Detecting Inventory Theft

1. Why This Topic Matters

Inventory and other non-cash assets are the second major branch of asset misappropriation on the ACFE Fraud Tree (the first being cash). Although cash schemes are more frequent, non-cash schemes – particularly inventory theft – tend to produce larger median losses because inventory is bulky, moves through many hands, and is often tracked by records that employees themselves control. For the CFE exam, this concept sits in the Financial Transactions and Fraud Schemes section. You will be tested not only on how inventory is stolen, but – more heavily – on how a fraud examiner detects the theft, which analytical symptoms point to it, and which procedures are most effective. Understanding detection also prepares you for questions on concealment, because every detection method is essentially a way of catching a concealment technique.

2. What It Is

Inventory theft (larceny of inventory) is the intentional taking of an employer's inventory, supplies, equipment, or other physical assets for personal use or sale. The ACFE divides non-cash misappropriation into two broad categories:

• Misuse – the employee borrows or uses the asset without taking it permanently (e.g., using company vehicles, computers, or tools for a side business). Losses are usually unrecorded and hard to quantify.
• Larceny – the employee physically removes the asset from the organization with no intention of returning it. This is the focus of inventory theft detection.

Detecting inventory theft refers to the set of analytical, documentary, and physical procedures a fraud examiner uses to identify that inventory is missing, determine how the loss is being concealed, and trace it back to a responsible party.

3. How Inventory Theft Schemes Work

You cannot detect what you do not understand, so the exam expects familiarity with the main scheme types:

• Simple larceny – an employee with access simply carries inventory off the premises, often after hours or during deliveries. No records are falsified, so detection depends on physical counts revealing shrinkage.
• Asset requisitions and transfers – the employee uses internal paperwork (requisition forms, transfer orders) to move inventory to a location or project where it can be taken, or requisitions more material than a job requires and keeps the excess.
• Purchasing and receiving schemes – a receiving employee marks a shipment as short (so the vendor is paid for less) or as complete while diverting part of it; alternatively, goods are rejected as substandard and then taken.
• Fraudulent shipments / false sales – the employee creates a fictitious sales order or shipping document so that inventory is legitimately released from the warehouse and shipped to the employee or an accomplice. The resulting receivable is either written off, aged out, or charged to a fictitious customer.

4. How the Theft Is Concealed

Because inventory is counted, the thief must usually make the records agree with the reduced physical quantity. The ACFE identifies four main concealment methods, and each one corresponds to a detection procedure:

• Altered inventory records – the perpetrator changes the perpetual inventory records (or the count sheets) so that book quantities match what is physically on hand. This is why unexplained adjusting entries to inventory are a classic red flag.
• Fictitious sales and accounts receivable – the stolen inventory is 'sold' on paper to a fake or real customer; the receivable is later written off as uncollectible.
• Write-offs of inventory and other assets – the perpetrator writes the goods off as scrap, obsolete, damaged, or shrinkage, giving the theft an innocent explanation.
• Physical padding – the thief makes inventory appear larger than it is: empty boxes stacked at the back, boxes filled with bricks or scrap, the same pallet counted twice, liquids diluted with water, or count tags moved between locations during the count.

5. How Detection Works – The Core Procedures

(a) Statistical sampling
Fraud examiners rarely can test every transaction, so they draw random or stratified samples of documents – receiving reports, perpetual inventory records, raw-material requisitions, shipping documents, and job cost sheets – and trace them through the system. Sampling allows the examiner to draw inferences about the entire population and to concentrate on high-risk strata (e.g., high-value or easily resold items). If a sample reveals a pattern of unsupported adjustments or shipping documents without matching sales orders, the examiner expands testing.

(b) Perpetual inventory records
Perpetual records track every receipt and issue of inventory in real time. The examiner compares them against physical counts and against source documents. Key questions: Who has authority to post adjustments? Are adjustments supported and approved? Are there frequent 'forced balance' entries? A perpetual system that is repeatedly adjusted downward without documentation is a strong indicator of concealment of theft.

(c) Shipping documents
Because fraudulent shipments are a leading theft method, the examiner matches bills of lading and packing slips to approved sales orders and invoices. Red flags include shipments to unusual addresses, shipments without a corresponding sale, shipments to employees' home addresses or post-office boxes, missing customer purchase orders, and unexplained rises in shipping costs or freight volume while sales remain flat. Receiving documents are similarly reconciled against purchase orders and vendor invoices to detect short-shipment schemes.

(d) Physical inventory counts
The physical count is the single most direct detection tool. Best practice is to have counts performed – or at least observed – by individuals independent of the custody and recording of inventory, with the examiner performing surprise test counts. The examiner looks for: shrinkage (book quantity minus physical quantity), signs of padding (empty or unusually light boxes, sealed containers that are not opened, items stored in odd locations), alterations or erasures on count sheets, and count tags that do not reconcile. Unannounced counts are far more effective than scheduled ones because a thief cannot prepare padding in advance.

(e) Analytical review
Theft of inventory leaves a footprint in the financial statements even when records are manipulated. The examiner compares current figures with prior periods, budgets, and industry norms. Classic symptoms:
• Unexplained increase in cost of goods sold (COGS) without a corresponding increase in sales.
• Decline in gross profit margin.
• Inventory shrinkage higher than industry norms or rising over time.
• Increase in scrap, spoilage, obsolescence, or damage write-offs.
• Rising inventory turnover that does not match sales trends, or declining inventory balances with constant sales.
• Increase in bad-debt expense or accounts-receivable write-offs (a sign of fictitious-sales concealment).
• Freight and shipping costs rising faster than sales.
• Inventory adjustments concentrated at one location, shift, or employee.

(f) Computer-generated trend analysis
Using data-analysis software, the examiner can track shrinkage by product line, by location, by shift, and by employee over time. Trend analysis exposes patterns a single-period review would miss – for example, a particular warehouse whose shrinkage spikes whenever a certain supervisor is on duty, or a specific SKU that is consistently adjusted downward. Reports can be run on: inventory adjustments by user ID, write-offs by approver, shipments without sales orders, receiving reports showing partial quantities, and customers with high write-off rates.

(g) Detecting inventory padding
Specific procedures include opening sealed cartons during the count, weighing boxes, measuring liquids with calibrated instruments rather than accepting dipstick readings, controlling and accounting for all count tags, counting high-value items personally, and comparing count-sheet handwriting and ink for alterations. The examiner also watches for inventory 'moved' between locations during a multi-day count so it can be counted twice.

6. Red Flags Summary (Memorize for the Exam)

• Inventory shrinkage that is unexplained or increasing.
• Frequent, unsupported adjustments to perpetual records.
• Write-offs of inventory as scrap, damaged, or obsolete without inspection.
• Sales to unfamiliar customers followed by write-offs of the receivable.
• Shipping documents with no matching sales order or invoice.
• COGS rising while sales are flat; falling gross margin.
• Employees who refuse vacations or insist on performing counts personally.
• Inventory stored in unusual places, sealed boxes nobody opens, empty containers.
• Discrepancies between receiving reports and vendor invoices.

7. Prevention Controls (Often Tested Alongside Detection)

• Segregation of duties among requisitioning, purchasing, receiving, custody, shipping, and recordkeeping.
• Physical safeguards: locked storage, restricted access, security cameras, badge logs.
• Prenumbered documents for requisitions, receiving reports, and shipping orders, with sequence accounted for.
• Independent, periodic (and surprise) physical counts reconciled to perpetual records.
• Management approval required for all inventory adjustments and write-offs.
• Analytical monitoring of shrinkage, margins, and write-off trends.

8. Exam Tips: Answering Questions on Detecting Inventory Theft

Tip 1 – Match the concealment method to the detection method. Exam questions frequently describe a concealment technique and ask how to detect it. Altered records → compare perpetual records to physical counts and review adjustment entries. Fictitious sales → review receivable write-offs and match shipping documents to orders. Write-offs → examine authorization and inspect the supposedly scrapped goods. Physical padding → open containers, weigh, measure, control count tags.

Tip 2 – Know the analytical symptoms cold. If a question says sales are constant but COGS rose, gross margin fell, or shrinkage increased, the answer points toward inventory theft (or possibly skimming of sales – read carefully). Rising shipping costs with flat sales points specifically to fraudulent shipments.

Tip 3 – 'Most effective' usually means independent and unannounced. When asked for the best method to detect inventory larceny, favour physical counts performed by independent personnel, preferably unannounced, over reliance on records maintained by the custodian.

Tip 4 – Distinguish misuse from larceny. If the employee intends to return the asset, it is misuse, not larceny. True/false questions often test this distinction.

Tip 5 – Shrinkage is the key vocabulary word. Shrinkage is the unaccounted-for reduction in inventory – the difference between perpetual (book) inventory and physical inventory. The thief's objective in concealment is to hide shrinkage; the examiner's objective is to expose it.

Tip 6 – Segregation of duties appears in both prevention and detection questions. A person who can request, receive, and record inventory – or who ships goods and also records sales – is the highest-risk profile. If a scenario describes such a person, expect the answer to involve that lack of segregation.

Tip 7 – Watch for absolutes in true/false items. Statements such as 'perpetual inventory records alone are sufficient to detect theft' or 'inventory padding can be detected by reviewing financial statements' are false. Padding is detected physically; records are tested against counts.

Tip 8 – Statistical sampling questions. Remember that sampling is used because the examiner cannot test every document and wants to draw conclusions about the population; stratification lets the examiner focus on high-risk, high-value items.

Tip 9 – Read for the direction of the discrepancy. Book inventory higher than physical = goods missing (theft or unrecorded sales). Physical higher than book may indicate unrecorded purchases, padding gone wrong, or receiving fraud. Make sure you know which way the scenario points.

Tip 10 – Eliminate answers belonging to other schemes. Questions sometimes include distractors drawn from cash schemes (e.g., bank reconciliations, lapping) that are irrelevant to inventory. Discard them quickly.

9. Practice Questions

Q1. An examiner notices that cost of goods sold increased 12 percent while sales were unchanged and the gross margin declined. Which scheme does this most likely indicate?
A: Theft of inventory (non-cash larceny). The missing goods flow into COGS because they are not on hand at year-end, inflating COGS and reducing margin.

Q2. Which of the following is the most effective procedure for detecting physical padding of inventory?
A: Personally opening sealed containers and performing independent test counts during an unannounced physical inventory. Analytical review of financial statements will not reveal padding.

Q3. True or false: An employee who creates a fictitious sales order so goods are shipped to an accomplice, then writes the receivable off as uncollectible, is engaged in a fraudulent-shipment scheme concealed through fictitious sales and receivables.
A: True.

Q4. Which document comparison is most useful in detecting fraudulent shipments?
A: Matching shipping documents (bills of lading, packing slips) to approved sales orders and customer invoices; shipments lacking a corresponding sale are red flags.

Q5. Unexplained adjusting entries to perpetual inventory records are a red flag for which concealment technique?
A: Altered inventory records used to force book quantities to agree with reduced physical quantities.

10. One-Paragraph Recap

Inventory theft is larceny of non-cash assets through simple removal, requisition and transfer abuse, receiving manipulation, or fraudulent shipments. Perpetrators conceal it by altering records, booking fictitious sales, writing off goods, or physically padding counts. Fraud examiners detect it through statistical sampling of documents, review of perpetual inventory records and adjustments, reconciliation of shipping and receiving documents, independent and unannounced physical counts, analytical review of COGS, margins, shrinkage, and write-offs, and computer-based trend analysis by location, item, and employee. On the exam, link every concealment method to its detection counterpart, memorize the analytical red flags, and remember that independent physical verification is the gold standard.