When a board first hears the word fraud, they picture something elaborate. Forged documents. A second set of books. Someone clever enough to think it through.
That is almost never what happens.
What happens is that one person ends up handling the money because they volunteered when nobody else would. They are competent and well-liked, which is why they were asked twice. Over a few years the role accumulates access: the bank login, the cheque book, the payment processor, the float. Nobody sets out to give one person all of it. It arrives one reasonable decision at a time.
Then something ordinary happens. A personal bill lands at a bad moment. They borrow from the float, fully intending to put it back, and they do. The next time, it takes a little longer. The time after that, it does not go back at all.
Nobody notices, because nobody is looking. Not because the board is negligent, but because the board is six volunteers who meet for ninety minutes a month and are grateful that at least the finances are handled.
The three conditions
Fraud examiners describe three things that have to be present together. They are worth knowing, because you can only really remove one of them.
Pressure. A financial problem the person cannot talk about. You will not see this coming and it is not your job to police it.
Rationalization. A story that makes it acceptable. In volunteer organizations the story is almost always about being owed something. Years of unpaid work, mileage never claimed, a tournament weekend nobody thanked them for. Often the story is not even wrong.
Opportunity. A structure that makes it possible and unlikely to be caught.
You cannot manage the first two. Boards that try end up in the worst of both worlds: suspicious of people they depend on, and still exposed. Opportunity is the only one you control, and controlling it protects the honest volunteer as much as it protects the organization.
What actually prevents it
None of this is sophisticated. That is rather the point.
Two people on every outbound payment. Not two signatures on a cheque that one person carries around. Two people who each independently know what the payment is for. If your bank has a dual authorization setting, turn it on today, for free, before you finish reading this.
Somebody other than the treasurer opens the bank statement. Ideally the president or a director with no payment authority. They do not need to reconcile it. They need to look at it, and the treasurer needs to know that they will. This single change does more work than any other on the list.
Count cash with two people, on site, before it moves. Gate takings, concession, raffle. Both sign the sheet. The float never goes home in one person's car uncounted.
Every reimbursement needs a receipt, including the treasurer's. Especially the treasurer's. Most long-running frauds in small organizations run through expense reimbursement, because it is the one channel where money leaves on a single person's say-so.
Reconcile monthly and show the board. Not a summary of what the treasurer concluded. The actual bank balance, next to the actual book balance, every month.
Rotate or review the role. Ten years in the treasurer's chair is not loyalty, it is concentration risk. If nobody can replace them, that is the finding.
The conversation nobody wants to have
The hardest part of this work is not the controls. It is that implementing them requires a board to sit in a room and consider, out loud, that someone they like and trust might one day take money.
Boards hate this. It feels like an accusation. I have watched perfectly sensible directors refuse a dual-signature policy because of what it might imply about the current treasurer.
The reframe that works: controls are not there because you suspect this treasurer. They are there because in four years you will have a different treasurer, chosen by a different board, and neither of them is in the room today. Good controls also protect the current treasurer — when money does go missing and there are no controls, the person with the access is the person who gets suspected, whether or not they did anything.
A treasurer with nothing to hide should want a second pair of eyes on the statement. Most of them, when you put it that way, do.
If you want to know where you stand
The free controls self-assessment takes about fifteen minutes with your treasurer and one other board member. It will tell you which of these you have and which you do not.
Work through it, fix the three things it flags, and you will have removed most of the opportunity that matters. That costs nothing and needs no consultant.