1. Policy Statement
Al-Waris Foundation has zero tolerance for fraud, bribery, corruption, theft, deliberate financial dishonesty or intentional misuse of charitable resources.
Charitable funds and assets must be used only for legitimate purposes consistent with:
- the charity's Constitution;
- applicable law;
- donor restrictions;
- properly authorised decisions.
Al-Waris Foundation will maintain proportionate arrangements to:
- prevent fraud, bribery and corruption;
- identify suspicious activity;
- protect charitable assets;
- investigate credible concerns;
- recover losses where appropriate;
- report serious matters to relevant authorities;
- learn from incidents and strengthen controls.
2. Purpose
This policy establishes Al-Waris Foundation's approach to:
- fraud prevention;
- bribery prevention;
- corruption prevention;
- theft and misappropriation;
- false accounting;
- procurement integrity;
- contractor and partner integrity;
- fundraising fraud;
- project fraud;
- reporting concerns;
- investigation;
- recovery;
- regulatory reporting.
3. Scope
This policy applies to:
- trustees;
- staff where applicable;
- volunteers;
- contractors;
- consultants;
- suppliers;
- fundraisers;
- project workers;
- grant recipients;
- partner organisations;
- overseas partners;
- anyone authorised to act on behalf of Al-Waris Foundation.
It applies to activity undertaken:
- in the United Kingdom;
- overseas;
- online;
- through third parties;
- through charity-funded projects.
4. Trustee Responsibility
The Board of Trustees retains ultimate responsibility for protecting the charity's assets.
Trustees should ensure that proportionate controls exist to reduce the risk of:
- fraud;
- theft;
- bribery;
- corruption;
- misappropriation;
- financial manipulation.
Operational responsibilities may be delegated.
Delegation does not remove trustee oversight responsibility.
5. Fraud
Fraud generally involves deliberate dishonesty intended to produce a gain or cause a loss.
Potential charity fraud may include:
- stealing charity money;
- submitting false invoices;
- claiming false expenses;
- fabricating beneficiaries;
- falsifying project costs;
- creating false suppliers;
- deliberately recording transactions incorrectly;
- diverting donations;
- manipulating refunds;
- falsifying project completion;
- using charity assets for unauthorised personal benefit.
This list is not exhaustive.
6. Theft
Theft or unauthorised appropriation of:
- money;
- equipment;
- donated goods;
- fundraising proceeds;
- project supplies;
- other charity property;
must be treated seriously.
The value involved is relevant but is not the only factor determining seriousness.
7. Bribery
Al-Waris Foundation prohibits bribery.
No person acting for the charity may offer, promise, give, request or accept an improper advantage intended to influence conduct improperly.
Bribery may involve:
- money;
- gifts;
- commissions;
- favours;
- employment opportunities;
- contracts;
- personal benefits;
- other advantages.
8. Corruption
Corruption includes abuse of entrusted authority for improper private benefit.
Examples may include:
- awarding contracts because of undisclosed personal relationships;
- demanding payment for beneficiary selection;
- accepting kickbacks from suppliers;
- manipulating procurement for personal gain;
- diverting charitable resources.
9. UK Bribery Law
Al-Waris Foundation will conduct its activities consistently with applicable UK anti-bribery law.
The charity must not:
- bribe another person;
- accept bribes;
- improperly influence public officials;
- knowingly permit bribery through people acting on its behalf.
Appropriate preventative procedures should reflect the charity's actual bribery risks.
10. Overseas Application
This policy applies to Al-Waris Foundation's overseas activities.
Conduct does not become acceptable merely because:
- it occurs outside the UK;
- it is described as local custom;
- another organisation recommends it;
- a contractor says it is necessary.
Higher-risk environments may require enhanced controls.
11. Facilitation Payments
Unofficial payments intended to improperly speed up or secure routine actions must not normally be made.
A payment does not become acceptable merely because it is:
- small;
- common locally;
- requested by an official;
- described as a fee without proper basis.
Legitimate official charges should, where reasonably practicable, be supported by:
- published fees;
- invoices;
- receipts;
- other appropriate documentation.
12. Immediate Safety
Where a person faces an immediate and genuine threat to safety and a payment or transfer of property is demanded, personal safety takes priority.
The incident should be reported internally as soon as reasonably practicable afterward.
The charity should:
- document the circumstances;
- record the payment accurately;
- consider whether external reporting or advice is required.
Such circumstances are distinct from paying for commercial convenience.
13. Gifts and Hospitality
Gifts and hospitality must not be used to:
- influence charity decisions improperly;
- obtain contracts;
- secure beneficiary selection;
- influence grant decisions;
- obtain confidential information;
- create improper obligations.
Modest and legitimate hospitality may be acceptable where it is:
- reasonable;
- proportionate;
- transparent;
- unrelated to improper influence.
14. Gifts Offered to Trustees or Representatives
A trustee or representative should decline a gift where accepting it could reasonably create:
- an actual conflict;
- an apparent conflict;
- an obligation;
- improper influence.
Material gifts offered because of a person's Al-Waris Foundation role should be disclosed.
15. Gifts to Beneficiaries
Ordinary charitable assistance provided to beneficiaries is not considered a gift for the purposes of anti-bribery controls where it is provided according to legitimate charitable criteria.
Beneficiary selection must not depend on:
- payments;
- favours;
- political support;
- personal relationships;
- other improper advantages.
16. Conflicts of Interest
Conflicts can increase fraud and corruption risk.
Anyone involved in a financial or procurement decision must disclose relevant interests.
Examples include relationships with:
- suppliers;
- contractors;
- grant applicants;
- partner organisations;
- beneficiaries.
See the Conflict of Interest Policy.
17. Related-Party Transactions
Transactions involving trustees or connected persons require enhanced scrutiny.
Any such arrangement must:
- be legally permissible;
- further the charity's interests;
- provide appropriate value;
- be properly authorised;
- be transparently recorded;
- comply with the Constitution.
A conflicted trustee must not improperly influence the decision.
18. Procurement Fraud
Procurement fraud may include:
- fabricated quotations;
- collusive bidding;
- inflated invoices;
- undisclosed commissions;
- false suppliers;
- deliberate overcharging;
- kickbacks;
- manipulation of specifications;
- payment for undelivered work.
Material purchasing should follow the Procurement and Purchasing Policy.
19. Quotations
Written quotations should be obtained where proportionate.
The charity should take reasonable steps to establish that quotations are genuine.
Warning signs may include:
- suspiciously similar competing quotations;
- unexplained price changes;
- requests for payment to unrelated accounts;
- pressure to bypass normal approval;
- unexplained refusal to provide documentation.
20. Contractor Due Diligence
Before appointing a material contractor, checks may include:
- identity;
- business details;
- registration where applicable;
- contact details;
- quotation;
- bank details;
- experience;
- references;
- ability to provide evidence;
- conflicts of interest.
The level of due diligence should reflect risk.
21. Contractor Pilots
Where practical, new contractors undertaking repeatable project work should initially receive a limited pilot rather than a substantial batch of projects.
The pilot may be assessed for:
- workmanship;
- reliability;
- evidence;
- pricing;
- communication;
- compliance with specifications.
Successful completion does not eliminate future monitoring.
22. Contractor Payments
Payments should normally be made to an account legitimately associated with the contractor or supplier.
Requests to pay:
- unrelated individuals;
- unexpected personal accounts;
- newly changed accounts;
should receive additional verification.
Bank-detail changes should be independently verified where reasonably practicable.
23. False Invoices
Invoices must not knowingly be:
- fabricated;
- duplicated;
- inflated;
- altered deceptively;
- submitted for work not performed.
Material discrepancies should be investigated.
24. Project Fraud
Project fraud may include:
- claiming work occurred when it did not;
- overstating quantities;
- overstating beneficiaries;
- falsifying locations;
- substituting inferior goods without agreement;
- fabricating costs;
- reusing evidence deceptively;
- diverting supplies.
Project evidence should be proportionate to risk and expenditure.
25. Water Project Fraud Controls
Water projects should normally maintain an evidence trail including:
- Al-Waris Foundation project number;
- contractor;
- project location;
- GPS/location information where safe and appropriate;
- installation specification;
- depth where applicable;
- completion date;
- invoice or cost record;
- photographs/video;
- maintenance or warranty information.
Where payment depends on depth or specification, the charity should obtain reasonable evidence of the actual completed work.
26. Project Identification
Where appropriate, completed physical projects should display an Al-Waris Foundation project number or branded plaque.
This may assist:
- verification;
- donor reporting;
- future inspection;
- maintenance;
- prevention of duplicate project claims.
Project identification should not create unnecessary security or safeguarding risk.
27. Food Distribution Fraud
Risks in food and essential-aid distributions may include:
- inflated quantities;
- fabricated recipients;
- duplicate beneficiary records;
- substitution of goods;
- false supplier invoices;
- diversion of packages.
Controls may include:
- supplier records;
- quantities;
- unit costs;
- distribution records;
- photographs where appropriate;
- independent checks.
Controls must remain proportionate and respect beneficiary dignity.
28. Beneficiary Fraud
Evidence of need should be proportionate.
The charity should not create unnecessarily burdensome systems merely to eliminate every possibility of beneficiary fraud.
Where deliberate material deception is identified, assistance may be:
- suspended;
- reviewed;
- recovered where appropriate.
Safeguarding and vulnerability should be considered before recovery action.
29. Fabricated Beneficiaries
No person may knowingly fabricate beneficiary identities, numbers or circumstances in order to:
- obtain funds;
- justify expenditure;
- satisfy donor reporting;
- exaggerate charitable impact.
30. False Project Evidence
No person may knowingly create or submit false:
- photographs;
- video;
- receipts;
- invoices;
- location information;
- completion certificates;
- beneficiary statements;
- project records.
31. Artificial Intelligence
AI-generated content must not be knowingly presented as genuine documentary evidence of completed charitable activity.
AI-generated or materially manipulated content must not be represented as:
- an actual beneficiary photograph;
- genuine distribution evidence;
- genuine project completion evidence;
- a real beneficiary statement;
when it is not.
Illustrative AI content may be used where it is not misleadingly presented as evidence of real charitable work.
32. Donation Fraud
Donation-related fraud may include:
- unauthorised refunds;
- manipulation of donation allocations;
- theft of donations;
- fraudulent charge activity;
- alteration of donor records;
- deliberate misstatement of funds raised.
Online donation systems should maintain appropriate audit trails.
33. Restricted Donations
Restricted donations must not knowingly be diverted to unrelated purposes.
The charity should maintain records allowing restricted income and expenditure to be appropriately identified.
See the Financial Controls and Reserves Policy.
34. Cash Fraud
Cash presents increased fraud risk.
Controls may include:
- numbered or controlled collection containers;
- collector records;
- two-person counts for material collections where practicable;
- count sheets;
- prompt banking;
- reconciliation.
Unexplained differences should be investigated.
35. Street Collections
Collectors must not:
- remove cash for personal use;
- alter collection records dishonestly;
- misrepresent who they are collecting for;
- knowingly collect outside authorised arrangements where permissions are required.
Appropriate supervision should be maintained.
36. Online Fraud
Digital fraud may involve:
- phishing;
- account takeover;
- payment diversion;
- impersonation;
- fake fundraising pages;
- compromised email accounts.
Suspicious activity should be escalated promptly.
See the Information Security and Cybersecurity Policy.
37. Email Payment Fraud
Unexpected payment instructions received by email should be treated cautiously.
Particular care should be taken with:
- changed bank details;
- urgent payment demands;
- new recipients;
- unusual overseas accounts;
- requests to bypass controls.
Independent verification should be used where reasonably practicable.
38. Payment-System Access
Access to:
- banking;
- Stripe or other payment processors;
- accounting systems;
- donation systems;
should follow least-privilege principles.
Access should be removed when no longer required.
Multi-factor authentication should be used where available.
39. False Accounting
No person may knowingly:
- conceal expenditure;
- fabricate income;
- alter records dishonestly;
- create false liabilities;
- conceal financial losses;
- manipulate restricted-fund balances;
- falsify reconciliations.
Accounting corrections must remain traceable.
40. Expenses Fraud
Expense claims must reflect genuine costs incurred for legitimate charity purposes.
Examples of prohibited conduct include:
- claiming personal expenditure as charity expenditure;
- submitting the same expense more than once;
- altering receipts dishonestly;
- claiming expenditure that was never incurred.
See the Expenses Policy.
41. Grant Fraud
Grant applicants or recipients must not knowingly provide false information to obtain or retain funding.
Where material deception is discovered, Al-Waris Foundation may:
- suspend funding;
- terminate the grant;
- seek repayment;
- report the matter.
See the Grant Making Policy.
42. Overseas Partner Fraud
Overseas partners must be subject to proportionate due diligence and monitoring.
Warning signs may include:
- unexplained refusal to provide evidence;
- inconsistent financial records;
- repeated missing receipts;
- unusual cash demands;
- unexplained related parties;
- evidence inconsistent with reported activity.
Concerns should be investigated rather than automatically treated as proof of wrongdoing.
43. Sanctions and Terrorist Financing
Fraud controls should operate alongside sanctions and terrorist-financing controls.
The charity must not knowingly allow charitable resources to be diverted to prohibited persons or organisations.
See the Sanctions and Terrorist Financing Policy.
44. Reporting Concerns
Anyone who suspects fraud, bribery or corruption connected with Al-Waris Foundation should report it promptly.
Reports may be made to:
- the Chair;
- another unconflicted trustee;
- another authorised person;
- the appropriate whistleblowing route.
A person should not delay reporting merely because they do not have complete proof.
45. Concerns About the Chair
Where a concern involves the Chair, it should be reported directly to another unconflicted trustee.
The Chair must not control an investigation into allegations concerning their own conduct.
46. Concerns About Trustees
Where a trustee is implicated:
- the conflict must be recognised;
- unconflicted trustees should manage the response;
- independent advice should be considered for serious cases.
Where effective internal management is not possible, external regulatory reporting may be necessary.
47. Whistleblower Protection
People raising genuine concerns should not be subjected to inappropriate retaliation.
See the Whistleblowing Policy.
Knowingly false allegations may be dealt with appropriately, but an allegation is not malicious merely because it is unproven.
48. Initial Response
When suspected fraud, bribery or corruption is identified, the charity should consider immediate steps to:
- prevent further loss;
- protect people;
- secure accounts;
- preserve records;
- restrict compromised access;
- pause suspicious payments;
- identify potential conflicts;
- determine whether external authorities should be contacted.
49. Evidence Preservation
Relevant evidence should be protected from:
- destruction;
- alteration;
- concealment;
- unauthorised access.
Evidence may include:
- financial records;
- emails;
- messages;
- invoices;
- receipts;
- project photographs;
- video;
- system logs;
- payment records;
- access logs.
50. Investigation
Investigations should be:
- proportionate;
- fair;
- appropriately independent;
- documented;
- confidential.
An allegation should not automatically be treated as established fact.
51. Independent Investigation
Independent professional investigation or advice should be considered where:
- senior trustees are implicated;
- losses are significant;
- specialist expertise is required;
- internal independence cannot reasonably be achieved;
- regulatory or criminal consequences may be significant.
52. Suspension of Access
Where necessary to protect charitable assets or evidence, the charity may temporarily restrict a person's access to:
- bank accounts;
- payment processors;
- email;
- administrative systems;
- financial records;
- project systems.
This is a protective measure and does not by itself establish wrongdoing.
53. Recovery of Funds
Where charitable assets have been improperly obtained or diverted, the trustees should consider reasonable recovery action.
Factors may include:
- amount;
- evidence;
- cost of recovery;
- likelihood of recovery;
- legal position;
- safeguarding consequences;
- charity's best interests.
54. Contractor Response
Where fraud involving a contractor is established or sufficiently serious concerns remain, Al-Waris Foundation may:
- suspend payments;
- suspend new work;
- require additional evidence;
- terminate the contract;
- seek recovery;
- cease future engagement;
- report the matter.
55. Partner Response
Where fraud involving a partner organisation is identified, the charity may:
- pause grants;
- require investigation;
- impose additional controls;
- conduct further due diligence;
- recover funds;
- terminate the relationship;
- make external reports.
56. Reporting to Banks and Payment Providers
Where relevant, suspected financial fraud should be reported promptly to:
- the charity's bank;
- payment processor;
- card provider;
- other relevant financial institution.
Prompt reporting may improve the possibility of preventing or recovering loss.
57. Law-Enforcement Reporting
Suspected criminal conduct may require reporting through appropriate official channels.
The charity should use the current official reporting route applicable to the circumstances.
An internal investigation should not obstruct or compromise a law-enforcement investigation.
58. Charity Commission Reporting
Significant fraud, financial loss, trustee misconduct or misuse of charitable assets may constitute a serious incident.
The Board must assess whether the matter should be reported to the Charity Commission.
See the Serious Incident Reporting Policy.
59. Other Regulatory Reporting
Depending on the circumstances, the charity may need to consider reporting to:
- Information Commissioner's Office;
- HMRC;
- safeguarding authorities;
- sanctions authorities;
- another competent regulator.
One regulatory report does not necessarily satisfy another reporting obligation.
60. Insurance
Where the charity has relevant insurance, the insurer should be notified where required by the policy.
The charity should avoid taking steps that unnecessarily prejudice legitimate insurance recovery.
61. Confidentiality
Fraud investigations must be handled confidentially.
Information should be shared only where reasonably necessary for:
- investigation;
- governance;
- legal advice;
- safeguarding;
- regulatory reporting;
- law enforcement.
62. Data Protection
Personal data processed during investigations must be handled in accordance with:
- UK GDPR;
- Data Protection Act 2018;
- Data Protection and UK GDPR Policy.
An allegation does not justify unrestricted disclosure of personal information.
63. Records
Appropriate records should be maintained of:
- allegation;
- initial assessment;
- evidence;
- decisions;
- investigation;
- losses;
- recovery action;
- external reports;
- corrective action;
- outcome.
Records should be retained according to the Records Retention and Disposal Policy.
64. Fraud Register
The charity may maintain a restricted fraud and financial-irregularity register.
Entries may include:
- internal reference;
- date;
- type;
- amount at risk;
- actual loss;
- status;
- external reporting;
- recovery;
- closure.
Access should be restricted.
65. Lessons Learned
Following a material incident, Al-Waris Foundation should assess:
- how the incident occurred;
- which controls failed;
- whether warning signs were missed;
- whether similar risks exist elsewhere;
- what improvements are necessary.
Corrective actions should be monitored where material.
66. No Concealment
No person acting for Al-Waris Foundation may deliberately conceal serious fraud, bribery or corruption merely to:
- avoid embarrassment;
- protect a colleague;
- protect a trustee;
- protect a contractor;
- protect the charity's reputation.
Reputation should be protected through appropriate governance and corrective action.
67. Training and Awareness
Relevant trustees, volunteers and authorised personnel should receive proportionate guidance concerning:
- fraud warning signs;
- payment controls;
- conflicts;
- bribery;
- procurement;
- reporting routes;
- cybersecurity.
68. Monitoring
The Board should receive proportionate information about significant:
- fraud incidents;
- losses;
- recoveries;
- control failures;
- unresolved investigations.
Sensitive personal information should not be circulated more widely than necessary.
69. Policy Breaches
Breaches may result in:
- removal of authority;
- restriction of access;
- termination of volunteer responsibilities;
- contractual action;
- governance action;
- recovery proceedings;
- regulatory reporting;
- law-enforcement reporting.
Action should be proportionate to the circumstances.
70. Related Al-Waris Foundation Policies
This policy should be read alongside:
- Constitution;
- Trustee Code of Conduct;
- Trustee Terms of Reference;
- Financial Controls and Reserves Policy;
- Procurement and Purchasing Policy;
- Grant Making Policy;
- Risk Management Policy;
- Conflict of Interest Policy;
- Whistleblowing Policy;
- Serious Incident Reporting Policy;
- Sanctions and Terrorist Financing Policy;
- Overseas Operations and Partner Due Diligence Policy;
- Fundraising Policy;
- Expenses Policy;
- Information Security and Cybersecurity Policy;
- Data Protection and UK GDPR Policy;
- Records Retention and Disposal Policy.
71. Review
This policy will be reviewed:
- at least annually;
- following significant fraud, bribery or corruption;
- following significant financial loss;
- following major changes to financial systems;
- following material expansion of overseas activity;
- where control weaknesses are identified;
- following relevant legal or regulatory developments.
72. Approval
Version: 2.0 Status: Approved Approved by: Board of Trustees Approval date: 25/08/2026 Next scheduled review: 24/08/2027
