Deloitte audit reveals multi-million rand Metrorail fraud
The Democratic Alliance (DA) has obtained a copy of a document detailing a forensic investigation carried out by Deloitte and Touche into two incidents of fraud committed at the Tshwane and Durban offices of Metrorail respectively. The fraud involved the illegal electronic transfer of approximately R8-million in total from Metrorail's bank account into a number of privately held accounts. The report revealed that the fraud occurred within an inadequately protected IT environment at Metrorail. According to the report, no-one has been brought to book for the crime.
The report can be downloaded in two separate parts from the DA Media Centre's Documents Vault. (Download File 1; Download File 2)
The incidents of fraud occurred during June and July 2008. It involved the transfer of electronic funds from the Metrorail bank accounts within a private bank. Approximately R4-million was transferred on each occasion. The parent company of Metrorail, the Passenger Rail Agency of South Africa (PRASA), assigned the bank to conduct an investigation into the frauds. However, due to dissatisfaction with the results of the investigation undertaken by the bank, PRASA appointed Deloitte to conduct a full forensic investigation. Following this, and prior to the forensic investigation being fully completed, the CFO of PRASA requested that Deloitte finalise their forensic investigation and highlight all outstanding matters as "...PRASA intended to pursue those via internal processes."
Because the forensic audit was not completed, a number of questions remain unanswered and therefore require further, independent investigation. The Democratic Alliance (DA) will be issuing parliamentary questions on the matter and will also be writing to the Public Protector requesting such an investigation.
Further investigation is particularly necessitated by the fact while PRASA has been able to recover most of the money from insurance, no one has seemingly been brought to book for this theft. This is particularly disturbing in light of the nature of the fraud that was committed -- according to the report, the nature of the incident in question was of a "sophisticated and complex level, indicating the involvement of more than one crime syndicate and collusion between PRASA staff and external parties."