Latest / VoraPrep Audio — Professional Licensure & Certification Exam Prep / [CFE] CFE1: Differentiating Cash Receipts Fraud: Skimming, Larceny, and Register Disbursements
Transcript
- Marcus: Welcome back to VoraPrep Audio Office Hours. Emma, today’s topic is cash receipts fraud. The exam scenario a lot of us are looking at involves a place called ‘QuickMart’. Emma: Right. The convenience store with falling profits but stable inventory. And customers are complaining about not getting receipts. Marcus: Exactly. So as an investigator, you suspect cash is being stolen. But there are a few different ways that can happen. How do we start to untangle this? Emma: The single most important question you have to ask is this: was the cash stolen before or after it was recorded in the company’s accounting system? That one question is the key to figuring this out. Marcus: Before or after it hits the books. Okay, let's start with 'before'. What kind of fraud is that? Emma: That’s called skimming. It’s the theft of cash before it’s ever entered into the system. It’s often called an ‘off-book’ fraud. Marcus: Off-book. So, the company’s accounting records have no idea that money ever existed. Emma: Precisely. Think of it like a musician playing a concert. Someone could sell bootleg t-shirts in the parking lot and pocket the cash. The band’s official merchandise counter inside would have no record of those sales. The books balance perfectly because, from their perspective, that money was never there to begin with. Marcus: That makes sense. So in the QuickMart scenario, what would that look like? Emma: That would be a classic case of sales skimming. The cashier makes a sale, and the customer pays with cash. But the cashier never rings it up on the register. They just pocket the money. Marcus: And that explains why customers are complaining about not getting receipts. The transaction never happened in the system. Emma: Exactly. And it’s why skimming is so hard to detect. There’s no direct audit trail. The cash register tape at the end of the day matches the cash in the drawer. That's because the stolen money was never part of the equation. Marcus: So if there's no paper trail, what are the red flags we should be looking for? Emma: You have to look at indirect evidence. You'd see unexplained drops in sales, especially cash sales. Or you might notice significant inventory shrinkage. The hot dogs and sodas are gone, but there are no recorded sales to account for them. Marcus: Okay, so skimming is off-book theft, happening before a sale is recorded. What’s the alternative? What if the cash is recorded? Emma: Now you’re talking about cash larceny. This is the theft of money that has already been entered into the accounting system. It’s an ‘on-book’ fraud. Marcus: On-book. So this time, the money is officially in the system, and then it gets stolen. Emma: Correct. Going back to our concert analogy, this isn't the bootlegger in the parking lot. This is someone stealing cash directly from the official merchandise counter's cash box after the sales have been rung up. Marcus: Which means the theft creates an imbalance, right? The register tape will say there should be a thousand dollars, but there's only nine hundred in the drawer. Emma: Exactly right. Unlike skimming, cash larceny leaves a hole. The books won't balance. So the perpetrator has to find a way to conceal that shortage. Marcus: How would they do that? Just hope nobody notices? Emma: Sometimes. But more often they might try to cover their tracks. They could steal cash from a bank deposit before it gets to the bank, then alter the deposit slip to match the smaller amount. Or they might just take cash right from an open register drawer during a busy period. Marcus: So for cash larceny, the red flags would be more direct. You'd see the actual cash shortages at the end of a shift. Emma: Yes. You'd see discrepancies between the cash on hand and the sales records. Missing bank deposits, frequent unexplained cash shortages, or strange adjustments to cash accounts are all classic signs of cash larceny. Marcus: Okay, so we have skimming, which is off-book, and cash larceny, which is on-book. Larceny sounds like a pretty straightforward grab of cash. Is there a more deceptive way to steal on-book funds? Emma: There is, and it's a common one. It's called a register disbursement scheme. This is also an on-book fraud, but it's more sophisticated than just taking cash from the till. Marcus: How so? Emma: Instead of just creating a shortage, the perpetrator uses the register to create a fraudulent transaction. That transaction explains why cash is missing. They create a false paper trail to make the theft look like a legitimate business transaction. Marcus: So they’re not just taking the money, they're making an entry to cover it up at the same time. What would that look like? Emma: There are two primary types. The first is a false refund. The employee processes a refund for merchandise that was never actually returned. The register tape shows a valid refund, the cash drawer balances, but the employee pockets the cash. Marcus: So the paperwork looks legitimate. The system thinks a customer got their money back. Emma: Correct. The other common type is a false void. A cashier rings up a sale, the customer pays and leaves. Then, after the customer is gone, the cashier voids the sale in the system and takes the cash from the register. The original, valid sale is essentially erased. Marcus: So the register tape makes it look like the sale never happened, or was cancelled, justifying the missing cash. What are the red flags for that? Emma: You’d look for statistical anomalies. An excessive number of refunds or voids processed by one particular employee is a huge red flag. You might also see refunds for strange, even-dollar amounts. Another sign is a high volume of refunds processed for sales that were originally paid with a credit card, but the refund is given in cash. Marcus: That’s a great breakdown. Three distinct schemes. Skimming, Larceny, and Register Disbursements. On exam day, how do I apply this and quickly decide which one I'm looking at? Emma: There’s a simple decision framework. The first and most important step is the one we started with. Determine if the cash was ever recorded in the system. Marcus: So, is it on-book or off-book? Emma: Exactly. If the answer is no, it's off-book. The money was stolen before it was recorded. You're dealing with skimming. End of story. Marcus: And if the answer is yes, it was recorded? Emma: Then it’s on-book, and you have a second question to ask. Did the thief use a fraudulent transaction in the register, like a fake refund or void, to cover the theft? Marcus: Ah, I see. And if they did use a fake transaction? Emma: Then it’s a register disbursement scheme. The false paper trail is the giveaway. Marcus: And if it was on-book, but they just… took the cash, without creating a fake refund or void to cover it? Emma: Then it's cash larceny. A direct theft that leaves an obvious hole in the accounts. That simple two-question process will lead you to the right answer every time. Just ask: was it recorded, and if so, was a fake transaction used? Marcus: That framework is incredibly clear. What’s the most common trap people fall into with these questions? Emma: Hands down, it’s confusing skimming and cash larceny. People get stuck on the fact that in both cases, cash is stolen. They forget the critical difference is the timing. You have to anchor yourself to that on-book versus off-book distinction. If the cash never hit the books, it’s skimming. If it did, it’s larceny or a register disbursement. Marcus: Let's test this out. I'll read a typical exam-style scenario. An employee at a coffee shop serves customers and collects cash. But he only rings up every second or third sale, and pockets the unrecorded cash. The daily register totals match the sales that were rung up, but inventory shows a lot of coffee and pastries are missing. What is that? Emma: Okay, let's use the framework. First question: was the stolen cash ever recorded in the system? Marcus: No. He only rang up every other sale. The stolen cash was never entered. It's off-book. Emma: Then you have your answer. It's skimming. The inventory shrinkage is the classic red flag that confirms it. The coffee is gone, but the sales aren't on the books to account for it. Marcus: Perfect. Okay, one more. A cashier at a hardware store processes a legitimate fifty-dollar customer return. Later, she uses the same return slip to process a second fifty-dollar refund, and she pockets the cash. The register tape for the day shows two fifty-dollar refunds. Emma: Alright, step one: was the stolen fifty dollars on the books? Marcus: Yes, it was in the register from prior legitimate sales. So it's an on-book scheme. Emma: Good. Step two: did the cashier use a fraudulent transaction to justify taking the cash? Marcus: Yes, she entered a fake refund into the system. Emma: And that tells you it's a register disbursement. She created a false paper trail—the second refund entry—to make the theft look like a legitimate transaction. It’s not simple larceny because of that deceptive entry. Marcus: This approach makes it so much more systematic. So, Emma, let's summarize. What is the one key takeaway we should have about cash receipts fraud? Emma: The memory aid is to think about the evidence the fraud leaves behind. Skimming is a ghost. The money was never officially there, so there’s no accounting record of it. Cash Larceny leaves a hole. The money was recorded and now it’s gone, creating a shortage. And Register Disbursements leave a forgery. The money is gone, but a fake receipt for a refund or void is left in its place to explain the hole. Marcus: A ghost, a hole, or a forgery. That’s a fantastic way to remember it. Emma: Focus on that distinction, and you'll be able to navigate any cash fraud scenario the exam throws at you. Marcus: Excellent. That’s all the time we have for this session. Thanks, Emma. Emma: You're welcome, Marcus. Marcus: VoraPrep is a full exam-prep app — lessons, practice questions, and an AI tutor in one place. Get started at Vora Prep dot com.