Small businesses often rely on trust, speed and a few key people. That can be efficient, but it can also make unusual transactions harder to spot. The goal is not to accuse; it is to document the warning signs while records are still available.
Match the warning sign to a source record.
| Warning sign | Records to review | Question to document |
|---|---|---|
| Duplicate or unsupported vendor payment | Invoice, vendor record, approval and payment record | Do the amount, payee and approval agree? |
| Cash shortage or delayed deposit | Cash receipts, deposit record and bank statement | What explains the difference or timing? |
| Payroll or reimbursement change | Authorized change, payroll register and supporting receipts | Is the change supported and independently approved? |
| Broad access or missing source files | Access list, available logs and original records | Who could make or approve the change? |
Document gaps and explanations separately from conclusions. Use only records you are authorized to review and obtain qualified guidance when needed.
Financial red flags
- Unexplained cash shortages or deposit delays.
- Bank reconciliations completed late or by the same person handling cash.
- Manual journal entries without support.
- Vendor payments just below approval thresholds.
- Duplicate invoice numbers, round-dollar invoices or vague service descriptions.
- Refunds, credits or write-offs approved without independent review.
Employee and access red flags
Behavioral indicators can be relevant, but they should never be treated as proof. Focus on record-based issues: resistance to vacation or cross-training, refusal to share source files, unusually broad system access, personal use of business accounts, or explanations that change when documentation is requested.
Vendor and payment red flags
Watch for new vendors with incomplete setup records, vendor addresses matching employee addresses, payments to unfamiliar names, unusual rush requests, missing receiving evidence, or invoices approved by someone who also created the vendor.
Payroll and expense red flags
Common warning signs include ghost employees, altered direct-deposit details, overtime spikes, unsupported reimbursements, missing receipts, personal expenses coded to business accounts, and duplicate mileage or travel claims.
What to do first
- Record the concern in neutral language.
- Preserve accounting records, approvals, emails and source documents.
- Create a transaction chronology.
- Separate facts from assumptions.
- Limit access only with appropriate HR/legal guidance.
- Prepare interviews from documents, not accusations.
Use the Small Business Fraud Toolkit.
The toolkit includes red-flag checklists, a risk-and-control workbook, evidence-organization tools, and factual question prompts for planning next steps.
Related small-business fraud resources
Helpful references
- ACFE Occupational Fraud 2026: Report to the Nations
- ACFE Fraud Prevention Check-Up
- FTC resources for small businesses
Questions about fraud red flags
Do fraud red flags prove employee fraud?
No. Red flags are warning signs that require careful review, evidence preservation and qualified guidance when needed. They are not proof of misconduct.
What should a small business document first?
Document the original anomaly, affected transactions, source records, people with access, approvals, explanations and unresolved questions.
Educational information only; not legal, HR, forensic-accounting, insurance or law-enforcement advice.