Despite Rising Fraud Threat, Majority of Small Business Owners Lack Proper Security Policies

SAN FRANCISCO, Sept. 16, 2013 /PRNewswire/ -- Amidst a climate of increasingly sophisticated and rampant fraud schemes such as business identity theft, mobile malware and money mules, many small businesses – from industries as diverse as retailers to professional services firms – are not as protected as they should be, according to Bank of the West's new survey, "Fighting Fraud: Small Business Owner Attitudes about Fraud Prevention and Security." For instance, the poll, conducted online by Harris Interactive in May and June of 2013 among 803 small business owners, found that while 95% of small business owners take steps to prevent fraud, only 18% are using two person controls – one of the most important precautions.

According to the National Federation of Independent Businesses, security experts say that as many as 30% of an average company's employees do steal, and another 60% will steal if given a motive and opportunity. Some estimates indicate that more than $600 billion is stolen annually, or, roughly $4,500 per employee.[1] Yet, the Bank of the West study found that less than one-third (32%) of small business owners have a business insurance policy that covers employee dishonesty.

The Bank of the West research also found that in general, when the owners have been victims themselves they are more likely to be extremely or very concerned about the potential for fraud (62% of victims vs. 45% of non-victims).  Small business owners who have not been victims of fraud are:

• more likely to believe their payment collection accounts are not at all vulnerable to fraud (47% of non-victims vs. 24% of victims)
• less likely to take additional steps in the next year to prevent fraud (32% vs. 50%)
• and, among those who do not utilize any fraud prevention tools, are significantly more likely to perceive fraud risk as low (49% vs. 15%).

But, the risk is very real—according to the Association of Certified Fraud Examiners' (ACFE) most recent Report to the Nations, small businesses are the most common victims in fraud instances, with the highest rate of fraud (31.8%) of any business size category and the largest median loss.[2]

The results of the survey indicated that small businesses lack many foundational security measures:

• Less than half (48%) secure documents properly – either in locked files or with password protection—even though theft of digital information has become the most commonly reported fraud.[3]
• Half (49%) neglect to conduct regular checks of the business' financial and inventory departments.
• 61% of organizations have experienced payment fraud, according to the AFP Payments Fraud and Control Survey[4], yet the Bank of the West study findings show that only 33% use centralized payroll and approved vendors and only 30% use fraud prevention services such as ACH Positive Pay, ACH Block, Stand Alone Positive Pay, or Reverse Positive Pay.
• Only 40% conduct employee background checks, less than one-third (32%) have a business insurance policy that covers employee dishonesty, only 18% use two-person controls, and just 16% report having a written fraud policy—though Bank of the West fraud experts acknowledge employee fraud is among the greatest risks facing small businesses.
• While 52% have used online browsing protection tools, only 36% have business data security policies in place, and only 2 in 5 (41%) small business owners have a written policy concerning remote networking, email and Internet safety procedures for their company—despite the fact that 69% say employees' personal computers are used for work.

"Small businesses are particularly susceptible to fraud because they have fewer resources. Yet, the impact of the resulting losses is usually much greater than for larger businesses," said Michelle DiGangi, executive vice president of small and medium enterprise banking at Bank of the West. "Through our close relationships with business owners, we've seen first-hand how devastating fraud can be on them.   Fortunately, there are precautions – which in many cases are fairly simple to execute – that owners can take to better protect themselves from being victimized and improve the overall security of their organizations."

"I was surprised to see that just about a third of small business owners plan to take additional fraud prevention steps this year," said David Pollino, Fraud Prevention Officer and Senior Vice President at Bank of the West. "Often, owners expect banks to protect their transactions. While banks play a large role in safeguarding businesses, businesses also have responsibility for taking steps that will counter these increasingly sophisticated security attacks and make themselves less vulnerable."

For more information on types of financial fraud and tips for business owners, visit Bank of the West's Small Business Fraud Center at www.bankofthewest.com/security-center-small-business/fraud-center.html.

Methodology

This survey was conducted online within the United States by Harris Interactive on behalf of Bank of the West between May 28 – June 10, 2013 among 803 US residents who are owners of small businesses with annual revenues of less than $10 million, 2 or more non-owner full-time employees, and have been in business for 2 or more years. The sample includes 150 small business owners in Northern California and 150 in Southern California. This online survey is not based on a probability sample and therefore no estimate of theoretical sampling error can be calculated. For complete survey methodology, including weighting variables, please contact Debra Jack at Debra.jack@bankofthewest.com or (415) 399-7202.

About Bank of the West:

Founded in 1874, $64 billion-asset Bank of the West (www.bankofthewest.com), Member FDIC and equal housing lender, offers a full range of personal, commercial, wealth management and international banking services. The bank operates more than 600 retail and commercial banking operations in 19 Western and Midwestern states. Bank of the West is a subsidiary of BNP Paribas, which has a presence in 80 countries with nearly 200,000 employees.

About Harris Interactive:

Harris Interactive is one of the world's leading market research firms, leveraging research, technology, and business acumen to transform relevant insight into actionable foresight. Known widely for the Harris Poll® and for pioneering innovative research methodologies, Harris offers proprietary solutions in the areas of market and customer insight, corporate brand and reputation strategy, and marketing, advertising, public relations and communications research. Harris possesses expertise in a wide range of industries including health care, technology, public affairs, energy, telecommunications, financial services, insurance, media, retail, restaurant, and consumer package goods. Additionally, Harris has a portfolio of multi-client offerings that complement our custom solutions while maximizing our client's research investment. Serving clients in more than 196 countries and territories through our North American and European offices, Harris specializes in delivering research solutions that help us - and our clients—stay ahead of what's next. For more information, please visit www.harrisinteractive.com.

SOURCE Bank of the West