A British nonprofit oversight group reports that one third of British charity fraud is internal to the organizations at issue. Are US nonprofits different? Maybe. But maybe we should be more alert to potential wrongdoing inside our charities. The worst possible risk management assumption is the statement, “It could never happen here.”