Understanding fraud risk

The Fraud Triangle is about the person committing fraud.

It describes three conditions that can help fraud happen: motivation or pressure, opportunity and rationalisation. It does not explain why a victim believed a convincing lie.

Reviewed 29 August 2026 Next review 29 November 2026

The three conditions

What the model asks us to examine

  1. 01

    Motivation or pressure

    A financial need, personal circumstance, target or incentive that may give somebody a reason to commit fraud.

  2. 02

    Opportunity

    Access, weak controls, limited oversight or another practical opening that makes the fraud possible.

  3. 03

    Rationalisation

    The explanation a person uses to make dishonest conduct feel acceptable — for example, that no one will be harmed or the money will be returned.

Important limits

Useful does not mean universal.

  • It is not a checklist for deciding whether a message or relationship is a scam.
  • It is not an explanation of a victim’s actions or a reason to blame somebody who was deceived.
  • It does not prove that a person will commit fraud, or that fraud has occurred.
  • It is not a complete description of every offender, organisation or fraud method.

Using it responsibly

Turn the model into better organisational questions.

Opportunity is usually the condition an organisation can influence most directly through proportionate controls, oversight and culture.
  1. Map the risk

    Identify the processes, decisions and roles where fraud could create gain or loss.

  2. Reduce opportunity

    Review access, separation of duties, approvals, assurance and the routes for raising concerns.

  3. Examine pressure

    Look for targets, incentives, workloads or personal circumstances that could increase risk without assuming wrongdoing.

  4. Strengthen culture

    Make expectations clear, respond fairly to concerns and avoid language that normalises small dishonest acts.

Sources checked

Reviewed 29 August 2026. The Fraud Triangle is one analytical model; it should be combined with evidence, professional judgement and appropriate risk assessment.