Cash Receipts Skimming at a Membership Nonprofit
Riverbend Community Partners is a membership nonprofit with annual revenue of $2.1 million, including about $600,000 of cash donations collected at events and drop boxes. The bookkeeper opens the mail, prepares the deposit, records receipts in the accounting system, and performs the bank reconciliation. An anonymous tip alleges that cash is being taken. Preliminary review shows that deposits are consistently made four to nine days after receipt, several prenumbered receipt forms are missing, and the deposit total for the annual gala was $18,000 lower than the event chair's tally. The bookkeeper has refused to provide bank statements directly and has been the only person with access to the safe. The board wants to know whether a loss occurred, how large it is, and what to do next. No external audit has been performed in three years, and the accounting system has no audit trail.
1. Outline the investigative steps and evidence you would gather, and explain why the reconciliation is a key control failure.
Read the worked answer
The investigation should begin by preserving evidence and obtaining independent confirmations.
- Secure the accounting system. Obtain a forensic image of the accounting computer and server before anyone changes records. Export the general ledger, receipt logs, deposit records, and user activity. Because there is no audit trail, the image is the best evidence of the records as they exist.
- Obtain bank records directly. Send a signed authorization or subpoena to the bank for statements, deposit slips, canceled checks, and images for the full period. Do not rely on the bookkeeper's copies.
- Collect source documents. Gather prenumbered receipt books, event tallies, pledge cards, drop-box logs, deposit slips, and board minutes. Reconcile the sequence of receipt numbers and identify gaps.
- Interview personnel. Interview the bookkeeper, executive director, board treasurer, event chair, and volunteers separately. Ask who had access to cash, who prepared deposits, and who reconciled the bank statement.
- Perform data analytics. Compare daily receipts to deposits by date and amount. Look for deposits lagging receipts, round-number deposits, missing receipt numbers, and deposits made after the bookkeeper returned from leave.
- Test for lapping. Trace subsequent receipts to earlier customer or donor accounts to see whether later cash was used to cover earlier shortages.
The reconciliation is a key control failure because it is the independent check that compares recorded receipts to bank deposits. Here the same person who had custody of cash also recorded receipts and reconciled the bank account. That combination allows a shortage to be concealed by altering the records or by holding deposits and covering them with later receipts. An independent reconciliation by the treasurer or a board member would have detected the four-to-nine-day deposit lag and the missing receipt forms.
2. Describe methods to quantify the loss, including at least one limitation of each method.
Read the worked answer
Several methods can be used, and the strongest report will triangulate.
Specific identification. Match missing prenumbered receipts and event tallies to deposits. This is the most defensible method because it ties to documents. Limitation: the records are incomplete and the bookkeeper controlled them, so the method may capture only the identified shortages, not the full loss.
Deposit analysis. Compare expected cash receipts, based on event tallies, receipt logs, and historical collection rates, with actual deposits. The difference is an estimate of skimming. Limitation: expected receipts may be uncertain, and timing differences can create false positives. It estimates the total but does not prove who took the cash.
Statistical sampling. Select periods or events, reconcile them in detail, and extrapolate the shortfall to the full period. Limitation: extrapolation assumes the sampled periods are representative; if the scheme changed over time, the projection may be unreliable.
Net worth analysis. Compare the suspect's known assets, liabilities, and expenditures with reported income to identify unexplained wealth. Limitation: it can suggest unreported income but does not tie the amount to the nonprofit and may reflect legitimate gifts, loans, or spousal income.
Lapping analysis. Trace subsequent receipts to earlier accounts to identify concealment. Limitation: it requires detailed transaction records, which may be missing here.
The report should present a range and explain that the $18,000 gala shortfall is a floor, not necessarily the total loss. The analyst should also consider whether the four-to-nine-day deposit lag indicates float or concealment.
3. Recommend controls and explain how the findings should be reported to the board and outside parties.
Read the worked answer
The board should adopt immediate and long-term controls.
- Segregation of duties. Separate custody of cash, recording of receipts, and bank reconciliation. If staff is too small, the board treasurer or a volunteer should perform the reconciliation.
- Dual custody and deposit timing. Two people should count event cash, sign the tally, and deposit funds within one business day. Use a safe with dual control and a log.
- Prenumbered receipts. Issue a receipt for every cash donation, including drop-box gifts, and account for the sequence.
- Independent bank reconciliation. The reconciler should receive the bank statement directly from the bank, not through the bookkeeper.
- Surprise audits and external review. Conduct unannounced cash counts and engage an independent accountant for an annual review or audit.
- Whistleblower policy and background checks. Provide a confidential reporting channel and screen employees with financial duties.
The findings should be reported in a factual, non-accusatory forensic report. It should describe the procedures performed, documents examined, limitations, and the estimated loss range. The report should not state a legal conclusion of guilt. The board should consult counsel before interviewing the bookkeeper further or referring the matter to law enforcement, and should preserve all evidence. If the matter proceeds to litigation, the analyst should be prepared to testify about the methodology, the control failures, and the limitations of the records.