The top four ways organizations initially detect fraud are 42% by tips, 16% by management review, 14% by internal audit and 7% by accident.

Association of Certified Fraud Examiners (2014)