Failure to Prevent Fraud: A New Era of Corporate Accountability

A single phrase now anchors the corporate fraud debate: failure to prevent. That is the title — "Failure to prevent fraud: a new era of corporate fraud accountability" — under which law firm Farrer & Co has published its assessment of where responsibility for fraud now sits.

The framing matters for finance leaders. It moves the question from "who committed the fraud" to "what did the organisation fail to stop". That reframing pushes liability up the chain, from the individual actor to the corporate entity and, by extension, to the controls that governed it.

What does "failure to prevent" actually mean?

In practical terms, a prevention-based regime asks whether a company had reasonable procedures in place to stop fraud before it happened. Where those procedures are absent or inadequate, the organisation itself becomes exposed — regardless of whether senior management knew.

For CFOs, this concentrates attention on three things:

• The design and documentation of anti-fraud controls
• The evidence that those controls operated in practice, not just on paper
• The speed with which the board can demonstrate remediation

Farrer & Co's choice of the phrase "a new era" signals more than incremental change. It suggests a step change in enforcement posture — one in which prosecutors and regulators expect firms to anticipate fraud, not merely react to it.

Why should finance desks care now?

Fraud accountability has historically trailed the act. Investigations began after losses surfaced, and corporate liability often dissolved into individual prosecutions. A prevention-based standard reverses that sequence.

The burden of proof effectively shifts onto the firm. Boards must show they took fraud risk seriously. Auditors, insurers and counterparties will read that record too.

Three consequences follow for finance functions:

1. Controls documentation becomes evidence. Internal audit files, whistleblower logs and approval chains stop being compliance housekeeping and start being the defence itself.
2. Ownership must be explicit. A named executive accountable for fraud prevention carries more weight than a committee that meets quarterly.
3. Incentives face scrutiny. Sales targets and bonus structures that reward volume over verification invite the exact failures this regime targets.

The plain takeaway: under a failure-to-prevent standard, the absence of fraud is no longer enough — the absence of opportunity must be demonstrable.

What should CFOs do first?

Farrer & Co's analysis points toward accountability as the organising principle. The first move for any finance leader is a gap assessment: where in the organisation could fraud occur today, and what specific procedure stands in its way?

That review should name dates, owners and sums at risk. A control that cannot cite its last test date is not a control; it is an assumption.

The second move is cultural. Prevention regimes reward firms where staff escalate early and without fear. A hotline that receives no calls is rarely a sign of integrity — more often it signals that nobody trusts the channel.

Farrer & Co closes its argument on the word "accountability". So should every finance team. In this new era, the question asked after a fraud will not only be who did it, but who failed to prevent it — and the answer will be written long before the fraud itself.