Last year I received a phone call. The payroll clerk of a local business had been monkeying around with the company’s direct deposits. As employees left the business, the payroll clerk left them in the system. Why? To steal those continuing payments. Auditors refer to this as ghost employee fraud–the employees are in the system, but they are not real.
Knowing no one was paying attention, the clerk changed the terminated employees’ direct deposit bank account numbers to her own. The result?She received multiple direct deposits each payroll. The clerk was able to steal over $800,000 before the theft was detected.
Also, the payroll clerk had not filed tax returns, so the Internal Revenue Service rubbed salt into the wound by levying fines.
The owners trusted the payroll clerk too much and did not monitor her work. The clerk performed all payroll services with no supervision. While the owners were aware of the lack of segregation of duties, they took no steps to prevent the theft. (Even when a business doesn’t segregate its accounting duties, there are ways to lessen the threat of theft.)
Export all direct deposit bank account numbers along with employee names into an Excel spreadsheet and sort the bank account numbers. (The bank account numbers should be in one column and the employee name in a separate column.) Sort the bank account numbers, and the duplicate numbers will appear in adjacent rows. So once you sort the bank account numbers, see if there are any duplicates. If there are, see why.
Another fix is for the owners to review a list of all employees paid (just request a list of all employees paid for one or more payrolls). Since the owners normally know which employees have left, they will know if payroll payments are made beyond the departure dates.
Learn from the CPA Scribo newsletter!
Get my free weekly accounting and auditing digest with the latest content.