Embezzlement rarely looks like theft while it is happening. The person doing it is usually trusted, often for years, and the money leaves in small enough pieces that no single transaction sets off an alarm. That is what makes it costly. By the time a business notices, the losses have often been running for a long time.
The people who embezzle are the ones with access: a bookkeeper, an office manager, a controller, someone who both records the money and moves it. When one person controls both sides, the paper trail can be adjusted to hide the gap.
Common ways the money goes missing
The methods are old and they repeat. A bookkeeper writes checks to a vendor that does not exist and cashes them. Expense reports get padded, a little each month. Customer payments come in and get pocketed while the receivable is quietly written off as a bad debt. Payroll gains a ghost employee whose paychecks route to the fraudster's own account. Company cards cover personal spending dressed up as a business cost.
Each of these leaves a mark somewhere. A vendor with a PO box and no phone number. Reimbursements that always round to convenient figures. A customer account written off right after a payment should have posted. On their own these look like ordinary mess. Together they form a pattern.
The signs worth taking seriously
Some warning signs sit in the numbers and some sit with the person. In the records, watch for missing documents, transactions that do not reconcile, and adjustments made right before or after the books close. In behavior, the classic sign is the employee who will not take a vacation, because being away means someone else touches their accounts. Living visibly beyond a known salary is another. Neither proves anything by itself, and jumping to conclusions about a loyal employee is a real risk. That is exactly why you want an outside review rather than an internal confrontation.
In practice, more of these cases come to light from a tip than from an audit, often from a coworker who noticed something that did not add up. A confidential way for staff to raise a concern is one of the cheapest controls a business can put in place, and one of the most effective.
What a forensic accountant actually does
When suspicion is real, speed matters, because an ongoing scheme keeps draining money and a tipped-off employee can start deleting records. A forensic accountant reconstructs what happened from the source documents rather than the summaries. They trace the flow of funds, measure how much left and over what period, and tie the activity to a specific person where the evidence supports it. The result is a written report that a lawyer, an insurer, or a prosecutor can use.
Recovery is only half of it. The same review shows you where the controls failed. Most embezzlement runs through a single gap: one person with nobody checking their work. The fix is dull and it works. Split the person who records money from the person who moves it. Require a second signature above a set amount, and rotate duties so no account becomes any one person's private territory. Closing that gap costs far less than living through a second case.
Seeing red flags like these in your own numbers?
A confidential consultation costs nothing and tells you where you stand.
What it means for your matter
Most engagements are not Enron. But the pattern is the same at every scale: a diverted vendor payment, a related party that shouldn't exist, revenue booked before it was earned, a reserve fund that never quite reconciles. The methods used to expose a multibillion-dollar fraud are the same methods that expose a bookkeeper skimming from a small business or a managing agent taking kickbacks from a co-op.
If something in your financial picture doesn't add up, the earlier a forensic accountant looks, the more of the trail survives. Documents get lost, memories fade, and money moves. The record is easiest to reconstruct while it is still fresh.
Think something's wrong with your numbers?
Talk to a forensic accountant. It's confidential, and there's no obligation.