31 - When the money goes missing.

Another HR Headache

How to protect your business from fraud without treating everyone like a suspect.

Picture the sick feeling in your stomach when the numbers do not add up. A figure that should be there is not. A supplier you do not quite recognise has been paid more than once. A trusted person gets oddly defensive about a part of the books they have always handled alone. You do not want to believe it, because the most likely explanation is the one you least want to face, which is that someone inside your business, someone you trusted, has been helping themselves.

Internal fraud hits small businesses harder than big ones and it happens more often than owners like to think. In a small firm one person frequently controls the money end to end, with none of the checks a larger organisation takes for granted. The very trust that makes a small team work, the informality, the long relationships, the assumption that everyone is on the same side, is exactly what a dishonest person exploits. The amounts can be ruinous and the betrayal cuts deep, because fraud is almost always committed by someone you liked.

Here is the balance to strike. You cannot run a business in a state of permanent suspicion, watching everyone and trusting no one, because a workplace like that is miserable and people leave. You also cannot leave the door wide open and simply hope. The answer is not suspicion. It is good, quiet controls that protect honest people and dishonest ones alike, so that fraud is hard to commit and easy to spot. Most of this is just sensible structure, not detective work.

Strong controls are not an insult to your team. They are a kindness to everyone, including you. Here is how to build them.

Good controls are not about distrust. They are about making sure an honest team never has to be suspected and a dishonest person never gets the chance.

Never let one person control the money

The single biggest cause of small-business fraud is one trusted individual who handles the lot, raising the invoices, approving the payments, doing the banking and reconciling the accounts. That is not a system. It is an opportunity wrapped in trust. Split the duties so no one person can both spend the money and sign off on it. Even in a tiny team you can separate who approves a payment from who makes it. A second pair of eyes on the money is the most effective fraud prevention there is and it costs nothing.

Reconcile and actually look

Fraud survives on accounts that nobody really checks. Reconcile your bank statements against your books every month and have someone other than the person who handles the payments do it, or at least review it. Look at the detail, not just the bottom line. Payments to unfamiliar names, round numbers that recur, suppliers whose address matches an employee’s, expenses that creep without explanation. Most fraud is not clever. It simply relies on the fact that no one is paying attention, so paying attention is most of the battle.

Keep approvals real, not rubber stamps

An approval process only works if the approving actually happens. Set clear limits on who can authorise what and make the sign-off mean something rather than a signature added without a glance. Question things you do not understand. A culture where the owner genuinely looks at where the money goes and asks about anything odd is one where a would-be fraudster quickly works out that the risk is not worth it. The deterrent is not the rule on paper. It is the certainty that someone will actually check.

Mind the warning signs in people

Fraud often shows up in behaviour before it shows up in the books. Be quietly alert to the person who refuses to take leave because they cannot let anyone else touch their work, who lives visibly beyond their salary, who is strangely possessive about a particular process or who gets defensive when routine questions are asked. None of these proves anything on its own and plenty have innocent explanations. A simple, fair rule helps more than suspicion ever could. Insist that everyone takes their annual leave and have someone else cover their role while they are away. Frauds are very often discovered the week the person who was running them finally takes a holiday.

Know what to do if you find it

If you do uncover fraud, the worst response is a panicked one. Do not confront the person on a hunch and do not tip them off before you understand what has happened. Quietly secure the records and the evidence first. Then get proper advice early. Start with your accountant. Where the sums or the seriousness warrant it, bring in the police and a lawyer. Resist the urge to sweep it under the carpet to avoid embarrassment, because that simply leaves you exposed and signals that the cost of getting caught is low. Handle it properly and you protect the business, recover what you can and make clear to everyone that this is not a place where it pays to try.

What would you do?

Picture a long-serving bookkeeper, trusted completely, who has handled all your accounts single-handedly for years and never takes more than a day off. The figures have felt slightly off for months, but you have pushed the thought away because the idea feels disloyal. The easy path is to keep trusting and keep hoping. Take a quieter, firmer route instead. Bring in your accountant for a routine review, introduce a second person to reconcile the accounts and start insisting on proper leave cover, all framed as normal good practice rather than an accusation. If everything is clean, you have lost nothing and gained a better system. If it is not, you will find out before the damage gets any worse. Either way, trusting blindly was never the safer option. It only felt like it.

“The fraud that ruins a small business is almost never committed by a stranger. It is committed by someone you would have vouched for.”

Protecting your business from fraud is not about becoming paranoid or treating good people as suspects. It is about building the kind of simple, sensible structure that means trust never has to be blind. Separate the duties, reconcile and actually look, keep approvals meaningful, stay alert to the human signs and know what to do if the worst is confirmed. Do that and you create a business that is hard to steal from and easy to trust, which protects not just your money but the honest people who would never dream of taking it.

Next in the series, how to safeguard the ideas and know-how that make your business yours.