JFIA 2022 No2 11
JFIA 2022 No2 11
“Our entire culture is centered on doing what is right for our customers.”
—John Stumpf (Wells Fargo CEO)
I. Introduction
Wells Fargo initially agreed to pay a fine of $185 million to Consumer Financial Protection Bureau (CFPB) and
others for opening millions of fake accounts without customers’ permission (Sandwith, 2016). Employees at Wells Fargo
created more than 1.5 million unauthorized deposit accounts and set up roughly 565,000 bogus credit card accounts over
five years. This figure was revised upward to $3.5 million bogus deposit/credit card accounts in August 2017 (Keller, 2017).
In February 2020, Wells Fargo agreed to pay $3 billion in additional settlement, of which $500 million went to the SEC and
$2.5 billion went to the U.S. Treasury. Several other cases of recent alleged bank fraud are generally associated with
mortgage lending or other areas of esoteric products such as collateralized debt obligations or fancy derivatives. Wells Fargo
staff created fictitious account holders so that they could meet difficult sales targets. Sadly, this fraud lasted more than five
years and resulted in Wells Fargo firing about 5,300 workers and managers for cause between Jan. 1, 2011, and March 7,
2016 (Tomkiel, 2017). This fraud took an extremely high toll on the customers and employees associated with it.
Wells Fargo (WFC) stock has dropped approximately 10 percent since the scandal was announced and the then
CEO John Stumpf was forced to resign. According to the complaint, managers would constantly “hound, berate, demean
and threaten employees to meet these unreachable quotas. Managers often tell employees to do whatever it takes to reach
their quotas (Hersh, 2016)” Bankers at Wells Fargo used special internal terms for these fraudulent business practices such
as “pinning” and “bundling.” Pinning is assigning “a PIN number to customer ATM cards without customer authorization
for the intention of impersonating the customers on Wells Fargo computers to enroll in online banking products. Bundling
refers to the Wells Fargo practice of incorrectly informing customers that certain products could only be obtained in
packages with other products when in fact the product was available individually.” (Hersh, 2016).
Toxic Sales Culture
Wells Fargo leadership often referred to its sales goals as “50/50 plans” because the leadership knew only around
half the regions would be able to meet the target. However, all employees would feel the pressure of these extreme sales
goals. Wells Fargo employees knew that meeting or exceeding these numbers could make or break their careers. In fact,
employee incentive compensation was linked to these lofty sales quotas. The extreme focus on making sales lead to
promotions for those who could find a way to excel in this pressure induced sales environment (Wells Fargo, 2017).
Up until 2014, employees and managers would receive a “motivator report” daily and/or weekly. This report
contained monthly, quarterly and year-to-date sales goals. The report would rank employees and managers against one
another in terms of their sales outcomes (Wells Fargo, 2017). This report effectively shamed those with a small number of
sales and praised those with high sales numbers. Over time, these practices created a toxic culture that permeated the daily
lives of Wells Fargo employees. In fact, many employees turned to the practice of “simulated funding” to get credit for
creating a sham account. In this practice, employees would temporarily transfer their own funds, or funds from another
customer to the fraudulent account (Wells Fargo, 2017). By creating an environment where selling products was the most
314
*The authors are, respectively, Professor and Assistant Professor of Accounting, The University of South Dakota; and Director of
Accounting and Finance, Kirkwood Community College.
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
important thing for employees, Wells Fargo created a landscape that was ripe for unethical behavior. Moreover, Wells
Fargo’s 2017 investigative report states as a principle finding, “The root cause of sales practice failures was the distortion
of the Community Bank’s sales culture and performance management system, which, when combined with aggressive sales
management, created pressure on employees to sell unwanted or unneeded products to customers and, in some cases, to
open unauthorized accounts” (Wells Fargo, 2017).
II. Control Environment
Tone at the top refers to the ethical climate created by the top management. It is management’s commitment to
honesty, integrity and ethical behavior at all levels of the organization. Incentives on sales goals and objectives are an
important part of the culture of any business. However, when management acts unethically, or appears to be more concerned
with financial success than doing what is right; employees tend to act in a similar manner. Wells Fargo was unable to realize
the degree to which employee business practices were creating extensive reputational risks for the bank. That “hefty” fine
paid to CFPB is akin to a slap on the wrist representing “only about 3 percent of the bank’s second-quarter profits.”
(Lewczyk, 2016).
The decentralized operations used by Wells Fargo allowed for management in banks to run them “like they owned
them.” (Wells Fargo, 2017). Under this type of business model, management was able to impose unrealistic sales quotas
and adopt policies that drove its employees to engage in fraudulent behavior to meet those unattainable goals (Hersh, 2016).
Wells Fargo’s internal investigation points out, “Corporate control functions were constrained by the decentralized
organizational structure and a culture of substantial deference to the business units. In addition, a transactional approach to
problem-solving obscured their view of the broader context. As a result, they missed opportunities to analyze, size and
escalate sales practice issues.” (Wells Fargo, 2017).
Internal Control Failures
According to Musngi: “While the issue seems to have limited financial impact (currently), it has a significant impact
on operations, internal controls, and compliance, given the scale of the issue which involved 5000+ employees, the duration
which spanned multiple years, and the inability of management to remedy the issue despite their efforts.” He fears financial
restatements and disclosures of material internal control weaknesses by Wells Fargo. Internal audit, line management, and
the corporate risk-management—all appear to have broken down resulting in massive employee terminations and record
fines (Musngi, 2016).
Signs of inappropriate sales techniques started to show up in the early 2000’s. In 2004, internal Wells Fargo
investigators developed a task force to examine “gaming” sales techniques (Wells Fargo, 2017). In the August 2004 report
the group stated, “it is the conclusion by Corporate Security Internal Investigations that whether real or perceived, team
members on the current Corporate Sales Incentive Plan feel they cannot make sales goals without gaming the system. The
incentive to cheat is based on the fear of losing their jobs for not meeting performance expectations.” (Wells Fargo, 2017).
The 2004 report raised alarm bells by noting, “[i]f customers believe that Wells Fargo team members are not conducting
business in an appropriate and ethical manner, it will result in loss of business and can lead to diminished reputation in the
community.” (Wells Fargo, 2017). However, this report failed to make an impact on senior managers. Additionally, internal
auditors failed to continue to press this issue for the next several years as the fraud ran rampant.
There are no indications that internal audit department at Wells Fargo looked “at the setting of compensation targets,
the culture of the organization, the design and operation of controls over the opening of customer accounts, the design and
operation of controls around customer complaints.” (Wells Fargo, 2017). The decentralized governing body at Wells Fargo
had all the information relating to employee terminations, turnover, incentive compensation, performance reviews and the
work atmosphere; but similar to risk management, the Chief Administrative Officer had no coordinated practice in place to
comprehensively track sales problems (Wells Fargo, 2017).
Internal Audit Failures
Internal auditors assumed that other parts of the bank were responsible for mitigating sales practice integrity issues
(Wells Fargo, 2017). However, they did not verify if that was the case. According to Tomkiel (2017): “Internal auditors
issued report after report rating as effective various controls designed to prevent, detect and remediate sales integrity
violations and “sales practice-related risks.” Internal audit even reviewed the bank’s compensation plans and opined that
the plans’ designs did not promote unethical behavior.” The internal auditors focused narrowly on the individual controls
315
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
and processes that were operating to detect individual incidents of misconduct. They unfortunately did not assess the “overall
risk environment” as it impacted the bank and its customers. Internal audit departments everywhere need to operationalize
the suggestions of the recent research publication of IIA on auditing “culture.” (Tomkiel, 2017). In addition, internal auditors
should exhibit more professional skepticism than others such as risk management personnel at the bank.
Whether or not risk management or internal audit could have prevented this type of fraud is questionable. There are
procedures that should have been performed or at least monitored, that would have allowed the activities to be identified as
a risk. For example, the audit plan or risk assessment should have included monitoring consumer complaints or customer
satisfaction as well as the responses to each of these. The organizational culture should have been assessed by walking
around and listening to employees and observing them perform daily tasks.
Wells Fargo Auditors
KPMG issued a clean ICFR opinion in the Wells Fargo 2015 annual report. Many people speculated and questioned
why a clean report was issued when there were obvious sales abuse schemes occurring. KPMG stated that it was aware of
the unethical sales practices at Wells Fargo occurring as far back as 2013. However, the firm seemed content with the
knowledge that management had of the practices. KPMG responded to Senators Elizabeth Warren and others when asked
about their procedures to deduct fraud and duty to inform investors, by stating that “not every illegal act has a meaningful
impact on a company’s financial statements or its system of internal controls over financial reporting. From the facts
developed to date, including those set out in the CFPB settlement, the misconduct described did not implicate any key
control over financial reporting and the amounts reportedly involved did not significantly impact the bank’s financial
statements.” (McKenna and Riquier, 2017)
Wells Fargo’s board decided to keep their long-term auditors, KPMG, despite their inability to detect fraudulent
sales practices that occurred in the bank between 2012 and 2016. Wells Fargo defended its decision based on the independent
auditor’s professionalism, knowledge of the industry and business practices (Wack, 2017).
Law Department Failures
Employment lawyers within Wells Fargo saw, to their chagrin, termination after termination resulting from the
same unethical conduct: employees “gaming” the system to meet sales performance goals. These lawyers reported this trend
to their superiors after a while but not in time. Wells Fargo’s sales practices investigation report points out, “beginning
around 2011, a recurrence of sales integrity events led employment lawyers to recognize sales pressure in the Community
Bank environment as a root cause of gaming cases. Lawyers in the Employment Law Section and the Deputy General
Counsel responsible for the Section also began to recognize the existence of significant reputational risk to Wells Fargo
arising out of sales integrity issues, particularly mass gaming cases.” (Wells Fargo, 2017). They argued in their internal
memos that the root cause for this ethical lapse may be structural—their compensation bonus schemes may be seriously
flawed. The lawyers initially believed that customers may not be harmed by these unethical sales practices. When the
lawyers finally realized what was going on was illegal, they reluctantly spoke up but their internal warnings were feeble.
Even after detecting a worrisome trend, the internal investigations department did not do enough to highlight the
issue. The internal investigations department also did not analyze the datasets that were available to it. They did not make
any attempt to quantify the trends nor did they attempt to detect problem areas.
Epilogue
As part of a federal case brought by the Office of the Comptroller of the Currency, the former CEO of Wells Fargo
John Stumpf can never work at Wells Fargo again and must pay a fine of $17.5 million (Bomey, 2020). The case against
Stumpf points out that he repeatedly dismissed allegations of fraud when they were clearly presented to him. Additionally,
the Head of Community Banking, Community Bank Group Risk Officer, General Counsel, Chief Auditor, and Executive
Audit Director are all facing person sanctions for their actions in the scandal (OCC, 2020). For its part, Wells Fargo is
attempting to put the bank on a better footing. The current Chief Financial officer John Shrewsberry said the employees
have “really adopted more of a compliance mindset and a customer experience rather than a convert customer and expand
business mindset” (Armstrong and Noonan, 2019).
In total, the bank faced tremendous monetary penalties for its fake account practices. The table below lists the state
and federal fines levied against the bank. However, this table does not include several additional civil lawsuits the bank has
had to contend with.
316
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
Case Questions
1) Define and discuss the three ethical theories: 1) Utilitarianism; 2) Justice; and 3) Rights.
2) Who were all affected by the fake accounts that were created Wells Fargo employees? How were they affected? Please
analyze the ethical theories mentioned in question one to the Wells Fargo scenario.
3) What are the internal control weaknesses in Wells Fargo Bank? (Please categorize the internal control weaknesses
according to COSO.)
4) Describe red flags (under fraud triangle: incentives, opportunities, or attitudes) that are present in this Wells Fargo case
study.
5) Please read the Wells Fargo Internal Report at https://www08.wellsfargomedia.com/assets/pdf/about/investor-
relations/presentations/2017/board-report.pdf and summarize the substance within two pages.
6) Investors, audit committee, management, internal auditors, law department, OCC, and others should all exhibit
“professional skepticism.” Please describe what “professional skepticism” is and how important it is for auditors.
7) Describe the governance structure at Wells Fargo Bank. Give detailed comments on the “control environment” at Wells
Fargo.
8) Did the company culture at Wells Fargo encourage incentive gaming by employees? Discuss in detail.
9) Why did this illegal activity continue for more than five years at Wells Fargo? What specific steps Wells Fargo could
have taken to control this early on?
10) What is the optimum level of incentives? Were lower-level employees over-incentivized which led them to commit
fraud? What is the role of managers in this? Discuss.
11) Suggest several new internal control procedures to overcome the weaknesses in the ICS at Wells Fargo.
317
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
case provides a 41 second YouTube video showing how their salespeople created fake accounts to meet unrealistic quotas
set by management. It depicts managers and those meeting the quotas getting paid large sums of money. The discussion
questions inquire about conflict of interest, incentive gaming, and the reasons why fraudulent practices were occurring.
Heitger, Heitger, and Heitger (2021) focus on managerial control systems and the three elements that make up a control
system which are strategy, performance measures, and incentives. Using the W.T. Grand and Wells Fargo cases, they look
at how each of these elements played a role in the dysfunctional control systems for each company. This case asks students
to identify the management control systems used by W.T. Grant as well as designing a system that would fix the existing
weak system. The second set of questions focuses on Wells Fargo and asks one would improve it. The case asks students to
assume the role of management at Wells Fargo and how would they handle it if they knew about the fake accounts before
it was public knowledge. Lastly, it asks students to compare the two situations at W.T. Grant and Wells Fargo and why do
they think such challenges continue to occur in businesses to this day.
Assessment of Student Learning:
We assessed the impact of the case on student learning through an eight-question concept quiz (Appendix A) during
Fall 2020. A six-question concept quiz was used in Spring 2020. The quiz was first administered after the textbook chapters
on fraud and internal control were covered in the auditing class but before assigning the Wells Fargo case (pre-test). The
same quiz was administered again after the students turned in their write case answers (post-test). There was about a six-
week lag between the pre and post-test quizzes. Students did not receive any grades on these pre and post-test quizzes.
Student scores for both quizzes, pre-test and post-test, for the undergraduate auditing students are presented in Table
2. Each question on the quiz was worth one point. Mean total scores on quizzes are presented in Table 2. The statistical
results for Fall 2020 student cohort indicate a significant improvement (t = -3.270) in students’ understanding of fraud and
internal control concepts. Mean difference for Spring 2020 student cohort is not statically significant (t = 0.294). Student
learning could have been adversely impacted by the sudden switch to remote learning for the last seven weeks of the spring
semester due to the coronavirus pandemic.
Table 2: Assessment of Learning
Pre-WF Post-WF T-score
Fall 2020: Average score (maximum 8) 4.67 6.44 -3.270**
Spring 2020: Average score (maximum 6) 4.59 4.53 0.294
[**significant at p < 0.01 for a one-tailed test]
An assessment quiz on fraud and internal control was administered before and after covering the Wells Fargo case. There
were 22/17 students who answered pre and post quiz questions in spring 2020 and 12/9 students who answered pre and post
quiz questions in Fall 2020, respectively.
Additional Case Assessment:
This case was assigned during the Fall of 2017 and Spring of 2018 to students in auditing and a systems class,
Spring 2019 to the ethics students, Spring and Fall of 2020 to auditing students. Only two to three questions were used at
a time. Table 1 summarizes student’s view and feedback to the case. A total of 90 students completed the case assessment
survey (Enrollment was higher: 24 auditing students in Fall 2017, 11 undergraduate students in systems in the Fall 2017,
16 auditing students in the Spring 2018, 17 undergraduate students in systems in the Spring of 2018, and 18 graduate
accounting ethics students in Spring 2019) and results are reported in table. An additional 24 auditing students completed
the case in Spring 2020 and 26 students (two sections) completed it in Fall 2020. Two of these three sections completed
the pre and post-test assessments in 2020 spring and fall. One evening section with older students that met once a week
did not participate in the pre and post-test Quiz. Another instructor (non-coauthor) administered the case during Fall 2020
to 19 students in a banking class and student survey results in that are discussed below.
Table 3 indicates that in general students responded favorably to the use of the case as a class assignment. A
significant majority of students either agreed or strongly agreed that completing the case helped them better understand the
following concepts: red flags related to fraud, ethics, and internal control procedures to prevent theft, COSO framework,
and SAS No. 99 (AU 316). A high percentage of students judged the level of difficulty associated with the case to be
appropriate for a senior-level auditing course, a junior level systems course, and/or a graduate level ethics course. A strong
319
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
majority opined that it was a useful learning tool. A strong majority of the students who completed the case were ready to
recommend this case for use in future auditing or systems classes. Table 3 presents information as to how AICPA core
competencies are addressed in this case study.
Table 3: Wells Fargo Case Assessment
Strongly agree = 1; Agree =2; Neutral =3; Disagree =4; Strongly disagree =5
Fall Spring Spring
Spring
Item 2017 2018 2018
2019 Ethics
Systems Systems Auditing
1. Completing the WELLS FARGO case study helped me understand red
flags (incentives, opportunities, and attitudes) related to fraudulent 1.73 NA 1.76 1.72
activities in companies.
6. The level of difficulty in this case project was appropriate for a systems/
1.91 2.00 2.38 1.78
auditing course.
7. Analyzing this case as a group project was beneficial. 1.55 2.24 2.00 NA
8. Completing Wells Fargo case helped me understand Utilitarian Ethics. NA NA 2.23 2.06
10. Overall, this case project was a useful learning tool. 1.45 1.65 1.69 1.78
Conclusions:
Undergraduate auditing, systems, and business law students participated in solving this case. Because it is based on
a major fraud that occurred in a well-known financial institution (Wells Fargo), students had access to lots of material on
the financial press (e.g., Wells Fargo Board Investigation Report) and other electronic sources. Several of the facts in this
case such as the job termination of 5,300 employees and the creation of 3.5 million fake accounts shocked them. Students
had the motivation to learn some material outside of their textbook. The participating students learned to apply the fraud
auditing standard and AS5 (PCAOB auditing standard on evaluating internal control). Students enhanced their critical
thinking and professional judgment, by developing detailed group answers for several key questions on internal control
assessment, fraud risk factors (AU 316), ethical reasoning, and the design of new controls. The case was analyzed by
students working in groups and as such developed invaluable interpersonal skills as well.
Student Comments: Some student comments about the case are given below:
320
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
321
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
C) control environment
D) system of control activities
7) Which of the following components of the control environment define the existing lines of responsibility and authority?
A) management philosophy and operating style
B) organizational structure
C) management integrity and ethical values
D) human resource policies and practices
8) Of the following statements about internal controls, which one is least likely to be correct?
A) Control procedures reasonably ensure that collusion among employees cannot occur.
B) No one person should be responsible for the custodial responsibility and the recording responsibility for an
asset.
C) Because of the cost-benefit relationship, a client may apply controls on a test basis.
D) Transactions must be properly authorized before such transactions are processed.
322
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
References
Armstrong R. and Noonan L. 2019. Wells Fargo: repairing a damaged brand, 7 January 2020.
https://www.ft.com/content/b858da70-1418-11e9-a581-4ff78404524e
Bomey, N. 2020. Ex-Wells Fargo CEO banned from banking, must pay $17.5M fine for role in fake-accounts scandal, 7
January 2020. https://www.usatoday.com/story/money/2020/01/23/wells-fargo-ex-ceo-john-stumpf-banned-
banking-fined-17-5-m/4554673002/
Elson, R. J. and Ingram, P. 2018. Wells Fargo and the unauthorized customer accounts: A case study. Global Journal of
Business Pedagogy, 2(1), 124–133.
Ethics Unwrapped 2020. Wells Fargo fraud. McCombs School of Business – The University of Texas at Austin. Retrieved
from https://ethicsunwrapped.utexas.edu/video/wells-fargo-fraud.
Heitger, A., Heitger, D. and Heitger, L. 2021. Driving Performance in the Retail and Banking Industries: The
Consequences of Dysfunctional Management Control Systems at W.T. Grant and Wells Fargo. Issues in
Accounting Education. Forthcoming.
Hersh, T. 2016. Tone at the Top. The Institute of Internal Auditors.
Keller, L. J. 2017. Wells Fargo Boosts Fake-Account Estimate 67% to 3.5 Million. Bloomberg News. August 31.
Lewczyk, M. 2016. Will KPMG Join Wells Fargo in its Walk of Shame? http://goingconcern.com/will-kpmg-join-wells-
fargo-its-walk-shame/
McKenna F. and Riquier A. 2017. Where was KPMG, Wells Fargo’s auditor, while the funny business was going on?
MarketWatch. August 21, 2017. http://www.marketwatch.com/story/where-was-wells-fargos-auditor-kpmg-
while-the-funny-business-was-going-on-2017-08-17
Mark, N. 2016. The Wells Fargo Fraud: Where Was Internal Audit? Information Management. October 16.
Moise, I. 2018. Wells Fargo to pay $575 million in settlement with U.S. states. 9 August 2019.
https://www.reuters.com/article/us-wells-fargo-settlement-idUSKCN1OR19Q
Musngi, Z. 2016. Wells Fargo: Risks from Internal Control Weakness. https://seekingalpha.com/article/4009417-wells-
fargo-risks-internal-control-weakness
OCC. 2020. OCC Issues Notice of Charges Against Five Former Senior Wells Fargo Bank Executives, Announces
Settlement with Others, 7 January 2020. https://www.occ.gov/news-issuances/news-releases/2020/nr-occ-2020-
6.html
Prang, A. 2018. Wells Fargo Agrees to $65 Million Settlement with N.Y. Attorney General Over Cross-Selling. 9 August
2019. https://www.wsj.com/articles/wells-fargo-agrees-to-65-million-settlement-with-n-y-attorney-general-over-
cross-selling-1540233490
Sandwith, L. 2016. Wells Fargo: what happens when all three lines of defense fail?
https://www.iia.org.uk/resources/technical-blog/wells-fargo-what-happens-when-all-three-lines-of-defence-
fail/2017
Tayan, B. 2019. The Wells Fargo cross-selling scandal. Stanford University Closer Look Series. Retrieved from
https://www.gsb.stanford.edu/sites/gsb/files/publication-pdf/cgri-closer-look-62-wells-fargo-cross-selling-
scandal.pdf
Tomkiel, B. 2017. Lessons From Wells Fargo’s Corporate Control Failures. Law360. April 21.
Wack, K. 2017. Wells Fargo defends decision to keep KPMG as its auditor. American Banker. 3/17/2017, Vol. 183 Issue
52, p1.
Wells Fargo. 2017. Independent Directors of the Board of Wells Fargo & Company Sales Practices Investigation Report.
April.
323
Journal of Forensic and Investigative Accounting
Volume 14: Issue 2, July–December 2022
324