FRM Exam Part II · Case Study: Financial Crime and Fraud

Fraud Triangle and Fraud Risk Drivers Explained

Updated 11 October 2026 · Fact-checked

The fraud triangle explains why fraud happens. A person commits fraud when three things meet: pressure (a motive or need), opportunity (weak controls or access), and rationalization (a story that makes the act feel acceptable). Remove or weaken any side and fraud becomes less likely. You use it to diagnose causes and choose controls.

Understand Fraud Risk Drivers and the Fraud Triangle

Fraud is deliberate deception for gain. In a bank it can be committed by an employee (internal fraud), by outsiders (external fraud), or by both together. Basel classifies these as separate operational risk event types. The exam asks less about the act and more about why it happened and what the institution should have seen.

The fraud triangle, from Donald Cressey's work on embezzlers, has three sides. Pressure is the motive: personal debt, a missed bonus target, fear of losing a job, or pressure to hit earnings. Opportunity is the ability to act and avoid detection: weak segregation of duties, poor oversight, override of controls, or one person controlling a whole process. Rationalization is the internal excuse: "I will pay it back", "the firm owes me", "everyone does it".

The three sides play different roles for a risk manager. Pressure and rationalization sit inside the person, so the firm controls them only indirectly, through culture, pay design and workload. Opportunity is the side the firm controls most directly, through controls, access rights, monitoring and audit. That is why control design focuses on opportunity.

Red flags are warning signs that the sides are present. Behavioural flags include a lifestyle beyond pay, refusal to take leave, and defensiveness when questioned. Control flags include overridden limits, unreconciled items, and repeated exceptions approved by one person. Performance flags include results that look too good or too smooth. A red flag is not proof of fraud. It is a reason to investigate.

Culture and incentives shape all three sides. Aggressive sales targets and large bonuses tied to short-term results raise pressure. A weak tone at the top, where breaches go unpunished, raises rationalization. Poor challenge of senior staff raises opportunity. The fraud diamond adds a fourth element, capability: the position, intelligence, and confidence needed to carry out the fraud. Some texts also stress that senior people with authority can override controls.

Key formulas to remember

Fraud triangle: Fraud = Pressure + Opportunity + Rationalization; A conceptual model, not a calculation. All three are usually present together. Removing one side reduces risk.
Fraud diamond: Fraud = Pressure + Opportunity + Rationalization + Capability; Adds capability: the skills, position and confidence to commit and conceal the fraud.
Control focus by side: Opportunity → preventive and detective controls; Pressure and Rationalization → culture, incentives, tone at the top; Opportunity is the side a firm can reduce most directly.
Basel event types for fraud: Internal fraud vs External fraud; Internal fraud involves at least one internal party. External fraud is by third parties without internal involvement.

How to solve Fraud Risk Drivers and the Fraud Triangle questions

Use this method on any scenario about why a fraud occurred or what should be done.

1Read the scenario and list every fact about the people, targets, pay, controls and behaviour.
2Sort each fact into pressure, opportunity, or rationalization. If capability is mentioned, note it as the diamond element.
3Identify the red flags and say whether they are behavioural, control-related, or performance-related.
4Check culture and incentives: bonus design, tone at the top, handling of past breaches, whistleblowing.
5Classify the event: internal or external fraud under Basel operational risk event types.
6Pick the response that targets the weakest side. Controls address opportunity; incentive and culture changes address pressure and rationalization.
7Check the answer option for precision. Reject options that call a red flag proof, or that fix the wrong side.

Quickest way: Three-bucket sort

When to use it: When you have about 90 seconds for a multiple-choice question on fraud causes or red flags.

Underline the clue words in the stem: debt, target, bonus (pressure); access, override, no review (opportunity); "temporary", "deserve" (rationalization).
Decide which bucket the question asks about.
Eliminate options from the wrong bucket or that say a red flag proves fraud.
If "capability" or "position" appears, think fraud diamond.
Choose the option that matches the bucket and gives a control or response fitting that bucket.

Common mistakes in Fraud Risk Drivers and the Fraud Triangle

Treating rationalization as an external control weakness.
It sounds like a justification the firm gives, not one the individual holds.
Fix: Rationalization is the individual's internal excuse. Firms influence it through culture and tone, not through a control.
Saying the fraud triangle is a quantitative risk measure.
Most FRM topics use formulas, so candidates look for one.
Fix: It is a qualitative diagnostic model. Use it to classify causes, not to compute a number.
Confusing the fraud diamond with a different triangle side.
Capability resembles opportunity.
Fix: Opportunity is the setting that allows the act. Capability is the personal traits and position needed to exploit it.
Treating a red flag as proof of fraud.
Scenarios list striking facts and candidates jump to conclusions.
Fix: A red flag calls for investigation. Pick answers that escalate and review, not ones that assume guilt.
Fixing pressure with more controls.
Candidates default to controls for every problem.
Fix: Match the response to the side. Bonus pressure needs incentive redesign. Weak oversight needs controls such as segregation of duties.
Ignoring senior management as a source of fraud.
Textbook examples focus on junior staff.
Fix: Senior people can override controls and have more capability. Management override is a key opportunity driver.

Worked examples

Example 1

A trader on a USD rates desk is far below his annual target. He has booked several trades without independent confirmation and hidden losses in an unreconciled account. He tells a colleague the losses are temporary and he will recover them next quarter. The middle office has not reviewed the account for months. Identify the three elements of the fraud triangle.

Show the solution

Pressure: the shortfall against the annual target gives a motive to hide losses.
Opportunity: trades booked without independent confirmation, an unreconciled account, and no middle office review for months.
Rationalization: the belief that the losses are temporary and will be recovered.
Check: each side maps to a distinct fact, so all three are present.

Answer: Pressure is the missed target, opportunity is the missing confirmation and review, and rationalization is the belief the losses are temporary.

Example 2

A bank finds repeated internal fraud in its retail branches. Staff face aggressive monthly sales targets with large bonuses, and managers who breach policy to meet targets are rarely disciplined. Which action best targets the underlying drivers: (A) more branch cash audits only, (B) redesigning incentives and enforcing consequences for breaches, (C) raising insurance cover, (D) reducing the number of branches?

Show the solution

Identify the drivers: aggressive targets and big bonuses raise pressure.
Rare discipline for breaches signals weak tone and raises rationalization.
Option A addresses only opportunity, and only partly.
Option C transfers loss but does not change causes.
Option D is unrelated to the drivers.
Option B changes both pressure and rationalization.

Answer: B. Redesign incentives and enforce consequences, because the drivers are pressure and rationalization created by culture and pay.

Exam tips

Expect scenario questions. Map each fact to pressure, opportunity or rationalization before looking at the options.
Know the diamond adds capability. A question may describe a senior person with unusual authority and technical skill.
Match the fix to the side. Controls fix opportunity. Incentives and culture fix pressure and rationalization.
Treat red flags as triggers for investigation, not proof. Distractors often overstate them.
Link to Basel event types. Distinguish internal fraud from external fraud when asked to classify.

Practice questions from Case Study: Financial Crime and Fraud

Fraud Risk Drivers and the Fraud Triangle in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Fraud Risk Drivers and the Fraud Triangle: frequently asked questions

What are the three parts of the fraud triangle?

Pressure, opportunity and rationalization. Pressure is the motive, opportunity is the means and weak oversight, and rationalization is the excuse the person tells themselves. Fraud is more likely when all three are present.

What is the difference between the fraud triangle and the fraud diamond?

The diamond adds a fourth element, capability. This is the personal skill, position and confidence needed to commit and hide the fraud. The triangle explains the conditions; the diamond also asks whether the person can exploit them.

What are common fraud red flags in banks?

Examples are overridden limits, unreconciled items, one person controlling an entire process, refusal to take leave, lifestyle beyond income, and unusually smooth results. A red flag signals the need to investigate. It does not prove fraud.

How do incentives and culture drive fraud?

Aggressive targets and short-term bonuses increase pressure. A weak tone at the top and little punishment for breaches make excuses easier and enforcement weaker. Strong culture and balanced incentives reduce both.