%202.svg)
Nonprofit fraud costs the typical organization 5% of revenue a year. Learn the common schemes, the warning signs, and the controls that actually stop it.
The Association of Certified Fraud Examiners estimates the typical organization loses 5% of its revenue to fraud every year. For a nonprofit running on lean budgets and donated dollars, that loss lands harder than the number suggests.
This article is for treasurers, finance directors, executive directors, and board members who want to understand how fraud happens in mission-driven organizations and how to lower the risk without building a corporate bureaucracy.
Nonprofit fraud is the misuse of an organization's money, assets, or financial reporting by someone inside or connected to it. Common forms include embezzlement, skimming cash before it is recorded, fake vendor billing, payroll schemes, expense reimbursement abuse, and misstating the financial records. The IRS treats it as the misuse of charitable assets.
We'll walk through what counts as fraud, what it actually costs, why nonprofits are exposed, the schemes that show up most often, the warning signs worth watching, why audits alone fall short, and the practical controls a small team can put in place.
Nonprofit fraud is the misuse of an organization's money, assets, or financial reporting by someone inside or connected to it. Common forms include embezzlement, skimming cash before it is recorded, fake vendor billing, payroll schemes, expense reimbursement abuse, and misstating the financial records. The IRS treats it as the misuse of charitable assets.
Fraud examiners sort almost every scheme into three buckets:
Many cases mix more than one category, and a single dishonest actor often runs several schemes at once.
The numbers from the ACFE Report to the Nations give a clear picture:
A stolen $76,000 is a program that does not run. The reputational hit with donors, grantors, and the public can outlast the financial one. In my work with nonprofits, I've seen organizations spend months rebuilding trust after a single incident that could have been caught earlier with basic visibility.
Several conditions create opportunity in mission-driven organizations:
For most of the organizations we work with at KleerCard, the real exposure is not a sophisticated criminal. It is a manual, paper-based process where no one can see a transaction until the monthly statement arrives. Visibility, not suspicion, is what closes most of that window.
These are the schemes that actually show up in nonprofits:
An insider takes cash or checks before they hit the books, or moves recorded funds to a personal account. Skimming is hard to detect because the money never entered the records.
A staffer sets up a shell vendor or inflates real invoices, then routes the overpayment to themselves. Billing schemes are among the most common in smaller organizations.
Someone alters payees, forges signatures, or writes checks to themselves. Checks remain a heavy fraud target because they are still widely used.
A fake employee stays on the payroll, or a real one gets unauthorized raises and hours. Whoever runs payroll alone can do this quietly for years.
A worker submits personal or invented expenses for repayment. Loose receipt rules make this one easy to start and hard to spot.
An organization card with a high limit gets used for personal purchases. In one widely reported case, an employee ran 83 personal transactions on a nonprofit's credit card before anyone noticed.
Phishing and business email compromise trick staff into wiring money or sharing credentials. Nonprofits hold donor data and often lack security training, which raises the risk.
Red flags fall into clear groups. None of them prove fraud on their own, but more than half of cases show at least one before discovery.
In the numbers and transactions
In the documents
In the structure
In the person
Red flags are signals to look closer, not proof.
An annual audit is valuable, but it is not built to catch fraud. Auditors check whether the financial statements are fairly stated, and they rely in part on what the organization tells them.
Most fraud is caught by a tip, not an audit. Tips account for 43% of detections, more than three times the next method. A reporting channel does more for early detection than the audit alone. The point is not that audits fail. The point is that audits are one layer, and the layers that catch fraud early are visibility and a way for people to speak up.
Practical controls for a small team focus on visibility and right-sized authority rather than heavy bureaucracy.
The person who spends money should not also record it and reconcile the account. For a team too small to split all three, use compensating controls such as having a board member or the treasurer review the monthly statement and reconciliation independently.
A simple, anonymous way to report concerns catches more fraud than any audit. Put a basic whistleblower policy in place with a hotline or web form, and name an independent person, often the audit committee chair, to receive reports.
A single high-limit card kept in a drawer feels safe and is not. The person holding it could spend far beyond anything the organization intended, and no one would know until later.
We built KleerCard so each person gets their own card with a budget sized to what they actually need. The act of getting funds approved before a purchase is the control. If someone tries to spend beyond their budget, the card declines. That replaces the rule stacking that larger platforms rely on.
This approach fits small and high-trust finance teams. We do not run complex, multi-tier approval chains, and we do not plan to. Organizations that need rigid enterprise approval workflows should weigh that openly. Learn more about approvals for nonprofits.
The longer fraud hides, the more it costs. Real-time visibility shrinks that window. When every transaction appears the moment a card is swiped, a questionable charge surfaces in days, not at month end.
At one private school we work with, the finance office can see each cardholder's charges as they happen. The one scare they had turned out to be a staffer's own forgotten subscription renewal, surfaced and resolved quickly because the charge was visible right away.
Pair real-time visibility with receipt capture at the point of sale, so documentation is attached before memories fade. See how expense management works and receipt tracking.
Restrict access to cash and check stock the way you would protect cash itself. Require two people when counting cash. Keep bank reconciliations current, and bring in temporary help if they fall behind.
A written financial controls policy, board review of financials, and visible follow-through send the message that someone is watching. Most fraud needs the perception that no one is.
Stay calm and follow these steps:
Oversight of nonprofits falls mostly to state attorneys general, and many states take complaints about charities through the AG's office. The IRS handles tax-exempt status abuse, and federal authorities step in for larger schemes such as grant or program fraud. See IRS resources on tax-exempt organizations and your state attorney general’s charity division.
Fraud in a nonprofit is the misuse of its money, assets, or financial reporting by an insider or someone connected to it. It includes embezzlement, skimming, fake vendor billing, payroll and reimbursement schemes, card misuse, and misstating the books.
Asset misappropriation is the most common category, covering embezzlement, skimming, billing schemes, check tampering, and expense fraud. Corruption, such as kickbacks and conflicts of interest, is the next most frequent. Financial statement fraud is rarer but the costliest per case.
Most fraud is found through a tip, not an audit. Tips account for 43% of detections in the ACFE study, more than three times any other method. Internal audits, management reviews, and real-time transaction monitoring catch the rest.
State attorneys general hold primary oversight of nonprofits, and most states take charity complaints through that office. The IRS addresses misuse of tax-exempt status, and federal agencies investigate larger cases involving grants or federal program funds.
It can be. Embezzlement, wire fraud, and theft above state dollar thresholds are commonly charged as felonies. Penalties depend on the amount taken, the method, and the jurisdiction, and they can include prison time and restitution.
Start with the board, audit committee, or an officer not involved in the activity. Use the organization's whistleblower channel if one exists. For external reporting, contact your state attorney general's charity division, and the IRS for tax-exempt abuse.
Fraud needs opportunity, and most nonprofit opportunity comes from a single person spending unseen money on a manual process. The practical fix for a lean team is not a corporate control stack. It is right-sized spending authority, real-time visibility, and a channel for people to speak up.
If your organization wants spending controls and real-time visibility built for nonprofits rather than enterprises, that is the problem KleerCard was made to solve. Visit our nonprofit solutions page to see how it works in practice, check pricing, or explore expense management and approvals for teams like yours.
About the Author
Owen Hill is Co-founder of KleerCard and has over 20 years of experience in nonprofit finance and operations. He has worked with churches, schools, and mission-driven organizations on financial controls, spend management, and practical stewardship solutions.
Sources
Speak to a member of our team and we can have you up and running in minutes, not weeks.
