Fraud starts where trust replaces a second set of eyes

Quick answer: Fraud rarely looks like a heist. It looks like one person who handles every step of a money process while nobody checks. Split those steps, open the bank statement yourself, and make everyone take real time off.

The gap is one person and one step

Picture a landscaping company with eleven trucks and an office manager who's been there nine years. She takes the calls, writes the invoices, deposits the checks, pays the vendors and reconciles the bank account. Everybody loves her. The owner hasn't looked at a bank statement in two years, because why would he?

Nothing is wrong yet. But if she ever needed money badly, nothing in that setup would stop her. Nothing would show it, either.

That's how most small-business fraud works. Nobody plans it for years. A person with a squeeze at home, a gambling problem or a rationalization ("I'll pay it back Friday") finds that the door is open. Then they walk through it, a little at a time.

You don't fix this by suspecting your people. You fix it by never leaving one person alone with a full cycle of money.

What shows up in the books

Fraud leaves marks. You'll only see them if you look at the right places, and the owner is the one who needs to look.

• A bank reconciliation done by the person who writes the checks. This is the oldest hole there is. Whoever records the money shouldn't be the one proving the balance.
• Vendors you can't place. Pull the list of everyone you've paid in the last year. If a name makes you say "who's that?", find out. A fake vendor with a plausible name and an address that turns out to be a P.O. box is a classic.
• Invoices that land just under your approval limit. If you sign off on anything over $2,500, be curious about a run of $2,450 invoices.
• Round numbers. Real invoices have odd cents. Five bills of exactly $1,800 from one vendor deserve a phone call.
• Voids, refunds and discounts that trend up. In a retail shop or restaurant, the register is where cash walks. Look at who is issuing the voids, not only how many.
• Payroll that doesn't match the people you know. Count the names on the payroll report against the bodies on the job. A former employee still getting paid is an expensive mistake or a quiet theft. Either way you want to know.
• Margins that slip with no explanation. If sales are steady and profit is sliding, something's leaking. It might be waste or pricing. It might be a person. The monthly profit and loss read is where you catch the slide early.

What shows up in people

These are flags, not verdicts. Plenty of honest people trip every one of them. But when a flag lands on top of a gap in your controls, pay attention.

The classic one is the employee who never takes a vacation. Sounds like dedication. Sometimes it is. Sometimes they can't be away because someone else would open the drawer and see the problem.

Other flags: a person who resists handing off any part of their job, who gets defensive about simple questions ("Can you walk me through this deposit?"), or who's always the one who "just takes care of" the bank. Spending that outruns a salary can matter too, but be careful with it. You don't know what's in their household, and accusing someone over a new truck is how you wreck a good relationship for nothing.

The rule is simple. Notice, then verify with documents. Don't guess about character.

Six controls that cost almost nothing

You don't need an internal audit department. You need these.

1. Split the steps. One person records the money, another deposits it, and you review. If you only have two people, you're the second set of eyes.
2. Open the bank statement yourself. Unopened, from the bank, before anyone else touches it. Online, that means your own login with view access. Scan the largest payments and anything to a name you don't know. Ten minutes.
3. Require two signatures or your approval on payments above a number you pick. Set it low enough that it matters.
4. Force two consecutive weeks away for anyone who touches money. Someone else runs their job while they're gone. Problems tend to surface when the usual hands come off the work.
5. Review the vendor list twice a year. Anyone new gets a name, an address, a phone number and a reason. Changes to a vendor's bank details get confirmed by calling a number you already had, never one from the email asking for the change.
6. Count something yourself. Cash drawer, inventory, tools on the truck. A surprise count once a quarter does more than a policy binder.

Put these on your weekly numbers page so they happen without you having to remember. A control you do when you feel like it isn't a control.

Run the test this week

Pick the last statement and do this before lunch.

Take the ten largest payments out. Match each to an invoice, and match each invoice to a real job or delivery you can name. Then look at every check or transfer that went to an individual instead of a company. Then compare the payroll list to the people who actually worked.

If all of it ties out, you've got an answer and you've lost an hour. If something doesn't, you've found out before an auditor, a lender or a buyer did. That's the whole point, because they won't be gentle about it, and by then the number is usually bigger.

One more hard truth. If you've never done this, the first review will feel awkward. Do it anyway. A manager who says "I look at everything, every month" isn't insulting anybody. Honest employees tend to like it, because it protects them. When money goes missing in a shop with no controls, suspicion lands on everyone.

If something doesn't add up

Slow down. Most oddities turn out to be sloppy bookkeeping, not theft. Ask for the paperwork in a calm, ordinary tone, the way you'd ask about any other line.

If the answers are thin or the paperwork doesn't exist, stop and don't confront anybody yet. Keep copies of bank statements, invoices and logs. Restrict the person's access to accounts quietly, and call your CPA and a business attorney before you say a word. Whether to involve your bank, your insurer or the police depends on your state and your facts, and that's their call to help you make, not mine. Don't fire anyone on a hunch, and don't promise anyone you'll "keep it between us."

When it turns out to be real, be firm about the act and decent to the person. Theft is wrong, and you don't dress it up. But somebody's family is probably about to have a terrible month, so handle it by the book and with a straight face. The piece on letting someone go covers how to do it without wrecking the team that stays.

You'd never leave the cash box open on the counter and walk out for a week. Most books are the same cash box, only quieter. Lock it, and keep trusting the people who work for you.