Payroll Fraud: Why HR Should Enter Payrates & Accountants Only Enter Hours
Payroll systems are fraud magnets – but proper segregation of duties (SoD) stops it cold.
HR enters payrates (fixed employee data like $25/hr base).
- Accountants enter hours only (variable time punches).
- Let one person do both? Instant risk for inflated rates + hours = embezzlement. Our 60-second video explains – ideal for business owners and forensic audits.
The Payroll Fraud Triangle: Opportunity via Poor SoD ACFE reports payroll schemes cost $50B+ yearly. Key vulnerability:
- HR Role: Input payrates (salary, overtime multipliers), verified against contracts.
- Accountant Role: Input hours/approvals, no access to change rates.
- Fraud Scenario: Single user jacks rates 20% + pads hours undetected.
Takeaways
- HR: Payrates entry (secure, audited quarterly).
- Accountant: Hours only (time clocks, approvals).
- Red Flag: Combined access logs in payroll software.
- Fix: Role-based permissions (e.g., ADP, QuickBooks).
Why Payroll Fraud Is So Difficult to Detect Without Segregation of Duties
Payroll fraud is one of the most common and costly forms of occupational fraud affecting Colorado businesses. According to the ACFE, payroll schemes account for billions in annual losses and persist for a median of 24 months before detection, nearly twice as long as the average fraud scheme. The reason is simple: when one person controls both payrate entry and hours entry, there is no independent check on either number.
The segregation of duties principle is straightforward. HR owns the fixed data: employee names, pay rates, salary levels, overtime multipliers, and benefit deductions. These numbers change infrequently and should require HR authorization and periodic audit against employment contracts. The payroll accountant owns the variable data: hours worked, time punches, and shift approvals. These change every pay period and should feed directly from time clock systems with no ability to modify underlying pay rates.
When a single employee has access to both functions, as is common in small and mid-size businesses with lean HR and accounting staff, a straightforward fraud becomes possible. An employee with combined access can increase their own pay rate by a small percentage (small enough to avoid triggering automatic alerts), add hours that were never worked, or create ghost employees whose paychecks redirect to a personal account. Any one of these schemes, sustained over months or years, can result in substantial losses that are difficult to detect without a forensic review of payroll records.
Common Payroll Fraud Schemes a Forensic Accountant Looks For
| Scheme | How It Works |
|---|---|
| Unauthorized pay rate increases | An employee with payroll system access increases their own or a co-conspirator's hourly rate or salary by a small percentage, often below automatic alert thresholds |
| Ghost employees | Fictitious employees are added to the payroll system with paychecks directed to a bank account controlled by the fraudster. Common where one person controls both employee setup and payroll processing. |
| Falsified hours | Hours are manually entered or overridden above what time clock records show. Common where manual timesheet approval is the only control and no independent reconciliation to time clock data occurs. |
| Terminated employee payments | Paychecks continue to be processed for employees who have left the organization, with funds redirected by the payroll processor. Common where HR and payroll termination processes are not linked. |
| Overtime manipulation | Overtime multipliers are inflated or overtime hours are fabricated. Particularly effective where overtime is common and large week-to-week variation is normal and unquestioned by management. |
When a Forensic Accountant Gets Involved in a Payroll Fraud Case
When a Colorado business suspects payroll fraud, a forensic accountant's role goes beyond reviewing timesheets. A forensic investigation of payroll fraud typically involves reconciling payroll disbursements to time clock records and employment contracts, verifying the existence of all employees on the payroll roster, analyzing pay rate change logs for unauthorized modifications, tracing payroll disbursements to confirmed employee bank accounts, and quantifying the total loss by scheme type and time period.
The resulting forensic report documents the methodology, findings, and total loss in a format suitable for use in civil litigation, criminal referral to law enforcement, or an insurance claim under the organization's fidelity bond or crime policy.
Hovland Forensic & Financial provides payroll fraud investigations for businesses and attorneys throughout Colorado, including Denver, Colorado Springs, Fort Collins, Boulder, Pueblo, and Grand Junction, as well as clients nationwide.
Concerned about payroll fraud in your Colorado business? Hovland Forensic provides confidential payroll fraud investigations with same-day intake and transparent $250/hour billing. Schedule a free confidential consultation →
Implement Today
Review access:
- Who edits rates vs. hours?
- Add approvals/workflows.
- Forensic audit?