What Is the 10-80-10 Rule for Fraud?

Protecting your small business starts with understanding who’s really at risk.

Every small business owner worries about fraud. Whether it’s a dishonest employee, a vendor running a scam, or an opportunistic thief, financial crime can quietly drain a company’s resources before anyone notices. One of the most useful frameworks for thinking about fraud prevention is the 10-80-10 Rule. It’s simple, memorable, and — most importantly — actionable.

Breaking Down the Rule

The 10-80-10 Rule divides people in any organization into three groups based on their likelihood of committing fraud.

The first 10% are people who will never steal, no matter what. Even if they had complete access to company funds with zero oversight, they simply wouldn’t do it. Their personal values, ethics, and integrity make dishonesty off the table. These are your most trustworthy employees and partners.

The middle 80% — the largest group — are people who are basically honest but could be pushed toward fraud under the right (or wrong) circumstances. They aren’t looking to steal, but if the pressure is high enough, the opportunity is clear, and they can justify it to themselves, some will cross the line. This group is the most important for business owners to understand.

The final 10% are individuals actively seeking opportunities to steal. They will take advantage of weak systems, poor oversight, or careless management whenever they get the chance. No amount of goodwill or generous treatment changes their behavior — only strong internal controls will stop them.

Why the Middle 80% Matters Most

You might think the third group — the "always dishonest" 10% — poses the biggest threat. But the middle 80% actually poses the greatest overall risk to your business, simply because of their numbers.

The 10-80-10 Rule aligns with another well-known concept in fraud prevention: the Fraud Triangle. Developed by criminologist Donald Cressey, the Fraud Triangle holds that fraud occurs when three factors converge: pressure, opportunity, and rationalization.

Someone in the middle 80% might face financial pressure from personal debt, a medical emergency, or a family crisis. If your business provides opportunity — such as an employee who handles cash with no oversight or someone who approves their own expense reports — and that person can rationalize the behavior ("I’ve been underpaid for years" or "I’ll pay it back soon"), an otherwise honest person can become a fraudster.

As a small business owner, you can’t do much about an employee’s personal pressure. But you have significant control over opportunity, and a strong workplace culture can reduce rationalization. That’s where your energy should go.

What This Means for Your Business

The 10-80-10 Rule sends a clear, practical message: build your systems for the 80%, not just the 10%.

Here’s what that looks like in practice:

• Separate financial duties. Don’t let one person handle both payments and recordkeeping. Even a trusted employee benefits from a system that keeps everyone accountable.
• Conduct regular audits. Surprise financial reviews signal that someone is always paying attention. This dramatically reduces opportunity.
• Create a reporting culture. Make it easy and safe for employees to report suspicious activity. Fraud is often spotted first by coworkers, not managers.
• Set a clear ethical tone. How leadership behaves sets the standard for everyone else. When employees see honesty modeled at the top, it shapes the culture of the whole organization.

The Bottom Line

The 10-80-10 Rule is a reminder that fraud isn’t just a problem caused by a few bad apples. Most people live in a gray zone where the right — or wrong — conditions can tip the scales. That’s not a pessimistic view of human nature; it’s a realistic, empowering one.

By removing opportunity and fostering a culture of transparency, you protect your most valuable asset: the honest majority of your team. Strong internal controls aren’t about distrust — they’re about removing temptation and making it easier for good people to stay that way.

Fraud prevention isn’t just for big corporations. For small businesses, where resources are tight and margins are thin, a single incident of internal fraud can be devastating. Understanding the 10-80-10 Rule is one of the best first steps you can take to keep your business — and your team — on solid ground.

 

Recent articles: