Impact investors and foundations: diligence and governance

Fraud, Related Parties and Warning Signs for Impact Investors

How to investigate conflicts, test impact claims and recognize fraud risks while protecting beneficiaries and distinguishing donations from investments.

Group of volunteers cleaning a forest area, promoting environmental awareness.
What you will find

A project can address a real social problem while having weak accounts, hidden conflicts or fraudulent practices. Beneficiaries' hardship does not establish sound management. Impact investors must consider two possibilities together: an organization may deliver meaningful benefits while also losing funds, overstating results or favoring insiders. A social purpose makes controls more necessary because harm can reach people with little protection.

01

The cause deserves attention; the operation needs evidence

Fraud involves deliberate deception, such as fabricated receipts, concealed favoritism or fictitious participants. Errors can arise from incorrect formulas, accounting classifications or inadequate training. Poor performance can also occur despite honest reporting. An inconsistent indicator warrants investigation, not an immediate accusation. Intent must not be presumed, but uncertainty does not oblige a funder to keep disbursing money.

Start by reconstructing the project: the problem, intended participants, planned activities, payment recipients and observable results. Compare that account with contracts, transactions, operational capacity and beneficiary evidence. The longer the distance between funding and the claimed outcome, the more useful intermediate controls become. They should show whether money became an actual purchase, an activity and eventually a result.

The review should lead to specific decisions. A purchase may need another quote; a metric may require correction; a conflict may require someone to abstain; a serious discrepancy may justify withholding an installment. Define what evidence would support accepting, correcting or rejecting each transaction. Collecting documents without a decision in mind adds cost and can expose personal information without improving the assessment.

02

Identify the relationship before assessing the return

Donations, sponsorships, grants and investments seeking financial returns are different arrangements. A donation does not, by itself, give the donor equity or an ordinary entitlement to financial earnings. Conditions on use, reporting and consequences for misuse may apply under the relevant instrument. Those conditions do not turn a donation into an interest-bearing investment. A nonprofit association does not offer ownership interests as a Brazilian LTDA does.

Sponsorship agreements should specify the agreed benefits, such as brand exposure or support for an activity, and their limits. Grant conditions depend on the grantor and instrument. An investment seeking a return needs an identifiable economic right: debt, equity, a convertible instrument or another legally appropriate structure. A vague promise to share in social success does not establish an enforceable payment entitlement.

Loans, receivables, equity interests and convertibles create different rights and risks. Debt depends on a payment obligation and the borrower's capacity to meet it. Equity carries business and exit risks; convertibles depend on conversion events and terms. Existing eligible receivables differ from hoped-for sales. A business registered as a Brazilian MEI cannot admit equity partners while remaining a MEI.

These distinctions expose inconsistent offers. A nonprofit promising to repay a donation with profit, without explaining a separate valid structure, needs investigation before any commitment. Public securities distribution and regulated financial activities require appropriate structures and providers. Technology, intermediation or a CNAE business classification is not permission. Identify each obligor and obtain specialist advice when the arrangement exceeds your expertise.

03

Map who decides, who receives money and who benefits

A related party is someone whose connection to a decision-maker may influence a transaction: an owner, manager, relative, commonly controlled company or significantly connected supplier. Shared surnames are only one clue. An apparently independent consultancy might belong to an intermediary passing benefits to a director. A conflict can also arise when an impact evaluator's payment depends on reporting favorable results.

Follow the money. For each material payment, identify the contracting entity, supplier, responsible people, service, approver and disclosed connections. Where a company and an association work together, examine shared managers, employees, premises, equipment ownership and contracts between them. Separate bank accounts are insufficient if expenses and decisions remain mixed or one entity routinely absorbs the other's obligations.

A related-party transaction can be legitimate. In a small community, a qualified supplier may be related to someone on the team. The assessment should establish need, comparable pricing, verifiable delivery and approval without the interested person's participation. Disclose the connection before selection and payment. Revealing it only after a complaint does not provide the same protection or allow an informed decision beforehand.

Some conflicts cannot be resolved through quotations. A director approving their own exceptional pay, an evaluator controlling the records reviewed or an intermediary paid by both sides without disclosure requires changes to decision-making power. Ask who can stop the transaction and whether that person depends financially on those being supervised. A respected board without information or willingness to disagree may offer only the appearance of oversight.

04

A hypothetical project with two entities and two commitments

Consider Oficina Ponte, a hypothetical project providing vocational training and employment support for people in vulnerable circumstances. A nonprofit association and a Brazilian limited liability company, or LTDA, deliver it together. Its R$ 300,000 budget combines two distinct relationships: a R$ 120,000 donation to the association for training and participant support, and a R$ 180,000 loan to the company for production. All figures and terms are hypothetical arithmetic examples.

The association plans to serve 60 people. It will spend its R$ 120,000 over the first six months, at R$ 20,000 monthly, covering the planned training, support and follow-up. The company allocates R$ 90,000 to equipment and retains R$ 90,000 in operating cash. The amounts reconcile: R$ 120,000 for social activities, R$ 90,000 for equipment and R$ 90,000 in initial cash equal the R$ 300,000 raised.

The hypothetical R$ 180,000 loan has no payments for six months, followed by 12 installments of R$ 16,500 from month seven through month eighteen. Contractual payments total R$ 198,000: R$ 180,000 in principal plus a R$ 18,000 gross financial difference. That difference is neither a market rate nor a promised net gain or suitability assessment. A real transaction would require separate consideration of costs, taxes, delays and losses.

The agreements should establish who owns the machines, how the association uses the premises, who hires instructors and which expenses may be shared. Donation funds must not disappear into the company's loan payments. Any legitimate payment between the entities needs its own purpose, pricing, approval and documentation. The funder should be able to reconstruct each budget without counting the same inflow twice.

05

Cash flow exposes risks a budget can hide

After buying R$ 90,000 of equipment, the company has R$ 90,000 in cash. Assume monthly receipts of R$ 30,000 and operating outflows of R$ 35,000 during months one to six. It uses R$ 5,000 monthly, or R$ 30,000 over the period, and begins month seven with R$ 60,000. For simplicity, the outflows include every operating cash payment considered in this scenario. Any omitted expense would reduce the remaining balance.

From month seven through month eighteen, the base case assumes monthly receipts of R$ 60,000 and operating outflows of R$ 40,000. That leaves R$ 20,000 before debt payments. After the R$ 16,500 installment, cash increases by R$ 3,500 monthly. Twelve months add R$ 42,000, taking the balance from R$ 60,000 to R$ 102,000. The R$ 198,000 paid to the lender has already been deducted in this calculation.

This calculation depends on cash receipts, not merely recorded sales. Late-paying customers can leave the company reporting revenue but unable to pay an installment when due. Examine collection periods, buyer concentration and expenses falling due before receipts arrive. A purchase order, an expression of interest and an established receivable provide different evidence of liquidity. They should not be treated as interchangeable sources of available cash.

Now assume receipts fall to R$ 45,000 for six months starting in month seven, while operating outflows remain R$ 40,000 and installments R$ 16,500. Monthly cash consumption becomes R$ 11,500. Six months require R$ 69,000, against R$ 60,000 available: a R$ 9,000 shortfall. Without changes, cash runs out during the sixth month of that period. A budget can still appear viable while a payment obligation lacks cash backing.

06

How a related-party purchase can divert value

Return to the R$ 90,000 equipment allocation. Suppose the supplier belongs to the company director's sister and an independent supplier quotes R$ 78,000. The R$ 12,000 difference calls for investigation; it does not automatically establish diversion. Compare capacity, equipment condition, installation, freight, warranty, training and delivery time. Different specifications or services can explain different totals, so comparison requires equivalent terms.

If the offers are equivalent and the extra R$ 12,000 has no justification, the purchase destroys value that should support the project. That amount exceeds two months of the company's initial R$ 5,000 monthly cash consumption, although it does not cover three full months. The cash connection makes the conflict concrete: overpaying someone close to management weakens resilience and may threaten both repayment and continuity.

Review the decision process as well as the invoice. Who wrote the specifications? Were quotations obtained from real, capable suppliers? Was there negotiation? Did the director disclose the relationship and withdraw from approval? Who checked delivery and operation? An authentic Brazilian nota fiscal demonstrates that a fiscal document was issued. Alone, it does not establish need, an appropriate price or complete delivery.

If the price falls from R$ 90,000 to R$ 78,000 before purchase and the R$ 12,000 stays in the company, initial cash rises from R$ 90,000 to R$ 102,000. With other assumptions unchanged, cash at the start of month seven becomes R$ 72,000. This changes the adverse scenario but does not repair the commercial model. Update the budget, schedule and approvals rather than retaining the old calculation while presenting savings as an additional result.

07

Due diligence cross-checks evidence rather than collecting files

Useful diligence combines sources capable of contradicting one another. A contract states the obligation; a bank statement records movement; delivery evidence indicates execution; an interview explains the process. None replaces all the others. For a material expense, check consistency across the contracted purpose, recipient, amount, approval, delivery and accounting entry. Document explanations for discrepancies and seek independent confirmation where possible.

Select items according to risk. Review significant related-party purchases in full and sample smaller recurring expenses. Include items selected by the investor, since management's selection alone may omit exceptions. Look for payments split around internal approval limits, recently added suppliers, bank details changed shortly before disbursement and generic descriptions repeated across entries. Small transactions can collectively reveal a material pattern.

External confirmation also needs care. A contact supplied by management could be involved in the arrangement. Where authorized and practical, confirm supplier identity through an independent channel. Protect received documents and record the verification's scope. A statement such as payment confirmed should explain whether someone merely read a receipt, reconciled it to a bank statement or also obtained confirmation from the recipient.

Diligence costs money and can delay activities. Match its intensity to materiality, beneficiary vulnerability and recovery prospects without ignoring recurring small losses. A useful conclusion explains what was examined, what remains uncertain and which decision depends on the gap. For example, unresolved delivery evidence may prevent payment even if supplier identity is established. A large folder or polished report cannot replace that clarity.

08

Impact metrics can also be manipulated

Oficina Ponte's association aims to enroll 60 people, have 48 complete training and verify 36 people working by the end of follow-up. These are different stages. Enrollment measures entry; completion requires a defined criterion; employment requires clarity about the relationship, duration, pay and verification. Adding them produces 144 occurrences, not 144 beneficiaries. Keep denominators visible and prevent the same person from becoming several claimed beneficiaries.

Additionality asks what happened because of the project beyond what would have happened without it. Suppose the team expects 24 of the 60 participants to find work without the initiative. Comparing 36 observed with 24 expected suggests 12 additional placements. That difference is an analytical hypothesis, not proven causation. The estimate of 24 needs support, while economic changes and differences between comparison groups may alter the interpretation.

Metrics can be inflated without inventing participants. An organization might exclude dropouts from the denominator, count a few days' work as sustained employment or recruit people whose jobs were already arranged. It might claim full credit for outcomes supported by several organizations. Examine eligibility rules, participant selection, loss to follow-up, outcome duration and other contributors. Missing information should remain visible rather than becoming assumed success.

Using only the association's R$ 120,000 budget, cost per completer is R$ 2,500 if 48 complete. Dividing that budget by the estimated 12 additional placements gives R$ 10,000 per hypothetical additional placement. Both calculations are correct within their definitions but measure different things. Neither automatically includes all company operating costs. Comparisons require matching scope, period, population and method, as well as checking the arithmetic.

09

Protecting beneficiaries is part of protecting the investment

Beneficiaries must not become informal security for a fundraising narrative. Testimonials may reflect fear of losing support, relationships with instructors or hopes of employment. Interviews conducted beside a manager can produce positive but unreliable answers. Provide ways to listen that reduce pressure, explain the purpose clearly and never make assistance conditional on praise or publicity. A person's dependence on services affects how freely they can respond.

Collect only what verification requires. Confirming course completion may need internal identifiers, attendance criteria and sampled records rather than extensive copies of personal documents. Health, income and vulnerability information require particular care. Define access, an appropriate basis for processing, retention and disposal, obtaining specialist guidance when needed. A signed consent form alone does not resolve every data-use issue.

Protection includes operational design: site safety, accessibility, complaint handling and working conditions. A company could improve its employment indicator by hiring participants under unsuitable conditions. Financial and social metrics might then rise while harm increases. Reports of harassment, discrimination or improper exposure should be able to trigger suspension of a particular activity before any conclusion about financial fraud.

A reporting channel needs an accountable person, a response timeframe and an alternative when a complaint concerns management. Beneficiaries should understand how to seek help without relying solely on those controlling the program. Aggregated information often suffices for routine investor monitoring; access to individual records needs a specific justification. Transparency does not require publishing personal vulnerabilities or identifying every participant.

10

Separate responsibilities so controls can work

Basic controls separate requesting, approving, paying and verifying. For equipment, the technical team specifies the need, an unconflicted person approves selection, finance pays and someone else confirms delivery and asset recording. Small organizations may lack four staff members. They should acknowledge concentrated authority and introduce compensating checks, such as periodic independent review and external confirmation of higher-risk transactions.

Reconciliation should connect bank balances, accounting records and unpaid commitments. It must distinguish restricted funds from money available for other expenses. In the example, the association's R$ 120,000 cannot appear as the LTDA's unrestricted reserve. Consolidated reporting can illuminate the whole project if readers can inspect each entity separately and internal transfers are eliminated to prevent double counting.

Those measuring results need some autonomy from those paid for achieving them. If a provider's remuneration depends on job placements, establish criteria beforehand and have another person validate a sample. The responsible board or committee needs exception reports as well as favorable totals. Method changes, declared conflicts, payments outside policy and significant complaints must reach people with authority to require corrective action.

Controls consume time and money. Independent review may reduce funds immediately available for delivery, but its absence may permit larger losses. Show its cost honestly instead of hiding it in vague budget lines. Requirements should remain proportionate: excessive weekly reporting can occupy staff without exposing new risks. Set frequency and depth according to the decisions the information supports, including when a material exception requires faster reporting.

11

Negotiate conditions that can actually be enforced

Turn concerns into observable obligations. Rather than requiring adequate governance, specify related-party disclosures, approval procedures, reporting documents and events requiring immediate notification. Replace promises of high impact with indicators, denominators, collection methods and interpretation limits. Vague terms make disagreements more likely when performance weakens because the parties may discover they understood the same promise differently.

Milestone-based installments can limit exposure but must fit delivery. Requiring proof of service before releasing any money to start the service creates a deadlock. One option is to fund preparation and link later installments to proportionate evidence. In the example, release of the R$ 90,000 equipment allocation could depend on purchase approval and ownership arrangements. Preserve planned working capital or revise the cash flow to reflect the release schedule.

Information rights do not confer unrestricted authority over beneficiaries or staff. Contracts should define necessary access, data protection and verification methods, plus responses to breaches: correction, suspension of further disbursements, replacement of an approver or other measures appropriate to the instrument. Any security or guarantee requires assessment of validity, priority, value and enforcement difficulty. It does not eliminate potential loss.

Investors must disclose their own conflicts, including supplier ownership, referral fees or commercial interests in project data. Payment to an intermediary from both sides should be understood before commitment. Balanced rules encourage early communication. A condition that punishes every revised estimate can encourage concealment, so distinguish a transparently explained forecast change from a breach or misrepresentation.

12

Resolve disagreements through criteria and evidence

Suppose Oficina Ponte's management favors the related supplier because it knows the community and provides rapid support, while the investor prefers the R$ 78,000 quote. Personal trust or the lowest price alone should not settle the issue. Specify the required service level, request comparable terms and assess total cost. If the claimed advantage cannot be demonstrated, it remains a hypothesis and does not automatically justify another R$ 12,000.

Another dispute may concern the 36 people working. Management accepts verbal confirmation; the investor wants evidence of continuity. Define categories such as reported employment, verified employment and employment maintained through the agreed follow-up period. This preserves useful information without treating different confidence levels as equivalent. Apply the rule consistently rather than choosing it after seeing which participants performed best.

Independent evaluation can help but has limits and conflicts. Identify who selected and pays the evaluator, the scope and whether the necessary sources were accessible. An opinion based solely on management spreadsheets offers different assurance from a review using its own tests. Assess independence in practice, including economic dependence, freedom to report unfavorable findings and restrictions on access. The evaluator's title alone cannot establish these conditions.

Record the decision, reasons and material dissent. If management rejects a recommendation, assess whether the remaining risk is acceptable for that transaction without treating your preference as proof of fraud. Repeated refusal to disclose material connections or permit agreed verification changes the assessment. The issue then includes the relationship's reliability, not just which commercial alternative is preferable.

13

Test losses, delays and incentives before committing funds

The R$ 45,000 receipts scenario creates a R$ 9,000 shortfall over six months under the original assumptions. Responses might include lower expenses, renegotiated installments or new funding, but none should be assumed available. Cutting R$ 1,500 monthly would close that period's arithmetic gap. The company would still need to show that the cut is feasible, happens in time and does not compromise safety, production or essential commitments.

If the equipment purchase falls to R$ 78,000 and month seven begins with R$ 72,000, the same R$ 69,000 cash consumption leaves R$ 3,000. The company could get through those six months, but with little room for additional outflows. This shows both the value and the limits of preserving cash. One purchase saving does not assure continuity if receipts remain below requirements, and a positive closing balance can conceal difficult payment timing within the period.

Some losses do not immediately appear in cash flow. Unsuitable equipment may need replacement; a major customer may dispute delivery; a complaint may halt activity; inflated metrics may cause a donor to stop future installments. Examine connections between events. If the company relies on the association to train workers and the association loses funding, company revenue may suffer too. Legal separation does not establish economic independence.

Adversity can distort incentives. Management under repayment pressure may favor easier sales and abandon beneficiaries with greater needs. An association paid for completions may weaken passing criteria. Monitor reduced support, changes in the population served and rising complaints. Protecting a financial indicator at the expense of the social purpose can undermine the impact rationale even without money being diverted.

14

Preserve evidence and the ability to correct problems

Suppose the association reports 48 completers but a review finds four duplicate records. Before concluding fraud, verify whether they are genuine duplicates, how they arose and which other metrics they affect. If only 44 distinct people meet the criteria, correct the total. Using the full R$ 120,000 budget, cost per completer rises from R$ 2,500 to approximately R$ 2,727.27. That correction changes the efficiency assessment.

Do not automatically reduce the 36 verified workers to 32. Check which records were affected and how the groups overlap. Follow the dependencies from participant records through completion, follow-up and derived indicators. Preserve the earlier version under controlled access with an explanation of the change. A correction should let reviewers understand the information trail rather than leave them guessing which figures informed earlier decisions.

If evidence suggests fabricated documents or improper payments, protect records and limit new exposure within the powers available. Avoid widely circulating accusations or personal documents. Assign an unconflicted investigator, define scope and criteria, and obtain legal guidance where needed. Halting a suspicious purchase may be proportionate; stopping all assistance without assessing consequences may harm beneficiaries uninvolved in the problem.

Respond according to the finding. An isolated error may call for a formula correction, training and revised disclosures. Recurring failures may warrant closer supervision or reassignment. Deliberate deception may require contractual measures and appropriate referrals. Record confirmed facts, remaining hypotheses, exposed funds and actions taken. Quietly fixing a spreadsheet removes information needed to assess management reliability.

15

Technology organizes analysis; verification remains essential

A project-based method organizes objectives, responsibilities, beneficiaries, budgets, instruments and evidence. It can help compare commitments with delivery and trace information to its source. KEZS connects entrepreneurial projects and potential funders through technology and intermediation. Investors perform their own due diligence and make their own decisions; KEZS does not assign a credit score. A connection does not establish transaction quality.

Organized documentation can make questions verifiable: which budget version was approved, who supplied a metric and what supports a disbursement? A platform can still receive false or incomplete information. Completed fields, professional presentation and attachments do not establish independent validation. Distinguish organizational declarations, documentary checks and external confirmation. The potential usefulness of a method does not prove a particular check occurred.

The same limits apply to blockchain. Record integrity may help reveal later alterations, but it does not make the original information true. It does not establish legal title, reserve solvency or future payment. Private documents and beneficiary data should not be placed on public blockchains. Evidence architecture must address confidentiality, error correction and access control alongside integrity. Preserving a false statement unchanged does not validate it.

Institutional references can guide research into Brazilian data protection, investment structures, funds, offerings and business forms. They are entry points, not proof of platform authorization or a project's compliance. Check the applicable structure with appropriate professionals and providers. Technology must not obscure who contracts, receives money, bears obligations or handles disputes, nor imply that a regulated function has been authorized merely because a digital process exists.

16

Close the decision with conditions, responsibilities and monitoring

Produce a decision another person can reconstruct. Identify the instrument, recipient entity, permitted use, expected repayment source where relevant and principal loss risks. Separate confirmed facts, unverified statements and projections. Signed customer contracts may support part of Oficina Ponte's forecast, but they do not turn all expected monthly receipts of R$ 60,000 into guaranteed cash. Performance, collection and timing uncertainties still matter.

Assign each material outstanding issue an owner and consequence. The related purchase may require equivalent quotations and unconflicted approval; completion metrics may need corrected records; beneficiary protection may need a reporting channel and revised data access. Some issues prevent disbursement; others can be monitored against deadlines. Make that distinction according to severity and reversibility rather than pressure to announce funding.

Monitor cash, delivery and impact together. Compare actual and projected balances, review related-party expenses and check changes in the population served. Assess whether explanations remain consistent over time. An early, documented delay with a plausible response differs from successive incompatible accounts. No complaints does not prove no problems, especially where beneficiaries depend on continued assistance and may fear the consequences of speaking.

The decision may be to fund, renegotiate, await evidence or decline. A donation seeks the agreed purpose and evidence of its delivery, without a promised financial return. An investment requires separate and combined assessment of impact, repayment capacity or potential appreciation. There is no guarantee of approval, repayment, profitability, liquidity or capital preservation. Establish clear criteria for monitoring, correction and stopping further exposure when evidence changes.

FAQ

Frequently asked questions.

Does using a relative as a supplier make a project fraudulent?

No. The relationship creates a conflict requiring disclosure and management. Examine necessity, comparable terms, pricing, delivery and the approver's independence. An interested person should not participate in approval for their own benefit. Concealing the relationship, fabricating quotations and paying for undelivered goods are separate, more serious issues. Follow the evidence without treating kinship as either a conviction or an irrelevant detail.

How can I compare projects when one reports much stronger metrics?

Check whether they measure the same population over comparable periods using equivalent criteria. One may count enrollments while another counts sustained employment; one may include dropouts while another excludes them. Examine participant selection, loss to follow-up and included costs. Better figures may reflect a better method, fewer barriers among participants or looser measurement. The headline number alone cannot distinguish these explanations.

Can a nonprofit return funds to a donor after a breach?

Consequences for a breach, including possible restitution, depend on the instrument and circumstances and require appropriate analysis. Restitution differs from promising the donor financial earnings. A contractual recovery right also does not establish that assets or cash will be available. Before transferring money, understand the purpose, conditions, reporting duties and remedies. Do not interpret a repayment or restitution clause as a capital guarantee.

Is hiring an auditor enough to eliminate fraud risk?

No. Assurance depends on the engagement, procedures, sources accessed and limitations. An accounting review may not examine service quality or claimed additionality. Read the scope, qualifications and provider conflicts. Use the work to answer defined questions alongside other evidence. Even a well-conducted evaluation reduces uncertainty without ensuring every deception will be detected or preventing future losses.

When should a warning sign stop a disbursement?

When uncertainty affects an essential condition and cannot be contained proportionately. Unclear recipient identity, an incompatible use of funds, refusal to disclose a material relationship or evidence of a fabricated document may justify suspension during investigation. A correctable presentation error may allow a narrower response. Record the reason, evidence needed and decision-maker, while considering continued beneficiary protection.

How can donated funds be prevented from quietly subsidizing private returns?

Separate entities, accounts, budgets and responsibilities, and examine agreements between them. If the association pays the company for premises or services, establish the project's benefit, pricing and unconflicted approval. Disclose any subsidy and who captures its advantages. The example's R$ 120,000 donation is not company cash for loan repayment. Philanthropic and private funding can be combined, but the arrangement must be understood and accepted rather than hidden in consolidated totals.

What if management voluntarily corrects material information?

Assess severity, reporting speed, review coverage and correction quality. Preserve the previous version, check dependent metrics and update the funding decision where necessary. Voluntary disclosure can be a favorable governance signal, but still requires verification. Recurring errors call for investigation of causes and stronger processes. The aim is reliable information and less recurrence, without rewarding concealment or treating every honest revision as fraud.

References and context

Institutional reference points for checking applicable rules and guidance. Calculations and scenarios are original examples, not quotes, historical results or individualized recommendations.

AI-assisted educational content. Decisions require verification of the information, instruments and providers in each actual case.

From knowledge to decisions

Plan your next step
with more clarity.

Get started ↗