Fraud prevention controls must become ingrained, intuitive and behavioral rather than merely obligatory procedures.