Latest / Money, Trust and Deception / She Controlled the Books and 26 Million Dollars Disappeared

Transcript

She Controlled the Books and 26 Million Dollars Disappeared · Money, Trust and Deception

0:00
Speaker 1: Every business depends on trust. Someone can approve a payment,
0:03
someone can access the bank account, someone receives the statements,
0:06
someone enters the numbers into the accounting system, and someone
0:08
tells everyone else whether those numbers are correct. At a
0:11
construction company in Las Vegas, Cynthia Marie Marabella occupied a
0:15
position close to the center of that system. She was
0:17
the controller. She managed accounts, payable accounts, receivable, financial statements,
0:22
and information coming from banks and credit card companies. It
0:25
was the kind of job that required enormous trust, and
0:28
according to federal prosecutors, that trust became the foundation of
0:31
a fraud worth more than twenty six million dollars. The
0:34
remarkable part was not a single enormous transfer. The money
0:37
disappeared through mechanisms that could look like ordinary business activity, checks,
0:42
credit cards, invoices, accounting records, bank statements. The basic machinery
0:46
of a company became the machinery of the deception. This
0:49
is money, trust and deception stories about what happens when
0:52
credibility becomes more powerful than evidence. The scheme began around
0:56
January twenty eighteen. Marabella worked as controller for a cons
1:00
instruction company based in Las Vegas. A controller occupies an
1:03
unusually important position inside a business. The title may not
1:07
attract the attention given to a chief executive, but financially
1:10
the role can be critical. A controller helps oversee accounting.
1:14
They may monitor money entering the business, money leaving it,
1:16
payments to suppliers, financial reports, bank records, and internal controls.
1:21
In a healthy system, those responsibilities help a company understand
1:24
what is happening to its money, But there is a
1:26
fundamental weakness in any financial control. A control is only
1:30
useful if the information feeding it is trustworthy. Marabella had
1:33
a boyfriend named William Kiallainui Costa. Costa owned a security company.
1:38
According to court documents, Marabella and Costa developed multiple ways
1:41
to take money from her employer. One method involved bonus checks.
1:45
Legitimate companies issue bonus checks all the time, there is
1:48
nothing unusual about seeing one inside the accounting system, But
1:51
prosecutors said Marabella and Costa fraudulently duplicated bonus checks. Those
1:56
duplicated checks were then deposited into bank accounts they controlled.
2:00
The technique exploited something important. A fraudulent transaction does not
2:03
always need to look completely different from a legitimate one.
2:06
Sometimes it is safer for the fraudster. If it looks
2:09
almost identical, a normal payment provides camouflage. If the company
2:13
expects bonus payments to exist, another payment with similar characteristics
2:16
may attract less attention. Then there were credit cards. According
2:20
to prosecutors, Marabella and Costa open cards in other people's names.
2:24
They made unauthorized purchases. Then the bills for those cards
2:27
were paid using stolen company money. Again, there were multiple layers,
2:30
the purchase itself, the identity connected to the card, the
2:33
money used to pay the balance. Each layer made the
2:36
trail more complicated, but perhaps the most important part of
2:39
the scheme involved records. If money disappears from a business,
2:42
eventually someone should notice bank balances, change, expenses, increase account
2:47
stop reconciling. Cash flow begins to look wrong. So stealing
2:50
money creates a second problem. The fraudster has to explain
2:52
the missing money. Prosecutors said Marabella supplied false accounting records
2:56
to her employer. She also created forged and false bank statement.
3:00
Think about the significance of that. A bank statement is
3:02
supposed to be an independent reality check. The internal accounting
3:06
system says the company has a certain amount of money.
3:09
The bank statement helps confirm whether that number is true.
3:12
But what happens if the person responsible for presenting the
3:15
bank information also falsifies the bank statement, The verification layer disappears.
3:20
The company believes it is comparing one record against another.
3:23
In reality, both versions may be controlled by the same deception.
3:26
Marabella and Costa also used fictitious invoices for merchant accounts.
3:31
The invoices were paid with company money. Invoices are another
3:34
ordinary part of business. Construction companies can process enormous numbers
3:38
of payment materials, equipment, subcontractors, services, insurance, transportation, maintenance. An
3:43
invoice does not look suspicious merely because it requests money.
3:46
That is why invoice fraud can be so effective. The
3:49
question is not whether an invoice exists. The question is
3:52
whether the underlying transaction exists, was anything actually purchased, was
3:56
the vendor legitimate, did the company receive what it paid for?
3:59
And does someone independent verify those facts. According to federal authorities,
4:02
the scheme continued from early twenty eighteen until approximately February
4:06
twenty twenty five, more than seven years. That length of
4:09
time is important. A large theft does not necessarily begin
4:13
as a large theft. Internal fraud can grow because early
4:16
transactions succeed, money leaves, nobody notices. Another transaction follows than another.
4:21
Every successful theft teaches the fraudster something about the company's controls,
4:24
Which records are reviewed, which are ignored, who asks questions,
4:28
who does not, How large a transaction can be before
4:30
it attracts attention. Over time, the fraudster can learn the
4:33
financial nervous system of the organization. And Marabella had another advantage.
4:38
She was already part of that nervous system. She did
4:40
not need to hack into the company. She did not
4:42
need to impersonate an executive in an email. She did
4:45
not need to convince an employee to reveal a password.
4:48
Her job gave her legitimate access. This is what makes
4:51
insider fraud different. The system recognizes the person, the credentials work,
4:55
the employee is supposed to be there, Security measures designed
4:58
to keep outsiders away made they do very little against
5:01
someone who already has permission. The money financed a very
5:04
different life outside the office. According to the Justice Department,
5:07
Marabella and Costa use stolen funds to live in lavish mansions.
5:10
They drove expensive vehicles. The money helped pay private school tuition.
5:14
There were luxury purchases, purses, shoes, clothing, jewelry. Marabella also
5:19
sold high end merchandise through an online consignment business. Earlier
5:23
court records said the pair received more than two hundred
5:26
forty five thousand dollars from selling merchandise. Luxury spending attracts
5:30
attention in stories like this, but focusing too heavily on
5:33
handbags and cars can obscure the more important question, how
5:36
could more than twenty six million dollars leave a company
5:39
before the fraud was stopped? That is, the business lesson
5:42
Fraud on this scale requires more than dishonesty. It requires
5:45
an environment in which dishonest activity can avoid effective detection.
5:49
Consider the responsibilities involved. One person has access to financial records.
5:54
That person understands how transactions are categorized. They understand what
5:57
management expects to see. They may know when accounts are reconciled.
6:01
They may know which documents auditors request. If the same
6:04
person can initiate activity and influence the evidence used to
6:07
review that activity, a dangerous concentration of control develops. Accountants
6:12
often describe one defense against this problem as segregation of duties.
6:16
The idea is straightforward. The person who creates a transaction
6:19
should not necessarily be the same person who approves it.
6:22
The person who records money should not be the only
6:25
person reconciling the bank. Account statements can be sent independently
6:28
to someone else. Large or unusual payments can require additional approval.
6:33
Vendor information can be independently verified. The purpose is not
6:36
to assume every employee is dishonest. It is to make
6:39
dishonesty harder to conceal. Good controls protect honest employees too.
6:43
They create evidence showing that transactions were handled properly, But
6:46
controls can become ceremonial. A manager receives a report. The
6:50
report looks professional, the totals appear reasonable, so the manager
6:54
approves it. Yet if the person preparing the report also
6:57
controls the information underneath it, the report may provide reassurings
7:00
without verification. This is one of the central ideas in
7:03
financial deception. Documentation is not automatically evidence. A fake bank
7:08
statement is still a document, A fictitious invoice is still
7:10
an invoice. A fraudulent check still moves through a bank.
7:14
The existence of paperwork does not prove the transaction behind
7:17
it was legitimate. Eventually, the scheme ended. Marabella pleaded guilty
7:21
in April twenty twenty six to wire fraud and conducting
7:24
a monetary transaction involving criminally derived property. Then came sentencing.
7:29
On July twenty ninth, twenty twenty six, a federal judge
7:32
sentenced Cynthia Marie Marabella to five years and ten months
7:35
in prison. She was also ordered to repay the money
7:38
she stole. Her boyfriend, William Costa separately pleaded guilty to
7:42
wire fraud in a monetary transaction involving criminally derived property.
7:46
His sentencing was scheduled for September. The case had moved
7:49
from accounting records to criminal records. But there is a
7:52
broader reason this story matters. Most businesses worry about being
7:55
attacked from outside hackers, scammers, fake vendors, phishing emails, cyber crimminals.
8:00
Those threats are real, but a company's most valuable systems
8:03
are often accessible to people it already trusts. That is unavoidable.
8:07
Employees need access to do their jobs. The solution cannot
8:10
be zero trust in the literal sense. A company where
8:13
nobody trusts anyone cannot function. The better principle is independent
8:16
verification trust the employee verify the transaction Trust the accountant,
8:20
reconcile the bank independently, trust the invoice, confirm the vendor,
8:24
Trust the financial report, but make sure the person producing
8:27
the report is not the only person capable of determining
8:30
whether it is true. Marabella's case did not depend on
8:33
a revolutionary technology. There is no secret algorithm, no cryptocurrency
8:37
liquidity pool, no extraordinary investment strategy, no billionaire promising impossible returns.
8:43
There were checks invoices, credit cards, bank statements, and accounting records,
8:47
ordinary tools inside an ordinary business. That may be what
8:50
makes the case so useful. Fraud does not need to
8:53
enter through the front door, disguised as an opportunity. Sometimes
8:56
it already has a desk inside the building. The company
8:58
trusted Cynthia Marrabell to help tell it where its money was.
9:01
For years, prosecutor said she was helping move that money
9:04
somewhere else. More than twenty six million dollars disappeared, and
9:08
much of the machinery designed to record the truth was
9:11
being used to conceal it. This is money trust and
9:14
deception because sometimes the person most capable of hiding the
9:18
missing money is the person responsible for counting it. D
9:21
jho b I Letter one e bf t Marbella for
9:24
a cost L letterwe e A five why hanhai mue
9:26
saut r I letter one ec seven U dola tillwineb
9:29
kontai trong gid stroke O letter one, e A one
9:31
and D stroke letter one EA seven, U nam high
9:33
engen and letter one B zero letter one E d
9:35
d I tom dstroke letterwon e BfN thong high nam
9:38
hi ngen hi muelam cock fuong th letter onwe e nine,
9:41
C D stroke letter one, b zero letter one, e E
9:44
three c zoc nh letter one e A d n
9:46
g letter one e D three m duplicated bonus checks,
9:49
unauthorized credit cards, false accounting records, forged bank statements fora
9:53
fictitious invoices Marbella B letter one ec b tire nam
9:57
nam M letter one B zero letter one E D
9:59
d I thought one two VETDI stroke letter one B
10:01
zero letter one, E three, C L letter one, e
10:03
C seven and H haw and t R letter onwenty
10:05
A three S letter one E D one, t I
10:07
letter one, E C one N dot L letter one
10:09
e A F five y B letter one eight nine
10:11
two fop hoa killer onony f three one H l
10:13
ar one E D three so chin t H letter
10:14
one E nine, C C letter one E seven A
10:16
d j V letter one E C one V letter
10:18
one E five. Cynthia R. Bell HD t PS slash
10:21
slash w w W, Justice Gov slash, us O, n
10:24
V slash pr slash Henderson woman sentenced over five years
10:27
prison and bezzling over twenty six million employer Utum source
10:30
equals chacked Com one H T t P S slash slash,
10:34
w w W, Justice Gov slash, uz O and V
10:37
slash pr slash. Henderson woman sentenced over five years prison
10:40
and bezzling over twenty six million employer Utum source equals
10:43
checked Comm District of Nevada. Henderson woman sentenced to over
10:47
five years in prison for embezzling over dollar twenty six
10:50
million from employer. United States Department of Justice