Fraud can quickly turn a SACCO from a trusted financial institution into an organisation struggling with financial losses, member complaints and reputational damage.
For SACCOs, the risk can come from different areas of operations. It may involve manipulation of member accounts, unauthorised withdrawals, fraudulent loans, forged documents, misuse of cash, conflicts of interest, procurement irregularities or abuse of digital systems.
The growing use of technology has also changed the way fraud can occur. While digital systems can improve efficiency, weak access controls, poor monitoring and inadequate segregation of duties can create new opportunities for fraud.
A strong internal control system is therefore not simply an accounting requirement. It is one of the most important safeguards a SACCO can have to protect members’ savings, assets and reputation.
Start by identifying where fraud can occur
A SACCO cannot effectively control fraud if it does not understand where the risks are.
Management should regularly conduct a fraud risk assessment covering all major operations. This should include member registration, deposits, withdrawals, loan applications, loan approvals, disbursements, repayments, procurement, payroll, investments, cash management and digital transactions.
The assessment should ask practical questions.
Who can create a member account? Who can approve a loan? Who can change a member’s records? Who can authorise payments? Who can access the SACCO’s banking platforms? Who reconciles the accounts?
If one employee can initiate, approve and complete the same transaction without independent review, the SACCO has a significant control weakness.
Separate duties among employees
One of the simplest ways of reducing fraud is to ensure that no single employee controls an entire transaction from beginning to end.
For example, the employee who enters a loan application into the system should not be the same person responsible for approving the loan and authorising its disbursement.
Similarly, the person responsible for receiving cash should not be solely responsible for recording the transaction and reconciling the cash account.
Separating responsibilities creates checks and balances. It also makes it harder for one employee to manipulate records without detection.
Where staffing levels are small, SACCO management can introduce supervisory reviews and independent approvals to compensate for limited staff numbers.
Strengthen approval controls
Every financial transaction should have clearly defined approval limits.
A SACCO can establish different approval levels depending on the value and nature of a transaction. Larger loans, payments, investments and procurement transactions should receive greater scrutiny than routine transactions.
The approval process should also be documented.
An employee should not approve a transaction simply because a senior manager verbally instructed them to do so. There should be an appropriate audit trail showing who initiated, reviewed and approved the transaction.
This becomes particularly important when transactions are processed through digital platforms.
Monitor employee access to systems
Technology can strengthen SACCO operations, but poor system controls can expose the institution to significant risks.
Each employee should have an individual user account and access should be based on their responsibilities.
Employees should not share passwords or use another person’s account to perform transactions. System administrators should also avoid giving employees access to functions that they do not need to perform their jobs.
When an employee changes roles, goes on extended leave or leaves the SACCO, their system privileges should be reviewed or removed promptly.
Management should also regularly examine system logs to identify unusual activities, including attempts to access restricted information, changes to member records and transactions conducted outside normal working patterns.
Reconcile accounts regularly
Regular reconciliation can help a SACCO identify irregularities before they become major losses.
Bank accounts, cash balances, member accounts, loan accounts and other important financial records should be reconciled regularly.
Differences should not simply be adjusted and forgotten. Every unexplained variance should be investigated and properly documented.
For example, if the SACCO’s internal records show a different balance from the bank statement, management should establish why the difference exists and resolve it.
Regular reconciliation creates an additional layer of independent verification.
Strengthen loan controls
Loans are one of the most important areas for SACCO fraud prevention because they involve large amounts of members’ money.
A SACCO should verify the identity, employment or income information and other relevant details provided by applicants before approving loans.
Loan security and guarantor information should also be independently verified where applicable.
The person assessing a loan should not have unchecked authority to approve and disburse it.
Management should also monitor unusual borrowing patterns, including multiple applications, rapid increases in borrowing, suspicious guarantor arrangements and loans linked to employees or people connected to decision-makers.
Once a loan is approved, the SACCO should confirm that the amount was disbursed to the correct member or approved account.
Protect member information
Fraud prevention also requires strong protection of member data.
Member records can contain identification details, account information, loan information and other sensitive financial records. Unauthorised access can expose members to fraud and identity-related risks.
SACCOs should limit access to member information according to job responsibilities.
Employees should also be trained on confidentiality and the proper handling of member information. Management should investigate unusual access to member accounts rather than assuming that every system access is legitimate.
Improve cash handling
Cash remains an area of significant risk where adequate controls are absent.
SACCOs that handle physical cash should establish clear procedures for receiving, recording, storing and banking money.
Cash counts should be conducted regularly and differences should be investigated immediately.
Where possible, the SACCO should also encourage secure digital payment channels that reduce unnecessary reliance on physical cash.
However, digital transactions should not be considered automatically safe. They also require authentication, transaction limits, monitoring and independent approval controls.
Strengthen procurement controls
Fraud can also occur outside member accounts.
Procurement should therefore have clear procedures covering supplier selection, quotations, approvals, delivery verification and payment.
The employee who selects a supplier should not have unchecked authority to confirm delivery and approve payment.
SACCOs should also watch for conflicts of interest. Board members, managers and employees should disclose interests that could influence procurement or other financial decisions.
A supplier should not receive preferential treatment simply because they have a relationship with someone inside the SACCO.
Give internal audit real independence
An internal audit function is only effective when it can examine operations without interference.
Internal auditors should have sufficient independence to review management decisions, financial transactions, systems and controls.
Their work should not be limited to checking whether documents exist. They should assess whether controls actually work.
For example, an auditor should not stop at confirming that a loan approval form has been signed. They should establish whether the approval was made by an authorised person, whether the supporting information was verified and whether the transaction followed the SACCO’s procedures.
Audit findings should be documented and followed up until identified weaknesses are addressed.
Strengthen the role of the board
The board has an important responsibility in creating a strong control environment.
Directors should not leave fraud prevention entirely to employees or the internal audit department. They should regularly receive reports on financial performance, internal controls, audit findings, fraud risks and outstanding corrective actions.
The board should also question unusual transactions and ensure that management addresses recurring control weaknesses.
A strong board culture can discourage employees and managers from treating internal controls as unnecessary bureaucracy.
Establish a confidential whistleblowing system
Employees and members may sometimes notice suspicious activities before management does.
A SACCO should therefore provide safe channels through which employees, members and other stakeholders can report suspected fraud.
The reporting mechanism should protect genuine whistleblowers from retaliation while allowing allegations to be investigated objectively.
Reports should be taken seriously. Management should avoid dismissing concerns simply because they involve a senior employee or influential member.
Train employees regularly
Internal controls can fail when employees do not understand them.
SACCO staff should receive regular training on fraud risks, financial controls, system security, conflicts of interest, member verification and reporting procedures.
Training should not only happen after a fraud incident. It should be part of the SACCO’s ongoing risk-management programme.
Employees should understand that protecting members’ funds is everyone’s responsibility.
Investigate suspicious transactions quickly
A delayed response can make a fraud problem worse.
When a SACCO detects suspicious activity, it should preserve relevant records, restrict further unauthorised access where appropriate and begin an impartial investigation.
Management should avoid destroying or altering records in an attempt to conceal a problem.
Depending on the circumstances, the SACCO may also need to involve its auditors, regulators, law enforcement agencies or other relevant authorities.
The objective should be to establish what happened, how it happened, the amount involved and how similar incidents can be prevented.
Review controls after every fraud incident
A fraud investigation should not end when the money is recovered or the suspect is identified.
Management should ask why the fraud was possible in the first place.
Was there inadequate supervision? Were employees sharing passwords? Was a transaction approved without proper verification? Did management ignore previous audit findings?
Answering these questions allows the SACCO to fix the underlying weakness instead of simply dealing with the individual case.
Build a culture of accountability
The strongest internal controls are ineffective when management tolerates misconduct.
Employees should understand that SACCO policies apply to everyone, regardless of position.
Managers and board members should lead by example by following approval procedures, declaring conflicts of interest and respecting financial controls.
A culture where senior officials can bypass controls creates opportunities for fraud and makes other employees less likely to follow established procedures.
Fraud prevention should be continuous
Fraud prevention is not a one-time project. SACCOs should continuously review their controls as their membership, products, technology and operations change.
A SACCO that introduces mobile banking, new loan products or new payment systems should reassess its fraud risks rather than assuming that existing controls will remain adequate.
The goal should be to detect weaknesses before fraud occurs.
Ultimately, protecting members’ money requires more than an audit at the end of the financial year. SACCOs need strong daily controls, clear responsibilities, independent oversight, secure technology, regular reconciliation and a management culture that takes accountability seriously.
When these measures work together, a SACCO is better positioned to prevent fraud, detect suspicious activity early and protect the trust that members place in the institution.
Author: Andrew Walyaula
Andrew Walyaula is a seasoned multimedia journalist. Email: [email protected]
