{
  "question": "How can I tell if an employee is padding, faking or double-claiming expense reimbursements at my small business, now that AI can make a realistic fake receipt in seconds?",
  "slug": "how-to-catch-fake-or-duplicate-expense-reimbursement-claims-in-a-small-business",
  "url": "https://www.rightshold.com/answers/how-to-catch-fake-or-duplicate-expense-reimbursement-claims-in-a-small-business",
  "short_answer": "Check each claim against something the employee didn't make, and keep a record of what you already paid. The ACFE's Occupational Fraud 2026 report, covering 2,402 cases investigated between January 2024 and September 2025, found expense reimbursement schemes in 13% of cases, with a $36,000 median loss and a typical 18 months before detection. They were almost twice as common at organizations with fewer than 100 employees (19%) as at larger ones (10%). The ACFE's fraud tree splits them into four kinds: mischaracterized expenses (personal costs claimed as business), overstated expenses (inflated amounts or mileage), fictitious expenses (costs that never happened) and multiple reimbursements (the same cost claimed twice). A receipt on its own no longer settles a claim. ICAEW, summarizing an October 2025 Financial Times report, says AppZen found AI-generated receipts made up about 14% of the fraudulent documents submitted in September 2025, against none in 2024. What works is a written policy, an approver who isn't the claimant, itemized receipts that show the amount, date, place and business purpose, a check of every claim against the company card statement, calendar, mileage and earlier claims, and a record of each approved and paid claim that nobody can quietly edit, so a second claim for the same cost stands out.",
  "checklist": [
    "Write a one-page expense policy: what you reimburse, meal and lodging limits or a per diem, the mileage rate, what receipt you need, and how soon claims must come in. Under the IRS accountable-plan rules in Publication 463, accounting for expenses within 60 days and returning any excess within 120 days counts as a reasonable period.",
    "Nobody approves their own claim. If you're the owner, have a partner or your accountant sign off on yours, so the rule applies to everyone.",
    "Ask for itemized receipts that show the amount, date, place and what was bought, plus the business purpose and, for meals, who attended. Publication 463 calls a receipt adequate when it shows the amount, date, place and essential character of the expense, and generally requires documentary evidence for lodging and for any other expense of $75 or more.",
    "Match every claim to a source the employee didn't create: the company card statement (anything already paid on the card is a duplicate), the work calendar or job schedule, a mapping app for mileage, and the airline or hotel booking.",
    "Before paying, search earlier claims for the same amount, date and merchant, including other people's claims and the company card. Watch for claims dated on days off, round amounts, and totals that keep landing just under your approval limit.",
    "Treat a receipt as a claim, not proof. Check that the merchant exists at that address, the items and tax add up, and the store or transaction details are present. If something looks off, ask for the card statement line or call the merchant.",
    "Pay reimbursements by bank transfer, not cash, and keep the approval with the payment record.",
    "Hash each receipt file when you approve it and keep the hash with the claim. The exact same file submitted again will have the same hash. A re-photographed or edited copy won't, so the amount, date and merchant comparison still matters.",
    "Every quarter, compare each person's travel and entertainment spending with their budget and with colleagues in similar roles. Look closely at anyone well above the rest."
  ],
  "sections": [
    {
      "heading": "How expense fraud shows up in small businesses",
      "points": [
        "The ACFE defines an expense reimbursements scheme as a fraudulent disbursement scheme in which an employee makes a claim for reimbursement of fictitious or inflated business expenses, for example filing a fraudulent expense report that claims personal travel or meals that never happened. In Occupational Fraud 2026 these schemes made up 306 of the cases (13%), with a median loss of $36,000 and a median duration of 18 months. That's longer than the 12-month median for all cases, and at a median $1,900 a month it's one of the slowest schemes, so small claims add up unnoticed.",
        "Small organizations are hit harder. The report found expense reimbursement schemes in 19% of cases at organizations with fewer than 100 employees, against 10% at those with 100 or more. A small business often has one person who submits, approves and pays claims, or an owner who signs off without looking.",
        "The fraud tree's four sub-schemes need different checks. Mischaracterized expenses (a family dinner claimed as a client meal) need the business purpose and attendees. Overstated expenses (a padded mileage log, or a receipt whose total was changed) need an independent amount such as a map distance or the card statement. Fictitious expenses need proof the cost happened at all. Multiple reimbursements need a record of what you already paid."
      ]
    },
    {
      "heading": "Why a receipt alone isn't proof anymore",
      "points": [
        "Image generators can now produce a convincing receipt in seconds. ICAEW, citing the Financial Times in November 2025, reports that AppZen found AI-made receipts accounted for about 14% of the fraudulent documents submitted in September 2025, compared with none in 2024, and that Ramp's software flagged more than $1 million in fraudulent invoices within 90 days.",
        "ICAEW lists red flags from the Business Fraud Alliance's guidance: receipts that don't match known locations, times or the employee's activities, totals that repeatedly fall just below expense limits, missing or inconsistent tax and transaction details, and images that look flat or unnaturally lit. Even when AI adds wear and tear, it often adds it evenly.",
        "The stronger check is to compare the receipt with something the claimant didn't produce. A card statement, booking confirmation, calendar entry or delivery address either backs up the claim or doesn't, however good the image looks."
      ]
    },
    {
      "heading": "Catching the same cost claimed twice",
      "points": [
        "Multiple reimbursement usually looks ordinary: the same meal on two monthly reports, a receipt and the card slip for the same purchase filed separately, something already paid on the company card claimed again as out of pocket, or a cost a client or conference organizer already reimbursed.",
        "You catch it by comparing each new claim with every earlier approved and paid claim, not only with the current report. That only works if the list of past claims is complete and hasn't been edited. If the person who processes claims can also delete or change old ones, they can remove the first claim before submitting the second.",
        "So keep the record of approvals and payments somewhere the claims processor can't edit: the claim reference, the employee reference, the amount, the date, the merchant and the receipt hash, written when each claim is approved and when it's paid."
      ]
    }
  ],
  "checks": [],
  "ask_rightshold": {
    "start": "https://www.rightshold.com/start?ref=seo",
    "mcp_endpoint": "https://www.rightshold.com/mcp",
    "ask": "Before I reimburse expense claim EXP-2026-118, ask me to approve it: our employee reference, the amount, the expense date, the merchant, the purpose code and a hash of the receipt file as it was submitted. Wait for my yes or no.",
    "mcp_call": {
      "tool": "request_human_approval",
      "arguments": {
        "action": {
          "type": "expense_reimbursement",
          "claim_ref": "EXP-2026-118",
          "worker_ref": "W-014",
          "amount_cents": 18640,
          "currency": "USD",
          "expense_date": "2026-11-03",
          "merchant_ref": "<merchant as printed on the receipt>",
          "purpose_code": "client-visit",
          "receipt_sha256": "<sha256 of the receipt file as submitted>"
        },
        "summary": "Approve expense claim EXP-2026-118 ($186.40) before payment",
        "expires_in_minutes": 4320
      }
    },
    "also": [
      "Needs an API key. Only the owner's account key can decide (decide_human_approval); delegated agent keys are refused. Rightshold stores the action only as a SHA-256 hash, and the signed, timestamped decision goes on Rightshold's ledger.",
      "Before paying, verify_human_approval (free, no key) takes the decision receipt and signature as returned, plus the claim as it stands now. A changed amount or a different receipt file gives a different hash, so the action won't match.",
      "After paying, seal a mirror-ledger payment entry (REST with your API key: POST /v1/mirror-ledgers/{id}/entries with type payment, invoice_ref set to the claim reference and amount_cents). You can add your own fields such as worker_ref and receipt_sha256. Entries can't be edited or deleted, so the ledger's entry list is a complete record of paid claims to search for a repeated receipt hash or the same amount, date and merchant.",
      "Don't send names, emails or addresses. The mirror refuses identity fields, so use your own references."
    ],
    "scope": "Rightshold doesn't connect to your expense app, card provider or bank. It doesn't read receipts, tell whether one was made with AI, or detect fraud. It records the approvals and payment entries you send and lets anyone check them later, and it only helps if your process refuses to pay a claim without a matching approval. A matching hash only catches the exact same file. If you suspect expense fraud, talk to your accountant, a fraud examiner or a lawyer before confronting anyone, and keep the records as they are. Not legal, tax, audit or employment advice."
  },
  "sources": [
    {
      "title": "ACFE: Occupational Fraud 2026: A Report to the Nations (2,402 cases; expense reimbursements 306 cases, 13%, $36,000 median, 18 months; 19% vs 10% by organization size)",
      "url": "https://www.acfe.com/en-us/-/media/files/acfe/pdfs/rttn/2026/2026-report-to-the-nations.pdf"
    },
    {
      "title": "ACFE: The Fraud Tree 2026 (mischaracterized, overstated, fictitious expenses and multiple reimbursements)",
      "url": "https://cms.acfe.com/-/media/files/acfe/pdfs/rttn/2026/infographics/the-fraud-tree-2026-fem.pdf"
    },
    {
      "title": "ICAEW: Expenses fraud: how to spot an AI-generated receipt (November 2025)",
      "url": "https://www.icaew.com/insights/viewpoints-on-the-news/2025/nov-2025/expenses-fraud-how-to-spot-an-ai-generated-receipt"
    },
    {
      "title": "IRS Publication 463: Travel, Gift, and Car Expenses (accountable plans, adequate records, $75 documentary evidence rule)",
      "url": "https://www.irs.gov/publications/p463"
    },
    {
      "title": "EisnerAmper: Expense reimbursement fraud tips for detection and prevention (AICPA tips: supervisor approval, budget-to-actual reviews, dates against work schedules, mileage checks)",
      "url": "https://www.eisneramper.com/insights/tax/expense-fraud-1115/"
    }
  ],
  "related": [
    {
      "title": "How to spot a ghost employee on your small business payroll",
      "url": "https://www.rightshold.com/answers/how-to-spot-a-ghost-employee-on-your-small-business-payroll"
    },
    {
      "title": "How long to keep small business records, and whether scanned receipts count",
      "url": "https://www.rightshold.com/answers/how-long-to-keep-small-business-records-and-whether-scanned-receipts-count"
    },
    {
      "title": "How to keep a copy of your business books that your bookkeeper can't edit",
      "url": "https://www.rightshold.com/answers/how-to-keep-a-copy-of-your-business-books-that-your-bookkeeper-cant-edit"
    },
    {
      "title": "How to spot a fake vendor in your accounts payable",
      "url": "https://www.rightshold.com/answers/how-to-spot-a-fake-vendor-in-your-accounts-payable"
    }
  ],
  "computed_from": "Curated guidance; license verdicts computed from Rightshold's license profiles at render time. Not legal advice.",
  "updated": "2026-11-10"
}