Originally published at htpbe.tech. The version on htpbe.tech stays in sync with the latest detection algorithm — refer to it for the canonical text.
The Association of Certified Fraud Examiners puts expense reimbursement fraud at a median loss of $40,000 per scheme, with a median duration of two years before detection. That two-year gap is not an accident. It is the predictable result of a control environment that validates everything about an expense claim except the one artifact the claim rests on: the receipt PDF itself.
First, a quick boundary, because this site covers two different fraud classes that people often confuse. Vendor invoice fraud — a supplier’s invoice intercepted and edited in transit, or a fake supplier billing for nothing — is a different document, a different submitter, and a different control. We cover it in the accounts payable invoice fraud breakdown. This post is about the other case: employee-submitted expense receipts and hotel folios in a travel-and-entertainment (T&E) reimbursement workflow. Same finance team, completely different blind spot. The vendor-invoice control is the three-way match. The expense-receipt control is the expense policy. Neither one looks at the file.
