A bookkeeper in Plantation, Florida had a decade of trust, full signature authority on the company’s bank accounts, and no one checking her work. Over six years, she moved $9.8 million out of the business, one wire transfer and one fake vendor name at a time, before she was finally caught and sentenced to 51 months in federal prison in September 2025. The average occupational fraud scheme runs for 12 months before detection, according to the ACFE’s most recent Report to the Nations. Hers ran six times that long, and the pattern behind it shows up in small businesses constantly.

That is the core problem with small business embezzlement. It rarely looks like a single dramatic theft. It looks like a slow bleed: small enough each month to go unnoticed, steady enough over years to become catastrophic, and it is far more common than most owners assume.

Why Small Embezzlement Schemes Hide in Plain Sight

Small business embezzlement thrives on a simple structural flaw: one person controls too much of a transaction from start to finish. In a properly segregated system, the person who moves money is never the same person who reconciles the account or approves the entry afterward. In a business with three or four employees, that separation often does not exist.

The ACFE’s 2024 Report to the Nations found that more than half of occupational fraud cases were linked to a lack of internal controls or management overriding the controls that did exist. Organizations with fewer than 100 employees had a median fraud loss of $141,000, nearly identical to the $145,000 global median, despite having a fraction of the revenue to absorb it. For a company doing a few million dollars a year, that loss is not a rounding error. It can be the difference between making payroll and closing the doors.

The Anatomy of a Multi-Year Small Business Embezzlement Scheme

The Florida bookkeeper case is instructive because it strips away the drama and leaves two structural failures that show up again and again:

• No segregation of duties. She could initiate wire transfers and record the company’s books herself, so no second set of eyes ever compared the money moving out against what the ledger said should be moving out.
• Entries designed to survive a casual glance. The falsified records looked ordinary enough that routine review never flagged them. It took a deeper, deliberate look to unravel what had actually happened.

This is consistent with what the fraud triangle predicts: pressure, opportunity, and rationalization combine to turn a trusted employee into a thief, and opportunity is almost always the variable an organization actually controls. Our earlier piece on the fraud triangle breaks down how that dynamic plays out in practice.

Why Small Businesses Are Easier Targets

Small business embezzlement is not more common because small-business employees are less honest than employees at large corporations. It is more common because of opportunity and culture:

• Fewer formal controls. Many small businesses never separate authorization, recording, custody, and reconciliation duties because there simply are not enough people to divide the work.
• A culture of trust that discourages oversight. Asking a longtime bookkeeper or office manager for backup documentation can feel insulting, so owners skip it.
• Limited budgets for anti-fraud technology. Larger organizations run automated transaction monitoring and surveillance tools that flag anomalies in real time. Most small businesses have none of that.
• One person wearing too many hats. The same employee who invoices customers, receives payments, reconciles the bank statement, and maintains the books has, in effect, no one checking their work.

Similar dynamics play out in payroll specifically. Ghost employee schemes, where fake or former staff stay on the payroll, typically run 18 to 30 months before detection and cost U.S. businesses billions annually. If payroll is part of your risk picture, our guide to catching ghost employees and padded payrolls covers the specific red flags to watch for.

The Warning Signs Most Owners Miss

Small business embezzlement leaves traces long before anyone notices the missing money. The most common ones include:

• Vendors or contractors that no one on staff can clearly describe or has met.
• An employee who resists taking vacation or handing off tasks, even briefly.
• Bank statements or reconciliations that only one person ever reviews.
• Round-number or suspiciously consistent transaction amounts.
• An employee whose lifestyle noticeably outpaces their salary.
• Reluctance to provide backup documentation for routine expenses.

None of these signs proves theft on its own. Together, over time, they are exactly the kind of pattern that a proper internal review is built to catch.

How These Schemes Finally Get Caught

According to the ACFE, tips remain the single most common way occupational fraud is uncovered, responsible for roughly 43 percent of detections, more than audits, management review, and accident combined. That is why a working, anonymous reporting channel matters more than almost any other single control a small business can put in place.

When a scheme does surface, what happens in the following hours and days determines whether the evidence holds up later. Records get altered, backups get overwritten, and confrontations happen before anyone has secured what they need. Our field guide to the first 48 hours after discovering fraud walks through exactly what to preserve and who to call first.

Building Controls That Actually Work With a Small Team

You do not need a full finance department to meaningfully reduce your exposure to small business embezzlement. A few changes make an outsized difference:

1. Separate at least two of the four core duties. Authorization, recording, custody, and reconciliation should never all sit with one person, even if that means a second employee, an outside bookkeeper, or the owner personally reviews bank statements each month.
2. Require a second signer above a set dollar threshold. Even a modest threshold closes the door on the most common form of check and payment tampering.
3. Review the vendor list annually. Confirm every vendor is real, has a documented relationship with the business, and was approved through a defined process.
4. Rotate who reconciles accounts. Predictable, fresh eyes on the books make it far harder for falsified entries to go unnoticed for years.
5. Give employees a real, confidential way to report concerns. Given how often tips are what actually breaks a case open, this single control does more work than almost anything else on this list.

The Bottom Line

Small business embezzlement rarely announces itself. It hides inside routine transactions, trusted relationships, and the simple fact that no one is looking closely enough. The businesses that catch it early are the ones that build basic separation of duties and a real reporting channel before a problem starts, not after a bookkeeper is already six years into a scheme. If you suspect something is off in your books, or you want a confidential review of your internal controls before a small gap becomes a six-figure loss, our team has spent decades finding exactly this kind of thing. Reach out and let’s talk.

Frequently Asked Questions

How common is small business embezzlement compared to fraud at large companies?

Organizations with fewer than 100 employees experience the highest percentage of occupational fraud cases and a median loss of $141,000, nearly identical to the global median, despite having far less revenue to absorb the hit.

What is the most common way small business embezzlement gets discovered?

Tips are the leading detection method, accounting for roughly 43 percent of cases, well ahead of internal audits or management review, which is why an anonymous reporting channel matters so much.

Can a small business realistically separate duties with only two or three employees?

Yes, through compensating controls such as requiring a second signer above a dollar threshold, having the owner personally review bank statements monthly, or outsourcing reconciliation to an independent bookkeeper.

What should we do if we suspect an employee is embezzling?

Preserve financial records and account access immediately, limit that employee’s ability to alter records further, and consult legal counsel or a forensic investigator before any direct confrontation.

How long does a typical embezzlement scheme run before it’s caught?

The median occupational fraud scheme runs about 12 months, but schemes involving trusted, longtime employees with broad access can run for years, as seen in cases that stretch to six years or more.

Is embezzlement only a concern for larger companies with complex finances?

No. Small businesses are disproportionately vulnerable because they often lack segregation of duties, formal oversight, and fraud detection technology, making them, in some ways, easier targets than larger organizations.

References

1. Association of Certified Fraud Examiners. (2024). Occupational Fraud 2024: A Report to the Nations. https://www.acfe.com/-/media/files/acfe/pdfs/rttn/2024/2024-report-to-the-nations.pdf
2. Association of Certified Fraud Examiners. (2024). More Than $1.5 Million Per Fraud Case. https://www.acfe.com/about-the-acfe/newsroom-for-media/press-releases/press-release-detail?s=2024-Report-to-the-Nations
3. U.S. Department of Justice. Federal Bureau of Investigation. White-Collar Crime. https://www.fbi.gov/investigate/white-collar-crime
4. U.S. Small Business Administration. Fraud Prevention Resources. https://www.sba.gov/business-guide/manage-your-business/stay-legally-compliant
5. American Institute of CPAs. Forensic and Valuation Services Resource Center. https://www.aicpa-cima.com/topic/forensic-accounting
6. The Institute of Internal Auditors. Internal Audit and Fraud. https://www.theiia.org/en/content/guidance/recommended/supplemental/fraud/
7. Grant, Ferber & CPA network summary via GRF CPAs. (2026). ACFE Study Finds Median Losses from Occupational Fraud Increasing. https://www.grfcpa.com/resource/acfe-study-occupational-fraud/
8. Sanctions.io Editorial Team. (2025). Why SMEs Are More Vulnerable to Embezzlement in 2025. https://www.sanctions.io/blog/why-smes-are-more-vulnerable-to-embezzlement-in-2025
9. Internal Revenue Service Criminal Investigation. (2025). Former Plantation Bookkeeper Sentenced to Federal Prison for $9.8 Million Embezzlement Scheme. https://www.irs.gov/node/151426
10. Cerini & Associates. Internal Controls and Segregation of Duties for Small Organizations. https://ceriniandassociates.com/?p=25384

Disclaimer: This article is provided for informational and educational purposes only. It does not constitute legal, financial, or professional advice, and reading it does not create a client relationship with Fraud & Order. Every situation is different, so consult a qualified attorney, accountant, or compliance professional before acting on anything discussed here. For questions about FraudOrder services, visit https://fraudorder.co/