PAYROLL & HR CONTROLS (PREVENTING “GHOST” SCHEMES)
Payroll fraud is often the hardest to detect because it “looks” like a normal business expense.
- Segregation of Duties (SoD): The person who adds new employees to the system must not be the same person who approves the monthly pay run.
- Mandatory Vacation Policy: Require all financial and HR staff to take 5–10 consecutive days of leave annually. Fraud often surfaces when the perpetrator isn’t there to “hide” the trail.
- Ghost Employee Audit: Perform a quarterly “Headcount Reconciliation” where managers must physically verify every name on their payroll list exists.
- Self-Pay Blocking: Ensure the payroll software has a hard-coded block preventing administrators from editing their own salary or bank details.