The causes of illegal or unethical activity generally fall into three interacting categories: individual motivations that push a person toward misconduct, organizational environments that create the opportunity for it, and systemic influences that fail to deter it. Misconduct rarely traces to a single villain or a single broken rule. It happens when a motivated person operates inside a workplace that leaves room for wrongdoing, within a wider system that doesn’t reliably punish it. Criminologist Donald Cressey captured a version of this in his “Fraud Triangle,” which holds that fraud requires pressure, opportunity, and rationalization working together — three elements that scale up neatly to explain misconduct of all kinds, from petty workplace theft to billion-dollar securities schemes.
Individual Motivations
Personal pressure is where most misconduct begins. Financial stress, addiction, lifestyle inflation, a spouse’s job loss, or simply the desire for more money can create what Cressey called a “non-sharable financial problem,” a need the person feels they cannot resolve through legitimate channels. When someone perceives the potential reward as high and the chance of detection as low, the calculus tips toward action. Corporate insiders are especially vulnerable because they understand the system well enough to see the gaps in oversight.
Pressure alone doesn’t explain why people who think of themselves as ethical still break the law. Rationalization fills that gap. People tell themselves they’re only borrowing the money and will pay it back, that the company owes them after years of being underpaid, or that everyone else is doing the same thing. Psychologist Albert Bandura called this process “moral disengagement,” a set of cognitive moves that let people deactivate their own standards. Common versions include minimizing the harm, blaming the victim, and spreading responsibility across a group so no single person feels accountable.
Personality matters too. Research consistently links narcissism, low empathy, and a high tolerance for risk with unethical decision-making. People with those traits find rationalization easier and feel less internal conflict when crossing a line. Even so, the more useful point is that ordinary people with no personality disorders commit the vast majority of workplace fraud. They just need enough pressure and a convincing story they can tell themselves.
Organizational Environment
If individual motivation is the spark, the workplace is the fuel. Weak internal controls create opportunity, the second leg of the Fraud Triangle. When one employee handles invoicing, approval, and payment with no independent review, the door is wide open for fake-vendor schemes or outright misappropriation. The textbook fix is to separate those duties, but small organizations often lack the headcount to do it, and larger ones sometimes let controls erode under cost-cutting pressure.
Culture is the less visible factor and often the more dangerous one. When leadership signals through its behavior that results matter more than how you reach them, employees absorb that message quickly. Unrealistic sales targets, bonuses tied to aggressive metrics, and a pattern of promoting people who make their numbers regardless of method all push employees toward corner-cutting. The Wells Fargo unauthorized-accounts scandal is the clearest recent example: employees opened roughly two million deposit and credit card accounts that consumers never authorized, driven by relentless pressure to meet sales quotas.1Consumer Financial Protection Bureau. Consumer Financial Protection Bureau Fines Wells Fargo $100 Million for Widespread Illegal Practice of Secretly Opening Unauthorized Accounts That wasn’t a handful of rogue employees. It was a predictable output of a system designed to reward volume above everything else.
The hopeful side of the organizational picture is that these conditions respond to deliberate design. Federal sentencing guidelines give organizations a concrete reason to build real compliance programs rather than cosmetic ones. An organization that can demonstrate an effective program may receive a substantially lower culpability score at sentencing, and the guidelines spell out what effective means: written standards, board-level oversight, a compliance officer with adequate resources and direct access to leadership, personnel screening, regular training, monitoring and auditing, and a reporting system without retaliation.2United States Sentencing Commission. 2018 Chapter 8 A program that exists on paper but never results in discipline, never triggers an internal investigation, and never reaches the board will not earn credit. Auditors and prosecutors look for evidence that the program actually changed behavior.
Systemic Influences
Even motivated people inside poorly controlled organizations need a wider environment that lets misconduct survive. Systemic influences — the legal framework, enforcement capacity, economic conditions, and social norms around an industry — determine whether illegal activity stays isolated or becomes widespread.
Economic inequality plays a documented role. Research across multiple countries has found that higher income inequality correlates with increased rates of violent crime, particularly homicides and robberies. The mechanism is intuitive: when people perceive that legitimate paths to financial stability are blocked while wealth is visibly concentrated elsewhere, the relative appeal of illegal shortcuts grows. Inequality also weakens the community-level social bonds and informal oversight that normally deter crime.
Weak enforcement is the systemic factor practitioners worry about most. When regulatory agencies are underfunded, when penalties are inconsistently applied, or when investigations take years to resolve, the deterrent effect of the law erodes. People and organizations calculate risk. If the perceived probability of detection is low and the consequences for getting caught look manageable, the expected cost of misconduct drops below the expected benefit, and some share of actors will take the gamble every time. Statutory penalties for fraud are severe on paper — securities and commodities fraud carries up to 25 years in federal prison, and wire fraud up to 20 years, or 30 years if a financial institution is affected3Office of the Law Revision Counsel. 18 U.S. Code 1348 – Securities and Commodities Fraud4Office of the Law Revision Counsel. 18 U.S. Code 1343 – Fraud by Wire, Radio, or Television — but those maximums only deter when actual sentences and fines sit close to them.
Cultural norms compound the problem. Industries where aggressive behavior is celebrated, where regulatory evasion is treated as cleverness, or where “everyone does it” becomes a shared understanding tend to produce more misconduct than industries with strong professional identity and peer accountability. These norms are hard to measure but easy to feel, and they explain why enforcement alone rarely solves the problem.
How the Three Causes Interact
Taking the three categories separately is useful for diagnosis, but the real pattern is in how they combine. A pressured individual needs opportunity to act. Opportunity exists because the organization permits it. The organization permits it because the surrounding system doesn’t make the price of permitting it high enough. Remove any one of those layers and the misconduct usually doesn’t happen, or doesn’t last.
That is why the people who study this problem rarely point to a single fix. Tightening internal controls reduces opportunity but does nothing about the pressures employees carry home. Raising statutory penalties strengthens deterrence but doesn’t touch a culture that quietly rewards results over methods. Addressing inequality or professional norms works on the longest timescale of all. Each layer absorbs some share of the risk, and the organizations and systems that keep misconduct rare are the ones working on all three at once.
What Reduces Each Cause
On the individual side, screening, training, and visible discipline shift the rationalization calculation. If employees see that misconduct is detected and consequences follow, the “everyone does it” story becomes harder to tell.
On the organizational side, separation of duties, independent audit, and a reporting channel that works are the baseline. Federal law backs the reporting channel with teeth. Under the Sarbanes-Oxley Act, publicly traded companies and their officers, contractors, and agents cannot fire, demote, suspend, threaten, or otherwise retaliate against an employee who reports conduct the employee reasonably believes violates federal fraud statutes or SEC rules.5Office of the Law Revision Counsel. 18 USC 1514A – Civil Action to Protect Against Retaliation in Fraud Cases Those protections cannot be waived by an employment agreement or arbitration clause, and an employee who faces retaliation has 180 days to file a complaint with the Department of Labor.6Whistleblowers.gov. Sarbanes-Oxley Act (SOX)
On the systemic side, enforcement capacity and self-disclosure incentives are the levers prosecutors control directly. In March 2026, the Department of Justice released its first department-wide corporate enforcement policy covering all criminal cases except antitrust. The policy’s central promise is that companies which voluntarily disclose misconduct, cooperate with investigations, and remediate the wrongdoing will generally not be prosecuted at all, in exchange for turning in the individuals responsible.7United States Department of Justice. Department of Justice Releases First-Ever Corporate Enforcement Policy for All Criminal Cases For organizations deciding whether to come forward, the point is that concealing known misconduct now risks losing any future cooperation credit if the facts surface through a whistleblower or an audit.
None of these tools eliminate misconduct on their own. They work because each one weakens a different leg of the triangle, and misconduct needs all three legs to stand.