Procurement fraud is rigging the buying process through kickbacks, bid rigging, split purchases, phantom vendors, or false invoicing, usually with insiders and suppliers working together. It corrupts spending at the source, so it can drain an organization quietly for years before anyone questions the numbers.
What is procurement fraud, in plain English?
Procurement fraud is manipulation of how an organization buys goods and services so that money is steered to the wrong supplier, at the wrong price, or for things that were never delivered. It lives in the space between the buyer and the vendor, and it usually needs an insider on the buying side and a cooperating party on the selling side.
The schemes take a few classic forms: kickbacks to an employee for directing business, bid rigging to fix who wins, splitting purchases into smaller amounts to stay under approval limits, phantom vendors that exist only to invoice, and false invoicing for inflated or fictitious work. All of them corrupt spending decisions that are supposed to be competitive and arm's length.
Procurement fraud is a core category of occupational fraud and overlaps heavily with vendor and invoice fraud. Because it touches the supply chain and the payments that flow through it, it also creates channels that can move and disguise illicit funds.
The common procurement schemes
Scheme | How it works | Tell in the data |
Kickbacks | An employee steers contracts to a vendor for a secret payment | One vendor wins far more than peers |
Bid rigging | Suppliers coordinate so a predetermined bidder wins | Bids clustered close, same losers each time |
Split purchases | One buy is broken up to dodge approval thresholds | Multiple orders just under the limit |
Phantom vendor | A fake supplier invoices for nothing real | Vendor with no footprint, employee-linked details |
False invoicing | Real vendor bills for inflated or undelivered work | Prices above market, quantities that do not reconcile |
Who is involved?
Who | Their role |
The buyer or procurement officer | Controls vendor selection and approvals; the insider who steers or splits spend. |
The colluding vendor | Pays kickbacks, coordinates bids, or issues false invoices in exchange for the business. |
The phantom vendor | An entity created only to receive payments, often controlled by the insider. |
The approver | Signs off on purchases and invoices; may be bypassed, deceived, or complicit. |
Audit and spend analytics | The controls that surface anomalies and validate the vendor master. |
What it looks like in practice
In practice
A facilities manager who signs off on maintenance contracts always awards work to the same supplier. When larger jobs would need executive approval, they are split into several smaller invoices, each landing just below the threshold that requires a second signature.
In return, the supplier quietly pays the manager a share of each contract. On paper everything is approved and paid, but a spend review notices that one vendor wins an outsized share of work, that its invoices repeatedly stop just short of the approval limit, and that its registered address matches a property tied to the manager.
Why it matters to operators
Procurement fraud is costly because it attacks the spending itself, not a one-off transaction. A rigged vendor relationship overcharges on every order for years, and the losses hide inside legitimate-looking purchase orders and paid invoices. There is rarely a single dramatic event to catch; there is a slow bias in where the money goes.
Because the paperwork is usually correct, detection depends on pattern analysis across the whole spend: which vendors win, how bids cluster, where purchases sit relative to approval limits, and whether any supplier details connect back to an employee. Segregation of duties matters too, so that no single person can both choose a vendor and approve its invoices.
What to watch in spend data
- Dominant vendor. One supplier winning a suspiciously large share of awards, especially without competitive tension.
- Bids just under limits. Purchases repeatedly priced or split to land just below an approval threshold.
- Clustered bids. Competing bids that come in very close together or with the same firms always losing, a sign of rigging.
- Vendor-employee links. Shared addresses, phone numbers, or bank details connecting a supplier to a member of staff.
- Thin vendor footprint. A paid supplier with no real online presence, no other customers, or details that appeared just before payments began.
Quick questions
What is bid rigging?
Bid rigging is when suppliers secretly coordinate so a predetermined bidder wins, defeating the point of competition. Tells include bids clustered close together, the same firms always losing, or suspiciously consistent winners.
Why do fraudsters split purchases?
Splitting a large purchase into several smaller ones keeps each below the amount that triggers extra approval or competitive bidding. Multiple orders landing just under a threshold is a classic red flag.
What is a phantom vendor?
A supplier that exists only to receive payments, usually controlled by an insider, invoicing for goods or services that were never delivered. Validating the vendor master against real-world footprints helps expose them.
How is procurement fraud related to occupational fraud?
Procurement fraud is one of the main categories of occupational fraud, sitting under corruption and asset misappropriation. It also overlaps with vendor fraud and invoice fraud, which describe the specific mechanics.
What is the best control?
Separation of duties so no single person selects a vendor and approves its payments, backed by spend analytics, vendor-master validation, and bid-pattern review. Rotating buyers and requiring competitive bids also reduces the risk.
How does it enable money laundering?
Phantom vendors and false invoices create legitimate-looking payment channels that can move and disguise illicit funds, which is why procurement schemes sometimes double as a laundering mechanism.
Go deeper
- FTC Consumer Advice: Scams ↗ — US consumer guidance on current scams and fraud, and how to report them.
- FBI IC3 ↗ — The FBI Internet Crime Complaint Center. Fraud reporting and annual trend reports.