Expense Fraud: Red Flags and Bank Evidence

Expense Fraud Schemes Investigators See Most

Expense claim fraud changes either who pays for a purchase or how much the employer pays. Expense report fraud can involve a false receipt, a misleading description or the same purchase submitted repeatedly.

Travel expense fraud includes private accommodation claimed as a business trip, altered hotel bills or invented journeys. Separate mileage and allowance claims from purchases paid by card. A kilometre claim does not require a matching debit equal to the reimbursement because the payment compensates for vehicle use.

A cash purchase can exist without a matching bank debit. A cash withdrawal shows access to cash, not where the employee spent it. Test paper-only claims through the supplier and records of the work performed.

Preserve original claims, receipts and approval history alongside the statements. The broader employee fraud investigation explains evidence preservation and recovery options when the concern extends beyond expense payments.

Red Flags in Card and Reimbursement Data

Red flags are transactions whose timing, merchant or amount conflicts with the employee’s work and the employer’s rules. Review weekend and leave-period spending against actual duties. A weekend hotel payment can be legitimate if the employee travelled for work.

Merchants unrelated to the role deserve closer examination. A claim labelled stationery with a card description naming a jewellery retailer needs the itemised receipt. Merchant names can identify a payment processor or a trading name, so confirm the business behind the description.

A merchant category code identifies the merchant’s business category. It can expose a mismatch between a claim labelled fuel and a merchant classified as entertainment. Obtain codes from the issuer’s transaction export when they are absent from the PDF statement. The code describes the merchant, not each item bought.

Test clusters immediately below the employer’s receipt threshold and purchases split into several claims. Use the actual policy threshold that applied when the claim was lodged. Australian income-tax substantiation rules under Division 900 govern tax deductions. They do not set an employer’s reimbursement policy.

Compare each employee’s spending with their own workload and approved travel. An increase can reflect more trips or a changed role. Record the explanation and identify the transactions it actually covers.

Catching the Same Cost Paid Twice

Expense reimbursement fraud can pay an employee for a cost the employer has already paid. Match each claim to the corporate card line and then to the reimbursement credit. Obtain personal bank statements through consent or another lawful process before examining an employee’s account.

Start with merchant, transaction date and amount. Keep the purchase date separate from the card posting date and reimbursement date. Search a reasonable posting window, then confirm the receipt or booking reference. Recurring purchases at the same merchant can have identical amounts.

This fictional example uses Australian dollars. All purchases occur on the trip’s first day and all reimbursement credits arrive in the following pay run.

The duplicate excess is $320. Count the second employer payment for each purchase, while retaining the legitimate payment as evidence of how the duplicate arose.

For personally paid claims, match the employee’s debit to the same merchant, date and amount. Then check whether that debit supports multiple claims. A debit establishes payment, while the receipt and work records establish what was bought and why.

If reimbursements arrive as one combined credit, use the employer’s remittance and payment batch to allocate that credit among claims. Preserve the allocation so another investigator can follow it. A matching credit amount alone does not identify which claim was paid.

FinTrace saves forensic accountants hours of statement conversion and review by producing a searchable ledger and a readable findings report. We flag suspicious transactions and give each finding its source PDF filename and page. The statement-analysis service costs a fraction of the cost of manual review, leaving accountants more time to interpret the evidence.

Quantifying the Loss

Quantify expense fraud by counting supported excess payments once and recording the evidence for every amount. Keep unresolved items separate from the supported loss. A red flag enters the loss calculation only when the evidence establishes why the payment exceeded the legitimate expense.

For each item, record the claim identifier, employee and payment period. Add the category, amount paid and legitimate amount. The difference is the proposed overclaim, with refunds or repayments shown separately.

Use a reason code such as duplicate reimbursement, personal purchase, fictitious purchase or mileage inflation. Attach the statement filename and page to every bank entry, plus the receipt and approval references. For inflated mileage, show claimed kilometres, supported kilometres and the applicable reimbursement rate.

Total the supported items by period and expense category. In the fictional example, the hotel duplicate contributes $240 and the taxi duplicate contributes $80. The meal contributes nothing to the duplicate total. Adding the full taxi cost twice would overstate the loss.

Put the itemised schedule and supporting records to the employee through the workplace misconduct investigation process. Record their explanation against each item and revise the schedule when evidence changes the amount. Supply the same reconciled schedule to the insurer, with recoveries shown separately from the original loss.

Australian tax treatment also needs attention when the employer pays private expenses. The Australian Taxation Office’s expense payment guidance explains that reimbursing an employee’s own expense can create an expense payment fringe benefit. Goods or services bought with the employer’s credit card can fall under property or residual benefit rules instead.

Sections 20, 23 and 24 of the Fringe Benefits Tax Assessment Act 1986 address expense payment benefits, taxable value and the otherwise deductible reduction. Give the tax adviser the actual payment method and business or private use evidence. A suspected fraud amount does not automatically equal an employer’s fringe benefits tax liability.

Controls That Stop Expense Fraud

Prevent expense fraud by checking the purchase, payer and business purpose before payment, then testing the records periodically. Assign each exception to someone who can resolve it and record the result.

Run the duplicate tests on every reimbursement batch where the data permits. Periodic monitoring must also search across earlier batches because a receipt can be resubmitted later. Review threshold clusters and weekend spending as exception queues, with documented reasons for legitimate transactions.

Keep expense claims separate from wages when matching payroll payments. If the concern involves changed wage destinations or invented employees, use the payroll fraud checks. For expense monitoring, the useful result is a resolved exception with a source reference and a recorded decision before the next payment.