Audit and Assurance · Fraud, laws and regulations

Fraudulent Financial Reporting and Misappropriation of Assets in ACCA Audit

Updated 11 October 2026 · Fact-checked

Fraud is an intentional act to gain an unjust or illegal advantage. The two types in ISA 240 are fraudulent financial reporting (misstating the financial statements to deceive users) and misappropriation of assets (theft). To answer exam questions, spot the fraud risk factors, name the type, link it to the financial statement area, and state the audit response.

Understand Fraudulent Financial Reporting and Misappropriation of Assets

Fraud is an intentional act by one or more people in management, those charged with governance, employees or third parties, involving deception to obtain an unjust or illegal advantage. Error is unintentional. Intent is what separates the two. The auditor does not decide whether fraud has legally happened. The auditor's concern is whether fraud caused a material misstatement.

ISA 240 describes two types relevant to the auditor. Fraudulent financial reporting means intentional misstatement or omission of amounts or disclosures to deceive users. It is usually done by management, for example to hit a bonus target, meet loan covenants or support the share price. Misappropriation of assets means theft of the entity's assets, such as cash, inventory or payroll payments. It is usually done by employees, often in small amounts, but management can also be involved.

The fraud triangle is the model that reflects the three conditions ISA 240 describes: incentive or pressure, opportunity, and attitude or rationalisation. A fraud risk factor is an event or condition that shows one or more of these. Pressure might be tight targets or personal debt. Opportunity might be weak controls or one person controlling a whole process. Rationalisation might be "I am only borrowing it" or a dominant manager with a poor attitude to ethics.

Fraudulent financial reporting often works through revenue recognition, for example early recognition, fictitious sales or cut-off manipulation. It also works through understated expenses and liabilities, overvalued assets such as inventory and receivables, and biased estimates. Management override of controls is always a risk because management can bypass controls that otherwise look effective. Typical examples are unusual journal entries, biased accounting estimates and significant transactions outside the normal course of business. Because of this, ISA 240 requires the auditor to respond to the risk of management override on every audit.

Misappropriation examples include teeming and lading (covering stolen cash by delaying the posting of later receipts), fictitious employees on the payroll, false supplier invoices, theft of inventory and skimming of cash sales. Warning signs include missing documents, unexplained inventory shortages, employees refusing to take leave, and lifestyle that does not match pay. The ISA also presumes a fraud risk in revenue recognition. The auditor must treat it as a significant risk unless the presumption is rebutted.

Key rules to remember

Fraud triangle: Fraud = Incentive or pressure + Opportunity + Attitude or rationalisation; Use it to organise fraud risk factors in a scenario. Name which side each factor falls under.
Two types of fraud (ISA 240): Fraudulent financial reporting (misstating the financial statements) | Misappropriation of assets (theft); Say which type applies and who is likely to be responsible: usually management for the first, usually employees for the second.
Mandatory responses to management override: Test journals | Review accounting estimates for bias | Evaluate the business rationale of significant unusual transactions; These are required on every audit regardless of the assessed risks.
Revenue presumption: Presumed fraud risk in revenue recognition, unless rebutted; Treat revenue as a significant risk. The presumption can be rebutted only with a reason documented by the auditor.
Responsibility: Prevention and detection = management and those charged with governance | Reasonable assurance of no material misstatement = auditor; The auditor is not responsible for preventing fraud. Material fraud can still go undetected.

How to solve Fraudulent Financial Reporting and Misappropriation of Assets questions

Use the same method for any scenario asking you to identify fraud risks, name the fraud type, or say what the auditor should do.

1Read the requirement first. Check whether it asks for risk factors, the type of fraud, an audit response, or all three.
2Scan the scenario and underline anything unusual: targets, bonuses, debt, weak controls, one person in control, rapid growth, odd transactions or late adjustments.
3Classify each point as incentive or pressure, opportunity, or rationalisation. This stops you giving vague points.
4Name the type of fraud: fraudulent financial reporting or misappropriation of assets. State who is likely to be involved.
5Link each risk to the financial statement area and the likely misstatement, for example overstated revenue or fictitious payroll costs.
6State the audit response for each risk, such as more scepticism, journal testing, unannounced inventory counts, or stronger evidence.
7Where relevant, mention the effect on the audit: assigning more experienced staff, changing the nature, timing and extent of procedures, and communication with those charged with governance.
8Keep each point as: fact from scenario, why it is a risk, what to do. Do not just copy the scenario.

Quickest way: Fact – Factor – Fraud – Fix

When to use it: Use for Section C or OT case questions where you have only a few minutes to produce a clear list of risks.

Fact: quote the exact point in the scenario in a few words.
Factor: label it incentive, opportunity or rationalisation.
Fraud: say whether it points to financial reporting fraud or asset misappropriation, and which balance or transaction is affected.
Fix: give one specific audit procedure, not a general statement like "be sceptical".
For OT questions, remember financial reporting fraud links to management and targets, while misappropriation links to employees and weak asset controls.

Common mistakes in Fraudulent Financial Reporting and Misappropriation of Assets

Saying the auditor is responsible for preventing and detecting fraud.
Students assume auditors are the main safeguard against fraud.
Fix: State that management and those charged with governance are responsible. The auditor obtains reasonable assurance that the financial statements are free from material misstatement, whether from fraud or error.
Confusing fraud with error.
Both cause misstatements, so the difference is overlooked.
Fix: Intent is the difference. Fraud is intentional. Error is unintentional. Use the word 'intentional' in definitions.
Listing risk factors without classifying them or linking them to a fraud type.
Students copy facts from the scenario and run out of time.
Fix: Add a short label, such as 'pressure' or 'opportunity', and name the type of fraud and the affected account.
Giving generic audit responses such as 'perform more testing'.
Students fail to match procedures to the risk.
Fix: Be specific. For example, test journals posted near the year end, attend an unannounced inventory count, or check the existence of employees on the payroll.
Forgetting management override of controls.
Students focus on weak controls and assume strong controls remove the risk.
Fix: Remember management can override controls. The three required procedures apply on every audit: journals, estimates and unusual transactions.
Treating all fraud as small thefts by staff.
Misappropriation is the easiest example to picture.
Fix: Remember financial reporting fraud is usually the one with material impact on the financial statements and is often done by management.

Worked examples

Example 1

Birch Co is a listed manufacturer. The finance director's bonus depends on reaching a profit target. Profit before bonus is currently well below target. In the last month of the year, several large sales were recorded for goods that remained in the warehouse, with credit notes issued early in the next year. The finance director also approves all journals and is thought to have a strong personality. Identify the fraud risk factors, name the type of fraud and explain the audit response. (Section C style)

Show the solution

Incentive or pressure: the bonus depends on a profit target which is not currently met. This gives the finance director a motive to overstate profit.
Opportunity: the finance director approves all journals and dominates the finance function. This creates a risk of management override of controls.
Behaviour: large year-end sales for goods still in the warehouse, followed by credit notes after the year end, suggest fictitious or premature revenue recognition.
Type of fraud: this points to fraudulent financial reporting, because revenue and profit may be intentionally overstated to deceive users.
Affected areas: the bogus sales overstate revenue and receivables by the sale price. The goods are still in the warehouse, so inventory should stay in the accounts and no cost of sales should be recorded. Profit is therefore overstated by the full sale price. Only if cost of sales was also booked on the bogus sales is the overstatement limited to the margin. In that case inventory would be understated by the cost of the goods.
Response: treat revenue as a significant risk and test cut-off by checking despatch documents for sales near the year end.
Response: review credit notes issued after the year end and match them to the original sales.
Response: test journals, especially unusual or late entries, and discuss the risks with the engagement team, applying professional scepticism.
Response: obtain receivables confirmations for the large year-end balances and consider communicating concerns to those charged with governance.

Answer: The risks are an incentive (bonus target), an opportunity (finance director controls journals) and suspicious year-end sales reversed after the year end. This indicates fraudulent financial reporting through revenue overstatement. Revenue and receivables are overstated by the sale price. The goods are still held, so profit is overstated by the full sale price. If cost of sales was booked on the bogus sales, the overstatement is only the margin and inventory is understated. The auditor should treat revenue as a significant risk, test cut-off, review post-year-end credit notes, test journals, confirm receivables and keep sceptical.

Example 2

Elm Co is a retailer with 40 stores. Store managers handle cash takings and bank them weekly. Inventory counts are done by store staff only. One store has had falling cash takings for two years despite rising sales volumes. A payroll clerk has not taken holiday for three years and is the only person who adds new employees to the system. (OT case style) Which type of fraud do these facts indicate, and what are the main risks?

Show the solution

Cash takings falling while sales volumes rise suggest cash is being taken before it is recorded or banked. This is skimming of cash, a form of misappropriation of assets.
Weekly banking and handling by store managers is a weak control. Cash is held for a long time by the same people, which gives opportunity.
Inventory counts by store staff only mean there is no independent check. This allows theft of inventory to be hidden. It is also misappropriation.
The payroll clerk has not taken holiday and is the only person who adds starters. This gives opportunity to create fictitious employees and divert pay to personal accounts. It is a warning sign because fraud is often found only when the person is absent.
All of these point to misappropriation of assets by employees, rather than fraudulent financial reporting by management.
Likely financial statement impact depends on when the cash is taken. If cash is skimmed before the sale is recorded, revenue and cash are both understated. If the sale is recorded but the cash is not banked, revenue is correctly stated but cash is short. That shortage may show as a receipts difference, or be hidden by teeming and lading. Inventory is overstated if shrinkage is not recorded. Payroll expense is recorded for pay that is genuinely paid out, so the cash outflow is real. But it relates to non-existent employees, so payroll expense is overstated compared with the cost of the genuine workforce.
Suggested responses: compare till records, sales volumes and bank deposits by store, attend inventory counts at the store without notice, and check payroll to personnel records and confirm employees exist.

Answer: The facts indicate misappropriation of assets: cash skimming at the store, possible inventory theft with no independent counts, and possible fictitious employees on the payroll. The weak segregation of duties and lack of independent checks create the opportunity. If cash is skimmed before sales are recorded, revenue and cash are both understated. If sales are recorded but not banked, cash is short and revenue is correctly stated. Inventory may be overstated. Payroll expense is overstated because it includes pay to non-existent employees. The auditor should compare takings with sales volumes, attend counts unannounced, and verify the existence of employees.

Exam tips

In Section C, write each point as fact, risk factor and response. Examiners reward application to the scenario, not textbook lists.
In OT questions, decide first whether the scenario points to management (financial reporting fraud) or employees (misappropriation). This usually removes two options.
Always mention the three required management override procedures if the scenario shows management pressure or control dominance.
Make audit responses specific to the account and assertion at risk, such as cut-off for revenue or existence for payroll.
Do not say the auditor will 'prevent' fraud. Use words like 'detect', 'respond to' and 'obtain reasonable assurance'.

Fraudulent Financial Reporting and Misappropriation of Assets: frequently asked questions

What is the difference between fraudulent financial reporting and misappropriation of assets?

Fraudulent financial reporting is the intentional misstatement of the financial statements to deceive users, usually by management. Misappropriation of assets is the theft of the entity's assets, usually by employees. The first changes the reported numbers deliberately. The second often causes losses that may or may not be hidden in the accounts.

What are examples of management override of controls?

Examples include posting unusual journal entries, especially near the year end, using biased assumptions in accounting estimates, and entering significant transactions outside the normal course of business. ISA 240 requires the auditor to test journals, review estimates for bias and evaluate the business rationale of unusual transactions.

What are the three elements of the fraud triangle?

They are incentive or pressure, opportunity, and attitude or rationalisation. A fraud risk factor shows that at least one of these may be present. In exams, label scenario facts with these elements to structure your answer.

Is revenue always a fraud risk in the audit?

ISA 240 presumes there are risks of fraud in revenue recognition. The auditor therefore treats revenue as a significant risk unless the presumption is rebutted, with the reason documented. In exam scenarios, assume the presumption applies unless told otherwise.