Preventing and Detecting Expense Reimbursement Fraud

Why This Topic Matters

Expense reimbursement fraud sits within the Fraudulent Disbursements branch of the ACFE Fraud Tree, under Asset Misappropriation. According to the ACFE Report to the Nations, expense reimbursement schemes appear in roughly 1 in 7 asset misappropriation cases and typically last around two years before detection. Although the median loss per case is lower than billing or check tampering schemes, these frauds are extremely common because almost every organization reimburses employee expenses, the amounts are small enough to escape scrutiny, and the controls over expense reports are often lax. For the CFE exam, this topic is tested in the Financial Transactions and Fraud Schemes section, and you are expected to know both the mechanics of the schemes and, more importantly, the specific controls that prevent and detect them.

What It Is: The Four Expense Reimbursement Schemes

Before you can prevent or detect a scheme, you must know what you are looking for. The ACFE identifies four categories:

1. Mischaracterized Expenses - The employee requests reimbursement for a personal expense but claims it was business-related. Example: taking a spouse to dinner and reporting it as a client meeting. The receipt is genuine; the business purpose is false.

2. Overstated Expenses - The employee inflates the cost of a legitimate business expense. Methods include altering receipts (changing a 1 to a 7), over-purchasing (buying a first-class ticket, exchanging it for coach, and keeping the refund), overstating another employee's expenses (when a supervisor or assistant prepares the report), and orders to overstate expenses (a manager directing subordinates to pad their reports and kick back the excess).

3. Fictitious Expenses - The employee seeks reimbursement for an expense that was never incurred. Methods include producing fictitious receipts (using a computer or blank receipt stock), obtaining blank receipts from vendors, or claiming the expenses of others (submitting a receipt that a colleague or client actually paid).

4. Multiple Reimbursements - The employee submits the same expense more than once, often using different supporting documents (e.g., submitting the original receipt one month and the credit card statement the next, or submitting the airline itinerary and later the boarding pass).

How It Works: Why These Schemes Succeed

Expense reimbursement fraud thrives on weak oversight. Common environmental conditions include:
- Supervisors who approve reports with only a cursory glance, or who sign stacks of reports without reading them.
- Policies that accept photocopies, credit card statements, or no receipts at all for amounts below a threshold.
- Reports that do not require a stated business purpose, the names of attendees, or dates.
- Senior executives whose reports are approved by subordinates who fear questioning them.
- Lengthy or non-existent submission deadlines, which allow employees to accumulate and resubmit documents.
- No independent review, trend analysis, or comparison against budgets or peers.

The fraudster exploits these gaps by keeping individual claims small and plausible. Because each claim is minor, the cumulative loss can be substantial before anyone notices.

Prevention: Key Controls

The exam emphasizes that the most important preventive control is a detailed, written expense reimbursement policy that is communicated to all employees and consistently enforced. Specific preventive measures include:

- Require original, itemized receipts for all expenses (or all expenses above a very low threshold). Photocopies and credit card statements alone should not be accepted, because they facilitate multiple reimbursements and conceal what was actually purchased.
- Require detailed expense reports that state the date, amount, vendor, location, business purpose, and the names and affiliations of all individuals entertained. This directly attacks mischaracterized expenses.
- Independent supervisory review and approval of every report before payment. The reviewer should actually examine receipts, compare them to the report, and question anything unusual. Reports should never be approved by a subordinate of the claimant.
- Pre-approval of travel and major expenditures, with reimbursement limited to the approved itinerary.
- Set submission deadlines (for example, within 30 days of the expense) and refuse late claims. This limits the opportunity to recycle old receipts.
- Use per diems or corporate credit cards where practical. Per diems eliminate receipt manipulation for meals; corporate cards create an independent record that can be reconciled against reports.
- Pay by direct deposit and route reimbursement checks through accounts payable, not through the employee's own department.
- Require proof of travel such as boarding passes or hotel folios, not just reservations or itineraries (a reservation can be made, submitted, and then cancelled).
- Communicate that reports are audited. The perception of detection is itself a strong deterrent.
- Train employees and supervisors on the policy and on common schemes, and make the consequences of violations clear.

Detection: Methods and Red Flags

Detection techniques fall into two broad groups: analytical review of expense accounts and detailed review of individual expense reports.

1. Analytical Review
- Compare current period expenses to prior periods and to budget, by department and by employee. Investigate unexplained increases.
- Compare expenses among employees in similar roles with similar travel schedules. An outlier warrants scrutiny.
- Use data analytics to flag round-dollar amounts, claims just below the receipt threshold, duplicate amounts or dates, and expenses that recur with suspicious regularity.

2. Detailed Review of Expense Reports
Rather than reviewing every report, many organizations perform periodic spot audits or targeted reviews. Things to examine:
- Are receipts original, or photocopies? Photocopies suggest the original may have been used elsewhere.
- Do receipts appear altered, have consistent handwriting across different vendors, or come from sequentially numbered receipt books (suggesting the employee holds a pad of blank receipts)?
- Do receipts from supposedly different restaurants or vendors share identical fonts, paper, or layout (possible computer-generated fakes)?
- Do dates on receipts fall on weekends, holidays, or days the employee was on vacation or in a different city?
- Are the same amounts or vendors claimed repeatedly? Are credit card statements and receipts both submitted for the same purchase?
- Is the business purpose vague or missing? Are the named guests real clients, and did the meetings actually occur? Cross-check against calendars and client records.
- Does the airline ticket class or hotel rate match company policy? Compare the ticket submitted with the actual boarding pass.
- Are mileage claims consistent with the distances between locations claimed?
- Are there tips, confidential hotline reports, or complaints from coworkers? Tips remain the single most common detection method for all occupational fraud.

Matching Schemes to Controls

The exam frequently asks which control best addresses a particular scheme. Use this mapping:
- Mischaracterized expenses - require stated business purpose and attendee names; compare dates and locations against calendars and travel records.
- Overstated expenses - require original itemized receipts; compare ticket receipts to boarding passes; scrutinize receipts for alterations; review reports prepared on behalf of others.
- Fictitious expenses - require original receipts; examine receipts for sequential numbering, uniform handwriting, or identical formatting; verify with vendors when warranted.
- Multiple reimbursements - require originals only (no photocopies or statements as substitutes); enforce submission deadlines; use software to flag duplicate amounts, dates, and vendors.

Exam Tips: Answering Questions on Preventing and Detecting Expense Reimbursement Fraud

1. Know the four schemes cold. Many questions describe a scenario and ask you to classify it. Ask yourself: Was the expense real? If not, it is fictitious. Was it real but personal? Mischaracterized. Real and business-related but inflated? Overstated. Real, legitimate, but claimed twice? Multiple reimbursement.

2. Distinguish prevention from detection. Prevention controls operate before payment (policy, pre-approval, original receipts, supervisory review). Detection techniques operate after the fact (trend analysis, spot audits, comparison to budget, examining receipts for alterations). If a question asks for a detection method, do not choose a policy-based answer.

3. When asked for the single most effective preventive measure, the ACFE answer is usually a detailed written policy combined with meaningful supervisory review, or the requirement of original itemized receipts with a stated business purpose. Avoid answers that rely solely on trust or on the honor system.

4. Remember what should NOT be accepted. Photocopies, credit card statements alone, and non-itemized receipts are red flags, not acceptable documentation. Questions often test whether you recognize that accepting a credit card statement in lieu of a receipt enables multiple reimbursements.

5. Watch for who approves whom. A subordinate approving a superior's expense report is a control weakness. Reports should be approved by someone at a higher level who is independent of the claimant.

6. Be alert to the role of deadlines. If a question involves an employee resubmitting an expense months later, the relevant control is a strict submission deadline.

7. Sequential receipt numbers, identical handwriting, and uniform formatting point to fictitious receipts. Altered digits and over-purchased tickets point to overstated expenses. Weekend or vacation dates point to mischaracterized expenses.

8. Do not overlook per diems and corporate cards as preventive tools. They reduce opportunity by removing the employee's control over documentation.

9. Read negative stems carefully. Questions phrased as which of the following is NOT or which would be LEAST effective are common. Eliminate the three answers that are legitimate controls and select the remaining one.

10. Think like the ACFE. The Fraud Examiners Manual stresses that most expense reimbursement fraud succeeds because no one actually reads the report. When in doubt, the answer that increases genuine scrutiny of individual reports and their supporting documentation is usually correct.

Summary

Expense reimbursement fraud is small in individual dollar terms but pervasive and persistent. The four schemes are mischaracterized, overstated, fictitious, and multiple reimbursements. Prevention relies on a clear written policy, original itemized receipts, stated business purpose, independent supervisory approval, submission deadlines, and the use of per diems or corporate cards. Detection relies on analytical comparison of expenses over time and across employees, plus detailed examination of receipts for alterations, duplication, and fabrication. Mastering the link between each scheme and its corresponding control is the key to answering exam questions on this topic correctly.