The Fraud Triangle

5 minutes 5 Questions

The Fraud Triangle is a foundational model in the Certified Fraud Examiner (CFE) body of knowledge, developed from the research of criminologist Donald Cressey. It explains why otherwise trustworthy individuals commit occupational fraud, identifying three conditions that typically converge when fraud occurs: pressure, opportunity, and rationalization. Pressure (also called motive or incentive) is the perceived, often non-shareable, financial or personal need that drives an individual toward fraud. Examples include overwhelming personal debt, gambling addiction, medical expenses, substance abuse, living beyond one's means, or workplace pressure to meet unrealistic performance targets. Cressey emphasized that the problem is usually one the person feels unable to share with others, which pushes them toward a secret solution. Opportunity is the perceived ability to commit fraud without being detected. It arises from weak internal controls, inadequate segregation of duties, poor oversight, lack of audit trails, excessive trust in a single employee, or management override of controls. Of the three elements, opportunity is the one organizations can most directly influence, which is why CFEs focus heavily on strengthening controls, monitoring, and anti-fraud programs to reduce it. Rationalization is the cognitive process by which perpetrators justify their actions to themselves so they can maintain a self-image as honest people. Common rationalizations include: 'I'm only borrowing the money and will pay it back,' 'The company owes me,' 'Everyone does it,' or 'No one is really being hurt.' Rationalization allows the first-time offender to overcome moral barriers. For financial crime professionals, the Fraud Triangle serves as a practical framework for risk assessment, investigation planning, and prevention. By identifying red flags associated with each element—such as employee lifestyle changes, control deficiencies, or expressions of resentment—CFEs can anticipate and deter fraud. Later scholars expanded the model into the Fraud Diamond, adding capability, recognizing that the perpetrator must also possess the skills and position to carry out the scheme.

The Fraud Triangle: A Complete Guide for the ACFE CFE Exam

Why the Fraud Triangle Matters
The Fraud Triangle is one of the most foundational concepts in the entire field of fraud examination. It appears throughout the ACFE Fraud Examiners Manual and is tested heavily in the Fraud Prevention and Deterrence section of the CFE Exam. Understanding it is not just about passing a test: it is the mental model that fraud examiners, auditors, and compliance professionals use every day to assess risk, design controls, conduct interviews, and explain to management and juries why an otherwise ordinary person committed fraud. If you cannot explain why fraud happens, you cannot effectively prevent, detect, or investigate it. The Fraud Triangle gives you that explanation in a simple, memorable framework.

What the Fraud Triangle Is
The Fraud Triangle is a model that explains the three conditions that are generally present when an occupational fraud occurs. It was developed from the research of criminologist Donald R. Cressey, who in the 1950s interviewed roughly 200 incarcerated embezzlers (he called them trust violators) to understand why people in positions of financial trust betrayed that trust. Cressey published his findings in his 1953 book Other People's Money: A Study in the Social Psychology of Embezzlement.

Cressey's central hypothesis, which you should be able to recognize in near-verbatim form on the exam, was this: Trusted persons become trust violators when they conceive of themselves as having a financial problem which is non-shareable, are aware that this problem can be secretly resolved by violation of the position of financial trust, and are able to apply to their own conduct in that situation verbalizations which enable them to adjust their conceptions of themselves as trusted persons with their conceptions of themselves as users of the entrusted funds or property.

Over time, this hypothesis was distilled into three legs of a triangle:
1. Pressure (sometimes called Motive or Incentive): the non-shareable financial problem.
2. Opportunity (sometimes called Perceived Opportunity): the awareness that the problem can be solved secretly by abusing a position of trust.
3. Rationalization: the verbalizations that let the person justify the act and still see themselves as honest.

Note that the term Fraud Triangle itself was not coined by Cressey; it was popularized later by the fraud examination profession, including the ACFE and its founder Dr. Joseph T. Wells. Exam questions sometimes test whether you know the research originated with Cressey.

How the Fraud Triangle Works: The Three Legs in Depth

Leg 1: Pressure (The Non-Shareable Financial Problem)
Cressey found that fraud began with a financial problem the person felt they could not share with others. The key word is non-shareable. It is not the objective size of the problem that matters, but the individual's perception that the problem cannot be revealed to people who could help. Shame, pride, fear of losing status, or fear of losing a job all drive this perception.

Cressey grouped non-shareable problems into six categories, which are directly testable:
- Violation of ascribed obligations: a person in a position of trust feels they must live up to expectations (for example, a church treasurer or bank officer who cannot admit financial trouble because it would violate the image others have of them).
- Problems resulting from personal failure: losses from a bad investment or business decision that the person feels too proud or ashamed to disclose.
- Business reversals: economic conditions such as inflation, recession, or high interest rates that threaten a business, which the person believes they must fix alone.
- Physical isolation: the person simply has no one to turn to for help or advice.
- Status gaining: living beyond one's means to keep up appearances or climb socially.
- Employer-employee relations: resentment over feeling underpaid, overworked, or unappreciated, combined with a perceived inability to change the situation.

Pressure can be financial (debt, gambling, medical bills, addiction) or non-financial (pressure to meet performance targets, desire for recognition). In financial statement fraud, pressure often comes from the need to meet analyst expectations, loan covenants, or bonus thresholds.

Leg 2: Opportunity (Perceived Ability to Solve the Problem Secretly)
Opportunity has two components in Cressey's model:
- General information: the knowledge that the position of trust can be violated. The employee understands that their role gives them access that could be abused.
- Technical skill: the ability actually to carry out the violation. Cressey observed that fraudsters typically use the same skills they use in their legitimate jobs; an accountant manipulates ledgers, a cashier skims cash, a purchasing agent takes kickbacks.

Opportunity is the leg that organizations have the most direct control over. Weak internal controls, lack of segregation of duties, poor oversight, management override, inadequate audit trails, and a culture of blind trust all expand opportunity. The word perceived is crucial: the fraudster must believe they will not be caught. Even strong controls can be undermined if employees perceive they are not enforced. Conversely, the perception of detection (even if controls are weaker than believed) is a powerful deterrent.

Leg 3: Rationalization (The Verbalizations)
Rationalization is what allows a person who thinks of themselves as honest to commit a dishonest act. Cressey emphasized that rationalization occurs before the crime, not after; it is a necessary precondition, not an excuse invented later. Once the first act is committed, the rationalization may be abandoned, and the person may begin to view themselves as a criminal, at which point the fraud often escalates.

Common rationalizations include:
- "I'm only borrowing the money and will pay it back."
- "The company owes me; I'm underpaid."
- "Everyone does it."
- "It's for a good purpose" (such as paying a family medical bill).
- "The company won't miss it; they're insured."
- "I'm not hurting a real person, just a big corporation."

Cressey identified three types of trust violators based on their rationalizations:
- Independent businessmen: typically rationalized that they were only borrowing, or that their business depended on it.
- Long-term violators: embezzled over long periods, rationalizing that they were borrowing, that the embezzlement was temporary, or that they deserved the money. They often believed they would eventually repay.
- Absconders: took the money and fled. These were often people with few social ties, who rationalized less elaborately and tended to see themselves as unimportant or unattached.

Putting It Together
Cressey's model holds that all three elements must be present for a trust violation to occur. Remove any one leg, and the triangle collapses. This is why anti-fraud programs target all three: reducing pressure (employee assistance programs, fair compensation, open-door policies), reducing opportunity (internal controls, segregation of duties, surveillance, audits), and reducing rationalization (codes of conduct, ethics training, tone at the top, clear consequences).

Extensions and Criticisms You Should Know

The Fraud Scale (Albrecht): Dr. W. Steve Albrecht and colleagues developed the Fraud Scale, which replaces rationalization with personal integrity. The scale weighs situational pressure, perceived opportunity, and personal integrity: when pressure and opportunity are high and integrity is low, fraud is more likely. Albrecht's research also produced lists of red flags, including living beyond one's means, an overwhelming desire for personal gain, high personal debt, close association with customers, and feeling that pay is not commensurate with responsibility.

The Fraud Diamond (Wolfe and Hermanson): David Wolfe and Dana Hermanson added a fourth element, capability, arguing that many frauds would not occur without a person who has the right position, intelligence, ego, coercion skills, ability to lie effectively, and resistance to stress to pull it off.

MICE: Some researchers describe motivations with the acronym MICE: Money, Ideology, Coercion, and Ego/Entitlement. This recognizes that not all fraud is driven by a financial problem; some is driven by ideology (such as a belief that tax is theft) or by being coerced into participating.

Predators versus accidental fraudsters: Critics note that Cressey's model describes the accidental fraudster, the first-time offender who gets into trouble and slips into fraud. It does not explain the predator, who seeks out organizations specifically to defraud them, who does not need a non-shareable pressure, and who rationalizes little or not at all. Predators are more organized, better at concealment, and more likely to be repeat offenders.

Dr. Steve Albrecht's and the ACFE's additional research and Richard Hollinger and John Clark's study (Theft by Employees) are also commonly paired with Cressey on the exam. Hollinger and Clark found that employee theft correlated most strongly with job dissatisfaction, and that employees' perception of detection and the likelihood of sanctions were key deterrents. Be careful not to confuse these researchers with Cressey.

Application in Practice
Fraud examiners use the Fraud Triangle to:
- Perform fraud risk assessments by asking where pressure, opportunity, and rationalization exist in a given business unit or process.
- Design internal controls that specifically shrink opportunity.
- Structure admission-seeking interviews, where the interviewer offers the subject a rationalization (a morally acceptable reason) to make confession easier.
- Identify behavioral red flags; the ACFE Report to the Nations consistently finds that living beyond one's means and experiencing financial difficulties are the two most common red flags, both of which map directly to the pressure leg.
- Explain fraud to boards, juries, and management in a way that is intuitive and credible.

Exam Tips: Answering Questions on The Fraud Triangle

Tip 1: Memorize the three legs and their alternative names. Pressure may appear as motive, incentive, or non-shareable financial need. Opportunity may appear as perceived opportunity. Rationalization may appear as attitude or verbalization. Questions often use these synonyms to test whether you truly understand the concept rather than just the labels.

Tip 2: Know that Cressey is the source, and that he studied embezzlers, not fraud generally. If a question asks who developed the hypothesis underlying the Fraud Triangle, the answer is Donald Cressey. If it asks what group he studied, the answer is convicted embezzlers (trust violators). Do not credit Albrecht, Wells, Sutherland, or Hollinger and Clark for the triangle.

Tip 3: Watch for the word non-shareable. A question may describe an employee with a large but openly discussed debt and ask whether this fits Cressey's model. The answer hinges on whether the problem is perceived as non-shareable. If the person feels they can seek help, the pressure element as Cressey defined it is not present.

Tip 4: Remember that rationalization comes before the act. A common distractor states that rationalization is an after-the-fact justification. According to Cressey, it is a necessary precondition. Also recall that after the first act, many long-term violators abandon rationalization and simply continue.

Tip 5: Know the six categories of non-shareable problems and the three types of violators. Scenario questions describe a situation (for example, an executive who lost family savings in a bad investment and is too embarrassed to tell anyone) and ask you to classify it. That scenario fits problems resulting from personal failure. A treasurer who feels they cannot admit financial trouble because of their respected position fits violation of ascribed obligations. A fraudster who takes the money and disappears is an absconder.

Tip 6: Opportunity has two parts. If asked what makes up the opportunity leg, the answer is general information (knowing the trust can be violated) plus technical skill (ability to do it). Expect a question noting that fraudsters generally use skills from their everyday job.

Tip 7: Opportunity is the leg management controls most directly. If a question asks which element of the triangle an organization can most effectively reduce through internal controls, choose opportunity. Pressure and rationalization are largely internal to the individual, though ethics programs and support programs can influence them.

Tip 8: Distinguish the triangle from its extensions. The Fraud Scale (Albrecht) swaps rationalization for personal integrity. The Fraud Diamond (Wolfe and Hermanson) adds capability. MICE lists motivations. If a question mentions a fourth element, it is pointing to the Fraud Diamond; if it mentions integrity as a measurable factor, it is the Fraud Scale.

Tip 9: Remember the predator critique. If a question describes a repeat offender who joins companies intending to steal and shows no remorse or rationalization, recognize that this is the predator, and that the Fraud Triangle was designed to explain the accidental fraudster, not the predator.

Tip 10: Do not confuse Hollinger and Clark with Cressey. Hollinger and Clark's key finding was the link between employee theft and job dissatisfaction, and the deterrent effect of perceived detection. Cressey's focus was the non-shareable problem, opportunity, and rationalization.

Tip 11: Read scenario questions for all three elements. When a question presents a fact pattern and asks whether the Fraud Triangle elements are present, methodically check: Is there a secret pressure? Does the person have access and know how to exploit it? Have they justified it to themselves? Only when all three are present does the model predict fraud.

Tip 12: Apply the triangle to interviewing questions. The Fraud Triangle also appears in the Investigation section. In admission-seeking interviews, the examiner offers the subject a rationalization to reduce resistance. If a question asks why an interviewer might suggest a morally acceptable motive, the answer connects back to the rationalization leg.

Quick Review Summary
- Origin: Donald Cressey, 1950s, interviews with about 200 embezzlers, published in Other People's Money (1953).
- Three legs: Pressure (non-shareable financial problem), Opportunity (general information plus technical skill), Rationalization (verbalizations preceding the act).
- Six non-shareable problem types: ascribed obligations, personal failure, business reversals, physical isolation, status gaining, employer-employee relations.
- Three violator types: independent businessmen, long-term violators, absconders.
- All three legs must be present; remove one and fraud is unlikely.
- Opportunity is the leg organizations control most directly via internal controls.
- Extensions: Fraud Scale (integrity), Fraud Diamond (capability), MICE, predator versus accidental fraudster.

Master these points, practice classifying scenarios into the correct leg and category, and you will be well prepared for any Fraud Triangle question on the CFE Exam.
Test mode:

CFE - The Fraud Triangle Example Questions

Test your knowledge of The Fraud Triangle

Question 1

Which of the following BEST describes a commonly cited limitation of the Fraud Triangle as an explanation of why occupational fraud occurs?

Question 2

In the Fraud Triangle, a trusted employee's non-shareable financial problem that motivates the decision to commit fraud is classified under the opportunity element.

Question 3

A fraud examiner learns that a payroll clerk facing heavy medical debt added a ghost employee to the payroll. The clerk says she planned to repay the money and felt the company would hardly miss it. Her supervisor routinely signed off on payroll changes and never asked for new-hire paperwork. Which fact BEST illustrates the opportunity component of the Fraud Triangle?

More The Fraud Triangle questions
77 questions (total)