Every fraud case has a moment where the business owner looks back and thinks:
“How did we not see this sooner?”
That is the painful question behind a recent Iowa embezzlement case involving a veteran-owned business and a trusted bookkeeper.
According to federal prosecutors, the bookkeeper stole more than $500,000 over several years. She did it through unauthorized payroll checks, false bookkeeping entries, forged signatures, and even changes to her own pay rate.
This was not a one-time mistake.
This was a long-running scheme hiding inside the company’s normal financial routine.
And that is where fraud loves to live.
Not in the dramatic movie scene. Not in the locked filing cabinet. Not in some complicated offshore account.
Fraud often hides in the everyday stuff.
Payroll.
Checks.
Bank reconciliations.
Employee access.
Reports no one has time to review.
That is the real danger for small businesses. The money does not usually disappear all at once. It drips out slowly, quietly, and repeatedly until one day the cash is gone and everyone is asking what happened.
The Crime Scene Was the Accounting System
In this case, the bookkeeper had the kind of access every fraud examiner worries about.
She could touch payroll.
She could touch the books.
She could touch the retirement plan information.
She could create entries that made the numbers look normal.
That is not just bookkeeping access. That is control of the financial crime scene.
When one person has that much power over the money trail, the business is not just trusting them to do the job. The business is trusting them not to take advantage of the system.
And let’s be honest. That is not a control.
That is hope.
Hope is not a fraud prevention strategy.
The First Clue: Payroll Was the Doorway
Payroll fraud is one of the easiest places for internal theft to hide because payroll already feels routine.
Employees get paid. Taxes come out. Direct deposits happen. Reports are generated. Everyone moves on.
But in this case, prosecutors said the bookkeeper received unauthorized payroll checks while also getting her regular direct deposit.
That should set off every alarm bell in the building.
Why would an employee receive both a direct deposit and extra payroll checks?
Who approved those checks?
Were they reviewed against the payroll register?
Did anyone compare the bank statement to the payroll reports?
This is where small businesses get burned. They assume payroll is correct because payroll “ran.”
But payroll running is not the same thing as payroll being reviewed.
The Second Clue: False Entries Covered the Tracks
Fraud does not just require access to money. It usually requires access to the story.
The accounting records tell the story of where money went.
If someone can steal money and then write the story afterward, they can make fraud look like normal business activity.
That is why false entries matter so much.
A fake entry can make a stolen check look like payroll.
A changed description can make an unauthorized payment look approved.
A journal entry can move money around just enough that no one asks questions.
The books are supposed to be the evidence.
But when the same person who moves the money also controls the books, the evidence can be edited.
That is a problem.
The Third Clue: The Owner Had to Put Money Back Into the Business
Here is the clue that business owners cannot afford to ignore.
The company was reportedly struggling with cash so badly that the owner had to put personal money into the business and take out a loan.
That should make every owner stop and ask:
“Is the business actually short on cash, or is cash leaking somewhere?”
Too many owners blame themselves first.
Maybe sales are slow.
Maybe expenses are too high.
Maybe the economy is weird.
Maybe payroll is just expensive.
And yes, sometimes those things are true.
But sometimes the business is bleeding money because someone has found a way to drain it quietly.
When your financial reports say one thing but your bank account tells a different story, do not ignore that gap.
That gap is a clue.
The Suspect Was Not a Stranger
This is the part that makes internal fraud so hard.
The person stealing from the business is often not some random outsider. It is someone trusted. Someone helpful. Someone who knows the passwords, the process, and the owner’s habits.
They know which reports are reviewed.
They know which reports are ignored.
They know when the owner is busy.
They know how to explain things away.
That does not mean business owners should become suspicious of everyone. That is not the goal.
The goal is to stop building systems that depend on one person being honest forever.
Good systems protect the business and the honest employees inside it.
Red Flags Small Businesses Should Watch For
The warning signs are not always dramatic. Sometimes they look like normal business chaos.
Watch for:
Unexplained cash shortages
Payroll that keeps creeping up without a clear reason
Manual payroll checks
Duplicate payments to the same employee
Changes to pay rates without written approval
Bank reconciliations that are late or missing
Financial reports that do not match the bank balance
Retirement contributions or payroll taxes that are behind
A bookkeeper who does not want anyone else reviewing the books
An employee who never takes time off
Too many “adjusting entries” with vague explanations
One red flag does not prove fraud.
But a pattern of red flags deserves attention.
That is how you detect fraud early. You do not wait for a confession. You follow the pattern.
How to Lock the Door Before the Money Walks Out
A small business does not need a giant corporate accounting department to prevent this kind of fraud.
But it does need basic controls.
1. Review Payroll Every Pay Period
Before payroll is finalized, someone other than the payroll processor should review the payroll register.
Look at employee names, pay rates, hours, bonuses, reimbursements, manual checks, and direct deposits.
Do not just approve the total.
Review the details.
Fraud hides in the details.
2. Require Approval for Pay Rate Changes
No employee should be able to change their own pay rate. No bookkeeper. No office manager. No controller. No one.
Pay changes should be documented, approved, and reviewed.
This is not red tape. This is common sense.
3. Review Cleared Checks
Each month, look at cleared checks from the bank statement.
Who were they written to?
Were they authorized?
Do the signatures look right?
Do the amounts make sense?
Were any checks written outside the normal process?
This one step can catch a lot.
4. Separate Money Movement From Recordkeeping
The person who moves money should not be the only person recording where the money went.
That means the person writing checks should not be the only person reconciling the bank account.
The person running payroll should not be the only person reviewing payroll.
The person entering transactions should not be the only person explaining the financial reports.
You do not need five employees to make this work. You can use the owner, an outside bookkeeper, a CPA, or a fractional controller to create review points.
5. Review Bank Reconciliations Monthly
A bank reconciliation is not finished just because the bookkeeper says it is done.
Someone should review it.
Look for old outstanding checks, strange withdrawals, transfers, manual checks, and anything that does not fit the normal rhythm of the business.
Do not let six months go by without looking.
That is how small problems become expensive problems.
6. Pay Attention When Cash Feels Wrong
Business owners have instincts for a reason.
If revenue looks fine but cash is always tight, investigate.
If payroll feels too high, investigate.
If you are putting personal funds into the business but cannot explain why, investigate.
Do not let someone talk you out of asking reasonable questions about your own money.
The Lesson From the Case File
The lesson is not “never trust your bookkeeper.”
That is lazy advice.
The real lesson is this:
Trust your people, but verify the system.
Because when the system has no review, no separation of duties, and no owner visibility, it creates opportunity.
And opportunity is one of the main ingredients of fraud.
Most fraud does not start with a master criminal. It starts with access, pressure, and the belief that no one is watching closely.
So watch closely.
Not because you are paranoid.
Because you are the owner.
Your Detect-a-Fraud Assignment
Pull your last three months of payroll reports and bank statements.
Look for:
Extra payroll checks
Manual checks
Pay rate changes
Duplicate payments
Unexplained transfers
Missing reconciliations
Checks made out to employees
Transactions with vague descriptions
Then ask one question:
“Can every dollar be explained by someone other than the person who entered it?”
If the answer is no, that is your next fix.
Fraud usually leaves fingerprints.
The question is whether your business has a system that knows how to find them.
