Nobody expects the person they promoted, trusted with access, and relied on for years to be stealing from them. Yet that’s exactly the profile of the most damaging fraudsters inside organizations today.
According to the ACFE’s Occupational Fraud 2024: Report to the Nations – the world’s most comprehensive study on workplace fraud – managers accounted for a disproportionate share of fraud losses, with a median loss of $184,000 per case. That’s more than three times the loss caused by a general employee. Owners and executives pushed that number to $500,000. Across all 1,921 cases studied, organizations lost a combined $3.1 billion – and the typical scheme ran for 12 months before anyone noticed.
Here’s the uncomfortable truth: trusted manager fraud is so effective precisely because of the trust. These aren’t random actors taking opportunistic shortcuts. They are people with access, authority, and the institutional knowledge to cover their tracks. Understanding how they operate is the first step to stopping them.
1. Billing Schemes: The Invoice Nobody Questions
Billing fraud is the most common form of trusted manager fraud – and the most straightforward to execute. A manager with vendor approval authority creates a fictitious vendor, submits inflated or entirely fabricated invoices, and approves their own payments. Because the manager controls the process from initiation to approval, there’s no natural checkpoint.
Variations include:
- Shell company billing – the manager sets up a separate entity to receive payments. If you haven’t read our breakdown of how fraudsters use shell companies, this is essential context.
- Pass-through schemes – a real vendor exists, but invoices are inflated and the excess is split between the vendor and the manager.
- Personal expense billing – personal purchases run through legitimate vendor accounts and approved without scrutiny.
Red flag: A vendor that only does business with one department, has no verifiable web presence, and was added to the system by the same person who approves its invoices. For more on this, see our deep-dive on vendor fraud and fake invoices.
2. Expense Reimbursement Fraud: Death by a Thousand Claims
Expense fraud rarely looks dramatic from the outside. That’s what makes it so persistent. The ACFE’s 2024 data shows expense reimbursement schemes appear disproportionately in smaller organizations – exactly where managers have the least oversight.
The methods are predictable:
- Submitting personal expenses as business costs
- Duplicating legitimate receipts across multiple claims
- Inflating mileage, meals, or accommodation costs
- Creating fictitious business trips with fabricated supporting documentation
A trusted manager’s advantage here is credibility. When a long-tenured manager submits a quarterly expense report, most approvers extend professional courtesy rather than scrutiny – especially when that manager has approval authority just below the level of the person reviewing it.
Our post on expense report fraud breaks down the specific patterns investigators look for. The short version: volume, rounding patterns, and timing clusters are your early warning signals.
3. Payroll Manipulation: Ghost Workers and Falsified Hours
Managers who control scheduling, timekeeping, or payroll processing have a direct path to theft that requires no external vendor and leaves minimal paper trail – unless you know where to look.
Common trusted manager fraud schemes in this category include:
- Ghost employees – fictitious workers added to payroll, with wages deposited into the manager’s controlled account
- Falsified hours – approving inflated timesheets for real employees in exchange for cash kickbacks
- Unauthorized raises or bonuses – adjusting compensation records for themselves or accomplices
- Continued payments post-termination – keeping departed employees “active” in the system
This category is particularly damaging because it compounds over time. A ghost worker drawing $60,000 per year costs an organization $300,000 over five years – before interest or investigation costs. Our breakdown of payroll fraud methods covers detection strategies in detail.
4. Cash Theft and Skimming: Low-Tech, High Impact
In cash-handling environments – retail, hospitality, healthcare, nonprofit – managers with register access or cash reconciliation responsibilities have a direct fraud pathway that predates computers.
Skimming occurs before a transaction is recorded: cash is taken before it enters the system, leaving no accounting record of the theft. Lapping involves using incoming cash payments to cover previously stolen amounts, creating a rolling shortage that looks like timing differences to anyone doing a cursory review.
Because a trusted manager typically performs – or supervises – their own reconciliations, the internal check that should catch these discrepancies is controlled by the same person committing the fraud. This is why the ACFE data consistently shows that more than half of occupational frauds involve either a lack of internal controls or a deliberate management override of existing controls.
5. Corruption and Conflicts of Interest
Nearly half – 48% – of all cases in the 2024 ACFE report involved corruption. For managers, this most commonly takes the form of kickback arrangements: a manager steers contracts toward a preferred vendor in exchange for cash, gifts, or other undisclosed benefits. The vendor inflates pricing to cover the kickback, and the organization pays above-market rates indefinitely.
Other corruption patterns include:
- Awarding contracts to businesses owned by family members without disclosure
- Accepting gifts or entertainment that influence purchasing decisions
- Sharing confidential bid information with favored suppliers
What makes corruption schemes especially insidious is that they often don’t look like fraud on paper. Every invoice is real. Every vendor is legitimate. The fraud lives in the undisclosed relationship – which is why conflicts of interest are among the hardest schemes to prove without investigation.
How to Spot Trusted Manager Fraud Before It Costs You
The ACFE consistently identifies the same behavioral red flags across cases. Before being caught, most perpetrators exhibited warning signs that, in hindsight, were clear:
- Living beyond their visible means – vehicles, vacations, or renovations inconsistent with their salary
- Unusual closeness with specific vendors – lunches, gifts, or personal friendships with supplier contacts
- Resistance to audits or process changes – particularly around their area of control
- Never taking vacation – fraudsters often can’t afford to be away when someone else might review their work
- Excessive control over documentation – insisting on handling their own reconciliations or approvals
If any of these patterns sound familiar, our guide on 7 signs of corporate fraud most companies ignore is worth reading before you act. And if you’re already past suspicion and need to know next steps, what to do before confronting a suspected employee is an essential read.
Structural controls that work:
- Mandatory job rotation and dual-approval requirements for high-risk transactions
- Anonymous reporting mechanisms – the ACFE found tips from employees drive 43% of all fraud detection
- Surprise audits targeting transaction categories with single-point approval
- Periodic, independent vendor verification – confirming vendors exist and relationships are arm’s length
- Regular review of journal entries and override logs
Understanding the difference between a fraud investigation and an internal audit also matters here: not every red flag warrants a full investigation, but knowing when to escalate is critical.
The Bottom Line: Trust Is Not a Control
The most expensive fraud your organization will ever face will likely be committed by someone you trusted. That’s not a cynical statement – it’s what the data says year after year. Proximity, authority, and institutional knowledge are exactly what make managers capable of hiding fraud for an average of 12 months before detection.
The answer isn’t suspicion of everyone. It’s building systems where trust is complemented by verification – where no single person controls a complete transaction cycle, where tips can be reported anonymously, and where irregular patterns surface before they become catastrophic losses.
If you suspect fraud is already occurring or want a professional assessment of your organization’s exposure, FraudOrder.co connects you with experienced fraud investigation professionals who specialize in exactly these scenarios.
Frequently Asked Questions
1. What is the most common type of trusted manager fraud?
Billing schemes – including fake vendor invoices and inflated legitimate invoices – consistently rank as the most common method. Managers with approval authority over vendor payments are uniquely positioned to initiate and authorize fraudulent transactions without any secondary review.
2. How long does manager fraud typically go undetected?
The ACFE’s 2024 data shows the median fraud scheme runs for 12 months before discovery. Manager-level fraud tends to last longer than employee-level fraud because perpetrators have greater ability to suppress evidence, control reconciliations, and deflect suspicion. For a full breakdown of detection timelines, see how long fraud investigations take.
3. What’s the single most effective way to detect manager fraud early?
Anonymous reporting mechanisms. The ACFE found that 43% of all fraud cases are uncovered through tips – and employees are the source more than half the time. Organizations with formal hotlines or web-based reporting tools experience significantly smaller losses before detection. Anonymous tips can and do trigger full investigations – and frequently do.
4. Can a manager be terminated for fraud without involving law enforcement?
Yes – in most jurisdictions, employment termination is a separate decision from criminal referral. However, how you handle the termination and what documentation you gather beforehand matters significantly for any subsequent civil or criminal action. Our article on firing someone for embezzlement without involving police explains the tradeoffs clearly.
5. What evidence do investigators actually look for in manager fraud cases?
Investigators typically begin with financial records – bank statements, journal entries, vendor master files, and expense reports. They look for authorization anomalies, timing patterns, unusual account activity, and lifestyle indicators inconsistent with compensation. What fraud investigators actually look for in evidence covers this in detail.
6. When should an organization hire a private fraud investigator versus relying on internal audit?
Internal audits are designed to assess control effectiveness across systems – they are not typically structured to build a case or preserve evidence for legal proceedings. When there’s a specific suspected perpetrator, a high-stakes situation, or potential litigation, a qualified private fraud investigator is the appropriate choice. This comparison clarifies exactly when each is appropriate.
References
- Association of Certified Fraud Examiners (ACFE). (2024). Occupational Fraud 2024: A Report to the Nations. https://legacy.acfe.com/report-to-the-nations/2024/
- ACFE. (2024). Press Release: More Than $3.1 Billion Lost in Fraud Cases. https://www.acfe.com/about-the-acfe/newsroom-for-media/press-releases/press-release-detail?s=2024-Report-to-the-Nations
- Selden Fox CPAs. (2024). 2024 ACFE Report on Occupational Fraud. https://www.seldenfox.com/our-insights/articles/2024-acfe-report-occupational-fraud/
- Clark Schaefer Hackett. (2024). Breaking Down the ACFE’s Latest Fraud Report. https://www.cshco.com/insights/breaking-down-the-acfes-latest-fraud-report
- GRF CPAs & Advisors. (2024). ACFE Study Finds Median Losses from Occupational Fraud Increasing. https://www.grfcpa.com/resource/acfe-study-occupational-fraud/
- Anchin. (2024). ACFE Occupational Fraud 2024 Summary. https://www.anchin.com/wp-content/uploads/2024/08/2024-ACFE-Occupational-Fraud-Report.pdf
- Hantzmon Wiebel LLP. (2024). ACFE Fraud Report: Key Findings Unveiled. https://www.hwllp.cpa/articles-news/acfe-fraud-report-key-findings-unveiled
- Emburse. (2024). Finance, Fraud, and Frustration: Key Findings from the ACFE 2024 Report. https://www.emburse.com/blog/finance-fraud-and-frustration-key-findings-from-the-acfe-2024-report
- BradyWare. (2024). New ACFE Report – Occupational Fraud Statistics. https://bradyware.com/new-acfe-report-exposes-rising-fraud-costs-trends/
- Federal Bureau of Investigation (FBI). Financial Crimes – White Collar Crime. https://www.fbi.gov/investigate/white-collar-crime
Disclaimer: This article is for informational and educational purposes only. It does not constitute legal, financial, or professional investigative advice, and does not create a client or engagement relationship of any kind. Organizations facing suspected fraud should consult qualified legal counsel and certified fraud examiners for guidance specific to their situation. For questions about FraudOrder services, visit https://fraudorder.co/