Accounts receivable fraud takes two shapes. Employees with access to incoming payments steal cash and cover the missing balances by juggling later payments, writing off the account as uncollectible, or processing a fake allowance. Management, under pressure to hit numbers, invents sales that never happened or ignores returns that will erase the ones that did. The first drains the company’s cash. The second poisons the financial statements and pulls investors, lenders, and auditors into the deception. Both exploit the same weakness: one person with too much control over how payments are received, recorded, and adjusted.
Lapping Customer Payments
Lapping is the classic employee scheme. Someone who opens the mail and posts payments steals a customer’s check, then applies the next customer’s payment to the first account to keep the ledger clean. The second customer now looks delinquent, so the third customer’s payment covers the second. The cycle keeps growing, and the fraudster has to keep a private tracking system to remember which payment went where.
The scheme is fragile. One misapplied payment sends an overdue notice to a customer who already paid, and that phone call to the billing department is often what opens the investigation. The more common failure is simpler: the employee takes time off. A substitute processes the mail, tries to match deposits against open balances, and sees the numbers do not line up. This is why the FDIC has endorsed mandatory two-week consecutive vacations as a fraud-prevention practice since 1995, and the logic applies well outside banking.
Companies can also catch lapping by comparing check receipt dates against posting dates. A repeated delay between when a check arrives and when it hits the ledger is worth investigating. Independent reconciliation of deposits against the receivables ledger catches the mismatch before it compounds.
Skimming and Writing Off the Balance
Skimming is cleaner. The employee intercepts a customer’s check before it is ever recorded, so no audit trail shows the money existed. The accounting system simply carries an unpaid invoice, and eventually the customer calls to say they already paid.
The standard cover is a bad debt write-off. The fraudster processes a journal entry removing the customer’s balance from accounts receivable and books it as uncollectible. The stolen amount disappears into the company’s bad debt expense, sitting quietly among legitimate write-offs for customers who genuinely could not pay. Companies with high volumes of small uncollectible accounts are the most exposed, because one more write-off barely registers.
Unlike lapping, this is a one-time adjustment per theft. There is no rolling cycle. But it does leave a trail: bad debt expense that runs higher than sales history or peer benchmarks would predict. A controller who tracks write-off rates over time can see the inflation. The essential control is keeping cash receipts, ledger maintenance, and write-off approval in different hands.
Creating Fictitious Sales
Fictitious sales are a management scheme, not an employee one. The motive is usually pressure to hit earnings targets, prop up the stock price, or satisfy loan covenants. Someone records a sale that did not happen by debiting accounts receivable and crediting revenue. The balance sheet gains an asset, the income statement gains sales, and both numbers are fiction. The sale may be booked against a made-up customer or against a real customer who never ordered anything.
The fake receivable will never be paid, and an aging invoice with no collection activity draws attention. So the scheme needs a second move. One approach is a phony credit memo that reverses the receivable as if the customer returned the goods; this clears the balance but also erases the revenue that was the point. Timing matters, and the reversal has to wait until the inflated revenue already appeared on a quarterly or annual report.
The more durable approach is holding the receivable until it looks legitimately uncollectible and writing it off as a bad debt. The revenue stays on the income statement for the period it was recorded, and the write-off lands as an expense in a later period. Fraud and concealment sit in different reporting periods, which makes the trail harder to follow.
The SEC treats revenue manipulation as one of the most serious forms of accounting fraud. Monsanto paid an $80 million penalty after the SEC found it had booked substantial revenue from sales incentivized by rebate programs but delayed recording the associated costs, materially misstating earnings over a three-year period.1U.S. Securities and Exchange Commission. Monsanto Paying $80 Million Penalty for Accounting Violations Auditors examining receivables look specifically for unusual concentrations of large, new receivables recorded just before a reporting cutoff.
Abusing Sales Returns and Allowances
The sales returns and allowances account reduces gross revenue to reflect returned goods and after-sale price concessions. Fraudsters push it in opposite directions depending on what they are hiding.
Fake Allowances That Hide Stolen Cash
When an employee steals a customer payment, the open balance in accounts receivable still needs to disappear. One method is processing a fictitious allowance or discount that zeroes out the customer’s account, making it look as if the company voluntarily reduced the price. The stolen cash vanishes behind a routine-looking concession. Net revenue drops slightly, but that is the cost of concealment. Small allowances rarely trigger review, and the fraudster fabricates whatever paperwork is required.
Ignoring Real Returns to Inflate Revenue
The opposite abuse is channel stuffing. The company pushes excess inventory to distributors or retailers near a period-end, books the shipments as completed sales, and everyone involved knows much of that inventory is coming back. Under current accounting standards, a company that sells products subject to a right of return must recognize revenue only for the amount it expects to keep and must record a refund liability for the portion it expects back. Deliberately understating that liability inflates both revenue and assets.
Channel stuffing is inherently temporary. Returns come in eventually, forcing a revenue reversal. A quarter with a sales spike followed by a return surge is the signature pattern regulators look for.
Federal Criminal and Civil Consequences
No single federal statute covers accounts receivable fraud. Prosecutors pick charges based on how the scheme operated and who it harmed.
Mail and Wire Fraud
Nearly every AR fraud scheme uses the mail or an electronic communication somewhere in its execution, and that opens the door to mail fraud and wire fraud charges. Both carry a maximum of 20 years in prison per count. If a financial institution is affected, the ceiling rises to 30 years and a fine of up to $1 million.2Office of the Law Revision Counsel. United States Code Title 18 – 1343 The mail fraud statute carries identical penalties.3Office of the Law Revision Counsel. United States Code Title 18 – 1341 The threshold for “use of wires” is low. A single email, wire transfer, or phone call in furtherance of the scheme is enough.
Securities Fraud
When a public company’s financial statements are involved, federal securities fraud charges apply. Knowingly executing a scheme to defraud investors in connection with registered securities carries up to 25 years in prison.4Office of the Law Revision Counsel. United States Code Title 18 – 1348 The Securities Exchange Act separately prohibits any manipulative or deceptive practice in connection with the purchase or sale of securities.5Office of the Law Revision Counsel. United States Code Title 15 – 78j Willful violations of the Exchange Act’s reporting, books-and-records, or internal controls provisions can result in fines up to $5 million for individuals and $25 million for companies, plus up to 20 years in prison.6GovInfo. United States Code Title 15 – 78ff
Sarbanes-Oxley
Sarbanes-Oxley added personal criminal liability for executives who sign off on fraudulent financials. A CEO or CFO who willfully certifies a periodic report knowing it does not comply with securities laws faces up to $5 million in fines and 20 years in prison.7Office of the Law Revision Counsel. United States Code Title 18 – 1350 Falsifying records or making false entries with the intent to obstruct a federal investigation carries up to 20 years.8Office of the Law Revision Counsel. United States Code Title 18 – 1519 That provision reaches the shadow ledgers, fabricated credit memos, and doctored aging reports that typically accompany these schemes.
Civil exposure runs alongside criminal charges. The SEC can pursue disgorgement, civil monetary penalties, and officer-and-director bars. In the Monsanto case, the company paid $80 million and was required to retain an independent compliance consultant, and three executives paid separate penalties.1U.S. Securities and Exchange Commission. Monsanto Paying $80 Million Penalty for Accounting Violations
Controls That Stop These Schemes
Every scheme described above depends on one person holding too much control. The countermeasures are not complicated, but they add friction and require commitment to enforce.
Segregation of Duties
The single most effective control is making sure no one person can receive cash, post it to the ledger, and approve adjustments or write-offs. Federal law requires public companies to maintain internal accounting controls that limit asset access to authorized personnel and periodically compare recorded balances to actual assets.9Office of the Law Revision Counsel. United States Code Title 15 – 78m Small companies with thin staff can compensate by having a senior manager independently reconcile bank deposits against the receivables ledger on a regular schedule.
Mandatory Consecutive Leave
Lapping needs the fraudster present to keep juggling. Requiring anyone who handles cash or receivables to take at least one or two consecutive weeks of vacation each year forces a substitute in, and the substitute’s fresh eyes catch the mismatches the regular employee has been carefully managing.
Lockbox Banking
A lockbox arrangement removes employees from payment handling. Customer checks go to a post office box controlled by the company’s bank, the bank processes the deposits, and the company receives a record of what came in. No employee touches the incoming cash, which closes the door on both lapping and skimming at the source.
Confirmations and Aging Review
External auditors confirm receivable balances by contacting customers directly. A fabricated customer will not respond, and a real customer billed for a fake order will deny it. Auditors also study the aging report closely, because a sudden concentration of large new receivables just before a reporting deadline, or an unusual buildup of old unpaid balances, is where fictitious sales tend to surface.
Analytics and Write-Off Monitoring
Forensic accountants apply statistical tests such as Benford’s Law to flag fabricated entries. Manually invented numbers rarely follow the leading-digit distribution that naturally occurring data produces, and clusters that deviate from the expected pattern get pulled for review. Because so many schemes end with a bad debt write-off, tracking write-off rates over time is a simple but powerful check. A jump in bad debt expense that cannot be explained by the customer base or the economy is a signal worth acting on, and requiring independent approval for write-offs above a set dollar threshold forces a second set of eyes onto the entries most often used as cover.