Nobody sets out to run a school that gets defrauded. It happens quietly, usually to the school that believes it cannot happen to them. The good news is that school fraud follows patterns, and patterns are visible. This guide is about learning to see the pattern before it costs the school money, and about building the checks that make the pattern impossible to run for long.
How fraud actually happens in a school
School fraud is rarely a stranger hacking the bank account from abroad. It is most often an inside job, or an outside fraud that works because someone inside let it in. The common shapes are:
- Skimming cash. Cash collected and never receipted, takings undercounted, floats short. Cash-heavy days - tuck shop, sports events, fundraisers - are where this lives.
- False or padded invoices. A supplier that does not exist, or an invoice raised higher than the work and the difference shared. Often the same supplier repeats, because nobody checks.
- Ghost payments and unauthorised payees. A payment to a personal account disguised as a school payment, or a beneficiary quietly changed on a recurring payment.
- Fee adjustments and refunds. A fee written off, a refund issued, an arrears balance reduced - small enough to look like routine admin, approved by the same person who handles the cash.
- Outside fraud riding on trust. A fake invoice from a real supplier, a CEO impersonation asking for a payment, or a compromised email account. The school pays because the request looks normal.
Two things are true about almost all of it: the fraudster needs access, and they need silence. Both are granted by the same conditions - one person in control, no review, and a culture where asking questions feels rude.
The red flags worth taking seriously
Most red flags are not proof of anything. They are signals that the pattern deserves a look. A few of the ones that matter most in a school office:
- The same person doing the whole transaction. Invoices, approvals, payments and reconciliations all handled by one person is not a red flag; it is a condition fraud needs to exist at all.
- Reluctance to take leave or hand over the books. The person who can never be away, and has a reason why nobody else should touch the accounts while they are gone.
- Unusual activity around month end and year end. Adjustments made when the books are closing, when the questions run out.
- A favourite supplier. One provider who always gets the job, never changes price, and whose invoices never quite have proper detail. New or duplicate suppliers with similar names deserve a look too.
- Banking detail changes. A changed account number, an added user, a reissued card. Legitimate changes happen; they should be reviewed as a routine, not a surprise.
- Lifestyle that outpaces the salary. Delicate to raise, but boards should know what the school pays its people. A striking mismatch is worth understanding, not ignoring.
- Parent complaints about payment confusion. A parent who says they paid and the school has no record is sometimes a systems problem, and sometimes a sign that receipts and records have parted ways.
The rule with red flags is simple: take them one at a time, and check each one properly. Nine times out of ten there is an innocent explanation. The tenth time is why you checked.
The checks that catch it
Fraud thrives on no review. The checks below are the review. None of them is exotic; each one is a habit.
- Separate duties. The person who pays should not be the person who approves, and neither should be the person who reconciles. Our internal financial controls guide shows how this works in a small school.
- Reconcile every month, on time. A bank statement reviewed while the month is fresh is a fraud check. One reviewed six months late is a history lesson.
- Match invoices to payments and to the bank. Every payment out should tie to an invoice the school genuinely owes, and to a line on the statement.
- Approve adjustments and write-offs separately. Nobody should adjust a fee or issue a refund to their own work without a second approval. Small amounts, still approved.
- Review the full statement, not the balance. Checking the balance covers nothing. Reading the line items - payees, dates, repeats - is the actual check.
- Run the checks even when you trust the person. Trust is exactly the point. Fraud most often works because a trusted person was never checked.
And the checks need to happen on a schedule the fraudster cannot predict. If the review always lands on the same day of the month, the school is predictable. Unpredictable reviews of predictable work is the strongest deterrent of all.
Payment fraud: the modern favourite
As schools move online, the fraud moves with them. The modern school's most exposed point is the payment: money going out to a payee that is not who it claims to be. The practical defences are:
- Verify before you pay, not after. A changed banking detail is confirmed by phone on the number the school has on file, never by email and never by the number in the message.
- Treat urgency as a warning. "Pay this now or the deal collapses" is a fraud script, not a reason to skip a check. Real suppliers wait for a verification call.
- Two-step approval for new payees. A first payment to a brand new beneficiary gets a second pair of eyes, every time.
- Keep the login on lockdown. Shared passwords, saved sessions on shared machines and never-logged-out banking sessions are how account access is lost. Our banking security guide goes through the full routine.
The pattern to fear is not the dramatic theft; it is the small, plausible payment that skips one check. Payment fraud runs on plausible, and plausibility is defeated by a single verification call.
Building a culture where fraud struggles
Controls fail when the culture around them does. The strongest fraud protection a school has is a finance office where questions are welcome and answers are documented:
- Make checks a normal part of the job, not an accusation. The weekly reconciliation and the monthly review are how the school does things, for everyone, without exception.
- Protect the whistleblower, not the whistleblower's colleague. A clear, anonymous way to raise concerns, and a real response when someone uses it.
- Talk about fraud openly. A board that asks "where is this school exposed?" once a year keeps fraud uncomfortable. The subject going quiet is the warning sign.
- Model the rules from the top. When the principal and the board follow the same approval process as the bursar's office, the process is real. When the rules have exceptions for the leadership, the rules are decoration.
A school that treats its controls as shared responsibility - rather than the bursar's territory - has already removed the silence fraud needs.
If you suspect fraud, act calmly and quickly
Suspicion is not a verdict, but it is also not a rumour to sit on. The moment a concern is real enough to raise, the school should move in an orderly way:
- Do not confront anyone alone. And do not accuse. The first step is to secure the records and the system access, quietly.
- Preserve the evidence. Copy the records, the reconciliations, the approvals and the system logs before anything is deleted or "tidied up".
- Freeze the exposure. Change passwords, suspend the affected bank and system access, and review anything that could still move.
- Get help early. Your auditor, your lawyers and, where money has actually moved, the SAPS commercial crime unit. The earlier the professionals are in, the better the outcome.
- Tell the board immediately. The board carries the governance responsibility, and they need the full picture from day one, not at the end.
Schools that handle this well are not the ones who never had a problem. They are the ones who treated the first sign seriously, moved carefully and let the process work.
Sources & further reading
- ACFE - the Association of Certified Fraud Examiners, for how occupational fraud actually happens and the controls that stop it.
- SAICA - professional guidance on governance and fraud prevention for organisations, including non-profits.
- Internal Financial Controls for Independent Schools - the controls that make fraud hard, in the order they matter.
- Year-End & Audit Readiness Checklist - where the fraud checks fit into the annual audit cycle.
This page is general information, not legal advice. If you suspect fraud at your school, seek professional legal and forensic advice before taking action. Do not rely on this page alone in a live situation.
