The empirical evidence suggests that firms overpay for fraud liability and overspend on internal compliance mechanisms (which are not very effective at preventing fraud). Yet, insiders who commit fraud are rarely sanctioned for their wrongdoing, which produces moral hazard and individual...