Employee Crime Poses Growing Threat to Large Enterprises

Emerging AI risks compound challenges for organizations managing insider threats, QBE survey of risk managers finds.
By: | March 11, 2026
insider crime

A significant 80% of risk managers at major U.S. companies experienced employee crime within the past year — and growing concerns about artificial intelligence misuse signal that the threat landscape is shifting in ways organizations may not yet be prepared to handle, according to a QBE Insurance survey.

Employee theft, fraud and embezzlement continue to plague large organizations, those with at least $500 million in annual revenue, QBE said.

According to risk managers surveyed, billing fraud being the most prevalent scheme at 36%, followed by payment and check fraud at 23% and payroll fraud at 19%. These latter schemes often involve sophisticated tactics — such as creating fictitious employees to drain payroll systems or padding expense reports — that can take time to detect and difficult to remediate, the survey report said.

The problem is compounded by the collaborative nature of many schemes. Roughly 37% of organizations report that employee crimes frequently involve multiple perpetrators, while 46% say such collaboration happens occasionally. Recovery efforts typically yield incomplete results, with 35% of respondents recovering between 51% and 75% of stolen funds or property, and another 30% recovering just 26% to 50%.

Perhaps most concerning is who commits these crimes, according to QBE. More than three-quarters of risk managers report that their most recent incident involved an employee at the manager level or higher — individuals who typically have greater access to company assets and position of elevated trust.

Rising Concerns About Control Adequacy and AI-Powered Fraud

Despite widespread acknowledgment of the problem, a significant confidence gap exists among risk managers regarding the effectiveness of their internal controls, QBE said. Nearly half of respondents — 41% expressing very high concern and 8% expressing extreme concern — question whether existing safeguards are adequate to prevent and detect employee crimes.

This concern persists even though 92% of organizations addressed control weaknesses in the past 12 months. However, a critical distinction emerges in how organizations respond: 60% identified and remedied gaps proactively, while 33% took action only after a crime had already occurred — suggesting many organizations lack robust ongoing monitoring systems, the report said.

The threat landscape is shifting further as AI emerges as a potential tool for internal wrongdoing. An overwhelming 94% of risk managers worry that employees may use AI to carry out more sophisticated workplace crimes. In response, 45% of organizations have already deployed AI-based detection systems, with another 50% planning implementation within the next year.

Strengthening Defenses Through Controls, Culture and Insurance

Organizations are addressing these risks through multiple channels. Automated monitoring tools lead at 55% adoption, followed closely by employee training at 54% and internal audits at 50%. A foundational defense remains the segregation of duties — 82% of organizations prevent any single employee from having complete control over an entire financial transaction, such as both submitting and approving an invoice.

Yet prevention and detection alone cannot fully eliminate the financial exposure from internal crimes, QBE said. Recognizing this reality, 87% of organizations carry crime insurance — a specialized coverage designed to protect against losses from employee dishonesty, forgery, computer fraud and theft. The heightened awareness of emerging risks is reflected in insurance strategy decisions: 63% of organizations with crime insurance plan to increase their coverage limits in the next 12 months.

Managing employee crime requires a multifaceted approach combining vigilant internal controls, a strong ethical culture, ongoing monitoring practices, and strategic financial protection through comprehensive insurance coverage, the report said.

Obtain the full report here. &

The R&I Editorial Team can be reached at [email protected].

More from Risk & Insurance