Key mitigating controls for prevention and detection of fraud. CTP Case study. Saving lives, changing minds.

Similar documents
Audited Project Financial Statements. JFPR 9175-PHI: Emergency Assistance and Early Recovery for Poor Municipalities Affected by Typhoon Yolanda

The notes on pages 4 to 8 are an integral part of these Appeal Financial Statements.

Executive Board Annual Session Rome, May 2015 POLICY ISSUES ENTERPRISE RISK For approval MANAGEMENT POLICY WFP/EB.A/2015/5-B

EUROPEAN COMMISSION DIRECTORATE-GENERAL FOR HUMANITARIAN AID AND CIVIL PROTECTION - ECHO

Independent Auditor s Report

International Federation of Red Cross and Red Crescent Societies PLAN AND BUDGET Saving lives, changing minds.

AFGHANISTAN ALLOCATION GUIDELINES 22 JANUARY 2014

Independent Auditor s Report

ANTI-FRAUD STRATEGY INTERREG IPA CBC PROGRAMMES BULGARIA SERBIA BULGARIA THE FORMER YUGOSLAV REPUBLIC OF MACEDONIA BULGARIA TURKEY

Last Updated: 1 February 2018 To be reviewed: Annually

Independent Auditor s Report

Terms and Conditions. for Debit Card

Independent Auditor s Report

STANDING COMMITTEE ON PROGRAMMES AND FINANCE. Twenty-third Session

Regulation on the implementation of the European Economic Area (EEA) Financial Mechanism

Independent Auditor s Report

Overall principles. Objective and scope

INTERREG - IPA CBC ROMANIA-SERBIA PROGRAMME

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL. Establishing the European Voluntary Humanitarian Aid Corps

Anti-Fraud Policy. Version: 8.0 Approval Status: Approved. Document Owner: Graham Feek. Review Date: 07/12/2018

HUMANITARIAN RESPONSE

ENVIRONMENTAL, SOCIAL AND GOVERNANCE POLICY

AHA Centre Executive (ACE) Programme 2017 Red Cross Red Crescent Induction October 2017 Semarang, Indonesia

Population Activities Unit Tel Palais des Nations Fax

ANTI-FRAUD CODE CONTENTS INTRODUCTION GOAL CORPORATE REFERENCE FRAMEWORK CONCEPTUAL FRAMEWORK ACTION FRAMEWORK GOVERNANCE STRUCTURE

BERMUDA MONETARY AUTHORITY THE INSURANCE CODE OF CONDUCT FEBRUARY 2010

Independent Auditor's Report

Fighting Hunger Worldwide

Fraud Control Framework

UNOFFICIAL CONSOLIDATED VERSION LAW ON ASSOCIATIONS AND FOUNDATIONS OF BOSNIA AND HERZEGOVINA. Article 1

FINANCIAL AND ECONOMIC CRISIS: SOCIAL NGOs PROPOSALS FOR A EUROPEAN RECOVERY PLAN. 19 November 2008

Recommendation of the Council on Good Practices for Public Environmental Expenditure Management

Ordinance of the Swiss Federal Banking Commission Concerning the Prevention of Money Laundering

Assessing payment mechanisms for Myanmar

Appreciative Inquiry Report Welsh Government s Approach to Assessing Equality Impacts of its Budget

REPORT 2015/095 INTERNAL AUDIT DIVISION

The DAC s main findings and recommendations. Extract from: OECD Development Co-operation Peer Reviews

Programme Development and Funding Officer

DECISIONS TAKEN WITH RESPECT TO THE REVIEW OF IPCC PROCESSES AND PROCEDURES COMMUNICATIONS STRATEGY

Consultation Paper No. 7 of 2015 Appendix 4. Abu Dhabi Global Market Rulebook Market Infrastructure Rulebook (MIR)

OIC/GA-IOFS/2016/FIN.REG FINANCIAL REGULATIONS OF THE ISLAMIC ORGANIZATION FOR FOOD SECURITY

Multi-country European Integration Facility

Transparency and anti-corruption

GOVERNMENT OF SOUTHERN SUDAN MINISTRY OF GENDER, SOCIAL WELFARE AND RELIGIOUS AFFAIRS 2009 SOCIAL SECURITY POLICY

Registry General September 2015

April 2015 FC 158/12 E. Hundred and Fifty-eighth Session. Rome, May Anti-Fraud and Anti-Corruption Policy

Guidelines. Actuarial Work for Social Security

Suspected fraudulent acts by partner

Norway 11. November 2013

GUIDELINES ON COMPLIANCE FUNCTION FOR FUND MANAGEMENT COMPANIES

UN-Habitat Policy For Implementing Partners. UN-Habitat. Policy For. Partners

Thirty-Second Board Meeting Risk Management Policy

23/06/2017. Agenda. Myanmar Humanitarian Fund. Project Proposal Design Training. What is the MHF? MHF Governance and Management

Revenue Scotland Counter-Fraud Policy

ANTI-FRAUD POLICY. Reference No: ANTIFP-251. Policy Type: Governance. Directorate Area: All Directorates. Policy Author / Champion: Maurice Atkinson

University Fraud Policy

Anti-fraud and Corruption Policy

Independent Auditor s Report

N.B. Expected results below are for the period for more information see the FedNet Plan of Action (available on FedNet).

Having regard to the Treaty on the Functioning of the European Union, and in particular Article 291 thereof,

ASTRAZENECA GLOBAL POLICY DATA PRIVACY

Independent Auditor's Report

Policy 42 Anti-Fraud, Anti-Theft & Anti-Corruption

3. Statement on commitment to control of funds and counter-terrorism and purpose of policy

WSSCC, Global Sanitation Fund (GSF)

MULTI-COUNTRY. Support to Western Balkans Infrastructure Investment Projects for 2014 INSTRUMENT FOR PRE-ACCESSION ASSISTANCE (IPA II)

PART I - DEFINITIONS & PRINCIPLES. Date 11 May 2015

REPORT 2014/147 INTERNAL AUDIT DIVISION

South Sudan Common Humanitarian Fund (South Sudan CHF) Terms of Reference (TOR)

UCISA TOOLKIT. Major Project Governance Assessment. version 1.0

Whistle-Blowing Policy

Vision Paper: OCHA Country-Based Pooled Funds (CBPFs) and Beyond

Economic and Social Council

SERBIA. Support to participation in Union Programmes INSTRUMENT FOR PRE-ACCESSION ASSISTANCE (IPA II) Action summary

ECHO.C - Resources, Partnerships and Operational Support

EN CD/11/11.5 Original: English For information

DG ECHO perspectives on Cash Transfer Programming. Presentation to the CaLP global learning event, Bangkok 16th February 2011

Prudential Standard GOI 3 Risk Management and Internal Controls for Insurers

Fraud and corruption prevention and control policy of the International Federation of Red Cross and Red Crescent Societies

ANTI-CORRUPTION POLICY

Factsheet N 6 Project implementation: delivering project outputs, achieving project objectives and bringing about the desired change

Food Security Outcome Monitoring

EXCERPT FROM AUDIT REPORT OF ANNUAL FINANCIAL REPORT OF RED CROSS OF MONTENEGRO FOR 2013

ANTI-FRAUD, BRIBERY AND CORRUPTION POLICY AND STRATEGY THE VIEW TRUST

Risk Management. Policy No. 14. Document uncontrolled when printed DOCUMENT CONTROL. SSAA Vic

Al-Amal Microfinance Bank

Information sharing between Inland Revenue and the

Tracking Government Investments for Nutrition at Country Level Patrizia Fracassi, Clara Picanyol, 03 rd July 2014

VACANCY ANNOUNCEMENT: DIRECTOR OF PROGRAMMING, BUDGETING, FINANCE AND ACCOUNTING

MONTENEGRO. Support to the Tax Administration INSTRUMENT FOR PRE-ACCESSION ASSISTANCE (IPA II) Action summary

Risk Management Framework

OPERATIONAL PROGRAMME under THE FUND FOR EUROPEAN AID TO THE MOST DEPRIVED

Audit Report. Canada Small Business Financing Program

Control activities that are part of the process are detailed in the riskcontrol

AUDIT OF THE NATIONAL ARCHIVAL DEVELOPMENT PROGRAM

INSURANCE. Forensic services. Helping to protect your business from fraud, misconduct and non-compliance ADVISORY. kpmg.com/in

Commissioner for Humanitarian Aid and Crisis Management

South Sudan Common Humanitarian Fund Allocation Process Guidelines

UNITED NATIONS JOINT STAFF PENSION FUND. Enterprise-wide Risk Management Policy

Thomas Cook Borderless Prepaid Card Terms and Conditions

Transcription:

110110010101110100100101010101101010101000100101010101011100010101010111100001110101010100101010 101010110001010101110101010101000101111010110101001011010100101010101010010100101010101010101101 100101011101001001010101011010101010001001010101010111000101010101111000011101010101001010101011 101100010101011101010101010001011110101101010010110101001010101010100101001010101010101011011110 010111010010010101010110101010101010101010101110010101010111100111010101010010101010111101010110 101110101010101000101111010110101001011010100010101010101010100101010101010101101111011001010111 001010101011010101010010010101010101110101010101111101010101001010101011110101011001010100101010 010111101011010100101101010010101010101001010010101010101010110111101100101011101001001010101011 101000100101010101011100110101011110001110101010100101010101111010101100101010111010101010100010 101101010010110101001010101010101010010101010101010110111101100101011101001001010101011010101010 101010101011100010101010111100111010101010010101010111101010110010101011101010101010001011110101 001011010100101010101010101001010101010101011011110110010101110100100101010101101010101000100101 101110010101010111100111010101010010101010111101010110010101011101010101010001011110101101010010 100101010101001001010101011010101010010010101010101110101010101111001110101010100101010101111010 010101011100101010110101010100010010101010101110101010101011010111010101010010101010111101010110 101110101010101000101111010110101001011010101010101010101001010101010101011011110110010101110100 101010110101010100010010101010101110101010101111001110101010100101010101111010101100010101001010 000101111010110101001011010110101010101001010010101010101010110111101100101011101001001010101011 101000100101010101011100101010101111011101010101001010101011110101011000101010111010101010100010 101101010010110101001010101010100101001010101010101011001010111010010010101010110101010100010010 010111010101010111100111010101010010101010111101010110101010111010101010101011110101101010010110 101010101010010100101010101010101101111011010101110100100101010101101010101000100101010101011100 010111111101010101001010101011110101011001010101110101010101000101111010110101001011010100101010 001010010101010101010110111101100101011101001001010101011010101010010010101010101110001010101011 010101010010101010111101010110001010101110101010101000101111010110101001011010100101010101010010 101010101010110111101100101011101001001010101011010101010010010101010101110001010101011110001110 010010101010111101010110001101011101010101010001011110101101010010110101000101010101010101001010 010101101111011001010111010010010101010110101010100010010101010101110001010101011110011101010101 010101111010101100010101001010101010001011110101101010010110101101010101111010101100101010111010 010101111010110101001011010100101010101010010100101010101010101101111011001010111010010010101010 101010001001010101010111010101010111100111010101010010101010111101010110001101011101010101010001 010110101001011010100101010101010010100101010101010101101111011001010111010010010101010110101010 001010101010111000101010101111001110101010100101010101111010101100010101001010101010001011110101 001011010110101010101001010010101010101010110111101100101011101001001010101011010101010001001010 011100010101010111100111010101010010101010111101010110001010101110101010101000101111010110101001 010010101010101001010010101010101010110111101100101011101001001010101011011010101001010101010111 101011110111010101010010101011010101010111000101010101111001110101010100101010101111010101100010 Key mitigating controls for prevention and detection of fraud CTP Case study www.ifrc.org Saving lives, changing minds.

The International Federation of Red Cross and Red Crescent Societies (IFRC) is the world s largest volunteer-based humanitarian network. With our 190 member National Red Cross and Red Crescent Societies worldwide, we are in every community reaching 160.7 million people annually through long-term services and development programmes, as well as 110 million people through disaster response and early recovery programmes. We act before, during and after disasters and health emergencies to meet the needs and improve the lives of vulnerable people. We do so with impartiality as to nationality, race, gender, religious beliefs, class and political opinions. Guided by Strategy 2020 our collective plan of action to tackle the major humanitarian and development challenges of this decade we are committed to saving lives and changing minds. Our strength lies in our volunteer network, our communitybased expertise and our independence and neutrality. We work to improve humanitarian standards, as partners in development, and in response to disasters. We persuade decision-makers to act at all times in the interests of vulnerable people. The result: we enable healthy and safe communities, reduce vulnerabilities, strengthen resilience and foster a culture of peace around the world. International Federation of Red Cross and Red Crescent Societies, Geneva, 2016 Any part of this publication may be cited, copied, translated into other languages or adapted to meet local needs without prior permission from the International Federation of Red Cross and Red Crescent Societies, provided that the source is clearly stated. Requests for commercial reproduction should be directed to the IFRC Secretariat at secretariat@ifrc.org All photos used in this study are copyright of the IFRC unless otherwise indicated. P.O. Box 303 CH-1211 Geneva 19 Switzerland Telephone: +41 22 730 4222 Telefax: +41 22 730 4200 E-mail: secretariat@ifrc.org Web site: www.ifrc.org 1306500 Key mitigating controls for prevention and detection of fraud Follow us:

Key mitigating controls for prevention and detection of fraud Table of contents Table of contents 1. Overview 4 2. Programme overview 5 3. Programme description 6 Context and programme choice 6 Programme design 6 Household selection 6 Programme implementation 7 Programme outcome 7 4. IFRC and NS response to the incident 9 Identification of the fraud 9 Analysis and investigation 9 Screening and identifying cases of fraud 9 Confirming cases 10 Action taken 10 Programme continuity 10 5. Lessons learned on key mitigating controls 11 Preventive and detective controls 11 Segregation of duties 11 6. Recommendations and key messages 12 Minimum standards 12 Preparedness 12 Assessment 13 Response analysis 13 Set-up and implementation 13 Monitoring and evaluation 13 Some additional considerations 13 7. Conclusion 14 3

Key mitigating controls for prevention and detection of fraud Humanitarian context 1. Overview The International Federation of Red Cross and Red Crescent Societies (IFRC) acknowledges that cash transfer programming (CTP) is an effective response option to support disaster-affected populations in a way that is empowering and dignifying. The steady growth in CTP usage in IFRC operations is evident both in the number of appeals that include a CTP component and in usage that spans from relief to recovery and across sectors. When appropriate, CTP is a powerful cross-cutting tool that can help achieve multiple objectives, but more importantly, objectives that are most important to the disaster-affected population. Despite this growing acceptance of CTP as a response option, concerns about misuse and fraud remain an obstacle for many National Societies in adopting cash-based responses. This concern revolves around the risk of diversion of funds due to its greater appeal and discretion compared to its in-kind equivalent. As a humanitarian organization, it is our responsibility to remain accountable to donors and our mandate to serve the most vulnerable people. However, as routine consideration of appropriate CTP becomes increasingly expected by donors and CTP is identified as a preferred form of support by the affected population, risks of fraud does not necessarily mean that CTP should not be implemented, rather they need to be identified and appropriately managed. However, the level of controls needs to also be fit for purpose in relation to the risks identified. In an environment with finite resources and expectations for cost-efficiency, striking the right balance can often be challenging. Due diligence for a rigorous risk management system is mandatory, but also needs to be balanced with its fit for purpose such that the resource invested justifies the degree of risk mitigation activities performed. There is in part a need for managing realistic expectations as much as there is a need for risk management to be more rigorous. It must be made clear that both the IFRC and its membership have zero tolerance for fraud. There is a clear distinction between loss from fraud versus loss from shrinkage which includes administrative errors and unredeemed grants post-distribution. However, CTP is often held by organizations at a heightened standard compared to its in-kind equivalent within the humanitarian sector. This is not an appeal to lower the standards for CTP nor is it an invitation for negligence, but like shrinkage with in-kind goods, a level of acceptable loss needs to be established for CTP expectations to be more practical and manageable. Like in-kind goods, risks can be mitigated by the design, implementation and monitoring of the programme. Therefore, we must strengthen our ability to manage risk in order to accommodate CTP while doing our due diligence in minimizing the risk for both cash-based responses and in-kind goods. As CTP is becoming more institutionalized, more expected and more commonly used, standard processes should be established such that key controls are established in preventing, deterring and detecting fraud. Best practices and lessons learned from the Movement is the best way for us to continue improving humanitarian standards and best serve those in need. This anonymized case study walks through the process of how the IFRC and National Society dealt with fraud in a large, longer-term CTP project that resulted in the continuation of the programme in hopes that the lessons learned can help further mitigate similar risks in other programmes. 4

Key mitigating controls for prevention and detection of fraud Programme overview 2. Programme overview Objective Duration Cost Number of households Household selection criteria Main activities for set-up of CTP Key mitigating activities Actions taken in response to the fraud identified Unconditional cash transfers for basic needs and winterization support 18 months (12 months of payments) 8.43 million Swiss francs (CHF) 4,596 households Below the poverty line Vulnerability based on living conditions, dependency ratio and income/ expenditure Female headed households Households with sick/injured/disabled member Households with four or more children Households with children under five years of age Stakeholder analysis Problem and objective tree Vulnerability criteria/selection Selection of location and targeted beneficiaries Determination of cash modality Determination of delivery mechanism Plan of action Distribution Post-distribution monitoring (PDM) and focus group discussions (FGD) CTP standard operating procedures (SOP) Beneficiary communication and feedback (phone call, home visits, announcements, post-distribution monitoring (PDM) visits) Complaint mechanism (telephone hotline) Internal investigations Dismissal of those involved Reverification of the beneficiary list Increased segregation of duties on key project roles and functions Transfer of responsibility on key duties External audit Additional mitigation/remedial actions 5

Key mitigating controls for prevention and detection of fraud Programme description 3. Programme description Context and programme choice An escalation of violence and a continuously deteriorating economic situation in the neighbouring country had forced a large-scale population movement. Several actors from within the Red Cross and Red Crescent Movement responded to the large-scale population movement to address the most vulnerable people s needs and protect their living conditions in a way that preserves their dignity. Findings from the Household Economic Security assessment suggested that families were incurring multiple expenditures with limited opportunities to earn income and that rent fees were identified as one of the biggest expenditure. The affected population survived entirely on daily work, sale of food vouchers, taking loans and charitable donations. It was identified that renting a place to live was one of the biggest expenditure and without further support for needs not easily covered by inkind goods (e.g. rent), many were forced to take on negative coping mechanisms such as relying on illegal work, child labour, selling their personal assets and incurring debt. Programme design For this reason, unconditional cash was identified as an appropriate form of assistance to alleviate and help families meet their needs based on their individual priorities and to prevent erosion of coping capacity and assets. Programme design It was assessed that the context had a good level infrastructure to be able to deliver CTP with sufficient ATM machines available by the partner bank. This delivery mechanism also allowed for monthly instalments without needing to conduct monthly physical distributions. Total transfer amount per household Number of payments Modality Delivery mechanisms Partners/service providers Service provision charges The amount received is graded according to family size (in CHF 1 ): CHF 65/month families of 1-2 members CHF 130/month families of 3-5 members CHF 156/month families with 6 or more members One instalment per month for up to 12 months Unconditional cash grant Cash transfer through third party (prepaid debit cards distributed by the National Society and redeemed at the partner bank) PARTNER BANK CHF 2.60 as loading fee for each upload of cash grant and management fees CHF 1.96 for each card issuance No charges for card replacement 1 www.oanda.com/ 6

Key mitigating controls for prevention and detection of fraud Programme description Household selection Based on a set of criteria, the National Society s branch volunteers identified the households. Household visits were set up to complete the registration forms to verify the conditions and criteria of the household for the programme. The criteria agreed with the partners were as follows: Below the poverty line Vulnerability based on living conditions and income/expenditure Female headed household Family with sick/injured/disabled member Families with four or more children Families with children under five years of age The list was then sent from the branch to the National Society s headquarter office where a project staff would then do a 10% verification of those households to ensure the criteria were met. Programme implementation The IFRC provided the list of selected households with several key data points (name, ID number, address/location) to open an electronic account which was linked to a prepaid debit card. The card s function was limited to cash withdrawal from ATM points only. A database on household information with accounts of payment and retrieval dates of the cash grant was kept and managed by both the IFRC and the National Society. The cards were given from the bank to the IFRC project manager. These cards were then distributed to households by the National Society at branch level in the presence of an IFRC delegate. Households were then free to withdraw cash at ATM points at their own convenient time. Home visits were conducted before and after the distribution for assessment and post-distribution monitoring. The home visit covered monitoring of cash usage, response appropriateness, satisfaction of ATM cards, distribution process and complaint mechanism. Focus group discussions were also conducted to understand better the relations with the host community, the household environment and project sustainability. Programme outcome This programme supported 4,596 households with unconditional cash grants to help families meet their basic needs and get through the winter. During the 12 months, each household, depending on its size, received total of: CHF 1,145 for families of 1-2 members CHF 1,925 for families of 3-5 members CHF 2,237 for families with 6 or more members The programme helped reduce the gap between household expenditure and income, as well as decreased the risk of negative coping mechanisms. As anticipated from the assessment, a large proportion (47 per cent) of the cash grant was used for rent with the remaining used for other basic needs. However, through the feedback mechanisms and internal investigations, it was discovered that 54 out of the 4,596 households did not receive the aid they were intended to receive which equated to CHF 43,930 misused by the time the perpetration was detected. This corresponds to 1.1 per cent of the households and 0.5 per cent of the funds respectively. Corrective actions and measures to strengthen the programme were agreed upon and taken in compliance with IFRC s fraud and corruption prevention and control policy that is further detailed in section four of this case study. Reporting mechanisms were also put in place such as monthly reports, operation updates and weekly bank reports. However, the intention of these reporting mechanisms were more for operational needs and not for detecting irregularities. A feedback mechanism in the form of a telephone hotline managed by the National Society was in place to log feedback and complaints. The complaint mechanism was utilized ranging from 100-350 calls monthly around concerns about the continuation of the programme, checking of balance and troubleshooting technical errors. 7

Key mitigating controls for prevention and detection of fraud Programme description Diagram 1: Type of monthly expenditure proportion 47% 21% 8% 7% 6% 6% 3% 2% Rent Food Utilities Health Clothes Other Tobacco Education Diagram 2: Proportion of the misused funds 1.17% Diverted 0.5% Diverted Households Funds 98.83% Beneficiaries received 99.5% Beneficiaries received 8

Key mitigating controls for prevention and detection of fraud IFRC and NS response to the incident 4. IFRC and NS response to the incident Identification of the fraud Through the post-distribution monitoring activities, irregularities were detected by the National Society which raised concerns about the possible misuse of the ATM cards. This included finding in the beneficiary list: Households that were not meeting the criteria Households who were relatives of a branch personnel 2 Households living outside the target areas Households withdrawing cash in a different city than the resident city registered These concerns were shared with the partners and the CTP team agreed that further analysis and investigation were needed to address the inconsistencies and irregularities to ensure that the cards were indeed received by all of the eligible households. At this point a technical team informed their line managers which was reported to the Geneva Secretariat. An internal investigation was performed initially by the National Society followed by a joint one with IFRC. To maintain transparency, partner donors were also informed of the situation at this stage. An independent review of the internal investigation was later commissioned by the IFRC. Analysis and investigation A working group of five made up of partner stakeholders led by the IFRC and the host National Society was assembled to deliberate and determine: the incident, the findings, the impact and the measures that would then need to be in place the structure of the human resources (HR) involved in the programme the actions to be implemented in order to ensure the continuity of the programme This working group was also tasked to guarantee that the remedial actions and necessary safeguards were in place in order for the programme to continue. Screening and identifying cases of fraud Several sources were reviewed including the internal database, bank statements, weekly bank reports, complaints list, distribution list and beneficiary agreements. Elements of analysis included the cash withdrawn, replaced cards, complaints, duplications, late distributions and households that did not receive a home visit. The collected information was used to triangulate cases by revealing several inconsistencies: eligible households reporting to never receiving their ATM card cash being withdrawn in a different city than the registered resident city reports from the complaint hotline did not match with the internal investigation 2 In other cases, this in itself is not a reason for suspicion and would need to be fully verified. However, in this programme, the targeted households were those affected by the population movement. Therefore, relatives of nationals was an indication of ineligibility. 9

Key mitigating controls for prevention and detection of fraud IFRC and NS response to the incident Confirming cases Identified cases were discretely contacted via phone to verify whether they have received their ATM cards. The suspected cases were followed-up with consultations and visits to the bank to review the video recording of ATM withdrawals of the cases. By reviewing the video recordings, the working group were able to verify and identify the people involved, the amount inappropriately withdrawn and the places of withdrawal compared to the place of household residence. Actions taken 3 Funds for this programme was suspended until the conditions for continuity were met: 1. All households in the community where fraud cases were confirmed were checked and verified. Those households not meeting the criteria were removed from the programme. The project manager also recommended a change in beneficiary list by using a registered list from a UN agency which has been verified by a third party NGO with no connection to the Movement as opposed to the list originally identified by the National Society. à Rationale: segregating the function of household selection, household verification and programme implementation separates the ability to perpetrate and conceal 2. The National Society would no longer distribute the prepaid debit cards without an IFRC representative present at the distribution. à Rationale: increased oversight by an accountable third party helps reduce the appeal for fraudulent activity 3. The responsibility of the complaint line was transferred from the National Society to the IFRC who reports issues to the IFRC project manager and National Society daily for resolution. à Rationale: increased segregation of duties separated key functions in order to decrease the chance of concealment and increase the chance of detection 4. Added layers of security to the database was in place and exported to IFRC for continuity. à Rationale: more secured access and non-implementing management of the database reduces risk of malicious modifications to the beneficiary list 5. The withdrawal method was upgraded to use biometric identification as part of the registration process and is used to withdraw cash at the bank. à Rationale: virtually eliminates the risk of false authentication that exists with pin codes and potential loss of cards 6. After concrete evidence was collected (e.g. video footage withdrawing cash), all project staff involved in the fraud were removed from the project and dismissed. The misused funds were also requested to be reimbursed by those involved. à Rationale: enforces zero tolerance for fraud 7. An independent review was conducted to maintain transparency and accountability to stakeholders and donors. à Rationale: an objective analysis from a thirdparty on whether the internal investigation report was conclusive and adequate or required further actions. Programme continuity Due to the corrective actions and response to the incident by both the National Society and the IFRC, enough confidence and trust was regained by partner donors to continue the programme to completion. The acknowledgement and willingness of involvement from the affected National Society throughout this process at all levels, including leadership, allowed for an accountable response. Though a laborious process, taking action while remaining transparent was the way to maintain the credibility and protect the image of the National Society and IFRC partners. The independent review of the internal investigation process and report made further recommendations for management to consider. Senior management s response to these recommendations were based on the fit for purpose risk management, available resource and feasibility. For example, the recommendation to call every household in other cities of the programme where the feedback mechanism was functioning properly was deemed excessive beyond performing random monitoring calls to a sample of the households. 3 It should be mentioned that not all these conditions are necessary in order to implement a CTP, but were instead specific conditions requested by the donors in this particular incident for programme continuation. For example, transfer of certain responsibilities from the National Society to the IFRC is not common as National Societies should and typically do play the leading role in programme implementation. In any other instance, it is encouraged that IFRC works closely with the National Society and have joint oversight where specific technical supervision, such as the complaint mechanism, is needed. Another requirement of using an external beneficiary list is also not necessary in a typical programme if a robust monitoring process was in place for the application of the household selection criteria. 10

Key mitigating controls for prevention and detection of fraud Lessons learned on key mitigating controls 5. Lessons learned on key mitigating controls In cases of fraud and corruption, there are generally three elements which individually can be addressed to prevent the act: 1) perceived opportunity, 2) rationalisation and 3) motive. 4 At a programmatic level, perceived opportunity is the most susceptible element in preventing fraud. In cash transfer programming, there needs to be both preventive and detective controls in place and segregation of duties to make fraud activities less inviting. Preventive and detective controls In this case, several key preventive measures failed allowing some diversion of funds, but were eventually caught through the detective measures that were in place. The key preventive control which could have been further improved was segregation of duties. Diagram 3: Preventive and detective controls in this particular CTP Preparedness Assessment Response analysis Set-up and implementation Monitoring and evaluation SOPs Assess financial services Assess organisational capacity Analyse risks Risk analysis, mitigation and management Clear targeting criteria and mechanisms Distribution planning BCA Identification and authentication Complaint and response mechanism Encashment monitoring PDM Segregation of duties Preventive Detective Segregation of duties Segregation of duties is a key internal control intended to reduce the risks of fraud and error. The level of segregation that is needed and/or feasible varies with the context, programme design and available resources. However, the basic principle remains the same such that no individual/group should be in the position to both perpetrate and conceal in the normal course of their duties. This separation helps to minimise the risk by reducing the chance of concealment, acting as a deterrent, and increasing the chance of detection. At a minimum, the detective controls need to be completely independent from the implementers. However, for controls to be effective, there must still be diligent oversight. 4 IFRC (2012). Fraud and corruption prevention and control policy. 11

Key mitigating controls for prevention and detection of fraud Lessons learned on key mitigating controls The system needs to be set up where duties are segregated by function and not based on individuals. Having a system with segregated duties in place also removes the sensitivity of mistrust when it is standard practice. Segregation of duties applies across the project cycle and across activities, and further controls can be added depending on the delivery mechanism. For example, further segregation of duties need to be applied for preparing cash in envelopes such that the individuals who are stuffing each envelope with the cash grant are not doing the random spot check who are also not sealing the envelopes. In this particular case, segregation of duties for household identification, distribution and complaint mechanism from the beginning of the programme within the National Society would have been the key. Instead, as these activities were done by the same group, it prolonged the fraudulent activities as there was no independent feedback mechanism. Complaints from households not having received aid were answered by those who withheld the cards from them and were able to stall the response while they withdrew cash monthly. Separating these duties should have resulted in earlier detection of fraudulent cases and minimised the perceived opportunity. The conditions for programme continuation after the incident in this case study involved segregation of duties across different organisations (e.g. household selection done by a UN agency, verified by a third party NGO and implemented by the National Society). However, this level of segregation is not always necessary and was only demanded based on this particular context. As per the IFRC CBP standard operating procedures 5, the key functions that must be segregated such that not one person can perform more than one of the listed roles: Custody of cash or vouchers Authorisation/approval of payments Beneficiary selection Management of third party supplier/financial intermediary appointment process Recording and reconciling of transactions And, ideally, feedback mechanism. 6. Recommendations and key messages Minimum standards Based on the Red Cross Red Crescent Movement s Cash in Emergencies toolkit 6, below are the minimum standards pertaining to risk mitigation that needs to be considered across the different phases of any project cycle. Preparedness Pre-disaster baselines should include an analysis of key stakeholders, market conditions, service providers capacity, community access and preferences, and risks associated with a potential CTP response. A cash feasibility analysis based on the baseline findings, particularly beneficiary preferences, and market and service providers capacity should be carried out to identify the response modalities and mechanisms that are more suited to respond to the scenarios developed. 5 IFRC. (2015). IFRC Secretariat Cash Based Programming Standard Operating Procedures. 6 www.rcmcash.org 12

Key mitigating controls for prevention and detection of fraud Recommendations and key messages A self-assessment exercise should be carried out with the participation of decision-makers from key departments to identify organizational capacity gaps to implement CTP at scale and in a timely manner. CTP standard operating procedures (SOPs), systems and procedures should be agreed upon, made widely available and updated periodically. Assessment Cash-specific information gathered at community and household levels should include: access to and use of cash, markets and financial services; beneficiary preferences; and perceived risks associated with cash. The capacity of National Societies and partners to implement CTP timely and atscale should be assessed. Completion and documentation of a risk assessment including at least the identification of context, institutional and programmatic risks associated with a potential cash response. 7 Response analysis Modality and mechanism selection should be based on a comparative analysis that includes at least risks/mitigation and costs. The capacity of the agency/partner to deliver cash through the selected modality/ mechanism must be considered. The choice of the targeting mechanism should be based on consideration of costs, accuracy, feasibility and timing. Set-up and implementation Define roles and responsibilities in alignment with existing SOPs and in agreement with external stakeholders, including the government. Develop a beneficiary communication and accountability system with clear definition of roles and responsibilities. Register only those who are eligible to receive the transfer, and ensure that beneficiary identification abide by national financial regulations. Verify the list of beneficiaries by random household visits or other appropriate way. Monitoring and evaluation Planning for CTP monitoring and evaluation must start at the setup phase. Make sure that the monitoring team is trained and tools are tested. Ensure some level of direct monitoring by RCRC Movement team, even when encashment is done through a third party. Some additional considerations Employ delegate(s) proficient in the local language particularly in non-alphabetic languages. In the occasion of an investigation, real coordination needs to take place to involve the stakeholders both at the Secretariat, zone and country level to ensure accurate representation and involvement especially if an external audit is involved. Ensure rigorous documentation process necessary to explain, justify and defend the programme should any issues arise as well as to hold us accountable in being transparent including the risk assessment conducted prior to the implementation of the programme. 7 See Annex 2. IFRC Risk Management Checklist of the IFRC Secretariat Cash Based Programming (CBP) standard operating procedures 13

Key mitigating controls for prevention and detection of fraud Conclusion 7. Conclusion With the accepted use and increased expectations for cash transfers both by the affected populations and donors, risks of fraud should no longer be a hindrance in implementing CTP, but should instead be identified and properly managed. In fact, it was because of the paper trail and documentation required by CTP was this level of investigation possible. Mitigating controls for preventing and detecting fraud is not a separate function in itself and needs to be incorporated into all aspects of our programme activities. The development of SOPs and policies helps establish best risk management practice and acknowledges that strong internal prevention mechanisms and controls are the best methods for preventing fraud and helps identify benchmarks for when to deal with fraud. However, despite putting in place mitigating controls, diligent oversight is crucial in order for these controls to be effective. The IFRC and its members is committed to high ethical standards, transparency and accountability to all internal and external stakeholders. However, the current heightened standards of CTP compared to its in-kind equivalent needs to be adjusted and be made realistic in order for CTP to be used effectively as a response option. Fit for purpose risk management is important, not only to CTP, but also to our wider disaster response so that we are able to respond efficiently and effectively to those who need the support the most. This also highlights the importance of preparedness work for CTP during peace time. Considerable investment needs to be made to build the capacity of both IFRC and National Societies in order to deliver robust and appropriate CTP as donors and affected communities expect responses to continuously be larger and faster to implement. The IFRC is prioritising mainstreaming CTP processes 8 and building the capacity of its members to remain relevant to the changing humanitarian landscape and continue to be in the forefront of any disaster and crises. 8 International Red Cross and Red Crescent Movement. (2015). Cash transfer programming: Guidelines for mainstreaming and preparedness. Available in English, French, Spanish and Arabic. 14

The Fundamental Principles of the International Red Cross and Red Crescent Movement Humanity The International Red Cross and Red Crescent Movement, born of a desire to bring assistance without discrimination to the wounded on the battlefield, endeavours, in its international and national capacity, to prevent and alleviate human suffering wherever it may be found. Its purpose is to protect life and health and to ensure respect for the human being. It promotes mutual understanding, friendship, cooperation and lasting peace amongst all peoples. Impartiality It makes no discrimination as to nationality, race, religious beliefs, class or political opinions. It endeavours to relieve the suffering of individuals, being guided solely by their needs, and to give priority to the most urgent cases of distress. Neutrality In order to enjoy the confidence of all, the Movement may not take sides in hostilities or engage at any time in controversies of a political, racial, religious or ideological nature. Independence The Movement is independent. The National Societies, while auxiliaries in the humanitarian services of their governments and subject to the laws of their respective countries, must always maintain their autonomy so that they may be able at all times to act in accordance with the principles of the Movement. Voluntary service It is a voluntary relief movement not prompted in any manner by desire for gain. Unity There can be only one Red Cross or Red Crescent Society in any one country. It must be open to all. It must carry on its humanitarian work throughout its territory. Universality The International Red Cross and Red Crescent Movement, in which all societies have equal status and share equal responsibilities and duties in helping each other, is worldwide.

As CTP is becoming more institutionalized, more expected and more commonly used, standard processes should be established such that key controls are established in preventing, deterring and detecting fraud. Best practices and lessons learned from the Movement is the best way for us to continue improving humanitarian standards and best serve those in need. For more information on this publication, please contact: Clara Setiawan Cash Support International Red Cross and Red Crescent Societies Email: clara.setiawan@ifrc.org www.ifrc.org Saving lives, changing minds.