The person who steals from a company is almost never a stranger. It is the bookkeeper who also reconciles the bank statements, the office manager who signs the checks and files them, the controller everyone trusts. That trust is the point. Embezzlement works because one person controls enough of the process to move money and cover the trail, and because no one thinks to check the work of someone who has been there for years. By the time the numbers stop adding up, the loss can be large and the scheme old.
What embezzlement looks like
The methods are old and familiar. An employee writes company checks to themselves or to a shell vendor. Cash receipts go into a personal pocket before they reach the deposit. Payroll carries a ghost employee whose paycheck lands in the thief's account. A card meant for supplies buys personal goods. What ties these together is a gap in oversight. The same person records the transaction and controls the asset, so the fabricated entry and the missing money never meet a second set of eyes.
What a forensic accountant does
A forensic accountant comes in to answer three questions. Did money actually go missing, how, and how much. That starts with the records: bank statements matched against the general ledger, canceled checks, vendor files, expense reports, payroll. The work is looking for the places where the paper story and the money story diverge. A vendor with no phone number and a P.O. box. Checks that clear to an employee's account. Deposits that are always a little short. Round numbers that keep repeating.
Data analysis widens the net. Sorting every payment by vendor, employee, and amount surfaces the transfers that repeat just under an approval limit, the ones a manual review would never sample. Interviews and document review fill in the rest. The point is to prove that theft happened and to build a record clear enough to hand to a lawyer or an insurer, because a hunch does not recover money.
Recovery and prevention
Finding the loss is half the job. Getting some of it back is the other half. A forensic accountant quantifies the total loss, which the company needs for an insurance claim, a restitution demand, or a lawsuit, and can testify to how the figure was built. That number has to survive challenge, so it is tied to documents rather than estimates.
The same review usually shows why the theft was possible in the first place. One person controlling both the records and the bank access. No one reviewing the vendor list. Bank statements going straight to the person who should be watched. Separating those duties and adding a second reviewer is how a business closes the door that was left open.
If you suspect someone is stealing, the instinct to confront them first is the wrong one. A tipped-off employee deletes files and moves money. The stronger move is to preserve the records quietly and bring in someone who can tell you what actually happened before anyone knows they are looking.
Seeing red flags like these in your own numbers?
A confidential consultation costs nothing and tells you where you stand.
What it means for your matter
Most engagements are not Enron. But the pattern is the same at every scale: a diverted vendor payment, a related party that shouldn't exist, revenue booked before it was earned, a reserve fund that never quite reconciles. The methods used to expose a multibillion-dollar fraud are the same methods that expose a bookkeeper skimming from a small business or a managing agent taking kickbacks from a co-op.
If something in your financial picture doesn't add up, the earlier a forensic accountant looks, the more of the trail survives. Documents get lost, memories fade, and money moves. The record is easiest to reconstruct while it is still fresh.
Think something's wrong with your numbers?
Talk to a forensic accountant. It's confidential, and there's no obligation.