What it means
The model says that fraud rarely happens because someone is simply dishonest. Instead four conditions line up: a pressure the person feels they cannot share, an opportunity created by weak controls, a story they tell themselves that makes it acceptable, and the personal capability to execute and conceal it.
Capability is the element that separates the diamond from its three-part predecessor. Plenty of employees face financial pressure and sit near weak controls, but far fewer understand the accounting system well enough to post a covering journal entry, have the seniority to override a limit, or can lie convincingly to an auditor for two years running.
For a business this reframes fraud risk away from character judgements and towards role design. The highest-risk positions are the ones that combine broad system access, authority to approve their own work and enough technical knowledge to disguise an anomaly, which is why long-tenured finance staff appear so often in real fraud cases.
In practice the model is used as a diagnostic. Reviewers walk through each of the four points for a given process and ask what would have to be true for a scheme to work, then design a control that removes at least one point, usually opportunity or capability, because pressure and rationalisation live inside someone's head and cannot be controlled directly.
The main nuance is that the diamond explains individual fraud better than collusion. When two or more people cooperate, capability is pooled and segregation of duties stops working, so organisations that face collusion risk add rotation of duties, mandatory leave and data analytics that look for patterns no single person could see.
In practice
Real-world examples.
Example
A manufacturer reviews its purchasing function and finds one buyer who sets up suppliers, approves invoices and reconciles the supplier ledger. Pressure and rationalisation are unknowable, but opportunity and capability are both plainly present, so the finance director splits supplier creation away from invoice approval within a month.
Example
A charity uses the four elements to explain a loss to its trustees. The bookkeeper faced sudden medical costs, had sole access to the bank platform, told herself the money was an advance on unpaid overtime, and knew exactly which reconciliation nobody ever reviewed.
Example
A software company applies the model before granting production database access to a new finance analyst. The access would create both opportunity and capability, so the team adds an approval workflow and read-only defaults rather than relying on trust alone.
Think of it
“Fraud diamond adds ability to the triangle-not everyone can commit every fraud.
Case study
Seen in the real world.
Kestrel Foods is an invented company used here as an illustrative case, not a real business. Its group accountant of nine years had built every one of the company's reporting spreadsheets, held the only administrator login to the accounting system, and was the person auditors turned to when they wanted a schedule explained.
When a review finally took place, the pattern was textbook. Pressure came from a failed property investment, opportunity from an approvals matrix that had not been updated since the company was a third of its size, rationalisation from years of unpaid weekend work, and capability from the fact that he had personally designed the controls he was circumventing.
The illustrative lesson the board drew was not about hiring better people. It was that concentrating capability in one undocumented expert is itself a control weakness, so Kestrel introduced mandatory two-week continuous leave for finance staff, rotated the reconciliation owner each quarter and required a second administrator account held outside the finance team.
Watch out
Common mistakes.
- Treating the diamond as a way to spot dishonest individuals rather than weak processes. It is a design tool for controls, and using it to profile colleagues is both unreliable and corrosive to trust.
- Assuming all four elements must be visible before acting. Opportunity and capability are the only two an employer can observe and control, so a gap in either is enough to justify a change.
- Believing that a strong ethical culture removes the need for controls, when the model shows that pressure can arrive suddenly in anyone's life through illness, divorce or debt.
Questions
People also ask.
What does the fraud diamond add to the fraud triangle?
It adds capability, recognising that a person needs the skills, access and confidence to carry out and conceal the scheme, not just a motive and an opening.
Which of the four elements can a business actually control?
Opportunity is the most controllable through segregation of duties and approvals, and capability comes second through access limits, rotation and documentation of key processes.
Does the model apply to fraud committed against the company by outsiders?
Only loosely, because it was built to explain occupational fraud by insiders; external fraud is usually analysed through attack surface and detection controls instead.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%