Procurement fraud evolves with hidden networks and shell companies that bypass traditional controls

Procurement fraud is often imagined as a forged invoice or a blatant kickback. In practice, the bigger danger is quieter: a network of insiders, suppliers and shadow companies that looks ordinary on paper and only reveals itself when someone asks who actually benefits.

That is the central warning from Tejas Bhusare’s article for JD Supra. The point is not that controls are absent, but that they are frequently built to verify paperwork rather than relationships. An invoice can...

be approved, a vendor can be pre-qualified and multiple quotations can be filed, yet the underlying arrangement may still be engineered to extract money from the business while appearing compliant at every stage.

The pattern is familiar to investigators. An employee with purchasing influence may set up firms in the names of relatives or associates, route work to them and then buy goods or services at inflated prices. The transactions may be legitimate in form, with proper purchase orders, delivery notes and approvals, but the commercial reality is different: value is being shifted through connected entities. The fraud endures because each individual transaction seems plausible, even if the full chain tells another story.

That is why related-party structures and shell companies matter so much. As other commentary on procurement fraud notes, high transaction volumes, discretionary purchasing decisions and complex approval chains create ideal conditions for abuse. Fictitious vendor schemes are especially difficult to spot when the same person can influence vendor creation, ordering and payment. Regular review of the vendor master file, stronger onboarding checks and segregation of duties remain basic defences, but they are only part of the answer.

The more serious problem is that modern schemes are designed to survive traditional review. They often stay just below approval thresholds, use complete documentation and maintain the appearance of competition through staged quotations. Some entities have shared directors, common addresses, matching bank details or overlapping contact information; others are dormant until a large contract is available. None of those features alone proves wrongdoing, but together they can expose a hidden network.

This is where shell companies become especially useful to fraudsters. A shell entity can create distance between the person making the decision and the person who ultimately profits. It can also fragment ownership and obscure links across family members, employees and commercial counter-parties. Reports on shell-company abuse in India have described their use in money laundering, tax evasion and corporate scams, with red flags that include fake identities, no genuine office or staff, and layered transactions across multiple firms.

The scale of some recent Indian cases shows how damaging these structures can be. The Times of India reported that a Kolkata businessman allegedly built a network of 60 shell companies, using drivers, house-keeping staff and relatives as directors, to fabricate turnover and defraud government banks of more than ₹6,200 crore. Separately, the CBI has said it found evidence of nine shell companies involved in the National Spot Exchange Limited scandal, allegedly trading without holding the underlying commodities. These are extreme examples, but they underline the same point: shell entities can be the infrastructure of fraud, not merely an accessory to it.

Bhusare argues that the real blind spot for audit functions is still relational. Many internal reviews remain transaction-based, sampling invoices and checking whether each document is in place. That approach can confirm compliance with process, but it cannot easily detect a network in which employees, vendors and related parties are aligned. A stronger model would connect procurement, human resources and finance data, then look for shared bank accounts, addresses, phone numbers, directorships and unusual concentration of spend.

Regulators are also moving in that direction. According to recent reporting, the Securities and Exchange Board of India has tightened disclosure expectations for related-party transactions, seeking more standardised information for audit committees and shareholders. At the same time, corporate registries and investigative agencies have stepped up action against shell entities, using analytics to identify firms with no meaningful activity, no real registered office or suspicious fund flows. The message is that opacity itself is becoming a compliance problem.

For audit committees, the implication is clear. The question is no longer only whether controls exist, but whether those controls can actually reveal a concealed relationship. That means asking harder questions about vendor concentration, ownership, conflicts of interest and the logic of repeated awards to the same counter-party. It also means treating long-standing supplier relationships with caution rather than assuming familiarity equals integrity.

The broader lesson is that procurement fraud has evolved. The most damaging schemes are not the ones that smash through controls; they are the ones that learn how to live inside them.

Source: Noah Wire Services