A Queensland council says an internal investigation has found human error contributed to ratepayers being defrauded of $2.3 million.
Noosa Council initially said no employees were at fault when overseas fraudsters posed as council suppliers in December last year and refused to reveal details about the theft.
But a report to council to be considered on Thursday said investigations had found “elements of human error that contributed to some failures in our internal controls”.
The report, which Mayor Frank Wilkie and Deputy Mayor Brian Stockwell voted against releasing, said three “key lessons” could have prevented the fraud.
They included following council policy when changing a supplier’s details, verifying emails, and escalating bank enquiries to senior staff.
Details about the nature of the scam were expected to feature in a report from the Queensland Audit Office (QAO) early next year.
Frank Wilkie says police asked the council not to publicly disclose anything related to the fraud. (ABC News: Jessica Ross)
However, council chief executive Larry Sengstock told the ABC he took “full responsibility” for the theft .
He said the loss had not impacted key services and the council had received $600,000 from insurance.
Mr Sengstock said despite the losses, the organisation also had money set aside for natural disasters, which meant operations were not affected.
“We are a financially sound organisation,” Mr Sengstock said.
“We thought we did have processes that would be able to combat all of this.
“But unfortunately, until you know, you don’t know.”
The report said the organisation had improved procedures, including security training for all staff, protocols to now independently verify any changes to supplier details, changes to bank account details requiring formal oversight and approval, an audit log for every supplier payment, a third-party payment protection software, and a “staff commitment to compliance”.
Were scam warnings ignored?
The Noosa fraud came roughly a year after the Gold Coast city council was hit by a similar scam worth $2.78 million.
The QAO said it passed on findings from their investigation into the scam to all Queensland local councils and the state government in March 2024.
Larry Sengstock and Frank Wilkie have spoken publicly about the council scam. (ABC News: Jessica Ross)
The audit office’s recommendations were similar to the findings from the latest Noosa Council report.
The state government also had no record of whether Noosa Council implemented the scam prevention recommendations made by the QAO.
In the new report, council said it implemented every recommendation from the QAO.
However, the report did not mention the Gold Coast scam or any of the QAO’s 2024 warnings.
Noosa Council and Mr Sengstock have been contacted for further comment by the ABC regarding whether QAO recommendations from the Gold Coast scam were implemented in early 2024, how much money was spent on the fraud report (including council staff being diverted from other work), and how Mr Sengstock was taking responsibility for the fraud.