Spot it before it spreads: How to build a fraud-resistant culture

Fraud is not an event. It’s a cultural failure. Fraud doesn’t begin in the finance department. It begins in silence. In excuses. In the unspoken code: “That’s how we do things here.” By the time the money is gone, the rot has already eaten through policy, values, and leadership integrity. In Uganda alone, over 10% of the annual budget is lost annually to internal fraud — most of it preventable.

Take the case of the water-for-kickbacks scandal

In June 2024, a whistleblower at a government water project in northern Uganda triggered a chain of revelations. What started as “missing pipes” ended with five staff suspended and UGX 1.2 billion unaccounted for. At the heart? A toxic culture. Supervisors approved ghost deliveries. Procurement teams handpicked contractors in exchange for kickbacks. Finance looked away because “everyone was eating.”

The anatomy of silence

a) Fear of retaliation

(i) New staff noticed the fraud but kept quiet, afraid to lose their contracts.

(ii) One who tried to speak up was threatened with transfer to a remote post.

b) Normalization of deviance

(i) Fake site visits were signed off as routine.

(ii) Audit logs were deleted. No one questioned the missing documentation.

c) Weak leadership tone

(i) The project manager never took leave — a classic red flag.

(ii) His replacement later confessed they “inherited a system they couldn’t clean up.”

What we found in our investigation

When we conducted a culture audit using our fraud vulnerability heatmap, the results were chilling. Over 78% of staff said they believed fraud would not be punished if “the person is well connected.” Even more worrying, 62% admitted they would not report fraud if it involved their supervisor.

How to disinfect your culture

a) Start with leadership discipline

(i) If your boss fears leave audits, they are the fraud risk.

(ii) Rotate duties. No single point of failure.

b) Empower the internal audit

(i) Train them in digital forensics. Not just policy checking.

(ii) Let them report directly to the Board, not management.

c) Reward whistleblowers

(i) Pay for tips. It works.

(ii) Anonymity is not enough. Protect careers.

d) Declare a fraud-free quarter and mean it

(i) Tie incentives to ethical performance.

(ii) Use data. Track red flags.

A fraud-resistant culture isn’t about speeches. It’s about systems. Stop tolerating the small thefts. Because what you permit, you promote. And what you promote becomes the new normal.