The most reliable way to prevent embezzlement in your business is to make sure no single employee can start a payment, approve it, and record it in the books without someone else touching the transaction. That structural split does more work than any other safeguard, and it’s the one small businesses most often skip. Companies with fewer than 100 employees take the heaviest losses from occupational fraud, usually because one trusted person handles bookkeeping, check-writing, and bank reconciliation all at once. The controls below work in layers, and each catches what the others miss.
Split the Financial Duties
Segregation of duties is the foundation. When initiating, approving, and recording a payment all sit with the same employee, there is no natural checkpoint. Splitting those steps across at least two people means fraud requires collusion rather than opportunity.
In practical terms: the person who opens the mail and logs incoming checks shouldn’t post payments to the accounts receivable ledger. The employee who enters invoices into the accounting system shouldn’t authorize payment on them. And whoever reconciles the bank statement each month should have no ability to issue checks, initiate transfers, or edit vendor records. These separations sound obvious, but in offices where one person wears three hats, they’re the first controls to erode.
The same thinking applies to the physical and digital tools that authorize money movement. Signature stamps, banking tokens, and login credentials for payment platforms belong only with the people whose job specifically requires them. A shared password or a signature stamp left in an unlocked drawer defeats the whole structure. If your business is too small to fully segregate every function, build a compensating control: have the owner or a board member personally review bank statements and canceled checks every month.
Require Two People to Approve Payments
Dual authorization on payments above a set dollar threshold is one of the oldest fraud deterrents, and it still works. Many organizations set the threshold at $500 or $1,000 for paper checks, though the right number depends on your transaction volume. What matters is that the two signers are genuinely independent. A CFO and someone who reports to that CFO don’t count, because the subordinate has every incentive to approve without pushback.
Electronic payments need the same structure. Most commercial banking platforms let you configure ACH transfers and wires so one user initiates and a separate user approves before funds leave the account. When you set this up with your bank, establish daily dollar limits per user, define who can change access permissions, and build a workflow that flags transactions outside normal patterns. Pre-approving recurring payments through templates keeps the process moving without giving up oversight.
Your accounting software adds another layer when configured correctly. Modern platforms maintain audit trails that log every transaction, every edit, and the user behind each change. Administrators can filter those logs to catch deleted entries, after-hours modifications, or changes to vendor bank routing numbers. Limit each user’s access to only what the role requires. An accounts payable clerk, for example, shouldn’t have permission to create new vendors.
Monitor the Books Every Month
Controls at the point of payment are only half the equation. Active monitoring after the fact catches what preventive controls miss.
Monthly Bank Reconciliation
Reconcile every bank account at least once a month, and assign the task to someone with no authority to issue payments, sign checks, or modify accounting records. During the reconciliation, examine canceled checks to confirm endorsements match the intended payees, look for checks made out to “cash,” and flag payments in suspiciously round amounts. Discrepancies between the bank’s records and the general ledger are often the first visible sign that something is wrong.
Surprise Audits
Scheduled audits serve compliance, but they give a dishonest employee time to temporarily clean up the books. Unannounced audits remove that window. They don’t have to be elaborate. A periodic spot-check comparing physical inventory or petty cash on hand to what the ledger shows can surface problems. Unpredictability is what creates the deterrent effect.
Vendor Verification
Shell companies are a common embezzlement tool. An employee creates a fake vendor, submits invoices from it, approves payment, and keeps the money. Cross-referencing vendor addresses against employee home addresses can expose that scheme. New vendors that appear suddenly, vendors with only a P.O. box, and vendors whose invoice numbers run sequentially (suggesting your business is their only customer) all warrant a closer look.
Payroll Audits
Ghost employees are another classic. Someone with payroll access creates a fictitious worker, submits timesheets, and routes the paycheck to their own account. To catch it, compare the active payroll roster against the HR employee list on a regular schedule. Watch for multiple direct deposits going to the same bank account under different names, employees with no tax withholdings, and personnel files that are missing or incomplete. Erratic signature patterns on timesheets can flag forgeries.
Mandatory Vacations
Require every employee with financial responsibilities to take at least two consecutive weeks off each year. The FDIC has recommended this minimum for decades, specifically because any sizable embezzlement scheme usually depends on the perpetrator being present to manipulate records and field inquiries.1FDIC.gov. Vacation Policies During the absence, another employee has to take over those duties and actually perform them, not let the work pile up. If something doesn’t add up when the substitute steps in, the scheme surfaces.
Screen the People Who Handle Money
Strong controls matter less if the wrong person is handling the money in the first place.
Background Checks
Criminal background checks across multiple jurisdictions can surface prior convictions for theft, fraud, or forgery. Verify employment history directly with previous supervisors rather than relying only on the references the candidate provides. These steps aren’t foolproof, but they raise the cost of placing a bad actor in a position of trust.
Credit Checks and FCRA Compliance
For positions with access to significant funds, a credit check can reveal financial pressures that elevate embezzlement risk. Running one on a candidate, though, triggers federal requirements under the Fair Credit Reporting Act. Before pulling the report, give the candidate a written disclosure in a standalone document stating that a consumer report will be obtained for employment purposes, and get written authorization back.2Office of the Law Revision Counsel. 15 U.S. Code 1681b – Permissible Purposes of Consumer Reports That disclosure document cannot include liability waivers, accuracy certifications about the application, or overly broad authorizations. Anything extra belongs in a separate document.
If you decide not to hire someone based on the report, you cannot simply move on. Before taking the adverse action, give the candidate a copy of the report and a summary of their FCRA rights. After the action, send a second notice identifying the reporting company, stating that the company didn’t make the hiring decision, and informing the candidate of the right to dispute inaccurate information and request a free copy of the report within 60 days.3Federal Trade Commission. Using Consumer Reports: What Employers Need to Know Skipping these steps creates FCRA liability, which is the kind of legal problem you’re trying to avoid.
Fidelity Bonds
A fidelity bond compensates the business for losses caused by employee dishonesty. Coverage typically runs from a few hundred to roughly $1,500 per year depending on limits, industry risk, and headcount. A bond is not a substitute for controls, but it gives you a path to recovery when prevention fails. If your employees handle client funds, consider whether a third-party fidelity bond is also needed, since standard bonds often only cover losses to the bonded business itself.
Insure Against the Loss You Can’t Prevent
Fidelity bonds and commercial crime insurance overlap but aren’t identical. A fidelity bond is typically a narrower product covering employee dishonesty. A commercial crime policy can be broader, covering forgery, computer fraud, impersonation fraud, and unauthorized electronic transfers alongside employee theft. For businesses with meaningful financial exposure, a standalone crime policy often offers higher limits and fewer gaps than a basic fidelity bond or an endorsement tacked onto a business owner’s policy.
Filing a claim under either product requires thorough documentation. Insurers want a sworn proof of loss with the details of the scheme, bank statements and financial records establishing the amount taken, personnel files confirming the perpetrator was an employee, and a narrative explaining how the fraud worked. They will also ask about your internal controls and whether you had policies designed to prevent this type of loss. Gathering all of that takes time, which is one reason preserving evidence immediately after discovery matters so much.
Give Employees a Safe Way to Report
Tips from coworkers remain the most common way embezzlement comes to light. An anonymous reporting channel, whether a phone hotline or a web-based portal run by a third party, lowers the barrier for employees who notice something off but fear retaliation. Third-party management matters here, because people are far more willing to report when they trust that their identity cannot be traced back through internal systems.
Give employees clear guidance on what to flag: unexplained lifestyle changes in colleagues with financial access, unauthorized after-hours system logins, and resistance to taking vacation time. Without that direction, hotlines tend to collect interpersonal grievances rather than useful financial leads.
For publicly traded companies, whistleblower protections are a matter of federal law. Under the Sarbanes-Oxley Act, a covered employer cannot fire, demote, suspend, threaten, or otherwise retaliate against an employee who reports suspected fraud to a federal agency, a congressional committee, or an internal supervisor.4Office of the Law Revision Counsel. 18 U.S. Code 1514A – Civil Action to Protect Against Retaliation in Fraud Cases An employee who prevails in a retaliation claim is entitled to reinstatement, back pay with interest, and litigation costs and attorney fees. Private companies aren’t bound by Sarbanes-Oxley, but many adopt similar anti-retaliation policies. Build a defined process that routes every report from the hotline to the audit committee or legal counsel, so that every allegation gets investigated and documented.
If You Discover Embezzlement
Prevention sometimes fails, and the next few decisions determine whether the business recovers anything. The instinct to confront the suspected employee immediately is almost always wrong. Once that person knows you’re aware, evidence disappears, assets move, and recovery drops sharply.
Preserve Evidence First
Before alerting anyone beyond a small circle of decision-makers, secure the financial records. Request copies of bank statements and accounting records, lock down the suspect’s system access without announcing why, and begin documenting the scope of the loss. If outside vendors were involved, quietly confirm whether they are legitimate. This fact-gathering phase is the foundation for everything that follows: a civil lawsuit, a criminal referral, or an insurance claim.
Engage Legal Counsel and Law Enforcement
An attorney experienced in commercial fraud can coordinate the civil and criminal tracks at the same time. On the civil side, the two primary tools for recovering funds are a prejudgment attachment (freezing the suspect’s assets before trial) and a temporary restraining order, both of which should be filed with the initial complaint to maximize what can be recovered before assets are moved. On the criminal side, embezzlement involving federal funds can be reported through the FBI’s electronic tip form, while state-level theft should go to local law enforcement.5Federal Bureau of Investigation. Electronic Tip Form Running both tracks at once has a practical benefit: the criminal investigation makes it harder for the employee to fight the civil case without risking self-incrimination.
Deducting the Theft Loss on Your Taxes
The IRS treats embezzlement as a theft, and businesses can deduct the loss on their federal return. For business property, the deduction equals your adjusted basis in the stolen property minus any salvage value and any insurance reimbursement you receive or expect to receive.6Internal Revenue Service. Topic No. 515, Casualty, Disaster, and Theft Losses The per-event and percentage-of-income limitations that apply to personal theft losses do not apply to business property.
Timing matters. You generally deduct a theft loss in the year you discover it, not the year the theft occurred. If you have a reasonable prospect of recovery through insurance or litigation, you can’t take the deduction until the year you can determine with reasonable certainty whether reimbursement is coming. Report the loss on Section B of Form 4684, which flows through to Schedule 1 of your individual return or the appropriate business return.7Internal Revenue Service. Instructions for Form 4684 – Casualties and Thefts If the amount is significant, work with a tax professional to coordinate the deduction timing with any pending insurance claims or civil recovery.