Acessibilidade / Reportar erro

Red flags in detecting credit cooperative fraud: the perceptions of internal auditors

Abstract

Purpose:

Red flags are mechanisms that can be used by internal auditors for early detection of possible fraud. In this context, the aim of this study was to identify the relevance credit unions’ internal auditors attribute to red flags in assessing fraud risk.

Design/methodology/approach:

This article is characterized as descriptive concerning its goals, as a survey as to is procedures, and as quantitative in reference to its approach to the problem. The sample consists of 51 internal auditors working in Credit Union Centers in southern Brazil.

Findings:

Results indicate that, in the assessment of fraud risk, internal auditors attribute greater importance to red flags referring to operational activities and internal control procedures. In addition, it is suggested that internal auditors are not impartial concerning their perception of relevance of most of the warning signs of the possibility of fraud.

Originality/value:

The findings contribute by demonstrating to internal auditors the need for greater attention to the use of red flags as auditing tools.

Keywords:
Red flags; Fraud; Internal Auditor; Credit Unions

Resumo

Objetivo:

Os red flags são mecanismos que podem ser utilizados pelos auditores internos para antecipação na detecção de possíveis fraudes. Nesse contexto, o objetivo do estudo foi verificar a relevância que os auditores internos de cooperativas de crédito atribuem aos red flags na avaliação do risco de ocorrência de fraudes.

Metodologia:

Este artigo é caracterizado quanto aos objetivos como descritivo, quanto aos procedimentos como survey e a abordagem do problema de cunho quantitativo. A amostra é composta de 51 auditores internos que atuam nas Centrais de Cooperativas de Crédito localizadas na região Sul do Brasil.

Resultados:

Os resultados indicam que na avaliação dos riscos de ocorrência de fraudes, os auditores internos atribuem maior relevância para os red flags relacionados às atividades operacionais e aos procedimentos de controle interno. Além disso, sugere-se que os auditores internos não são imparciais sobre a percepção de relevância para maioria dos sinais de alerta da possibilidade de ocorrência de fraudes.

Contribuições:

Os achados contribuem demonstrando aos auditores internos a necessidade de maior atenção para o uso dos red flags como instrumento de trabalho na auditoria.

Palavras-chave:
Red flags; Fraudes; Auditor Interno; Cooperativas de Crédito

1 Introduction

Constant market changes mean that the monitoring of organizations’ internal controls and processes does not happen in the same proportion, thus exposing them to vulnerability and threat of fraud. Therefore, strict and timely monitoring of structures and internal control processes is necessary to appropriately deter, detect and respond to fraud.

Internal auditing is fundamental because of the responsibility of systematization, control, efficiency and effectiveness of all processes; it highlights the flaws that can lead to fraudulent acts. Boynton, Johnson and Kell (2002Boynton, W. C., Johnson, R. N., & Kell, W. G. (2002). Auditoria. São Paulo: Atlas.) point out that internal auditing assists management in fulfilling its responsibilities, and is a control component of resource allocation (waste and neglect) and a factor in anticipating occurrences (Santos & Vier, 2014Santos, M. V. D., & Vier, A. J. (2014). A importância da auditoria interna na contribuição da gestão dos negócios. Revista Eletrônica do Curso de Ciências Contábeis, (4), 1-26. Recuperado de https://seer.faccat.br/index.php/contabeis/article/view/65/60
https://seer.faccat.br/index.php/contabe...
).

From this perspective, internal auditing plays an important role in minimizing the occurrence of fraudulent acts, helping goals to be achieved through a systematic and disciplined approach, in order to evaluate and improve the effectiveness of risk management, control and governance processes (Pickett, 2005Pickett, K. S. (2005). The essential handbook of internal auditing. Chichester: Wiley.; Rittenberg & Schwieger , 2005Rittenberg, L. E., & Schwieger, B. J. (2005). Auditing: Concepts for a changing environment. South-Western: Thomson.). Similarly, the Brazilian Accounting Standard T 12 (2008) establishes internal auditing as the set of technical procedures used to examine the integrity, adequacy and effectiveness of internal controls and of entities’ physical, accounting, financial and operational information.

The function of internal auditing is to adapt, evaluate and confirm the operation of internal control; to establish effective procedures for risk management; and to confirm the quality and reliability of the information generated by management (Pickett, 2005Pickett, K. S. (2005). The essential handbook of internal auditing. Chichester: Wiley.). As well as internal auditing, in 2002 the US government established the Sarbanes-Oxley Act, in order to restore capital markets’ and professional auditors’ credibility, facing the great amount of fraud in internationally renowned companies. The Sarbanes-Oxley Act created a new environment for corporate governance and a set of responsibilities and sanctions for managers, in order to curb harmful practices.

Despite the existence of mechanisms and laws and of internal auditing to mitigate the occurrence of fraudulent acts, KPMG Forense (2009KPMG Forensic. (2009). A fraude no Brasil: Relatório da pesquisa 2009. Recuperado de http://www.kpmg.com.br/publicacoes/forensic/Fraudes_2009_port.pdf
http://www.kpmg.com.br/publicacoes/foren...
), in a study of Brazilian companies, indicates that 70% had suffered some kind of fraud over the last two years. In addition, American investigation company Kroll found that 74% of all Brazilian companies had suffered at least one episode of fraud over the last 12 months (Kroll, 2013Kroll. (2013). Global fraud report 2013/2014. Recuperado de http://www.kroll.com/CMSPages/GetAzureFile.aspx?path=~%5Cmedia%5Cfiles%5Cintelligence-center%5Cglobal-fraud-report-2013-2014-english.pdf&hash=a84e800f9068acd3e3ce664e95666772c22ccf4547183e750ecf984b2041343d
http://www.kroll.com/CMSPages/GetAzureFi...
).

The increase in the occurrence of fraud has expanded the responsibility of internal auditors concerning detection and prevention. In this way, red flags are mechanisms that can be used by internal auditors to anticipate possible frauds. Red flags represent key symptoms to detect fraud, and internal auditing professionals can use them to better identify possible aggressions to organizations’ assets (Pinheiro & Cunha, 2003Pinheiro, G. J., & Cunha, L. R. S. (2003). A importância da auditoria na detecção de fraudes. Contabilidade Vista & Revista, 14(1), 31-48.).

Due to the increase in fraud that has been globally reaching public and private companies, and to the importance of red flags to detect fraud through internal auditors, it is necessary to investigate the use of these instruments by internal auditing (Pinheiro & Cunha, 2003Pinheiro, G. J., & Cunha, L. R. S. (2003). A importância da auditoria na detecção de fraudes. Contabilidade Vista & Revista, 14(1), 31-48.). Moreover, the risk of fraud is perceived as dominant in all organizational segments and forms (KPMG, 2009KPMG Forensic. (2009). A fraude no Brasil: Relatório da pesquisa 2009. Recuperado de http://www.kpmg.com.br/publicacoes/forensic/Fraudes_2009_port.pdf
http://www.kpmg.com.br/publicacoes/foren...
), and it is important to carry out research involving credit unions.

Studies by Murcia, Borba and Schiehll (2008Murcia, F. D. R., Borba, J. A., & Schiehll, E. (2008). Relevância dos red flags na avaliação do risco de fraudes nas demonstrações contábeis: A percepção de auditores independentes brasileiros. Revista Universo Contábil, 4(1), 25-45.), and by Reina, Nascimento and Reina (2008Reina, D., Nascimento, S. D., & Reina, D. R. M. (2008). A percepção dos auditores quanto à utilização dos Red Flags nas principais empresas de auditoria brasileiras. Revista Enfoque Contábil, 27(2), 71-86.) discuss red flags to detect fraud in financial statements, and the role of independent auditors, responsible for issuing the auditing report on financial statements, in minimizing these occurrences. This evidence demonstrates the gap in this research, which differs by discussing the warning signs of fraud within management, control and internal organization of credit unions, using the role of internal auditors in the prevention and detection of fraud as a premise.

Auditors’ perception of the effectiveness of red flags was observed by Moyes (2011Moyes, G. D. (2011). The differences in perceived level of fraud-detecting effectiveness of SAS No. 99 red flags between external and internal auditors. Journal of Business & Economics Research, 5(6), 9-26.), Moyes, Young and Mohamed (2013Moyes, G. D., Young, R., & Mohamed, D. H. F. (2013). Malaysian internal and external auditor perceptions of the effectiveness of red flags for detecting fraud. International Journal of Auditing Technology, 1(1), 91-106.), Moyes, Lin, Landry and Vicdan (2006Moyes, G. D., Lin, P., Landry, R. M., & Vicdan, H. (2006). Internal auditors’ perceptions of the effectiveness of red flags to detect fraudulent financial reporting. Journal of Accounting, Ethics & Public Policy, 6(1), 1-28. Recuperado de http://papers.ssrn.com/sol3/ papers.cfm?abstract_id=961457
http://papers.ssrn.com/sol3/ papers.cfm?...
), who offer relevant results on fraud in financial reports; nevertheless, they do not discuss the benefits of warning signs in the prevention and detection of fraud referring to the personal aspects of organizational members, of internal controls and of management, amongst others, that occur in the internal environment. Therefore, the contribution and the novelty of this research is that it provides, to internal auditors, warning parameters that are capable of anticipating the occurrence of fraud which is not only referring to financial statements, since they occur throughout the organizational process.

We contribute to the discussion around the fact that internal auditing, used in the prevention and detection of fraudulent acts, is an ex-ante phenomenon to the issuance of auditors’ reports, which also aims to observe whether there is possible fraud in financial statements. This study is based on the argument that internal auditors may not be held responsible for the non-identification of fraudulent acts, and that their perception of fraud can be distorted by emotional and professional bonds they have with the organization and its members. As previously stated, the powers and the institutional environment in which internal auditors operate is different from that of independent auditors; they have specific and standardized assignments, without any institutional or personal connections with the audited organizations.

In addition, the subject of assessment and detection of fraud by auditors is incipient in Brazil (Murcia, Borba & Schiehll, 2008Murcia, F. D. R., Borba, J. A., & Schiehll, E. (2008). Relevância dos red flags na avaliação do risco de fraudes nas demonstrações contábeis: A percepção de auditores independentes brasileiros. Revista Universo Contábil, 4(1), 25-45.). Uretsky (1980Uretsky, M. (1980). An interdisciplinary approach to the study of management fraud. In R. K. Elliott, & J. J. Wulingham (Eds.), Management fraud: Detection and deterrence (pp. 89-93). Princeton, NJ: Petroce Ui Books.) suggests the need for an interdisciplinary approach to the study of fraud and the need for research on the use of red flags as situational indicators. Similarly, the figures presented by KPMG (2009KPMG Forensic. (2009). A fraude no Brasil: Relatório da pesquisa 2009. Recuperado de http://www.kpmg.com.br/publicacoes/forensic/Fraudes_2009_port.pdf
http://www.kpmg.com.br/publicacoes/foren...
) and Kroll (2013Kroll. (2013). Global fraud report 2013/2014. Recuperado de http://www.kroll.com/CMSPages/GetAzureFile.aspx?path=~%5Cmedia%5Cfiles%5Cintelligence-center%5Cglobal-fraud-report-2013-2014-english.pdf&hash=a84e800f9068acd3e3ce664e95666772c22ccf4547183e750ecf984b2041343d
http://www.kroll.com/CMSPages/GetAzureFi...
) on cases of fraud in Brazilian companies demonstrate the potential of the Brazilian environment for studies involving the topic of red flags.

Finally, studies on the relevance of red flags in assessing the risk of fraud were focused on external and independent auditors who work in sectors other than financial. Thus, this study is distinguished from the approach focused on the perception of internal auditors about the relevance of red flags to evaluate fraud in Credit Unions.

Credit unions were chosen by their level of importance in promoting growth as well as the economic and social development in Brazil, where the service network of credit unions represents 18% of bank branches, and occupies the 6th position in the ranking of assets - and is, therefore, among the largest retail financial institutions in the country. Thus, auditing mechanisms are used by credit unions to maintain their integrity and image with members, customers and society, and in to achieve greater reliability when carrying out operations and processes.

In this context, this study aims to determine the relevance internal credit unions’ auditors attribute to red flags in assessing the risk of fraud.

2 Internal auditing in the prevention and detection of fraud

Internal auditing is designed to add value and improve the operations of an organization, assisting in the achievement of organizational objectives by a systematic and disciplined approach to evaluate and improve the risk management of operational efficiency, control and governance process (Pickett, 2005Pickett, K. S. (2005). The essential handbook of internal auditing. Chichester: Wiley.; Rittenberg & Schwieger, 2005Rittenberg, L. E., & Schwieger, B. J. (2005). Auditing: Concepts for a changing environment. South-Western: Thomson.).

Internal auditors have proper knowledge to analyze the possible occurrence of fraud and to conduct routine follow-up investigations. Corroborating the fact, evidence point out that the fraud at WorldCom was detected at first by the internal auditing team (Rittenberg & Schwieger, 2005Rittenberg, L. E., & Schwieger, B. J. (2005). Auditing: Concepts for a changing environment. South-Western: Thomson.).

Specifically, with respect to fraud, Cushing and Romney (1994Cushing, B. E., & Romney, M. B. (1994). Accounting information systems. Reading, Massachusetts: Addison-Wesley.) state that the same runs through the first ownership of an asset. Then the asset is changed so that it can be useful to the agent. Finally, the asset is concealed by adultering documents and/or records. This method is important and leaves a trace that can help auditors uncover the possibility of fraud.

Moreover, when there is fraud, organizations find it difficult to assess the damage; this is justified because not all fraud is discovered and reported, and the victim not always seeks civil or criminal compensation. Evidence indicates that in 68% of cases of fraud there is no recovery of values. Organizations located in Brazil remain passive in relation to acts of fraud, making it a fertile ground for its occurrence (KPMG, 2009KPMG Forensic. (2009). A fraude no Brasil: Relatório da pesquisa 2009. Recuperado de http://www.kpmg.com.br/publicacoes/forensic/Fraudes_2009_port.pdf
http://www.kpmg.com.br/publicacoes/foren...
). In addition, 55% of organizations consider that the internal auditing is responsible for implementing anti-fraud controls, focusing on technology tools and data analysis to identify red flags (KPMG, 2009KPMG Forensic. (2009). A fraude no Brasil: Relatório da pesquisa 2009. Recuperado de http://www.kpmg.com.br/publicacoes/forensic/Fraudes_2009_port.pdf
http://www.kpmg.com.br/publicacoes/foren...
).

Inefficiency in internal controls, the country’s economy, failure in the banking system, inefficient police, type of business, collusions, management replacement, incompetence and ignorance are some of the factors that can contribute to the occurrence of fraud in organizations (Krambia-Kapardis, 2003Krambia-Kapardis, M. (2003). Fraud victimisation of companies: The Cyprus experience. Journal of Financial Crime, 10(2), 184-191.).

The factors that favor the occurrence of fraud are relevant, but the steady increase in cases has been attributed to the benefits and impunity, when often organizations fail to prosecute and the fraudsters do not have suffer adequate punishment by Justice. On the other hand, detecting the presence of fraud is difficult because of the flexibility and subjectivity inherent to the implementation of certain standards, as well as the lack of record of all transactions in the so-called official accounting (Murcia et al., 2008Murcia, F. D. R., Borba, J. A., & Schiehll, E. (2008). Relevância dos red flags na avaliação do risco de fraudes nas demonstrações contábeis: A percepção de auditores independentes brasileiros. Revista Universo Contábil, 4(1), 25-45.).

Doubts about the credibility of auditing do not minimize its importance and usefulness in the discovery of fraud. Auditing provides anticipation and offers actions against fraudulent acts (Pinheiro & Cunha, 2003Pinheiro, G. J., & Cunha, L. R. S. (2003). A importância da auditoria na detecção de fraudes. Contabilidade Vista & Revista, 14(1), 31-48.). Critical sense, auditing technique, document analysis technique, sampling, circularization and survey used by auditors in performing their duties help to identify and minimize the occurrence of fraudulent events (Pinheiro & Cunha, 2003Pinheiro, G. J., & Cunha, L. R. S. (2003). A importância da auditoria na detecção de fraudes. Contabilidade Vista & Revista, 14(1), 31-48.).

Internal controls are also used by auditors in fraud prevention and detection, and reveal information hidden in the accounting system. According to Wells (1990Wells, A. (1990). Panic disorder in association with relaxation induced anxiety: An attentional training approach to treatment. Behavior Therapy, 21(3), 273-280.), 20% of fraud is detected by auditors, and they are necessary to the development of procedures or strategies that are focused on fraud detection. In credit unions the effective action of auditing and internal control is perceived by the inspectors as a fraud mitigation factor (Oliveira, 2012Oliveira, R. L. (2012). Gestão de fraudes financeiras externas em bancos (Dissertação de mestrado). Faculdade de Economia, Administração e Contabilidade de Ribeirão Preto, Universidade de São Paulo, Ribeirão Preto, SP, Brasil.).Therefore, the contribution of this study is to identify additional factors - red flags - that can serve as auxiliary mechanisms to internal auditors on the effectiveness of their duties.

The Central Bank of Brazil - BACEN (1998Resolução BACEN n. 2554, de 24 de setembro de 1998. Dispõe sobre a implantação e implementação de sistema de controles internos. Recuperado de http://www.bcb.gov.br/pre/normativos/res/1998/pdf/res_2554_v3_P.pdf
http://www.bcb.gov.br/pre/normativos/res...
) points out that auditing and internal control must be effective and consistent with the nature, complexity and risk of operations. To Migliavacca (2004Migliavacca, P. N. (2004). Controles internos nas organizações: Um estudo abrangente dos princípios de controle interno: Ferramentas para avaliação dos controles internos em sua organização. São Paulo: Edicta.), auditing and internal control contribute to safeguarding of assets, business development and increase in operational results. Credit unions’ surveillance and monitoring authorities seek to reduce the risks of financial activity, controlling actions by means of regulatory requirements, among which internal auditing and internal control are highlighted (Oliveira, 2012Oliveira, R. L. (2012). Gestão de fraudes financeiras externas em bancos (Dissertação de mestrado). Faculdade de Economia, Administração e Contabilidade de Ribeirão Preto, Universidade de São Paulo, Ribeirão Preto, SP, Brasil.).

Internal auditing has undergone changes, not only evaluating internal controls but also having a senior management advisory role, providing corrective and preventive recommendations on the institutional risk (Santos & Vier, 2014Santos, M. V. D., & Vier, A. J. (2014). A importância da auditoria interna na contribuição da gestão dos negócios. Revista Eletrônica do Curso de Ciências Contábeis, (4), 1-26. Recuperado de https://seer.faccat.br/index.php/contabeis/article/view/65/60
https://seer.faccat.br/index.php/contabe...
). So that fraudulent activity may be detected, auditors must learn and recognize the symptoms linked to the existence of favorable conditions (Cottrell & Albrecht, 1994Cottrell, D. M., & Albrecht, W. S. (1994). Recognizing the symptoms of employee fraud. Healthcare financial management: Journal of the Healthcare Financial Management Association, 48(5), 18-22.). Therefore, a favorable environment for the occurrence of fraud can be identified by red flags or warning signs (Albrecht, 2003Albrecht, S. (2003). Fraud examination. South Wester, OH: Thompson.).

3 Red flags in assessing risks of fraud

Auditors have found it hard to identify a case of fraud in advance due because it is often well hidden and usually the discovery occurs by chance. It is important that auditing use red flags to help identify potential fraud. Red flags are either events, situational pressure, opportunities or personal characteristics that can cause interest in frauds, whether on behalf of the company itself or for any personal gain (Romney, Albrecht & Cherrington, 1980Romney, M. B., Albrecht, W. S., & Cherrington, D. J. (1980). Auditors and the Detection of Fraud. Journal of Accountancy, 149(5), 63-69.).

Red flags indicate warning signs to auditors about certain situations occurring in the organizational environment (Uretsky, 1980Uretsky, M. (1980). An interdisciplinary approach to the study of management fraud. In R. K. Elliott, & J. J. Wulingham (Eds.), Management fraud: Detection and deterrence (pp. 89-93). Princeton, NJ: Petroce Ui Books.).Albrecht and Romney (1986Albrecht, S., & Romney, M. (1986). Red-flagging management fraud: A validation. Advances in Accounting, 3, 323-333.), Eining, Jones and Loebbecke (1997Eining, M. M., Jones, D. R., & Loebbecke, J. K. (1997). Reliance on decision aids: An examination of auditors’ assessment of management fraud. Auditing: A Journal of Practice & Theory, 16(2), 16-19.), Bell and Carcacello (2000Bell, T., & Carcarello, J. (2000). A decision aid for accessing the likehood of fraudulent financial reporting. Auditing: A Journal of Practice & Theory, 19(1), 169-184.) and Wells (2005Wells, D. L. (2005). A note on the influence of visitors on the behaviour and welfare of zoo-housed gorillas. Applied Animal Behaviour Science, 93(1), 13-17.) point out that excessive pressure on executives to achieve organizational goals can create a favorable environment to fraud. Although red flags may not necessarily indicate the presence of fraud, they often show commonly present conditions in fraudulent events (Uretsky, 1980Uretsky, M. (1980). An interdisciplinary approach to the study of management fraud. In R. K. Elliott, & J. J. Wulingham (Eds.), Management fraud: Detection and deterrence (pp. 89-93). Princeton, NJ: Petroce Ui Books.). Thus, red flags increase the perception of risk and facilitate auditors’ judgment in the discovery of fraud (Kneer, Reckers & Jennings, 1996Kneer, D. C., Reckers, P. M., & Jennings, M. M. (1996). An empirical examination of the influence of the new US audit report and fraud red flags on perceptions of auditor culpability. Managerial Auditing Journal, 11(6), 18-30.).

Knowledge of red flags provides a better understanding of the conditions that favor the occurrence of fraudulent acts. However, each individual may have different views about the warning signs, and the different perceptions can be explained by auditors’ accounting knowledge, experience in the position or function, gender, age and education (Murcia et al., 2008Murcia, F. D. R., Borba, J. A., & Schiehll, E. (2008). Relevância dos red flags na avaliação do risco de fraudes nas demonstrações contábeis: A percepção de auditores independentes brasileiros. Revista Universo Contábil, 4(1), 25-45.).

Albrecht (2003Albrecht, S. (2003). Fraud examination. South Wester, OH: Thompson.) points out that red flags are used to assist in mapping a fraudulent environment. Therefore, in organizations with an inadequate or fragile internal control environment the probability of fraud is increased (Albrecht & Romney, 1986Albrecht, S., & Romney, M. (1986). Red-flagging management fraud: A validation. Advances in Accounting, 3, 323-333.; Wells, 2005Wells, D. L. (2005). A note on the influence of visitors on the behaviour and welfare of zoo-housed gorillas. Applied Animal Behaviour Science, 93(1), 13-17.). Migliavacca (2004Migliavacca, P. N. (2004). Controles internos nas organizações: Um estudo abrangente dos princípios de controle interno: Ferramentas para avaliação dos controles internos em sua organização. São Paulo: Edicta.) mentions that there are other factors contributing to the provision of warning signs, such as the moral integrity of managers, pressure on top management and favorable conditions. Cottrell and Albrecht (1994Cottrell, D. M., & Albrecht, W. S. (1994). Recognizing the symptoms of employee fraud. Healthcare financial management: Journal of the Healthcare Financial Management Association, 48(5), 18-22.) explain that accounting irregularities, deficiencies in controls, analytical anomalies, changes in lifestyle and behavior of managers can be used as red flags for the identification and assessment of fraud risk.

Auditors need to understand the warning signs, and then react with attitude and consistency. To Groveman (1995Groveman, H. (1995). How auditors can detect financial statement misstatement. Journal of Accountancy, 180(4), 83-90.), the most frequent causes of auditing failure in the identification and evaluation of fraud refer to inexperienced teams and attitudes of indifference as to warning signs. Hackenbrack (1993Hackenbrack, K. (1993). The effect of experience with different sized clients on auditor evaluations of fraudulent financial reporting indicators. Auditing: A Journal of Practice & Theory, 12(1), 99-110.) argues that inexperienced auditors do not recognize red flags with the same intensity that experienced auditors do. On the other hand, Green and Calderon (1996Green, B. P., & Calderon, T. G. (1996). Information privity and the internal auditor’s assessment of fraud risk factors. Internal Auditing-Boston-Warren Gorham and Lamont Incorporated, 11, 4-15.) suggest that training can improve the perception of auditors concerning the identification of risk factors.

Foster, Karcher and Levitan (2003Foster, B. P., Karcher, J. N., & Levitan, A. S. (2003). Gender and accountants’ use of technology. The CPA Journal, 3(2), 68.) found that men and women are equally adept at technology, but differ in the assessment of organizational controls and or warning signs. However, Schwartz and Wallin (2002Schwartz, S. T., & Wallin, D. E. (2002). Behavioral implications of information systems on disclosure fraud. Behavioral Research in Accounting, 14(1), 197-221.) reported no differences between males and females in relation to the disclosure rate of fraudulent acts. Finally, Robertson (1997Robertson, J. C. (1997). Fraud examination for managers and auditors. Austin: Viesca Books.) states that the sharp drop in revenue and market share and unrealistic budget pressures are factors that can determine the occurrence of fraud. Kaplan and Reckers (1995Kaplan, S., & Reckers, P. M. (1995). Auditors’ reporting decisions for accounting estimates: The effect of assessments of the risk of fraudulent financial reporting. Managerial Auditing Journal, 10(5), 27-36.) suggest that the change in lifestyle of the members of management, compensation programs and weaknesses in the audit department are usable red flags in the assessment of fraud risks.

4 Studies on red flags in the auditing field

National and international studies that have addressed red flags of different s environments and perceptions were found. In this sense, Kaplan and Reckers (1995Kaplan, S., & Reckers, P. M. (1995). Auditors’ reporting decisions for accounting estimates: The effect of assessments of the risk of fraudulent financial reporting. Managerial Auditing Journal, 10(5), 27-36.) investigated the influence of three environmental red flags on actions of auditors referring to accounting estimates. A case describing a customer who changed several accounting estimates during the year was passed on to the auditors .The task of the auditors was to review the changes and indicate whether the various adjustments could preserve an unmodified report. The study indicates that red flags affect the materiality of the auditors on their judgments regarding the issuance of auditing reports. The influence of red flags can be moderated by the beliefs of the auditors regarding the reasons for the management and/or materiality of the amounts involved.

Koornhof and Du Plessis (2000Koornhof, C., & Du Plessis, D. (2000). Red flagging as an indicator of financial statement fraud: The perspective of investors and lenders. Meditari Accountancy Research, 8(1), 69-93.) conducted a survey of investors and creditors from South Africa on the use of red flags. A questionnaire was sent to bank secretaries (representative of creditors) and portfolio managers (investors’ representatives). The results indicated that creditors and investors in South Africa are aware of the benefits offered by red flags as a warning system for fraud detection.

Moyes, Lin, Landry and Vicdan (2006Moyes, G. D., Lin, P., Landry, R. M., & Vicdan, H. (2006). Internal auditors’ perceptions of the effectiveness of red flags to detect fraudulent financial reporting. Journal of Accounting, Ethics & Public Policy, 6(1), 1-28. Recuperado de http://papers.ssrn.com/sol3/ papers.cfm?abstract_id=961457
http://papers.ssrn.com/sol3/ papers.cfm?...
) investigated the perception of 82 internal auditors on the effectiveness level of 42 red flags for detecting fraudulent financial reports. The results indicate that 15 red flags were perceived as more effective, 14 as effective and 13 as ineffective. Finally, the results show that internal auditors evaluate red flags labeled as incentives and pressures the most effective ones in detecting fraudulent financial reports.

Murcia et al. (2008Murcia, F. D. R., Borba, J. A., & Schiehll, E. (2008). Relevância dos red flags na avaliação do risco de fraudes nas demonstrações contábeis: A percepção de auditores independentes brasileiros. Revista Universo Contábil, 4(1), 25-45.) analyzed the perception of independent auditors on the relevance of red flags in assessing the risk of fraud in financial statements. They selected 45 red flags which were divided in 6 groups: structure and environment, sector/industry, managers, economic and financial situation, financial reporting and external auditing. The results suggest that 95.56% of red flags show a medium or high risk in the evaluation process of fraud in financial statements. Furthermore, the six groups of red flags showed individually an average greater than or equal to 3.35 with respect to a scale of importance from 1 to 5 points.

Moyes (2011Moyes, G. D. (2011). The differences in perceived level of fraud-detecting effectiveness of SAS No. 99 red flags between external and internal auditors. Journal of Business & Economics Research, 5(6), 9-26.) analyzed the different perceptions between internal and external auditors on fraud detection level of 42 red flags. The results indicate that there is no difference in the perception of internal and external auditors concerning red flags. In addition, the study found evidence that 17 red flags have differences in efficacy for fraud detection. For external auditors the use extension and exposure to red flags were predictors of the perception of efficacy. For internal auditors the effectiveness in detecting frauds was due to experience. Finally, female auditors rated the effectiveness of red flags in greater proportion, attributing a higher value to such indicators to fraud warning.

Moyes, Young and Mohamed (2013Moyes, G. D., Young, R., & Mohamed, D. H. F. (2013). Malaysian internal and external auditor perceptions of the effectiveness of red flags for detecting fraud. International Journal of Auditing Technology, 1(1), 91-106.) found the perception of internal and external auditors of Malaysia on 99 red flags used for fraud detection. The Standard Auditing Statement (SAS) from the US and international auditing standards require the external auditors to use red flags in order to detect fraudulent activities in financial reports. The results showed that the external and internal auditors perceive different levels of effectiveness of red flags and differences were found between the perceptions of internal and external auditors on the effectiveness of 12 red flags.

The study by Smith, Omar, Idris and Baharuddin (2005Smith, M., Omar, H. N., Idris, S. I. Z. S., & Baharuddin, I. (2005). Auditors’ perception of fraud risk indicators: Malaysian evidence. Managerial Auditing Journal, 20(1), 73-85.) aimed to identify red flags perceived individually by auditors as most important, and explored the demographics of Malaysia’s auditors about the impact on the perception of importance of red flags. They concluded that individuals indicated operational category and financial stability as the most important, followed by the features of influenced management on the environment control and some characteristics of the industry itself. The perception of the auditors was not influenced by demographic origins referring to gender, years of experience or type of auditing firm.

5 Methods

As for the objectives, the study is characterized as descriptive for presenting the characteristics of a given sample. As for the procedures, it is a survey research and the problem approach is quantitative, due to the use of statistical tools in the analysis and interpretation of results.

The research population consists of 246 internal auditors working in the Central Credit Union of Southern Brazil, registered with the Organization of Cooperatives in the State of Paraná - Brazil (OCEPAR), the Organization of Cooperatives in the State of Santa Catarina - Brazil (OCESC) and the Organization of Cooperatives in the State of Rio Grande do Sul - Brazil (OCERGS).The survey sample was designed in view of the research instrument return, totaling 51 respondents.

For the construction of the survey instrument, firstly studies on red flags were identified. Secondly, studies mentioning possibilities of useful warning signs to identify fraud were selected. Finally, red flags that were adaptable to the perception of internal auditing were identified, and in addition, liable to check warning signs in financial institutions and credit unions.

Given the above, the first stage of the questionnaire aimed to characterize the respondents (gender, age, academic area, time experience in the position of internal auditor and if the auditor has professionally experienced fraud).

The second stage was used to verify the perception of internal auditors on the relevance of red flags on fraud risk assessment. To clarify the matter to the respondent, the following quote was inferred: According to Parodi (2005Parodi, L. (2005). Manual das fraudes. Rio de Janeiro: Brasport.), red flags are warning indicators that aim to detect possible fraud. It can be said that these signals serve as a thermometer in the prevention and detection of fraud. It was also made clear to respondents that the questions are assertions of possible occurrences and do not mean that they are actually taking place in the organization where they work.

The questionnaire on the perception of red flags was separated into attributes and the likert scale used was five points ranging from very low (1) to very high (5). Therefore, the first attribute refers to the perception of auditors for possible red flags concerning the structure and environment of the Credit Unions. This attribute was composed of 13 questions adapted from studies referenced below, as shown in Table 1.

Table 1:
Research instrument to assess the perception of internal auditors regarding the relevance of red flags in the characteristics of structure and environment

The second attribute refers to the perception of auditors for possible red flags on the characteristics of managers and employees, consisting of 16 questions adapted from studies referenced below, as shown in Table 2.

Table 2:
Research instrument to assess the perception of internal auditors regarding the relevance of red flags in the characteristics of managers and employees

The third attribute refers to auditors’ perception regarding the relevance of red flags as to economic and financial characteristics. This attribute is made up of 8 questions adapted from studies referenced below, as shown in Table 3.

Table 3:
Research instrument to assess the perception of internal auditors regarding the relevance of red flags as to economic and financial characteristics

The fourth attribute refers to the perception of the auditors regarding red flags as to operational activities (flow of internal processes) and internal control. This attribute is made up of 11 questions adapted from studies referenced below, as shown in Table 4.

Table 4:
Research instrument to assess the perception of internal auditors regarding the relevance of red flags as to the characteristics of operational activities and internal control procedures

The fifth attribute refers to the perception of internal auditors to possible red flags in the characteristics of the credit union’s internal auditing, made up of 3 questions that were adapted from studies referenced below, as shown in Table 5.

Table 5:
Research instrument to assess the perception of internal auditors regarding the relevance of red flags in the characteristics of internal auditing

The adjustment procedure of the questions required researchers’ skills and expertise in identifying red flags which were adaptable to the perception of internal auditors, and ability to check the internal warning signs in credit unions. Although the research instrument had been adapted from several studies, it is innovative because all questions were modified, adapted and revised by researchers and professionals from the field.

The survey instrument was sent by email to two researchers and two professionals working in internal auditing of credit unions. In this case, both of them had to observe the adequacy of the research instrument’s questions to the professional reality of credit unions’ internal auditors. The answers were returned via electronic files, contemplating suggestions referring to greater emphasis on the inclusion of the term “branches” in the attributes of red flags, as well as the segregation of attributes in sectoral characteristics, as follows: structure and environment; managers and employees; economic and financial; operational activities and internal control procedures; and internal auditing.

Given the above, there was also the need to validate the research instrument; this was carried out by two internal auditors who have worked in credit unions for over 5 years. The most important suggestion was the inclusion of the following sentence, to appear above each group of questions: consider that the questions are assertions of possible occurrences and do not mean that they are actually happening in your organization; therefore, respondents should only infer their perception of the importance given to each red flag, if they were to occur. The inference sought to clarify the respondents that the affirmatives (red flags) are only possibilities of fraud, and that, even without any occurrences, relevance could be attributed according only to their perception if such a fact occurs.

To collect the data, we first checked information about the credit unions in the Southern Region on the sites of OCEPAR, OCESC and OCERGS. Then there was telephone contact with those responsible for audit teams in order to get the email of internal auditors. Later, the access link to the questionnaire was sent via Google Docs to the email of auditors:<https://docs.google.com/forms/d/1UiGdRFqpgOh1ejH1gYtGmkw_gzJPYlHx0iWnCcnHTOA/viewform>.

The data obtained from the questionnaires were tabulated in spreadsheets. Prior to the analysis, Cronbach’s alpha test was prepared in order to measure the reliability of the questionnaire. The test result suggested the deletion of attribute number 1 (the organizational structure of the branch is too complex) referring to the group’s structure and environment, of attribute number 14 (a significant part of the remuneration of managers and employees of audited branches is conditioned to achieving aggressive goals), and of attribute number 15 (the managers of audited branches are excessively interested in presenting satisfactory results), both referring to the group of managers and employees’ characteristics. Finally, there was the exclusion of the attribute number 32 (the market in which credit unions operate is highly competitive and saturated, generating a reduction in the results of the credit unions), referring to economic and financial characteristics.

Later there was an analysis of attributes (red flags) validated by Cronbach’s alpha test using descriptive statistics. Furthermore, in order to identify whether there were differences between the profile responses (characteristics) of respondents, two additional tests were conducted: Mann-Whitney’s and Kruskal-Wallis’ tests. Finally, we used the Pearson Correlation test to check the strength of the relevant relationship between the groups of the studied attributes. Cronbach’s Alpha, Mann-Whitney’s, Kruskal-Wallis’ and Pearson Correlation tests were applied using SPSS software.

6 Discussion and analysis of results

First, in order to verify the profile (characteristics) of the internal auditors from the participating credit unions in this research, we established Table 6.

Table 6:
Characterization of respondents

We can see in Table 6 that 36 auditors are male and 15, female. Regarding age, there is a predominance of internal auditors between 26 and 30 years old, accounting for 39.22%, and between 30 and 40 years old, representing 31.37% of the sample. The academic background in accounting is prevalent for internal auditing professionals from credit unions, representing 76.47% of the sample.

Experience in the position of internal auditor is not a very long horizon, in which 56.86% have a long experience of 1 to 5 years, consistent with the low age identified in the sample. However, it is possible to infer that, despite the limited experience of most internal auditors, 78.43% have experienced fraud in the course of their professional life, demonstrating the validity for the study implementation on warning signs for the occurrence of fraud with internal auditors. Table 7 shows the Cronbach’s alpha of the research groups of attributes.

Table 7:
Cronbach’s alpha attribute groups for red flags

We can see in Table 7 that, in the SE attributes groups (Structure and Environment), MANEMP (managers and employees) and ECOFIN (Economic and Financial), it was possible to improve test reliability by excluding attributes of each group. In the SE group, in the first round using 13 attributes, Cronbach’s alpha showed a coefficient of 0.901. However, it was found that with the exclusion of attribute number 1 (the organizational structure of the branch is too complex) it is possible to achieve a Cronbach’s alpha of 0.916.

In the MANEMP group, first round using 16 attributes, Cronbach’s alpha showed a coefficient of 0.900. However, it was found that the exclusion of attribute number 14 (a significant part of the remuneration of managers and employees of branches is conditioned to the achievement of aggressive goals) and attribute number 15 (the managers of branches audited have excessive interest in presenting satisfactory results) provides an increase in Cronbach’s alpha to 0.910.

In the ECOFIN group, in the first round using 8 attributes, Cronbach’s alpha showed a value of 0.764. However, Cronbach’s alpha verified that the exclusion of attribute number 32 (the market in which credit unions operate is highly competitive and saturated, generating reduction in earnings of cooperatives) provides a Cronbach’s alpha of 0.823.

Finally, in the OPECONT and INTAUD groups, Cronbach’s alpha demonstrated that there is no need to exclude any item in order to improve the consistency of the model. Thus, none of the observed attributes was deleted, keeping the same number of questions contained in the research instrument respectively with 11 and 3. As can be seen in Table 7, in the second round all attributes of groups of red flags demonstrated a Cronbach’s alpha consistently greater than 0.80. Table 8 shows the descriptive statistics of the attributes of the structure and environment characteristics group.

Table 8:
Descriptive statistics of the attributes of the structure and environment characteristics group

It can be seen in Table 8 that attribute 1 (the organizational structure of the branch is too complex) is not in the analysis of the group structure and environment characteristics by the exclusion determined by Cronbach’s alpha.

Regarding internal auditors’ perception of the relevance of each attribute, item 2 (the credit union does not have a punishment policy for dishonest acts) had an average/median of 4.10/5.00; attribute 7 (the board of directors and/or supervisory board did not adequately monitor operational systems and internal control) showed an average of 3.94. Attribute 4 (there is a strong suspicion that branch managers are in partnerships with people outside the organization) had an average of 3.77, attribute 12 (the Board of Directors or Supervisory Board did not adequately monitor the generation process of accounting reports) averaged 3.75, attribute 3 (communication of ethical and moral values is not performed by superiors, and/or communication of some ethical and moral values are considered inappropriate) had an average of 3.69 and attribute 11 (branches do not adequately comply with regulations, instructions and policies set by the cooperative management bodies) had an average of 3.67. The exposed attributes are highly relevant for the internal auditors of credit unions as signaling mechanisms (red flags) for the possibility of fraud referring to characteristics of the structure and environment in credit unions.

The attributes perceived as less important were 10 (a credit union provides lower benefits to employees) with average/median of 2.37/2.00 and 9 (a credit union provides low investment in employee training) with average/median of 2.49/2.00. Table 9 shows the descriptive statistics of the group characteristics of managers and employees.

Table 9:
Descriptive statistics of the attributes of the group characteristics of managers and employees

As for the perception of internal auditors about the relevance of each attribute, item 20 (managers of the branches audited often try to justify the use of operational procedures considered improper) had a mean/median of 3.86/4,00, and 16 (the managers of branches that are audited are dishonest and unethical, have dubious character) had a mean/median of 3.76/5.00. The exposed attributes are highly relevant for the internal auditors of credit unions as signaling mechanisms (red flags) for the possibility of any fraud referring to the characteristics of credit unions’ managers and employees.

The attributes perceived as less important were 24 (managers of the branches that are audited show gratitude above normal proving highly unselfish interests, solicitous, efficient and thorough in accountability of branches) with an average/median of 2.88/3.00, 18 (managers and employees of branches that are audited have low skills and little experience) with average/median of 3.04/3.00 and 29 (the board of directors and the supervisory board have excessive interest in maintain and/or increase the disclosure of a growing trend of financial surplus) with average/median of 3.08/3.00, respectively. Table 10 shows the descriptive statistics of the attributes of the group of economic-financial characteristics.

Table 10:
Descriptive statistics of the attributes of the group of economic-financial characteristics

It appears in Table 10 that attribute 37 (there are branches audited making transactions/operations considered to be dangerous) had the highest perception of relevance, with an average/median of 3.67/4.00 respectively. On the other hand, attributes perceived as less important for signaling the possibility of any fraud were 31 (branches make a significant investment in a range of services that are subject to high interference from government regulation) and 36 (there are internal and external issues in branches audited that cause doubts about the continuity of activities), and the mean/median of 2.94/3.00. Table 11 shows the descriptive statistics of the attributes of the group of characteristics of the operations and internal controls.

Table 11:
Descriptive statistics of the attributes of the group characteristics of the operational activities and internal control procedures

We can see in Table 11 that, although the median of all the attributes was 4.00, it is possible to infer that, considering the average, attribute 44 (in the branches audited, there are no limits of competence according to the nature and value of the resources involved in a credit release and decisions on credit releases are dominated by a single individual), attribute 43 (in the branches audited, the system used does not require a third party to make the confirmation of transactions and credit releases to customers) and attribute 39 (in the branches audited, there are inadequate and incomplete files, excessive adjustments in accounting and transactions not recorded) had the best averages for the perception of warning signs. Table 12 shows the descriptive statistics of the attributes of the internal auditing group characteristics.

Table 12:
Descriptive statistics of the attributes of the internal auditing group features

It appears in Table 12 that the attributes with greater relevance were 50 (there are formal or informal restrictions on the internal auditors that limit their access to people, information and documents of the branches audited) that showed an average/median 3.69/4.00 and 49 (managers of the branches audited have a dominant and influent behavior on the internal auditing) that showed an average/median of 3.53/4.00. On the other hand, the attribute that showed less relevance to this characteristic was 51 (the head of internal auditing of the branches audited is replaced with high frequency) with a mean/median of 2.98/3.00. Table 13 shows the descriptive statistics of perceived relevance of red flag groups.

Table 13:
Descriptive statistics of perceived relevance of red flag groups

From the results shown in Table 13 it can be inferred that the attribute group with higher perceived relevance by the internal auditors of credit unions was referring to characteristics of the operational activities and internal control procedures (OPECONT). The increased perception of relevance to the possibility of fraud in aspects referring to operational activities and internal control procedures can be explained by the role of internal auditors. According to Migliavacca (2004Migliavacca, P. N. (2004). Controles internos nas organizações: Um estudo abrangente dos princípios de controle interno: Ferramentas para avaliação dos controles internos em sua organização. São Paulo: Edicta.), CFC NBC (2008Conselho Federal de Contabilidade. (2008). Princípios fundamentais e normas brasileiras de contabilidade (3a ed.). Brasília: Autor.), and Santos and Vier (2014Santos, M. V. D., & Vier, A. J. (2014). A importância da auditoria interna na contribuição da gestão dos negócios. Revista Eletrônica do Curso de Ciências Contábeis, (4), 1-26. Recuperado de https://seer.faccat.br/index.php/contabeis/article/view/65/60
https://seer.faccat.br/index.php/contabe...
), internal auditing is essential for organizations for the constant concern with controls and internal processes. In addition, in the credit unions the action of internal auditing is perceived by the effectiveness of internal control, providing reliability and safety to the cooperative (Oliveira, 2012Oliveira, R. L. (2012). Gestão de fraudes financeiras externas em bancos (Dissertação de mestrado). Faculdade de Economia, Administração e Contabilidade de Ribeirão Preto, Universidade de São Paulo, Ribeirão Preto, SP, Brasil.).

On the other hand, results indicate that the attribute group with lower perception of relevance referred to economic and financial characteristics (ECOFIN), averaging 3.13.This result is due to the internal auditing activity focus being less guided to marketing and financial facts. However, as noticed by Santos and Vier (2014Santos, M. V. D., & Vier, A. J. (2014). A importância da auditoria interna na contribuição da gestão dos negócios. Revista Eletrônica do Curso de Ciências Contábeis, (4), 1-26. Recuperado de https://seer.faccat.br/index.php/contabeis/article/view/65/60
https://seer.faccat.br/index.php/contabe...
), the internal auditing is changing its look, which was only on internal controls, to observing the institutional risks.

Furthermore, in order to identify whether there are statistical differences between the profile responses of internal auditors out two tests were carried out (Mann-Whitney; Kruska-Wallis). Mann-Whitney’s test was used to check the independent variables with two samples. Thus, gender characterization was segregated into (male - 1, female - 2); and the characterization demonstrating whether the auditor experienced a case of fraud while working was segregated in (yes - 1, no - 2). Table 14 shows the results of the Mann-Whitney’s test for the gender variable and the variable that shows whether the auditor has experienced a case of fraud while working.

Table 14:
Results of Mann-Whitney’s test on red flag groups with the characterizations of respondents with two independent samples

The results in Table 14 show that internal auditors of both genders do not have different perceptions about the significance of red flags, corroborating the evidence by Schwartz and Wallin (2002Schwartz, S. T., & Wallin, D. E. (2002). Behavioral implications of information systems on disclosure fraud. Behavioral Research in Accounting, 14(1), 197-221.) and Smith et al. (2005Smith, M., Omar, H. N., Idris, S. I. Z. S., & Baharuddin, I. (2005). Auditors’ perception of fraud risk indicators: Malaysian evidence. Managerial Auditing Journal, 20(1), 73-85.), and contradicting the inference by Foster et al. (2003Foster, B. P., Karcher, J. N., & Levitan, A. S. (2003). Gender and accountants’ use of technology. The CPA Journal, 3(2), 68.) on the different perception of the warning signs for male and female auditors.

We can see that the variable experience with a case of fraud presented significance at a level of 5% with the group of red flags referring to structure and environment (SE), managers and employees (MANEMP), economic and financial (ECOFIN) operating activities and internal control procedures (OPECONT), and showed no significance with internal auditing (INTAUD).

The results indicate that internal auditors who have experienced a fraud case have different perceptions about the significance of red flags referring to ESE, MANEMP, ECOFIN and OPECONT in relation to those who have never experienced fraud. On the other hand, the experience with a case of fraud is not a condition for different perception of relevance of red flags referring to INTAUD. Table 15 shows the results of the Mann-Whitney’s test variable experience with a case of fraud in red flag groups SE, MANEMP, ECOFIN and OPECONT.

Table 15:
Mann-Whitney’s test result of the variable experience with a case of fraud in the red flag groups SE, MANEMP, ECOFIN and OPECONT

The results in Table 15 show that internal auditors who have experienced a case of fraud in the course of their profession were those who had a higher perception of the relevance of all groups of red flags showing differences in perception by professionals. Thus, the experience with a case of fraud can provide a perception of different relevance for fraud for the profession and performance of the internal auditor. The results corroborate the inference by Groveman (1995Groveman, H. (1995). How auditors can detect financial statement misstatement. Journal of Accountancy, 180(4), 83-90.), Green and Calderon (1996Green, B. P., & Calderon, T. G. (1996). Information privity and the internal auditor’s assessment of fraud risk factors. Internal Auditing-Boston-Warren Gorham and Lamont Incorporated, 11, 4-15.) and Hackenbrack (1993Hackenbrack, K. (1993). The effect of experience with different sized clients on auditor evaluations of fraudulent financial reporting indicators. Auditing: A Journal of Practice & Theory, 12(1), 99-110.) on the influence of factors generating experience in detecting warning signs to the possibility of fraud.

Subsequently, Kruskal-Wallis’ test was used to assess the independent variables with more than two cases. Thus, the characterization of segregated age in 4 cases is: (up to 25 years - 1, from 26 to 30 - 2, from 31 to 40 years - 3; above 41 years), the characterization of the academic background in 3 cases is: (Accounting - 1; Business Administration - 2; Economics - 3), the and characterization of time experience in the position of internal auditor divided in 4 cases is (up to 1 year - 1; 1.01 to 5 years - in 2, of 5.01 to 10 years - in 3; Over 10 years - 4). Table 16 shows the result of the Kruskal-Wallis test of the variables age, academic background and experience in the position of internal auditor.

Table 16:
Kruskal-Wallis test result of red flags groups with the characterizations of respondents with more than two independent samples

It appears from Table 16 that the age and academic background variables were not significant at 5% in relation to any group of attributes of red flag characteristics. The results indicate that internal auditors of different s ages and academic backgrounds do not have different perceptions about the significance of red flags, contradicting evidence by Green and Calderon (1996Green, B. P., & Calderon, T. G. (1996). Information privity and the internal auditor’s assessment of fraud risk factors. Internal Auditing-Boston-Warren Gorham and Lamont Incorporated, 11, 4-15.) on the impact of academic background in the perception of auditors in relation to warning signs for fraud.

However, the variable experience in the position showed significance at a 5% level with groups of red flags referring to structure and environment (SE) and internal auditing (INTAUD). On the other hand, the significance was not observed in groups of red flags referring to managers and employees (MANEMP), economic and financial (ECOFIN), and operational activities and internal control procedures (OPECONT). Table 17 shows the results of Kruskal-Wallis’ test of the variable experience in the position for red flag groups SE and INTAUD.

Table 17:
Kruskal-Wallis’ test result for variable experience in the position of internal auditor for the red flag groups SE and INTAUD

The results in Table 17 show that the increase in time of experience as internal auditor increases the perception of relevance of red flags referring to structure and environment (SE) and internal auditing (INTAUD). Thus, we demonstrate that internal auditors with more than 10 years of experience in the position tend to have greater perception of relevance to the possible occurrence of fraud in red flags referring to SE and INTAUD. This result can be explained due to greater knowledge of the structure and environment in which the auditor operates, and by the knowledge of their own audit activity. The findings are consistent with the study by Hackenbrack (1993Hackenbrack, K. (1993). The effect of experience with different sized clients on auditor evaluations of fraudulent financial reporting indicators. Auditing: A Journal of Practice & Theory, 12(1), 99-110.), Grovemann (1995Groveman, H. (1995). How auditors can detect financial statement misstatement. Journal of Accountancy, 180(4), 83-90.), Murcia et al. (2008Murcia, F. D. R., Borba, J. A., & Schiehll, E. (2008). Relevância dos red flags na avaliação do risco de fraudes nas demonstrações contábeis: A percepção de auditores independentes brasileiros. Revista Universo Contábil, 4(1), 25-45.). Table 18 shows the Pearson Correlation between red flag attribute groups.

Table 18:
Pearson Correlation between red flag attribute groups

We observed in Table 18 that all red flag groups are referring to each other, at a level of significance of 1%. However, it is possible to determine that the groups with a stronger linear association, i.e., closer to 1 are: MANEMP associated with ECOFIN; MANEMP associated with OPCONT; OPCONT associated with INTAUD.

Thus, it appears that the significance of red flags referring to managers and employees (MANEMP) increases in similar proportion to the relevance of red flags referring to economic and financial characteristics (ECOFIN). The significance of red flags referring to managers and employees (MANEMP) increases in similar proportion to the relevance of red flags referring to characteristics of the operational activities and internal control procedures (OPCONT). Moreover, the significance of red flags referring to operating activities and internal control procedures (OPCONT) increases in similar proportion to the relevance of red flags referring to characteristics of internal auditing (INTAUD).

7 Conclusions and recommendations

The aim of this study was to verify the relevance credit unions’ internal auditors attribute to red flags in assessing the risk of fraud. The results indicate that internal auditors of both genders do not have different perceptions concerning the significance of red flags. On the other hand, credit unions’ internal auditors who have experienced a case of fraud have greater perception of the relevance of red flags referring to structure and environment, managers and employees, economic and financial, operational activities and internal control procedures.

Moreover, it is possible to infer that internal auditors of different ages and academic backgrounds do not have different perceptions about the significance of red flags. However, auditors with experience in the position have greater perception of the relevance of red flags referring to structure and environment and internal auditing. We conclude that, in the assessment of fraud risk, internal auditors attribute greater importance to red flags referring to operating activities and internal control procedures. Therefore, internal auditors are focused on fraud associated with signals generated by changes in the normal flow of internal processes, and in monitoring failure by internal control mechanisms.

Furthermore, it is suggested that internal auditors are not impartial concerning the perception of relevance to most of the warning signs of possible fraud. The findings support acknowledging that internal auditors, through their emotional and professional relationship with the organization in which they operate as well as with their members, are impartial in their perceptions about the warning signs of fraud. Moreover, internal auditors have higher perceptions of red flags referring to their training and professional practice, and, therefore, so that organizations can efficiently use warning signs to reduce fraud, there must be a joint effort by internal and independent auditors, since both integrate their knowledge and insights to alert managers of organizations and users of accounting information as to the possibility of fraud.

The results show that auditors attach importance to red flags; however, none of the observed groups showed a relevance level above 4 on a 5 point scale. This result may corroborate the evidence by Wells (1990Wells, A. (1990). Panic disorder in association with relaxation induced anxiety: An attentional training approach to treatment. Behavior Therapy, 21(3), 273-280.) about the failure of auditors in fraud detection, where only 20% of fraud is detected by the auditors. Thus, for greater fraud detection it is necessary that auditors recognize the most relevant symptoms of red flags linked to favorable conditions for the occurrence of fraud (Cottrell & Albrecht, 1994Cottrell, D. M., & Albrecht, W. S. (1994). Recognizing the symptoms of employee fraud. Healthcare financial management: Journal of the Healthcare Financial Management Association, 48(5), 18-22.).

This study suggests that there is an increase in the relevance of auditing for warning signs, since the function of the auditor is directly referring to the mechanisms of prevention and fraud detection (CFC NBC, 2008Conselho Federal de Contabilidade. (2008). Princípios fundamentais e normas brasileiras de contabilidade (3a ed.). Brasília: Autor.; Santos & Vier, 2014Santos, M. V. D., & Vier, A. J. (2014). A importância da auditoria interna na contribuição da gestão dos negócios. Revista Eletrônica do Curso de Ciências Contábeis, (4), 1-26. Recuperado de https://seer.faccat.br/index.php/contabeis/article/view/65/60
https://seer.faccat.br/index.php/contabe...
). According to the findings, it is necessary that scholars, researchers and auditing professionals explore more intensively the use of red flags as a mandatory tool for the work of internal and independent audit.

The findings contribute to offering a different perception of the occurrence of fraud in credit unions, through a view that fraud is inherent in all environments of an organization, needing skilled people to minimize the potential for such events in organizations. Credit unions, for having a purpose of benefit to members and involving financial aspects of high risk, need special attention on the subject, and therefore, internal auditors may use the findings to glimpse the search for additional powers to exercise their duties.

Finally, it is recommended to carry out further studies in order to observe the relationship of perceived relevance of red flags in organizations that experienced fraud. Thus, it will be possible to see if the organizations where auditors have a lower perception of warning signs could suffer with higher occurrence of internal fraud and financial statements. Also, there are possibilities of application of the studies in financial institutions to compare the perception of internal and independent auditors about warning signs addressed in several national and international studies.

Referências

  • Albrecht, S. (2003). Fraud examination South Wester, OH: Thompson.
  • Albrecht, S., & Romney, M. (1986). Red-flagging management fraud: A validation. Advances in Accounting, 3, 323-333.
  • Bell, T., & Carcarello, J. (2000). A decision aid for accessing the likehood of fraudulent financial reporting. Auditing: A Journal of Practice & Theory, 19(1), 169-184.
  • Boynton, W. C., Johnson, R. N., & Kell, W. G. (2002). Auditoria São Paulo: Atlas.
  • Conselho Federal de Contabilidade. (2008). Princípios fundamentais e normas brasileiras de contabilidade (3a ed.). Brasília: Autor.
  • Cottrell, D. M., & Albrecht, W. S. (1994). Recognizing the symptoms of employee fraud. Healthcare financial management: Journal of the Healthcare Financial Management Association, 48(5), 18-22.
  • Cushing, B. E., & Romney, M. B. (1994). Accounting information systems Reading, Massachusetts: Addison-Wesley.
  • Eining, M. M., Jones, D. R., & Loebbecke, J. K. (1997). Reliance on decision aids: An examination of auditors’ assessment of management fraud. Auditing: A Journal of Practice & Theory, 16(2), 16-19.
  • Foster, B. P., Karcher, J. N., & Levitan, A. S. (2003). Gender and accountants’ use of technology. The CPA Journal, 3(2), 68.
  • Glover, H. D., & Aono, J. Y. (1995). Changing the model for prevention and detection of fraud. Managerial Auditing Journal, 10(5), 3-9.
  • Green, B. P., & Calderon, T. G. (1996). Information privity and the internal auditor’s assessment of fraud risk factors. Internal Auditing-Boston-Warren Gorham and Lamont Incorporated, 11, 4-15.
  • Groveman, H. (1995). How auditors can detect financial statement misstatement. Journal of Accountancy, 180(4), 83-90.
  • Hackenbrack, K. (1993). The effect of experience with different sized clients on auditor evaluations of fraudulent financial reporting indicators. Auditing: A Journal of Practice & Theory, 12(1), 99-110.
  • Kaplan, S., & Reckers, P. M. (1995). Auditors’ reporting decisions for accounting estimates: The effect of assessments of the risk of fraudulent financial reporting. Managerial Auditing Journal, 10(5), 27-36.
  • Kneer, D. C., Reckers, P. M., & Jennings, M. M. (1996). An empirical examination of the influence of the new US audit report and fraud red flags on perceptions of auditor culpability. Managerial Auditing Journal, 11(6), 18-30.
  • Koornhof, C., & Du Plessis, D. (2000). Red flagging as an indicator of financial statement fraud: The perspective of investors and lenders. Meditari Accountancy Research, 8(1), 69-93.
  • KPMG Forensic. (2009). A fraude no Brasil: Relatório da pesquisa 2009 Recuperado de http://www.kpmg.com.br/publicacoes/forensic/Fraudes_2009_port.pdf
    » http://www.kpmg.com.br/publicacoes/forensic/Fraudes_2009_port.pdf
  • Krambia-Kapardis, M. (2003). Fraud victimisation of companies: The Cyprus experience. Journal of Financial Crime, 10(2), 184-191.
  • Kroll. (2013). Global fraud report 2013/2014 Recuperado de http://www.kroll.com/CMSPages/GetAzureFile.aspx?path=~%5Cmedia%5Cfiles%5Cintelligence-center%5Cglobal-fraud-report-2013-2014-english.pdf&hash=a84e800f9068acd3e3ce664e95666772c22ccf4547183e750ecf984b2041343d
    » http://www.kroll.com/CMSPages/GetAzureFile.aspx?path=~%5Cmedia%5Cfiles%5Cintelligence-center%5Cglobal-fraud-report-2013-2014-english.pdf&hash=a84e800f9068acd3e3ce664e95666772c22ccf4547183e750ecf984b2041343d
  • Migliavacca, P. N. (2004). Controles internos nas organizações: Um estudo abrangente dos princípios de controle interno: Ferramentas para avaliação dos controles internos em sua organização São Paulo: Edicta.
  • Moyes, G. D. (2007). The differences in perceived level of fraud-detecting effectiveness of SAS No. 99 red flags between external and internal auditors. Journal of Business & Economics Research, 5(6), 9-25.
  • Moyes, G. D. (2011). The differences in perceived level of fraud-detecting effectiveness of SAS No. 99 red flags between external and internal auditors. Journal of Business & Economics Research, 5(6), 9-26.
  • Moyes, G. D., Lin, P., Landry, R. M., & Vicdan, H. (2006). Internal auditors’ perceptions of the effectiveness of red flags to detect fraudulent financial reporting. Journal of Accounting, Ethics & Public Policy, 6(1), 1-28. Recuperado de http://papers.ssrn.com/sol3/ papers.cfm?abstract_id=961457
    » http://papers.ssrn.com/sol3/ papers.cfm?abstract_id=961457
  • Moyes, G. D., Young, R., & Mohamed, D. H. F. (2013). Malaysian internal and external auditor perceptions of the effectiveness of red flags for detecting fraud. International Journal of Auditing Technology, 1(1), 91-106.
  • Murcia, F. D. R., Borba, J. A., & Schiehll, E. (2008). Relevância dos red flags na avaliação do risco de fraudes nas demonstrações contábeis: A percepção de auditores independentes brasileiros. Revista Universo Contábil, 4(1), 25-45.
  • Negra, E. M. S., Viana, T. M. M., & Negra, C. A. S. (2013). Auditoria interna: Percepção de sua importância para resguardar ativos das organizações do ramo financeiro. Anais do Congresso Integrado de Contabilidade, Governador Valadares, MG, Brasil, 1. Recuperado de http://www.ufjf.br/congreconti/files/2013/11/A8.pdf
    » http://www.ufjf.br/congreconti/files/2013/11/A8.pdf
  • Oliveira, R. L. (2012). Gestão de fraudes financeiras externas em bancos (Dissertação de mestrado). Faculdade de Economia, Administração e Contabilidade de Ribeirão Preto, Universidade de São Paulo, Ribeirão Preto, SP, Brasil.
  • Parodi, L. (2005). Manual das fraudes Rio de Janeiro: Brasport.
  • Pickett, K. S. (2005). The essential handbook of internal auditing Chichester: Wiley.
  • Pincus, K. V. (1989). The efficacy of a red flags questionnaire for assessing the possibility of fraud. Accounting, Organizations and Society, 14(1), 153-163.
  • Pinheiro, G. J., & Cunha, L. R. S. (2003). A importância da auditoria na detecção de fraudes. Contabilidade Vista & Revista, 14(1), 31-48.
  • Reina, D., Nascimento, S. D., & Reina, D. R. M. (2008). A percepção dos auditores quanto à utilização dos Red Flags nas principais empresas de auditoria brasileiras. Revista Enfoque Contábil, 27(2), 71-86.
  • Resolução BACEN n. 2554, de 24 de setembro de 1998. Dispõe sobre a implantação e implementação de sistema de controles internos. Recuperado de http://www.bcb.gov.br/pre/normativos/res/1998/pdf/res_2554_v3_P.pdf
    » http://www.bcb.gov.br/pre/normativos/res/1998/pdf/res_2554_v3_P.pdf
  • Rittenberg, L. E., & Schwieger, B. J. (2005). Auditing: Concepts for a changing environment South-Western: Thomson.
  • Robertson, J. C. (1997). Fraud examination for managers and auditors Austin: Viesca Books.
  • Romney, M. B., Albrecht, W. S., & Cherrington, D. J. (1980). Auditors and the Detection of Fraud. Journal of Accountancy, 149(5), 63-69.
  • Santos, M. V. D., & Vier, A. J. (2014). A importância da auditoria interna na contribuição da gestão dos negócios. Revista Eletrônica do Curso de Ciências Contábeis, (4), 1-26. Recuperado de https://seer.faccat.br/index.php/contabeis/article/view/65/60
    » https://seer.faccat.br/index.php/contabeis/article/view/65/60
  • Schwartz, S. T., & Wallin, D. E. (2002). Behavioral implications of information systems on disclosure fraud. Behavioral Research in Accounting, 14(1), 197-221.
  • Smith, M., Omar, H. N., Idris, S. I. Z. S., & Baharuddin, I. (2005). Auditors’ perception of fraud risk indicators: Malaysian evidence. Managerial Auditing Journal, 20(1), 73-85.
  • Uretsky, M. (1980). An interdisciplinary approach to the study of management fraud. In R. K. Elliott, & J. J. Wulingham (Eds.), Management fraud: Detection and deterrence (pp. 89-93). Princeton, NJ: Petroce Ui Books.
  • Wells, A. (1990). Panic disorder in association with relaxation induced anxiety: An attentional training approach to treatment. Behavior Therapy, 21(3), 273-280.
  • Wells, D. L. (2005). A note on the influence of visitors on the behaviour and welfare of zoo-housed gorillas. Applied Animal Behaviour Science, 93(1), 13-17.
  • 6
    Evaluation process: Double Blind Review

Contribution of each author:

Publication Dates

  • Publication in this collection
    Jul-Sep 2017

History

  • Received
    06 Jan 2016
  • Accepted
    23 Nov 2016
Fundação Escola de Comércio Álvares Penteado Fundação Escola de Comércio Álvares Penteado, Av. da Liberdade, 532, 01.502-001 , São Paulo, SP, Brasil , (+55 11) 3272-2340 , (+55 11) 3272-2302, (+55 11) 3272-2302 - São Paulo - SP - Brazil
E-mail: rbgn@fecap.br