Skimming is theft that happens before the money ever reaches the books. A cashier takes a customer's cash, hands over the goods, and never rings the sale. As far as the accounting system knows, that transaction never happened, so there is nothing to reconcile, no missing entry, no account out of balance. That is what makes skimming the hardest employee theft to prove. You cannot find a hole in numbers that were never written down.
The people in a position to skim are the ones standing where cash first enters the business. Bank tellers, waitstaff, store cashiers, medical billing clerks, anyone whose hand the money passes through first. They do not have to break into anything. They just decline to record what they were handed.
A small example that scales
A server takes an order that includes an appetizer alongside the meal and the drink. The customer gets all of it, pays cash, and the server rings up everything except the appetizer, then pockets that amount. The customer is not cheated and has no reason to complain. The kitchen made the food. The only party short is the restaurant, and the loss is invisible because the sale was never entered.
Whether that works comes down to the controls. In a restaurant where the kitchen will not cook a dish unless it has been entered in the system, the server cannot pull it off, because the food and the record are locked together. In a place with loose oversight, the same theft can happen every shift and no report will ever show it.
The signs that do surface
Skimming is quiet, but the cover-up is not always. In retail, forensic accountants look hard at voided sales and no-sale register openings. A void or a no-sale can be perfectly legitimate. It can also be the move an employee uses to pop the drawer or fake a sale while pocketing the cash. When one cashier runs far more voids than everyone else working the same shifts, that pattern is worth chasing.
In an office, the tell is often a customer dispute. Someone pays cash at a window, does not take a receipt, and the clerk keeps it without recording the payment. It stays hidden until the customer's account is not credited and they call to argue about a bill they already paid. The missing receipt that made the theft easy is the same thing that makes the investigation slow.
Why prevention beats investigation here
Because skimming is so hard to prove after the fact, the money is better spent stopping it up front. Segregation of duties is the strongest tool there is. When the person who takes a payment cannot also adjust the customer's account, a skimmer can grab the cash but cannot hide the shortfall, and the mismatch eventually surfaces.
Past that, the controls that work are the ones employees can feel. Cameras on the registers. Managers who are actually out on the floor. A posted receipt policy, which pulls customers into the process, since a customer expecting a receipt is a witness. Surprise audits nobody can time. People who think someone might be watching steal far less than people who are sure no one is.
You cannot find a hole in numbers that were never written down.
Working a case anyway
When an investigation is warranted, a forensic accountant looks for the residue a scheme leaves behind. Altered or missing documents. Accounts with heavy transaction volume and oddly low balances. Gaps between what should have been collected and what was actually deposited. The evidence is thin by nature, so these cases get built from patterns across time and across employees rather than a single smoking gun.
Seeing red flags like these in your own numbers?
A confidential consultation costs nothing and tells you where you stand.
What it means for your matter
Most engagements are not Enron. But the pattern is the same at every scale: a diverted vendor payment, a related party that shouldn't exist, revenue booked before it was earned, a reserve fund that never quite reconciles. The methods used to expose a multibillion-dollar fraud are the same methods that expose a bookkeeper skimming from a small business or a managing agent taking kickbacks from a co-op.
If something in your financial picture doesn't add up, the earlier a forensic accountant looks, the more of the trail survives. Documents get lost, memories fade, and money moves. The record is easiest to reconstruct while it is still fresh.
Think something's wrong with your numbers?
Talk to a forensic accountant. It's confidential, and there's no obligation.