Practical guide for Florida business owners, CFOs, HR leaders and corporate counsel.
Most employee fraud is not discovered by an audit. It is noticed by a person: a bookkeeper who sees a vendor she doesn’t recognize, a manager who wonders how a coworker affords a new boat, an owner who can’t reconcile a bank statement. What happens in the days after that first suspicion often determines whether the company recovers anything, whether the evidence holds up, and whether the business ends up defending itself instead.
This guide covers common red flags of employee fraud and embezzlement, and the first steps a Florida business should take. It is general information, not legal or accounting advice. Talk to your attorney early.
Behavioral red flags
No single sign proves wrongdoing, and many have innocent explanations. Patterns matter more than any one item.
- Refusing to take vacation or share duties. Some schemes need constant maintenance, so the person can’t let anyone else touch the work.
- Living beyond apparent means. New vehicles, property or spending that doesn’t fit the salary, without an obvious explanation.
- Unusually close relationships with a vendor or customer. Frequent personal contact, gifts, or resistance to changing suppliers.
- Defensiveness about routine questions. Irritation when asked for documentation, or attempts to control who reviews certain accounts.
- Working odd hours alone. Coming in early or staying late when no one else is around, especially in finance or purchasing roles.
- Known financial pressure. Debt, a failing side business, or gambling problems are common motivations.
Transactional and record red flags
- Vendors with no real footprint. A P.O. box or residential address, no website, no phone, or a newly formed company paid large amounts.
- Vendor address or bank account matching an employee. One of the clearest signs of a ghost-vendor scheme.
- Round-dollar or just-under-approval payments. Invoices repeatedly set just below a sign-off threshold.
- Duplicate or out-of-sequence invoices. Same amount, slightly different invoice numbers.
- Manual checks, voids and adjustments. Frequent write-offs, credits or voided transactions by the same user.
- Payroll anomalies. Employees no one knows, unusual overtime, or changes to direct-deposit details.
- Expense report patterns. Missing receipts, personal charges, or travel that doesn’t match the calendar.
- Inventory shrinkage. Losses concentrated on certain shifts, locations or product lines.
What to do first (and what not to do)
1. Don’t confront the employee yet
The instinct is to call the person in and ask. That usually gives them time to delete files, move money, coordinate stories with others, or claim retaliation. Keep the circle small until you understand the facts.
2. Call your attorney
Counsel can advise on employment law risks, whether to involve law enforcement, insurance notice requirements, and how to structure the review. Retaining investigators and accountants through counsel may help protect the work, which is a decision for your lawyer.
3. Preserve evidence quietly
Secure records before anyone is tipped off: accounting data, bank statements, vendor files, emails and company devices. Change approval rights or passwords only if counsel agrees it won’t alert the employee prematurely. Avoid having untrained staff dig through a suspect’s computer; that can damage digital evidence.
4. Check your insurance
Many commercial crime or fidelity policies have strict notice and proof-of-loss deadlines. Missing them can cost you coverage.
5. Define the questions
Is the vendor real? Who owns it? Is the employee connected to it? How much money moved, and where did it go? Clear questions keep an investigation focused and affordable.
6. Bring in the right specialists
Forensic accountants follow the money inside your books. A licensed private investigator develops the facts outside them: who is behind a vendor, what assets the person holds, whether there are undisclosed businesses, and what witnesses know.
How a private investigator helps
In an employee fraud or embezzlement matter, our work typically includes:
- Vendor verification: corporate filings, registered agents, addresses, site visits and ownership research to see whether a vendor is real and who is behind it.
- Relationship mapping: connections between the employee, relatives, associates and the companies being paid.
- Asset research: real property, vehicles, vessels, business interests and public liens, which can matter for recovery and for any civil claim.
- Background research: prior employment issues, litigation, and undisclosed outside businesses.
- Surveillance, where lawful and appropriate: for example, documenting that an employee on a “client visit” is at another business.
- Witness interviews at counsel’s direction, with written summaries.
- An organized report and timeline that leadership, counsel, insurers and, if needed, prosecutors can follow.
We work within Florida law. We do not access personal accounts, obtain bank records by pretext, or record private conversations without consent. Evidence gathered the right way is evidence you can use.
After the facts are in
With a clear factual record, the company and counsel can decide on next steps: an interview with the employee, termination, an insurance claim, a civil action, a referral to law enforcement, or changes to internal controls. The record also helps defend the decision if the employee challenges it later. Our article on investigating suspected vendor fraud and our brief on compliance investigations in Florida business litigation go deeper on how these matters become litigation.
Prevention is cheaper than recovery
Once the matter is resolved, use what you learned: separate duties for vendor setup and payment, require mandatory vacations in finance roles, verify new vendors, review approval thresholds, and keep a confidential reporting channel. Periodic compliance audits and vendor screening can catch problems early.
Florida’s local PIs for complex business cases
Many investigation firms won’t take embezzlement, AML or compliance cases. They are a core part of what we do. MAYN Investigations is based in Central Florida and works from Jacksonville to Naples, mostly in Central Florida, with a team that brings military and law enforcement backgrounds and 24/7 availability. Learn more about our compliance and internal investigations, our business litigation investigations, or our work as a private investigator in Orlando.
Talk to an investigator, confidentially
If something in your books doesn’t add up, call (321) 340-3280 or request a confidential consultation before you confront anyone. Alexander Maynfeld, Director of Investigations, MAYN Investigations FL, Florida Agency License A3400126. Evidence Wins Cases.
