Internal Fraud in Hard Times: Quiet Warning Signs and Calm First Steps

Elizabeth Williams

14 minutes ago

5 min read

Most companies prepare for external threats in a crisis. Lost customers. Higher costs. Nervous banks. Fewer prepare for the risk that can grow quietly inside their own walls.

Financial pressure affects people. Salaries freeze, bonuses disappear and workloads rise. At the same time, oversight often shrinks because managers are busy firefighting. That combination is exactly where internal fraud tends to take root.

This article is for business owners, CFOs and HR leaders who want to protect their company during hard times without turning the workplace into a place of suspicion. It explains the early signs, the right first steps and when an internal fraud investigation makes sense.

Why internal fraud rises when times are hard

Fraud specialists often describe three conditions that appear together: pressure, opportunity and a story the person tells themselves to justify it.

A crisis can strengthen all three at once.

Pressure: personal debts, reduced income or fear of losing a job.
Opportunity: fewer staff, skipped controls, one person handling tasks that used to be split.
Justification: "I have worked unpaid overtime for months," or "I will pay it back when things improve."

This does not mean your employees are dishonest. Most people stay loyal through difficult periods. It means that controls matter more in a crisis, not less.

The quiet warning signs

Internal fraud is rarely obvious. It hides in routine. These patterns deserve attention, especially when several appear together:

An employee who never takes holidays and refuses to share tasks.
Expense claims that are small but frequent, or just under approval limits.
New suppliers added to the system without the usual approval.
Invoices from a supplier whose address matches a private residence.
Inventory losses that are always explained away.
Changes in lifestyle that do not match a known salary.
Resistance to audits or to new software that improves visibility.

A single sign is not proof of anything. Treat it as a question, not an accusation.

Hypothetical scenario: A Geneva services company cut its finance team from four people to two. The remaining accountant took over supplier payments and bank reconciliation. Months later, the CFO noticed a cleaning contractor that nobody in operations recognized. Rather than confronting anyone, she asked for a discreet review. The findings gave her a factual basis to decide on the next steps with legal counsel.

The important part of that story is the order of events: a calm review first, conclusions later.

What to do when something feels wrong

The first hours after a suspicion are often the most important. Many cases are damaged not by the fraud itself but by the reaction to it.

Do not confront too early

An early confrontation gives a person time to delete files, move money or prepare a story. It can also damage an innocent employee's reputation and expose you to legal claims.

Preserve what exists

Secure relevant records quietly. That means accounting data, emails on company systems, access logs and physical documents. Keep a note of who handled what and when.

Limit the circle

Only a small number of people should know about the concern. Usually that is one senior manager, legal counsel and the investigator.

Get a defined, lawful review

An internal fraud investigation should answer a clear question. For example: were payments to this supplier legitimate, and if not, where did the money go? Our financial investigations team works within Swiss employment and data protection rules, which set clear limits on monitoring employees.

How an internal fraud investigation works

Every case is different, but a professional investigation usually follows a clear path:

Briefing: you explain the concern and we agree the question to be answered.
Scope and terms: we define what will be reviewed, the time frame and the reporting format.
Document and data review: we examine relevant financial records, supplier data and company systems you are authorized to provide.
Background research: we look into the suppliers, accounts and connections that appear in the records, using lawfully accessible sources.
Interviews where appropriate: structured, fair and documented, usually coordinated with your lawyer.
Report: a factual account that separates evidence, open questions and conclusions.

The report helps you decide what to do next. That may be an internal measure, a civil claim, a criminal complaint or simply an improved control. The decision always stays with you.

Prevention: vetting and controls for a leaner team

The best time to deal with internal fraud is before it starts. In a crisis, two measures give the most protection for the least effort.

Proportionate staff vetting

When you hire or promote someone into a finance, IT or purchasing role, verify what matters for that role. Employment history, qualifications and references are the basics. Our enhanced background checks follow a structured, role-based approach, always with consent and within the law.

Simple control habits

Split payment approval and payment execution between two people.
Rotate duties where possible, even for a few days a year.
Insist that everyone takes their holidays.
Review new supplier set-ups monthly.
Compare supplier addresses and bank details with employee records.

Questions to ask yourself this month

Who in your company could create a supplier and pay it without anyone else seeing?
When did someone last review the payments your team made during the busiest weeks?
If a long-serving employee were under serious financial pressure, would your controls notice the effects?
Would a quiet review now feel easier than a difficult conversation with your auditor later?

How Private Investigator Switzerland can help

Private Investigator Switzerland is a brand of Swiss Security Solutions LLC, based in Zurich. We provide internal and financial fraud investigations, staff and executive vetting, asset tracing and digital forensics for companies in Switzerland and abroad.

We handle every matter discreetly. Findings are documented clearly so that you, your lawyer and your board can decide on facts rather than impressions.

Swiss Security Solutions carries corporate liability insurance of up to CHF 10 million per client.

Frequently asked questions

What is an internal fraud investigation?

It is a structured review of suspected misconduct inside a company, such as embezzlement, false invoices or misuse of company resources. Its purpose is to establish facts and document them.

Is it legal to investigate employees in Switzerland?

Yes, within limits. Swiss employment and data protection law protects employees' privacy. Investigations must be proportionate and focused on a legitimate business concern. We plan every review within those rules.

Should we inform the police first?

That depends on the case. Many companies first establish the facts with an investigator and legal counsel, then decide whether to file a complaint.

Can you help us prevent fraud, not just investigate it?

Yes. Staff vetting, control reviews and background checks on new suppliers are effective preventive measures, especially when teams are smaller than usual.

Protect trust with facts

Hard times test loyalty, processes and leadership at the same time. You protect your team best by keeping controls fair and by responding to concerns calmly, with facts instead of assumptions.

If something in your accounts or processes no longer adds up, a confidential conversation is a sensible first step.

Speak to us confidentially on WhatsApp Business