Like all sufficiently large organisations, with huge amounts of money, this is less a control problem and more a scale problem. First, we should note that 4 mi

Like all sufficiently large organisations, with huge amounts of money, this is less a control problem and more a scale problem. First, we should note that 4 mil, over 4 years, is a rounding error in the meta financial. Sure it's a lot to me and you (and her) but its less important to fb than a $1 is to you. Second it's worth noting that spending any amount of money, at scale, is inefficient. Once you get past the stage of "the owner writes all the checks" you need rules, limits and so on. The more the money , the more people spending it. At which point you are hiring people -just- to spend money, and then more people to watch over them, and then even more people to watch over them. So yeah, once you have enough people, you'll inevitable have some that are comfortable fleecing some out. Since preventing that is infinite oversight, it's simpler to just accept that it'll happen as a cost of doing business. On the one hand you can describe this as "bad internal controls". On the other hand, if the controls cost more than the losses then that's "worse". Context matters.