EXPOSING FRAUD : RULES FOR IDENTIFYING COVERT POSITIONS