Nonprofits run on trust. Your donors, grantors, and the communities you serve believe in your mission and trust you to manage resources responsibly. So, when suspicions of employee fraud surface, that foundation of trust can take an immediate hit.
Finding out that an employee might be stealing or misusing funds is a stressful experience for any leadership team. It can happen through a whistleblower tip, a routine internal control check, or just a sudden realization that the numbers do not add up.
How you handle those initial moments and the days that follow can make all the difference. A smart, coordinated response helps you recover potential losses, protects your reputation, and prevents future issues. Let's walk through the exact steps you need to take to manage suspected fraud effectively and keep your nonprofit on track.
When a red flag appears, your first instinct might be to confront the employee or make immediate changes. However, acting impulsively can actually harm your organization more than it helps. Instead, focus on gathering facts and bringing the right people to the table.
Pull out your organization’s fraud, whistleblower, and internal control policies. These documents are your roadmap. They outline reporting protocols, investigation steps, and exactly who is responsible for what. Sticking to your established rules ensures consistency and shows your stakeholders that you practice good governance.
The executive director or senior leadership needs to loop in the board (or a specific committee, like finance or audit) right away. The board holds fiduciary oversight and will help decide the best path forward. This is especially true if the potential fraud involves a large sum of money or implicates a member of the leadership team.
Employee fraud investigations bring a mix of legal and employment issues. Bring your attorney into the conversation early. They can guide your decisions regarding employee rights, confidentiality rules, and any reporting obligations you might have.
Do not let any records disappear. You need to secure accounting data, transaction histories, emails, and any supporting documents. You might also need to limit system access for certain people. If you are dealing with digital evidence, it is best to get help from qualified IT specialists so you do not accidentally alter or lose critical files.
At SD Mayer, we know that untangling financial discrepancies requires a trained eye. Independent professionals like forensic accountants or certified fraud examiners can assess the scope of the problem, quantify potential losses, and figure out exactly where your internal controls broke down. Their insights give management and the board the clarity needed to make smart decisions.
Who leads the investigation depends on your organization's structure. Management usually takes the lead with board oversight, but if senior leaders are involved, the board must step in directly. Every step of the investigation should be carefully documented, completely objective, and guided by outside expertise if necessary. Before placing an employee on leave or taking disciplinary action, consult your advisors to ensure you have strong evidence backing your choices.
Significant diversions of assets may trigger specific reporting rules. For example, you might need to disclose the incident on your Form 990. Your insurance carriers might also require a timely heads-up to process potential claims. Work with your legal team to handle all communications with donors and grantors thoughtfully.
Once the dust settles, take a step back. How did this happen in the first place? Employee fraud almost always points to a gap in your internal controls, like a lack of oversight or poor segregation of duties.
Running a structured review of the incident helps you spot process breakdowns and find opportunities to tighten your financial oversight. Updating your policies, improving staff training, and monitoring your systems will lower your future risk while proving to your stakeholders that you take accountability seriously.
Even the most well-run nonprofits face the risk of employee fraud. The best defense is a strong offense: clear policies, tight internal controls, and a solid response plan.
You do not have to navigate these complex situations alone. If you suspect fraudulent activity or simply want to proactively bulletproof your internal controls, the team at SD Mayer is ready to help. We can assess your risks, support your investigations, and implement safeguards that make sense for your specific operations. Let's protect your mission and keep your finances secure—reach out to our team today to get started. Contact us today.