip 6: Match controls to legs. If a question asks which control best addresses rationalization, look for ethics codes, training, tone at the top, consistent discipline, fair treatment. For pressure, look for realistic targets, employee assistance, balanced incentives. For opportunity, look for segregation of duties, access controls, reconciliations, audits, mandatory vacations, hotlines.
Tip 7: Remember the two components of opportunity. General information (knowing the trust can be violated) and technical skill (knowing how to do it). Cressey emphasized that the skills used to commit the fraud are usually the same skills the person uses in their legitimate job.
Tip 8: Sequence matters. If asked when rationalization occurs, the answer is before or at the time of the act, not afterward. Also recognize that after repeated acts, rationalization may no longer be needed as the behavior becomes routine.
Tip 9: Connect to the fraud risk assessment. Questions may frame the triangle in COSO/auditing-standard language: incentives/pressures, opportunities, attitudes/rationalizations. Treat these as synonyms for the three legs and apply the same classification logic.
Tip 10: Eliminate absolutes carefully. Answer choices stating that fraud 'cannot occur' without all three elements in equal strength, or that controls 'eliminate' pressure, are usually wrong. The triangle describes conditions that are typically present and that interact; good controls reduce risk rather than eliminate it.
Tip 11: Read for the interviewing angle. If a question about admission-seeking interviews asks why examiners offer the subject a theme or excuse, the answer ties back to rationalization: fraudsters need a face-saving justification, and offering one lowers resistance to confession.
7. Quick Summary
The Fraud Triangle explains that occupational fraud occurs when a trusted person has a perceived non-shareable pressure, a perceived opportunity to commit and conceal the act, and a rationalization that preserves their self-image. Applied to fraud risk management, it becomes the organizing framework for assessing fraud risk factors, prioritizing high-risk processes and roles, designing controls (strongest leverage on opportunity, cultural leverage on rationalization, indirect leverage on pressure), interpreting red flags, and structuring interviews. Master the definitions, the author pairings, the 'perceived' and 'non-shareable' qualifiers, and the control-to-leg mapping, and you will handle any Fraud Triangle question the CFE exam presents.
The Fraud Triangle is the single most referenced theoretical model in the entire CFE curriculum. It appears in the Fraud Prevention and Deterrence section, but its logic also underpins the fraud risk assessment process, anti-fraud control design, interviewing strategy, and even the auditing standards (AU-C 240 / ISA 240 and the COSO-ACFE Fraud Risk Management Guide) that fraud examiners rely on. If you understand why people commit fraud, you can predict where fraud is likely to occur, who is most at risk of committing it, and which controls will actually reduce the likelihood. On the exam, the ACFE tests not only whether you can recite the three legs of the triangle, but whether you can apply them to realistic scenarios: classifying a red flag as pressure, opportunity, or rationalization, and identifying which leg an organization can most effectively control.
2. What the Fraud Triangle Is
The Fraud Triangle was developed by criminologist Donald R. Cressey in the 1950s. Cressey interviewed roughly 200 incarcerated embezzlers, whom he called trust violators, and concluded that three conditions were present in every case where a person in a position of trust violated that trust:
(a) Perceived Pressure (Incentive / Motive)
Cressey described this as a non-shareable financial problem: a problem the person feels they cannot share with others who might be able to help, often because of shame, pride, or fear of losing status. The key word is perceived. The problem does not have to be objectively serious; it only has to feel serious and unshareable to the individual. Cressey identified six categories of non-shareable problems:
• Violation of ascribed obligations (a trusted person has lost or misused money and cannot admit it)
• Problems resulting from personal failure (bad investments, poor judgment)
• Business reversals (economic downturn, inflation, business losses outside the person's control)
• Physical isolation (no one to turn to for help)
• Status gaining (living beyond one's means to keep up appearances)
• Employer-employee relations (resentment over pay, promotion, or perceived unfair treatment)
In modern fraud risk management, pressure is broadened to include non-financial incentives such as meeting earnings targets, bonus thresholds, analyst expectations, or avoiding job loss.
(b) Perceived Opportunity
The person must believe they can commit the fraud and not get caught. Cressey found opportunity has two components: general information (knowledge that the position of trust can be violated, often learned from seeing others do it or from weak controls) and technical skill (the ability to actually carry out the act, which usually comes from the person's normal job duties). Again, the operative word is perceived. Strong controls that are not visible to employees do little to reduce perceived opportunity; the perception of detection is what deters.
(c) Rationalization
Most occupational fraudsters are first-time offenders who do not see themselves as criminals. Before (not after) committing the act, they construct a justification that lets them keep a self-image as an honest person: 'I'm only borrowing it,' 'I'll pay it back,' 'They owe me,' 'Everyone does it,' 'It's for my family,' 'The company won't miss it.' Cressey stressed that rationalization is an integral part of the decision, not an afterthought. Once a fraudster has committed the act repeatedly, the need to rationalize often fades and the behavior becomes habitual.
3. Related Models You Must Recognize
The exam frequently contrasts the Fraud Triangle with later refinements:
• Fraud Scale (Albrecht, Howe & Romney): replaces rationalization with personal integrity. Fraud likelihood is a function of situational pressure, perceived opportunity, and the person's integrity; when pressure and opportunity are high and integrity is low, fraud is more likely.
• Fraud Diamond (Wolfe & Hermanson): adds a fourth element, capability: the position, intelligence, ego, coercion skills, ability to lie, and stress tolerance needed to pull off a fraud.
• MICE: a model of motives: Money, Ideology, Coercion, Ego.
• Hollinger-Clark study: found that job dissatisfaction was a stronger predictor of employee theft than economic need, and that perception of detection was the strongest deterrent.
Know which author goes with which model; this is a classic exam distinction.
4. How the Fraud Triangle Is Applied to Fraud Risk Management
The Fraud Triangle moves from theory to practice when it is used as the framework for a fraud risk assessment. The COSO-ACFE Fraud Risk Management Guide and auditing standards instruct practitioners to evaluate fraud risk factors in three categories that map directly onto the triangle: incentives/pressures, opportunities, and attitudes/rationalizations.
Step 1: Identify Pressures
Ask: who in the organization faces incentives that could push them toward fraud? Examples: aggressive sales quotas, bonus plans tied to a single metric, unrealistic budgets, pending layoffs, employees with known personal financial problems, management under pressure to meet debt covenants or analyst forecasts. High-pressure roles and periods (year-end, quarter-end) get higher risk ratings.
Step 2: Identify Opportunities
Ask: where could someone commit fraud and conceal it? Examples: inadequate segregation of duties, one person controlling an entire process end to end, weak or absent supervision, no independent reconciliations, unrestricted system access, override ability, dormant accounts, related-party transactions, lack of a hotline, no mandatory vacations or job rotation. Opportunity is assessed scheme by scheme (billing schemes, skimming, payroll, financial statement manipulation, corruption).
Step 3: Identify Rationalization Risk (Attitudes and Culture)
Ask: does the environment make it easy to justify dishonesty? Examples: poor tone at the top, management that bends rules itself, perceived unfairness in compensation or discipline, no code of conduct or no enforcement of it, inconsistent treatment of violators, a culture of 'results at any cost,' low morale, lack of ethics training.
Step 4: Design Controls Targeted at Each Leg
This is the heart of the application, and the exam loves it:
• Opportunity is the leg the organization has the most direct control over. Reduce it with internal controls, segregation of duties, access restrictions, supervision, independent reconciliations, surprise audits, mandatory vacations, job rotation, and especially by increasing the perception of detection (hotlines, publicized audits, prosecution of offenders).
• Pressure cannot be eliminated but can be influenced: realistic performance targets, balanced compensation plans, employee assistance programs, open-door policies so that problems become shareable, fair treatment, and monitoring of lifestyle red flags.
• Rationalization is countered through ethical culture: a clear code of conduct, ethics training, management modeling honest behavior, consistent and visible discipline, fair employee treatment, and removing the 'everyone does it' excuse by prosecuting and publicizing consequences.
Step 5: Use the Triangle in Detection and Investigation
Red flags are categorized by leg: living beyond means and financial difficulties (pressure); control over a process and refusal to take vacation (opportunity); 'wheeler-dealer' attitude, complaints about pay, or defensiveness (rationalization). In admission-seeking interviews, the examiner offers the subject a rationalization (a face-saving theme) precisely because Cressey showed that fraudsters need one. Understanding the triangle therefore shapes both prevention and interview technique.
5. Key Nuances the Exam Tests
• All three legs are generally present for a trust violation to occur, but their relative weight varies; weak controls plus strong pressure can overcome a weak rationalization and vice versa.
• Perceived pressure and perceived opportunity are what matter, not objective reality.
• Cressey's model was built from embezzlers (occupational fraud by trusted insiders), not predators or organized criminals; predatory fraudsters need little pressure or rationalization, which is one critique that led to models such as the Fraud Diamond.
• Rationalization occurs before the first act and is part of the motivation, not an excuse invented afterward.
• The non-shareable nature of the problem is central: a problem the person is willing to disclose and seek help for is not a fraud triangle pressure in Cressey's sense.
• Organizations influence pressure and rationalization indirectly, but reduce opportunity directly; when a question asks which element management can best control or which element anti-fraud controls primarily address, the answer is opportunity.
• The most effective deterrent identified in research is increasing the perception of detection, which attacks perceived opportunity.
6. Exam Tips: Answering Questions on Applying the Fraud Triangle to Fraud Risk
Tip 1: Classify the fact pattern first. Most scenario questions describe a situation and ask which leg it represents. Use this test: Is it a reason the person needs or wants the money or result? That is pressure. Is it a weakness that lets them do it or hide it? That is opportunity. Is it a belief or attitude that makes the act feel acceptable? That is rationalization. Lifestyle changes, gambling, debt, divorce, and bonus targets are pressure. Lack of segregation of duties, sole custody of assets, poor oversight are opportunity. Resentment, 'borrowing' language, poor tone at the top, and 'everyone does it' are rationalization.
Tip 2: Watch for the word 'perceived.' If an answer choice omits perception and describes an objective condition, be cautious. The triangle is about what the individual believes about their problem and their chances of getting caught.
Tip 3: Remember 'non-shareable.' Questions on Cressey's original research will specifically test that the financial problem must be one the person feels unable to share. Choose the answer containing this concept when asked about Cressey's definition of pressure.
Tip 4: Know the author-model pairings. Cressey = Fraud Triangle (pressure, opportunity, rationalization). Albrecht = Fraud Scale (adds personal integrity in place of rationalization). Wolfe & Hermanson = Fraud Diamond (adds capability). Hollinger & Clark = job dissatisfaction and perception of detection. Mixing these up is a common way to lose easy points.
Tip 5: When asked what the organization can control, answer opportunity. Internal controls, segregation of duties, and visible detection mechanisms directly shrink perceived opportunity. Pressure and rationalization are addressed through culture, compensation design, and support programs, which the organization can influence but not eliminate.
Tip 6: Match controls to legs. If a question asks which control best addresses rationalization, look for ethics codes, training, tone at the top, consistent discipline, fair treatment. For pressure, look for realistic targets, employee assistance, balanced incentives. For opportunity, look for segregation of duties, access controls, reconciliations, audits, mandatory vacations, hotlines.
Tip 7: Remember the two components of opportunity. General information (knowing the trust can be violated) and technical skill (knowing how to do it). Cressey emphasized that the skills used to commit the fraud are usually the same skills the person uses in their legitimate job.
Tip 8: Sequence matters. If asked when rationalization occurs, the answer is before or at the time of the act, not afterward. Also recognize that after repeated acts, rationalization may no longer be needed as the behavior becomes routine.
Tip 9: Connect to the fraud risk assessment. Questions may frame the triangle in COSO/auditing-standard language: incentives/pressures, opportunities, attitudes/rationalizations. Treat these as synonyms for the three legs and apply the same classification logic.
Tip 10: Eliminate absolutes carefully. Answer choices stating that fraud 'cannot occur' without all three elements in equal strength, or that controls 'eliminate' pressure, are usually wrong. The triangle describes conditions that are typically present and that interact; good controls reduce risk rather than eliminate it.
Tip 11: Read for the interviewing angle. If a question about admission-seeking interviews asks why examiners offer the subject a theme or excuse, the answer ties back to rationalization: fraudsters need a face-saving justification, and offering one lowers resistance to confession.
7. Quick Summary
The Fraud Triangle explains that occupational fraud occurs when a trusted person has a perceived non-shareable pressure, a perceived opportunity to commit and conceal the act, and a rationalization that preserves their self-image. Applied to fraud risk management, it becomes the organizing framework for assessing fraud risk factors, prioritizing high-risk processes and roles, designing controls (strongest leverage on opportunity, cultural leverage on rationalization, indirect leverage on pressure), interpreting red flags, and structuring interviews. Master the definitions, the author pairings, the 'perceived' and 'non-shareable' qualifiers, and the control-to-leg mapping, and you will handle any Fraud Triangle question the CFE exam presents.
Test mode:
CFE - Applying the Fraud Triangle to Fraud Risk Example Questions
Test your knowledge of Applying the Fraud Triangle to Fraud Risk
Question 1
After a series of inventory thefts, a company added dual custody and camera coverage in its warehouse. A later fraud risk assessment notes that, after layoffs and a pay freeze, warehouse staff openly say the company 'owes them' and that taking small items harms no one. Which analysis BEST explains why the assessment still rates the theft risk as elevated?
Question 2
When a fraud risk assessment considers incentives such as aggressive sales targets tied to management bonuses, it is evaluating the rationalization element of the Fraud Triangle.
Question 3
When the Fraud Triangle is applied to fraud risk, which element is an organization best positioned to reduce, and by what primary means?
Unlock Premium Access
Certified Fraud Examiner (CFE)
- Access to ALL Certifications: Study for any certification on our platform with one subscription
- 3404 Superior-grade Certified Fraud Examiner (CFE) practice questions
- Unlimited practice tests across all certifications
- Detailed explanations for every question
- CFE: 5 full exams plus all other certification exams
- 30-Day Money-Back Guarantee: Full refund within 30 days if unsatisfied
- Risk-Free: 7-day free trial with all premium features!
More Applying the Fraud Triangle to Fraud Risk questions
19 questions (total)