For more than twenty years, a trusted bookkeeper ran the books at a Brisbane car dealership. For eight of them, she was quietly stealing — A$1.89 million in all — to feed a gambling addiction. She wasn't caught by an audit, a control, or a suspicious manager. She was caught because one customer complained about an insurance product they never received. Everything about this case says the same thing: it was entirely preventable.
In this case study
What happened
According to ABC News' reporting of a 2022 sentencing, the bookkeeper at the centre of the case had worked at a Brisbane car dealership for more than two decades — a "trusted employee" with access to the company's accounts and payment system. Between 2010 and 2018, she transferred A$1.89 million to her own bank account in a large number of discreet transactions, which she disguised with generic labels so nothing would raise a red flag. Her barrister told the court this wasn't a greedy or lavish lifestyle: "it is feeding an addiction." She was sentenced to eight years' jail on a charge of fraud, with parole eligibility in April 2024.
The control she defeated
Here is the part every business owner should sit with. The single most important control against payment fraud is segregation of duties: the person who creates a payment must not be the person who approves it. She simply went around it — according to the ABC, she used another employee's login to generate the payments, then used her own credentials to authorise them. One person, both halves of the process, for eight years.
This is the classic insider move, and it's why "we have segregation of duties" is not the same as "our segregation of duties works". A control that exists on paper but isn't monitored — nobody checking that the maker and the approver are genuinely different people — is a control that a trusted insider can quietly borrow their way around.
How she was finally caught
Not by the system. A customer complained that they hadn't received an insurance product they'd paid for. The company investigated that single complaint and found the same amount had been transferred to the bookkeeper's own account — and pulling that thread unravelled eight years of theft. (The court also heard she had a prior conviction for overpaying herself $30,000 in cheques from a former employer.) Had that one customer not spoken up, there is no obvious reason it would have stopped.
How this was entirely preventable
This fraud didn't require a genius to commit or a genius to catch — it required someone to look at the money. Three checks, any one of which would have ended it years earlier:
- Reconcile payments to legitimate destinations. A steady stream of company money arriving in an employee's personal account is the most basic red flag there is — invisible on the ledger where it's labelled generically, obvious the moment you match actual bank payments against real suppliers and expected flows.
- Monitor the maker/approver split. Analytics that flag the same person effectively creating and authorising payments catch exactly the control bypass she used.
- Periodic forensic reconciliation. A forensic examination of the bank records against the accounting system — the kind we run — surfaces the disguised transfers and the duplicated access in days, not years.
That's the uncomfortable lesson of this case, and of so many like it: the control existed, the trust was total, and $1.9 million still left over eight years because no one reconciled the money that moved against the money that should have. For a deeper look at why trusted employees steal and how to spot it, see our guide to addiction-driven employee theft — and if you'd ever want to know, quietly and for certain, that your books match your bank, that's exactly what our forensic accounting audit is for.
Sources
Facts and figures are as reported at the time of sentencing (2022).
- ABC News — "Bookkeeper jailed for stealing nearly $2 million while working for a Brisbane car dealer", 4 May 2022: abc.net.au.