{"id":28439,"date":"2026-05-29T07:00:58","date_gmt":"2026-05-29T05:00:58","guid":{"rendered":"https:\/\/smecyberinsights.co.uk\/?p=28439"},"modified":"2026-05-15T11:42:54","modified_gmt":"2026-05-15T09:42:54","slug":"cifas-workplace-fraud-trends-uk-smes-2026","status":"publish","type":"post","link":"https:\/\/smecyberinsights.co.uk\/index.php\/2026\/05\/29\/cifas-workplace-fraud-trends-uk-smes-2026\/","title":{"rendered":"SME Cybersecurity: Cifas Workplace Fraud Trends: Why UK SMEs need stronger fraud controls now \u2013 Report & Analysis"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t
\"Partners1_NordVPN\"<\/figure><\/div>
\"Partners3_R3\"<\/figure><\/div>
\"Partners2_Zoho\"<\/figure><\/div>
\"Partners4_Plesk\"<\/figure><\/div>
\"Red_Button_Slider\"<\/figure><\/div>
\"ogo2\"<\/figure><\/div>
\"Detection.<\/figure><\/div>\t\t\t<\/div>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"SECURUS\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"SME\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t
Image Credit: Yanalya via Magnific<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

Gibraltar:\u00a0 Friday, 29 May 2026 \u2013 07:00 CET<\/p>\n

SME Cybersecurity: Cifas Workplace Fraud Trends: Why UK SMEs need stronger fraud controls now \u2013 Report & Analysis
\n<\/strong>By: Iain Fraser<\/a>\u00a0\u2013\u00a0Cybersecurity Journalist
\n<\/a>Published in Collaboration with:
\nSecurus Communications Ltd
\n<\/a>SMECyberInsights.co.uk<\/a>\u00a0– First for SME Cybersecurity
\n<\/a>Google Indexed on: xxxxx at xxxx
\n#SMECyberInsights #SMECybersecurity #SMECyberInsights #SME #CyberSafe #Cifas #workplace fraud #insider risk #employee fraud<\/em><\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

The latest Workplace Fraud Trends findings from Cifas should concern any UK business leader, but they carry particular weight for SMEs.<\/strong> Smaller firms often depend on trust, informal approvals, and lean operating models. That makes them more vulnerable when workplace misconduct becomes normalised or quietly rationalised.<\/p>\n

The report does not just point to isolated bad behaviour. It suggests that some forms of fraud are being seen by a worrying number of professionals as acceptable, understandable, or at least easier to excuse than many employers would expect.<\/p>\n

As Mike Haley<\/a>, CEO of Cifas, put it: \u201cThese insights suggest a shift in workplace norms and raise urgent questions about organisational culture, risk management, and accountability. Organisations must take steps urgently to build effective counter-fraud cultures in the workplace, strengthening prevention, and empowering employees to do the right thing.\u201d<\/em><\/p>\n

That is the real headline for SMEs. This is not only a fraud issue. It is a culture, governance, and control issue.<\/p>\n

The figures supplied from the Cifas report paint a stark picture:<\/strong><\/p>\n

* 1 in 4 (24%) believe it is acceptable to secretly work for a competitor
\n* 18% of professionals admit to selling company login details for money
\n* 19% have used fake job references to land a job
\n* 13% know someone who used company funds to place a bet
\n* 1 in 4 (24%) say expenses fraud is justifiable<\/p>\n

Taken together, these findings suggest that misconduct is not always seen as a serious line to cross. In some cases, it appears to be viewed as opportunistic, defensible, or simply part of working life.<\/p>\n

For SMEs, that matters because smaller organisations are less likely to have the formal safeguards needed to detect or deter these behaviours early.<\/p>\n

Large enterprises often have internal audit teams, mature identity controls, structured procurement checks, and stronger segregation of duties. Most SMEs do not. Many rely on a handful of trusted staff, outsourced support, and systems configured more for convenience than control.<\/p>\n

This often leaves smaller firms exposed in areas such as:<\/p>\n

* payroll and finance permissions
\n* supplier onboarding
\n* expense claims
\n* reference checking
\n* shared or over-permissioned accounts
\n* leaver processes
\n* contractor and temporary staff access<\/p>\n

That creates exactly the kind of environment where low-friction fraud can thrive. One person may have too much visibility, too much access, or too much unchecked authority.<\/p>\n

* If 18% admit to selling company login details for money, that is not merely an HR concern. It is a direct cyber security and business resilience issue.<\/p>\n

* If 19% have used fake job references, recruitment assurance becomes part of fraud prevention, not just people administration.<\/p>\n

* If 24% think expenses fraud is justifiable, then financial leakage and weak control culture may be more embedded than many leaders assume.<\/p>\n

The strongest value in the report is not just in the percentages. It is in what those behaviours could mean in practice.<\/p>\n

Selling company login details can lead to mailbox compromise, data theft, payment fraud, customer record exposure, unauthorised access to SaaS systems, and reputational or regulatory consequences.<\/p>\n

For SMEs running on Microsoft 365, cloud accounting platforms, CRM systems, and payroll tools, one set of credentials can unlock a surprising amount of operational risk.<\/p>\n

Hiring someone on the basis of fake references can expose a business to unqualified staff in sensitive roles, increased insider threat, poor access decisions, financial misconduct, reputational damage, and weaker compliance outcomes.<\/p>\n

This becomes particularly risky where the role involves finance, procurement, customer data, or systems administration.<\/p>\n

Some businesses still treat expenses fraud as minor misconduct. That is a mistake.<\/em><\/strong><\/p>\n

Repeated low-level abuse can lead to direct financial loss, poor management visibility, tolerance of rule-breaking, internal resentment, and a broader erosion of accountability. Once that tone is set, more serious fraud becomes easier to conceal.<\/p>\n

The answer is not to drown the business in policy documents. It is to strengthen a handful of high-value controls and reinforce a culture of verification.<\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"SME\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

SME leaders should start by reviewing access to email administration, payroll systems, accounting tools, customer databases, supplier records, and shared cloud storage. Staff should only have the access they genuinely need.<\/p>\n

Hiring checks also need tightening. Where roles involve trust, money, or sensitive information, businesses should verify references properly, confirm employment history, check role suitability, and scrutinise unexplained inconsistencies.<\/p>\n

Financial duties should also be separated. No single person should be able to create a supplier, approve a payment, alter bank details, and reconcile transactions. Even simple segregation can sharply reduce fraud opportunity.<\/p>\n

Expense controls need to be practical rather than bureaucratic. Clear approval thresholds, random review of claims, duplicate detection, and scrutiny of unusual submissions can all help.<\/p>\n

Insider risk must also be treated as part of cyber security. If staff can misuse credentials, leak access, or abuse systems, the cyber implications are immediate.<\/p>\n

Finally, employees need a safe way to flag concerns. A business that wants integrity must make it easier to report misconduct than to ignore it.<\/p>\n

Mike Haley\u2019s<\/a> warning about workplace norms matters because it highlights a trap many SMEs fall into. Leaders often believe that a good culture, long-serving staff, or a close team will naturally keep fraud in check.<\/p>\n

Culture helps. It is not enough on its own.<\/strong><\/p>\n

A healthy culture must be backed by visible accountability, proportionate oversight, clear rules, enforced approvals, and meaningful consequences for abuse. Otherwise, trust can become a substitute for control, and that is exactly where fraud risk grows.<\/p>\n

The Cifas Workplace Fraud Trends<\/a> findings should prompt a serious rethink for UK SMEs. These are not just statistics about dishonest behaviour. They are indicators of a broader control problem affecting recruitment, access management, finance, and organisational culture.<\/p>\n

The most resilient SMEs will not be the ones with the longest policies. They will be the ones that do the basics well: verify before trusting, limit access, separate duties, monitor exceptions, make reporting easier, and reinforce accountability from the top.<\/p>\n

In short, fraud prevention for SMEs is no longer just about catching bad behaviour. It is about designing a business that is harder to misuse in the first place.<\/p>\n

\ufeff<\/span>\ufeff<\/span><\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tRead The Cifas Report \/...<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"SECURUS\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t
<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

SECURUS Communications Ltd<\/strong><\/p>\n

Securus<\/a> <\/strong>is a managed communications Operator, providing next-generation network infrastructure and value added services to Managed Hosting providers and the ‘cloud generation’\u200b of enterprises. Securus<\/a> <\/strong>priority is to offer communication services that represent excellent value for money and are backed by exceptional levels of support.<\/p>\n

Contact Securus<\/strong>
\nSecurus Communications Ltd
\nStation Road, Landmark house, Hook, England RG27 9HA, GB
\nT: Enquiries:\u00a003451 283457<\/span><\/a>\u00a0| Service Desk: 03451 283458<\/a>
\nSecurus on LinkedIn<\/a> | Securus on “X”<\/a> | https:\/\/securuscomms.com<\/a><\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t

\n\t\t\t\t\t<\/span>\n\t\t\t\t\tLatest Posts from SECURUS Communications<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t<\/h2>\n\t\t\t<\/div>
\n\n
\n
\n\n
\n \n \n \"Do <\/a>\n\n \n