Detect and prevent SAP® fraud

Increase efficiency of business operations by preventing fraud and potential financial losses in your SAP®. Strengthen compliance, handle critical business bottlenecks with real time, out-of-the-box Fraud Indicators.

We will automate fraud detection process, bringing value on day 1 after the secure connection is established. Skywind Fraud Exposure Team will guide you through all steps of the process and provide initial exposure and analysis of fraud related events. We promise to find you cases that you couldn’t even imagine might exist in your SAP®.

01_communication_and_interfaces Fraud Indicators - FINANCE
  1. Bad debt receivable check
  2. Exceptional finance postings
  3. Meals expense over the threshold
  4. Exceptional posting by GL account
  5. Suspicious keyword match expense
  6. Excessive high-risk expense categories
  7. Parked Document are posted by the same user
  8. Direct posting to FI without reference to Logistics
  9. Payment except regular incoming payment bank accounts
  10. Control of access to SAP functions that modify GL Accounts
  11. Control of access to Opening/Closing/Posting Periods (MM/FI/CO)
04_sales Fraud Indicators - SALES
  1. List of credit management approvers
  2. Customer's credit limit was changed
  3. Unauthorized credit limits changers
  4. Credit Management Block flag is disabled
  5. Customer's payment terms were changed
  6. Sales Order pricing conditions were duplicated
  7. Manually changed addresses in Sales Document
  8. Sales Order pricing conditions were changed manually
  9. Customer's address was changed in suspicious circumstances
  10. Sales Document payment terms - check for differences (Order vs. Payer)
  11. Credit Memo monthly vol. by Payer have been exceeded an amount of XX in doc. currency
  12. Credits / Compensations for Payers have been exceeded a threshold amount in doc. currency
  13. Returns monthly volume by Sold-To-Party have been exceeded an amount of XX in doc. currency
05_vendors Fraud Indicators - VENDORS
  1. A new vendor was created
  2. Vendor's name was changed
  3. Vendor's account change log
  4. Inactive vendors to be blocked
  5. Vendor's address was changed
  6. One time vendor - check details
  7. Vendor's Master's name change log
  8. Inactive vendors with open balances
  9. Vendor Payment Terms comparison
  10. Vendor payment terms differs invoice payment terms
  11. List of vendors with alternative payee (Vendor's Master)
  12. Vendor's bank account was changed by unauthorized personnel
  13. Alternative payee was assigned to a vendor (Venor's Change Log)
  14. Payee is assigned in payment advise to one-time vendor is regular vendor
  15. Vendor's name was changed and in a short period of time it was changed back
  16. Validate bank details of payment advise vs. vendor's bank account (regular vendor)
  17. Vendor's bank account was changed and in a short period of time was changed back
  18. Compare bank details of payment advise for one-time vendor to bank account assigned to a regular vendor
06_procurement Fraud Indicators - PROCUREMENT
  1. Purchase orders price changes
  2. Suspicious materials movements
  3. Purchase info price was changed
  4. Purchase Orders approved by creator
  5. Purchase Requisitions approved by creator
  6. Purchase Orders approved by creator as LAST approver
  7. Purchase Requisition vs. Purchase Order prices comparison
  8. Vendor related accounting document without PO reference
  9. Retroactively created Purchase Order (by Vendor invoice date)
  10. Material price change (moving average price had changed substantially)
  11. GR/IR of PO performed by user who participated in PO's maintenance or release
  12. GR/IR of PO is performed by user who altered master record of vendor, related to the PO
07_masterdata Fraud Indicators - MASTER DATA
  1. Vendor's bank account is in offshore
  2. Vendor's country code differs from Company's country code
  3. Vendor's country code differs from Vendor's bank country code
  4. Vendor's bank country code differs from Company's country code