How a Trusted Employee Stole $200K From a Small Business | All Things Internal Audit
Why It Matters
The fraud demonstrates how weak internal controls can cost small businesses millions and erode trust, highlighting the urgent need for segregation of duties and continuous monitoring.
Key Takeaways
- •Lack of dual‑control enabled employee to manipulate payroll unchecked.
- •Single‑person access to ACH and credit cards facilitated fraud.
- •Personal financial stress can motivate long‑term embezzlement within companies.
- •Regular review of bank and credit‑card statements uncovers anomalies.
- •Trust must be balanced with robust internal controls in small firms.
Summary
The podcast episode recounts how a long‑time office manager at JR Plastics siphoned more than $200,000 from the family‑run manufacturer when the president had to run payroll alone.
The investigation revealed that Smalley held sole administrative rights to the company’s online banking, ACH templates, and credit‑card accounts, allowing her to inflate her salary, charge personal services such as AT&T and Netflix, and write blank‑check endorsements to herself. The absence of dual‑control and periodic reconciliations created a blind spot for two years.
When Richardson reviewed the ACH batches, he noticed an unexplained increase in Smalley’s wages, prompting a deeper dive that uncovered personal expenses and forged checks. Smalley confessed that mounting medical bills and single‑parent financial pressure led her to “borrow” money, believing she could repay it later.
The case underscores that trust alone cannot replace segregation of duties, regular transaction monitoring, and independent review, even in small, family‑owned firms. Implementing mandatory dual‑approval for payroll and expense payments can prevent similar losses and preserve organizational trust.
Comments
Want to join the conversation?
Loading comments...