Stealing Funds for a Nest Egg

An executive assistant uses a corporate credit card, gift checks, and an online payment account to embezzle US $1.5 million.

Paul C. Sutphen, CPA, CFE
Partner, RGL – Forensic Accountants & Consultants
 
At just 22 years old, Betty Collins landed her dream job as executive assistant to the president of Build Right, a regional home improvement company based in the Western United States. Build Right, a division of a large international corporation, planned to aggressively expand operations into other areas of the country and wanted only dynamic individuals on board. In her job interview, Collins came across as ambitious and eager to succeed; she displayed a willingness to work hard as a team player and to build a better life for herself and her family. She was exactly the type of person the company wanted to hire.
 
Build Right’s expansion plan was based on a simple philosophy: Build a good product, get in front of current and potential customers at every opportunity, and know the competition. The company sponsored booths at trade shows, attended industry conferences, and had morale-building events for its sales team, hosted locally and in exciting places such as Hawaii. This kind of exposure cost money, but Build Right was willing to make the investment.   
 
Collins played an important role in making these events happen. She arranged travel plans, including airline and hotel reservations, and coordinated various activities that employees would enjoy. Collins was also responsible for reviewing the final bills and authorizing payment of amounts on the corporate American Express card. Company policy allowed Collins to self-approve disbursements of up to US $100,000 per month to American Express. When the total charges exceeded that amount, company policy required her to obtain approval from her supervisor, the president of the company, via a signature or e-mail authorizing the amount. Without this approval, accounts payable would reject the bill.
 
At month end, Collins prepared a marketing expense form recapping the American Express charges and sent the form, with the appropriate approval, and the payment coupon showing the amount due to accounts payable for payment. Accounts payable would verify that the amount of the payment coupon agreed to the total departmental expense allocation, determine whether the required approval was obtained, post the allocated amounts to the appropriate general ledger account codes, and disburse payment to American Express. Electronic billing made it easy for Collins to obtain the vendor and charge information she needed to fill out the marketing expense form. Downloading the American Express bill into an Excel spreadsheet allowed her to quickly organize the data by vendor and expense, and allocate amounts to the appropriate account codes.
 
From time to time, when her own finances were tight, Collins would make a personal purchase with the corporate American Express card and pay Build Right back via a credit on her expense report. No one ever questioned this practice. Over time, Collins realized that no one ever asked to look at the charges detailed on the American Express bill, and the company’s president only looked at the marketing expense form that she prepared when the total bill was greater than US $100,000, which did not happen often. She also began to see Build Right as a large company with lots of money and rationalized that it would be okay to “forget” to credit her expense report for the occasional personal purchase. To make the accounting work out internally, all she needed to do was increase the billing amount from one of the company’s normal vendors within the electronic spreadsheet to match the amount of her personal charges. This would cause the American Express bill and marketing expense form to balance.
 
Sometimes Collins didn’t even have to manipulate the marketing expense form. This was the case when her personal purchase of airline tickets, hotels, and restaurant charges coincided with a large company function with similar charges. In this situation, she simply included her purchases with the legitimate ones.
 
The temptation became too great, though. Collins set off to find other ways to have the company pay for the things she wanted. Because she didn’t want to risk charging everything she bought for herself to the American Express card, she needed a way to obtain cash. She discovered that American Express gift checks would serve her purpose. Over a two-year period she purchased more than US $150,000 in gift checks to buy items for herself, family, and friends. However, the gift checks were somewhat limiting due to the set denominations, and the fact that she had to sign each gift check made her nervous. 
 
Collins abandoned the gift check scheme when she learned she could set up a PayPal account and fund it from the American Express card. A PayPal account works like a bank account, making it easy to pay for purchases or withdraw cash. Just to be safe, she kept each transaction funding her PayPal account under US $10,000 so as not to arouse suspicion by regulatory organizations. Over a 10-month period, Collins’ PayPal scheme netted her almost US $800,000, which she used to remodel her home, pay off her mortgage, and set up a college fund for her child. 
 
Collins decided it would be best not to let her boss know when the American Express bill exceeded US $100,000, for fear of exposing her activities. In the earlier months, when total charges exceeded US $100,000, Collins bypassed the approval process by forging the president’s name on the approval form, but she didn’t think she was doing a good job with the forgery and feared she would be caught. She found a better way. The Accounts Payable Department accepted approvals from the president via e-mail. When the president was out of the office, Collins accessed his computer and sent herself an “approval” e-mail to accompany the marketing expense form. Then she deleted the sent e-mail.
 
In just under three years, Collins embezzled more than US $1.5 million from Build Right. The embezzlement was discovered when Build Right was contacted by an American Express agent to alert the company to questionable transactions involving Collins and Build Right’s corporate credit card. Internal auditors from Build Right’s parent company were brought in to investigate the questionable charges, which led to a forensic examination of Collins’ computer. Their investigation revealed that Collins had altered the electronic version of the American Express billings before submitting them for payment. Collins pleaded guilty to all charges against her and will serve time in prison.
 
LESSONS LEARNED
  • Allowing employees to charge personal items on a company account is never a good idea. Not only does it lead to potential abuse, but it also creates additional bookkeeping work for the company to keep track of these transactions.
  • Employee self-approval of company-incurred expenses up to a certain amount is not unusual; however, Build Right’s US $100,000 threshold would be too high for most organizations. A lower threshold likely would have required more frequent approvals by Collins’ supervisor. Still, other shortcomings in internal controls, such as accepting only the marketing expense form and payment coupon as support for the charges, and poor control over access to the president’s computer, would have allowed her to develop a successful embezzlement scheme. 
  • Having a supervisor inspect — or have the opportunity to inspect — billings, bank statements, and other relevant documentation before the responsible employee receives the information can help deter fraud. The employee will have less confidence to perpetrate a fraud if he or she doesn’t have full control over the data. Had Collins’ supervisor received the American Express bill before she saw it, she may not have made personal charges on the company account out of fear that her boss would notice them.
  • Collins was uncomfortable forging the president’s approval signature, but that was remedied when she discovered she could access his computer when he was away to authorize charges. The power of e-mail has grown from simple communication to an acceptable means to communicate approval for a large expenditure. Outside of high-security environments, access to computer usage is difficult to control. E-mail authorization for expenditures should be coupled with another form of control. Had Collins’ boss received a periodic report directly from accounts payable showing expenditure approvals, it may have deterred her from exceeding the approval threshold, possibly reducing the amount she stole.
  • Given the lack of internal controls at the local level, this embezzlement might have continued unnoticed for longer than three years had the tip from American Express and the ensuing internal audit investigation not uncovered the defalcation scheme by Collins in Build Right’s Marketing Department. Had the Audit Department maintained a stronger presence at the Build Right division, it would have established a “perception of detection” that may have deterred Collins from her fraudulent activities.

To comment on this article, e-mail the author at paul.sutphen@theiia.org.

 

Subscribe_June 2014 

IIA_AllStar_July2014

 IIA SmartBrief

Bookstore Digital

 IIA Academic_Nov 2013

 

 

 Twitter

 facebook IAO 

IA APP