Embezzlement in Australia: Offences and Evidence

What Embezzlement Means in Australia

Embezzlement starts with lawful possession or control of someone else’s money, followed by its dishonest use. The person might handle receipts, operate a payment account or hold client funds for a particular purpose.

Permission to operate an account does not give someone permission to spend its money personally. Conversely, an authorised reimbursement or agreed loan is not embezzlement merely because it reaches an employee’s account.

The traditional distinctions help explain the conduct:

Term	How the person gets the money	Fictional example
Embezzlement	The person receives or controls it lawfully, then dishonestly takes it	A bookkeeper diverts customer receipts entrusted to her
Larceny	The person takes money from another’s possession without permission	A visitor takes cash from a locked office drawer
Fraud	Deception causes someone to hand over money or approve a payment	A false supplier invoice induces a director to pay

These categories can overlap in a single scheme. An employee can control payments and deceive an approver with false invoices. Modern theft and fraud provisions cover much conduct historically called embezzlement, while NSW preserves that specific label.

Misappropriation of funds is a broader description of improper use, which does not itself determine the criminal charge.

Offences That Apply in Each Jurisdiction

Entrusted-money theft is charged under the applicable Commonwealth or state offence, with different rules about employment, ownership and deception. The following table covers the four jurisdictions discussed here.

Jurisdiction	Provision and conduct	Maximum imprisonment on indictment
Commonwealth	Criminal Code Act 1995, s 131.1: dishonest appropriation of another’s property with intent permanently to deprive them, where it belongs to a Commonwealth entity	10 years
NSW	Crimes Act 1900, s 157: fraudulent embezzlement by a clerk or servant of property received for their employer	10 years
Victoria	Crimes Act 1958, s 74: theft, with the definition in s 72	10 years
Queensland	Criminal Code, s 398: stealing, including the employment and entrusted-property categories below	5 years ordinarily; 10 years for relevant aggravated categories

The Commonwealth theft provision requires property belonging to a Commonwealth entity. It is not the general charge for theft from every Australian employer.

Under the NSW Crimes Act, s 156 separately covers stealing by clerks or servants. Section 160 covers embezzlement by people employed in the public service. Both carry a ten-year maximum.

NSW therefore has a current, specific embezzlement offence. A charge under s 157 requires the prosecution to establish the employment relationship and receipt of the property for the employer.

Victoria’s Crimes Act uses theft for dishonest appropriation of another’s property with intent permanently to deprive them. The Sentencing Advisory Council confirms the ten-year maximum. Abuse of trust can affect sentence without creating a separate clerk-or-servant theft charge under s 74.

In Queensland’s Criminal Code, s 398 provides ten-year maxima for stealing by clerks or servants and by company directors or officers. It also covers specified property entrusted to agents, including money received with a direction about its use. The ten-year category for property worth more than $5,000 can also apply.

These are statutory ceilings, not predictions of the sentence in a particular case. Courts sentencing matters summarily have lower jurisdictional limits. Deception can support a fraud charge with different elements and penalties.

Proving the Elements With Bank Records

Bank records help establish where entrusted money went, but the evidence must also connect the accused to the payment and establish its unauthorised, dishonest character. A statement description alone does not establish the account holder or the payment’s purpose.

Start with the receipt or account the employee was trusted to manage. Match customer receipts to invoices and banking records. Use employment records, account mandates and payment permissions to establish the employee’s role.

Then connect each disputed outgoing payment to its destination. Receiving-account records can confirm that funds reached the employee or a person acting for them. Payment-system logs and approval records help identify who initiated or approved the transfer.

A useful transaction schedule contains the following fields:

• The amount and transaction date, with the source statement filename and page.
• The paying account and confirmed receiving account, where records establish both.
• The ledger entry and the document said to authorise it, such as an invoice or loan agreement.
• Any reversal or repayment, recorded separately from the original payment.

Compare that schedule with the whole ledger. A complete reconciliation exposes duplicated reimbursements and transfers excluded from the accounting records. It also gives authorised salary and genuine loan payments their proper treatment.

Testing an Authorised-Payment Explanation

In this fictional example, a finance manager receives six payments of $2,000 described as reimbursements. The employer initially treats the full $12,000 as stolen.

Supporting receipts establish two genuine reimbursements totalling $4,000. The remaining $8,000 has no supporting expense, and receiving-account records show personal credit-card payments. The schedule separates those groups and records what evidence supports each conclusion.

An absence of receipts alone does not settle dishonesty. Compare the employee’s explanation with approval emails, expense policies and the accounting records. For a claimed loan, examine its authority and repayment terms alongside the actual movements.

Concealment can support an inference of dishonesty. Examples include fabricated invoices, altered supplier details or entries that disguise personal transfers as business costs. Repeated payments after rejected approval requests can supply further context.

Record repayment attempts in their sequence. A repayment made after discovery can reduce the outstanding loss and affect sentencing. It does not automatically turn an earlier dishonest taking into an authorised loan.

Saving Statement-Analysis Time

FinTrace saves lawyers, investigators and forensic accountants hours of conversion and statement review when they examine suspected embezzlement. The service turns supplied PDFs into a searchable Excel ledger and a clear report that flags suspicious transactions.

FinTrace handles thousands of PDF documents through staged extraction and consolidation. Advanced AI workflows use source-grounding checks and independent reviews to preserve transaction facts. Every finding cites the source PDF filename and page, putting the underlying evidence at hand.

Forensic accountants can use the ledger and report directly in their own analysis, leaving more time for interpretation and specialist work. FinTrace performs that statement-analysis work at a fraction of the cost of manual review or engaging a forensic accountant for the same task.

The employee fraud investigation guide explains the wider employer response, including the records needed beyond bank statements.

Penalties, Restitution and Civil Recovery

Embezzlement is criminal conduct, and the same facts can support a separate civil claim to recover the money. A prosecution must prove its case beyond reasonable doubt. Civil liability is decided on the balance of probabilities.

The Evidence Act’s proof rules distinguish those standards. Serious allegations still require evidence strong enough to satisfy the civil court. The lower standard does not make every disputed transfer recoverable.

The sentence depends on the offence and the proved conduct. Relevant circumstances include the amount taken, duration and abuse of trust. A guilty plea and repayment can affect the outcome.

Courts can order restoration of property or compensation for loss through the powers available in their jurisdiction. NSW’s court guidance explains these separate orders. A repayment order does not guarantee collection when the offender has spent the money.

A civil claim can proceed alongside a prosecution, subject to case-management issues such as prejudice to the criminal trial. The claimant must establish their civil cause of action and avoid recovering the same loss twice. Proceeds-of-crime proceedings concern separate powers to confiscate assets from offending.

An Australian Sentencing Example

In 2026, Michelle Kathleen Lawson received a twelve-year prison sentence after pleading guilty to seven fraud charges. ABC’s report of the Cairns District Court proceedings describes almost $2.8 million taken over six years.

Lawson was the Johnston family’s trusted bookkeeper. She disguised payments through fictitious employees and false invoices. The family recovered almost $1.5 million through civil action, according to the report.

The case shows why ordinary-language embezzlement can be prosecuted as fraud. Its twelve-year total sentence does not change the maximum for a single stealing charge in the earlier table.

Common Embezzlement Examples and How They Work

Common embezzlement schemes divert money through personal expenses, cash receipts, invented payees or entrusted client funds. Their bank-record patterns differ, and some schemes leave the missing amount outside the bank account entirely.

Scheme	Possible bank-record pattern	Records needed to explain it
Paying personal bills from a business account	Payments to a personal credit card or private expense provider	Expense approvals and records connecting the bill to the employee
Skimming cash before banking	Deposits fall below recorded cash sales	Till reports, receipt books and cash reconciliation
Creating fake suppliers	Repeated supplier payments reach an employee’s or relative’s account	Supplier master data, invoices and confirmed receiving-account ownership
Adding fake employees	Payroll payments reach accounts without genuine employees	Payroll files, employment records and payment approvals
Taking client money held in trust	Withdrawals exceed authorised payments for the client matter	Trust ledgers, client instructions and supporting disbursement records

Round-sum transfers or repeated payments to one account can identify transactions for investigation. Legitimate salary, reimbursements and supplier settlements can produce similar patterns. Confirm the payee and authority before treating a pattern as proof of theft.

A scheme can begin with small test amounts, followed by larger or more frequent payments when checks fail to detect it. False entries or delayed banking can conceal the difference. Other schemes begin with a single large taking, so gradual escalation is not a required element.

For a director who discovers two years of transfers, reconcile the whole period and preserve the underlying bank records. Separate authorised payments from disputed movements, then connect each disputed amount to the evidence of control and dishonesty.