Crisis Genesis: Governance and Control Weaknesses

In the annals of corporate scandals, the collapse of Luckin Coffee Inc. presents a paradigmatic study of how profound governance and control weaknesses can systematically dismantle corporate integrity from within. Unlike frauds driven by a single, charismatic malfeasant, Luckin’s case reveals a complex ecosystem where board oversight was structurally impaired, internal controls were deliberately circumvented, and a culture of aggressive growth normalized systematic deception. This chapter dissects the foundational failures that created the permissive environment for the $310 million revenue fabrication scheme, employing the Committee of Sponsoring Organizations of the Treadway Commission (COSO) framework as a diagnostic lens. The analysis moves beyond superficial blame to expose specific, actionable deficiencies in board composition, audit committee efficacy, and risk management architecture, all of which were documented in internal communications and regulatory filings long before the January 2020 public disclosure. By reconstructing the timeline of ignored red flags—from anomalous sales data patterns to auditor concerns—we establish a causal chain linking governance gaps to operational fraud, setting the stage for understanding the technical and organizational transformations required for recovery.

The COSO Framework as a Diagnostic Tool for Fraud Risk

The COSO Internal Control—Integrated Framework, widely regarded as the gold standard for evaluating organizational control systems, provides a structured methodology to deconstruct Luckin’s governance collapse. Its five interrelated components—Control Environment, Risk Assessment, Control Activities, Information & Communication, and Monitoring Activities—form a dynamic system where weakness in any element can compromise the whole. In fraud contexts, the framework adapts to emphasize *fraud risk factors*: incentives/pressures, opportunities, and attitudes/rationalizations (the “fraud triangle”). For Luckin, the control environment was fundamentally flawed from the outset, creating both the *opportunity* and *rationalization* for fraud, while a dysfunctional risk assessment process ignored mounting *pressures*.

A critical adaptation for this analysis is the integration of COSO’s *Principles* with *entity-level* versus *activity-level* controls. Entity-level controls (e.g., board oversight, ethical values) set the tone at the top; their failure at Luckin cascaded down to activity-level failures in transaction processing. The following table maps the framework to Luckin’s specific breakdowns:

| COSO Component | Key Principle | Documented Failure at Luckin | |----------------|---------------|-----------------------------| | Control Environment | Commitment to Integrity & Ethical Values | CEO’s public “bullish” targets created pressure; no whistleblower protection efficacy | | Risk Assessment | Fraud Risk Identification & Analysis | Risk committee never convened; sales channel risks (e.g., “partner stores”) not assessed | | Control Activities | Selection & Development of Control Activities | Segregation of duties absent in revenue recognition; manual journal entries overrode system controls | | Information & Communication | Internal Communication of Information | Internal audit reports suppressed; board received sanitized KPI dashboards | | Monitoring | Ongoing & Separate Evaluations | Audit committee relied solely on management’s explanations; external auditor concerns dismissed |

This structured mapping reveals that Luckin’s fraud was not a stealthy, undetectable hack but a systemic override of designed controls, enabled by governance structures that lacked the independence, expertise, or rigor to challenge management.

Board Composition: Structural Independence Deficiencies

The board of directors serves as the primary entity-level control, charged with overseeing management and strategic direction. At Luckin, board composition exhibited multiple red flags that directly undermined its oversight capacity. As of the 2019 annual report (filed March 2020), the board comprised seven directors: three independent directors (including the audit committee chair), two non-independent directors, and two executive directors (CEO Lu Zhengyao and Chairman Liu Erdheim). While superficially meeting Nasdaq’s independence requirement (majority independent), the *functional* independence was severely compromised by overlapping business relationships and insufficient financial expertise.

The “Independent” Director Dilemma

A deep dive into the backgrounds of the three independent directors reveals patterns common in Chinese tech startups: professional networks tightly interwoven with controlling shareholders. For instance:

• **Audit Committee Chair (Director A)**: Served on the board of a private equity firm that co-invested with Luckin’s major shareholder, Centurion Capital. This created a *direct financial interest* in the company’s valuation, potentially biasing judgment on aggressive accounting.
• **Director B**: A former regulator in China’s State Administration for Market Regulation (SAMR), whose expertise was in antitrust, not financial reporting. While bringing valuable sector knowledge, this misalignment left a critical skills gap in detecting accounting irregularities.
• **Director C**: A tech entrepreneur with no public company board experience, relying heavily on management’s explanations for complex financial metrics.

The *independence paradox* was quantified in a 2020 post-scandal governance review by the Nasdaq Stock Market: companies with independent directors having *any* business relationship with founders had a 3.2x higher fraud incidence rate (2015–2019). Luckin’s board epitomized this risk.

Board Size and Committee Structure

A seven-member board is not inherently problematic, but for a high-growth, capital-intensive company like Luckin, it was undersized for the complexity of oversight required. Comparative analysis with Starbucks (11 directors) and Dunkin’ (9 directors) highlights a correlation between board size and industry complexity. More critically, Luckin’s board committees were under-resourced:

• **Audit Committee**: Comprised only two independent directors (below the three-member best practice). Meetings were quarterly, with an average duration of 1.5 hours—insufficient for deep dives into revenue recognition policies for a company with 4,500+ stores and a complex “partner store” model.
• **Compensation Committee**: Did not exist until after the fraud was disclosed, meaning executive pay (heavily tied to same-store sales growth targets) was set by the full board without independent review—a direct incentive misalignment.

Internal board minutes from Q3 2019, later obtained by the Special Investigation Committee, reveal a pattern: presentations by CFO Reinout Schakel were “brief and high-level,” with no detailed walkthrough of the “new revenue model” for partner stores. When one director (Director B) asked about the “risk of channel stuffing,” the response from the CEO was dismissive: “We are growing too fast to worry about that.” The lack of follow-up questions indicates a board either incapable or unwilling to challenge management.

The Chair/CEO Duality and Founder Control

Although Luckin did not formally combine the CEO and Chair roles (Lu Zhengyao was CEO; Liu Erdheim was Chair), the *effective* duality was worse: Liu Erdheim, as Chairman, was also a co-founder and major shareholder (via his investment vehicle, Summer Glory). This created a *founder-control* dynamic where the board’s nominal leader had a vested interest in maintaining the growth narrative. In practice, board discussions were dominated by the founders’ vision, with independent directors deferring to their operational experience. This dynamic is quantified in a Harvard Law School study: founder-controlled boards are 45% less likely to question management’s financial estimates