The Financial Clarity Letter
You've read the headline before. You just didn't think it would ever be your headline.
"Bookkeeper Accused of Stealing $340,000 from Local Business." "Former Office Manager Charged with Embezzlement After Six-Year Scheme." "Trusted Employee Allegedly Diverted Funds to Personal Account."
These aren't stories about criminal masterminds. They're stories about small businesses — restaurants, salons, construction companies, creative studios — that handed one person full control of their finances and never looked twice.
It happens constantly. And almost every time, the owner says the same thing afterward: "I trusted her completely. She'd been with me for years."
Trust isn't the problem. The absence of a system is.
How It Actually Happens
It rarely starts with a grand theft plan. It starts small.
An expense approved without a second signature. A vendor payment that never got reconciled. A bank statement that went straight to the bookkeeper and never reached the owner. One unchecked step. Then another.
By the time it surfaces — often years later, often only because of a tax filing or an outside audit — the damage is done. The money is gone. And the owner is left explaining to their accountant why the books don't match reality.
The IRS doesn't care that you were deceived. The bank doesn't reverse years of transfers. And the legal process to recover stolen funds, even with a conviction, is slow and expensive — with no guarantee you see a dime.
This is not a rare edge case. The Association of Certified Fraud Examiners estimates that businesses lose 5% of their annual revenue to fraud every year. For a $500K business, that's $25,000. For a $1M business, that's $50,000. Gone. Often undetected for 12–18 months before anyone notices.
What Fortune 500 Companies Figured Out Long Ago
Large public companies are required by law — specifically the Sarbanes-Oxley Act of 2002, passed in direct response to Enron and WorldCom — to maintain and report on Internal Controls over Financial Reporting.
What auditors actually check:
Segregation of duties — The person who approves a payment cannot also be the one who processes it and records it. One person, one step.
Documented approvals — Nothing moves on a handshake or a verbal "go ahead."
Independent reconciliation — Accounts are verified by someone outside the process who produced them.
Restricted access — Not everyone touches the money, and every access is logged.
Outside review — Financial statements are reviewed by someone not involved in creating them.
These aren't bureaucratic checkboxes. They are specifically designed so that theft or error requires conspiracy — not just one person with access and no one watching.
Your small business can't replicate all of this. But you can apply the same principle.
The Main Street Version
You don't need a CFO, an audit department, or a compliance team. You need one rule applied consistently:
No single person should have unchecked control over your money.
Here's what that looks like at your scale:
Two-person approval on any expense over a threshold you set — $500, $1,000, $5,000. Pick one. Write it down.
You personally receive the bank statement — not your bookkeeper, not your manager. You.
Monthly P&L review — you read it yourself, even if someone else prepares it.
Business and personal accounts completely separate — always, no exceptions.
Annual outside review by a CPA, CMA, or independent advisor who has no stake in what the numbers say.
Year-over-year variances get questioned — if a number changed, you ask why before you move on.
None of this requires software, a big budget, or a restructured team. It requires the decision that your business is worth protecting.
Peter's Take
Every business owner I talk to assumes this won't happen to them because they have good people. I believe them — they probably do. But internal controls aren't about suspecting your team. They're about building something that doesn't depend on everyone being perfect forever.
People change. Circumstances change. Financial pressure does things to people you'd never predict. A system doesn't judge anyone. It just catches problems before they become catastrophes — whether that's fraud, honest mistakes, or just nobody realizing the numbers stopped making sense six months ago.
The businesses that survive long-term aren't the ones with the most trustworthy employees. They're the ones that built systems so good, trustworthiness almost doesn't matter.
One Thing to Do This Week
Pull your last three months of bank statements. Did they come directly to you — or through someone else first? If it's the latter, change that today. It's one setting, one request, five minutes. And it's the first control that costs nothing.
If you want to know what your books are actually saying — and whether you have gaps that a one-person-with-access situation could exploit — the QBO Diagnostic Review ($249) is a full review of your QuickBooks, a written findings report, and a 1:1 with me. You leave with a clear picture and a specific action plan.
Subscribe to The Financial Clarity Letter — Fortune 500 financial discipline for Main Street, every week, free.