EXHIBIT 101 / THE HANDBOOK
EXHIBIT#86HIGH
Management & OwnershipComposite score: 54/100

Social Engineering and Phishing

An attacker impersonates an executive or vendor by email or phone to redirect a legitimate payment.

Risk Scores

Frequency50
Financial Loss60
Detection Difficulty70
Prevention Ease60
Composite Score54/100

Perpetrator Roles

Accounting

Affected Formats

QSRFast Casual

Detection Difficulty

Moderately difficult. Requires consistent audit procedures and data analysis to surface.

HOW IT WORKS
Financial records maintained
Entries manipulated
False statements produced
Investors or lenders misled
Audit uncovers discrepancy
Handbook Chapter · F-086

Financial Statement Fraud

Full chapter with identity card, real examples, warning signs, detection and prevention guidance.

Exhibit AI Detection

AI-Powered Detection Design

Require independent verification, using contact information already on file, for any financial instruction received by phone, email, or video.

Prevention Guidance

Audit Controls

Enhanced audit controls required. Standard procedures are insufficient — implement layered verification.

Technology

Automated POS monitoring, real-time exception reporting, and AI-driven anomaly detection significantly reduce exposure.

Culture & Training

Staff awareness programs, anonymous reporting channels, and clear consequence policies deter opportunistic fraud.

Seen this in your operation?

Submit an anonymous report to help build the next edition of the handbook.

Report This Scheme