New Survey from The IIA and AuditBoard Report Reveals Growing Awareness of AI-enabled Fraud, Varying Perception of Audit Preparedness

LAKE MARY, Fla., Feb. 17, 2026 /PRNewswire/ -- A new joint report from The Internal Audit Foundation and AuditBoard reveals that, while internal audit leaders widely recognize artificial intelligence–enabled fraud as a growing organizational risk, only four in ten believe their functions are adequately prepared to detect or respond to it.

Based on insights from more than 370 senior internal audit leaders in North America, the survey examines how audit functions are currently assessing and responding to fraud, including their most pressing concerns, the key barriers limiting effective action, and the steps that practitioners and organizations should consider keeping pace with evolving threats. The findings underscore a growing need for audit functions and leadership to prioritize skills development, resource allocation, and cross-functional collaboration within their organizations.

"AI is reshaping how organizations operate, driving greater efficiency, automation, and insight," said Anthony Pugliese, President and CEO of The IIA. "At the same time, those capabilities are increasingly being leveraged to enable more sophisticated and scalable fraud. As adoption accelerates, internal audit has a critical role to play in helping organizations understand these risks, identify emerging threats, and respond effectively. This survey offers a timely benchmark to help audit functions assess preparedness and strengthen organizational resilience in a rapidly evolving risk environment."

High Awareness, Varying Perceptions of Readiness

While most practitioners view AI-enabled fraud as a moderate (58%) to high (27%) risk, confidence in preparedness remains limited. Fewer than 40% believe their internal audit function is adequately prepared to detect AI-enabled fraud, highlighting a clear opportunity for practitioners to strengthen capabilities and awareness across audit functions.

Despite varying perceptions of audit readiness, many functions are already actively engaged in addressing AI-related risks. More than half (57%) currently assess control weaknesses that enable fraud and advise management on AI-related governance or policy updates (51%). Other common ways that audit functions are taking action include supporting awareness or training initiatives (40%); testing or strengthening fraud prevention and detection (38%); providing fraud risk assessments to leadership (31%); and investigating and documenting AI's role in fraud incidents (26%).

Key Concerns and Barriers

Across the board, AI-powered phishing attacks are the most-cited concern for audit leaders, with 88% of respondents identifying them as a top risk. Other leading threats include fabricated invoices or financial documents (65%), automated social engineering (58%), and deepfake audio or video impersonation (45%).

Though cited less frequently, additional concerns that reflect the expanding scope of AI-enabled fraud risks include the use of AI to insert malicious code (41%), forged contracts or legal documents (29%), fabricated job applications or employee profiles (28%), and synthetic identity fraud (27%).

When asked about primary barriers to increasing response effectiveness and preparedness, more than half of respondents identified a lack of appropriate technology or tools (57%) and insufficient staff with relevant skills or expertise (55%). Limited financial budget (46%), competing organizational priorities (43%), and insufficient time (43%) to dedicate to AI-specific risk management efforts also pose significant challenges for audit functions.

"While the awareness of AI-enabled fraud is high, the 'readiness gap' remains a significant vulnerability for most organizations," said Richard Chambers, Senior Advisor, Risk and Audit at AuditBoard. "Internal audit leaders must take disciplined action by equipping their teams with the right technology, continuous training, and access to cross-functional data. In a world of automated, AI-powered threats, manual fraud detection is no longer a viable defense."

Looking Ahead

Importantly, the report highlights the key actions that internal audit leaders see as most critical to enhancing readiness. Practitioners emphasize skill building as a priority, including engaging in continuous, regularly updated training to support AI-related responsibilities, alongside the need for greater organizational alignment on AI use. Stronger collaboration among technology, cybersecurity, and risk management teams was also emphasized as a critical step to enhancing understanding of AI deployment and delivering more effective risk management.

Additional Findings

The report also highlights the growing implementation of AI within internal audit functions. Currently, AI is leveraged the most frequently in:

• Audit planning (35% cited extensive use; 33% cited occasional use)
• Reporting (35% cited extensive use; 34% cited occasional use)
• Risk assessment (25% cited extensive use; 39% cited occasional use)
• Fieldwork (19% cited extensive use; 39% cited occasional use)

Looking ahead, an overwhelming 83% of respondents expect their internal audit function to increase AI usage over the next year, reinforcing the importance of understanding both the benefits and potential risks to AI.

Methodology

The survey was distributed online in Q4 2025 to senior internal audit leaders in North America to assess current awareness and practices related to AI-enabled fraud. Insights are based on the responses from 373 individuals across diverse industries and sectors.

About The Institute of Internal Auditors and the Internal Audit Foundation

The Institute of Internal Auditors (The IIA) is an international professional association that serves more than 265,000 global members and has awarded more than 200,000 Certified Internal Auditor® (CIA®) certifications worldwide. Established in 1941, The IIA is recognized throughout the world as the internal audit profession's leader in standards, certifications, education, research, and technical guidance. For more information, visit theiia.org.

The Internal Audit Foundation is the preeminent global resource, in strategic partnership with The IIA, dedicated to elevating and empowering the internal audit profession by developing cutting-edge research and programs. The Foundation helps current and future internal auditors stay relevant by building and enhancing their skills and knowledge, ensuring organizations are equipped to create, protect, and sustain long-term value. For more information, visit theiia.org/Foundation.

About AuditBoard

AuditBoard is the leading AI-powered GRC platform, transforming the way the world's biggest companies manage risk. More than 50% of the Fortune 500 trust AuditBoard to elevate their audit, risk, and compliance management. AuditBoard is top-rated by customers on G2, Capterra, and Gartner Peer Insights, and was recently named a leader in 2025 Gartner® Magic Quadrant™ for Governance, Risk and Compliance (GRC) Tools, Assurance Leaders and ranked for the seventh year in a row as one of the fastest-growing technology companies in North America by Deloitte.

SOURCE The Institute of Internal Auditors