Letting hotel staff report fraud, and following up
How a hotel or restaurant can give staff a safe way to report theft or fraud, and which till and ledger records a manager checks quietly after a tip.
By Achekam · · 4 min read · For Hospitality businesses in South Africa, Nigeria, Kenya
A waitress has noticed something. A colleague voids drinks after the customers have paid cash, and the shortfall never shows because the till balances. She is not sure whether to say anything, or to whom, and she does not want to be the person who lost a colleague their job over a misunderstanding. So she says nothing, and the voids carry on.
Hotels and restaurants handle cash, stock and guest cards all day, and the people best placed to notice something wrong are usually the staff on the floor. Whether they speak up depends on whether there is a channel they trust and on what happens after they use it. This piece covers both: setting up the channel, and the records a manager checks when a report comes in.
How fraud tips actually arrive
The ACFE's 2026 Report to the Nations, its global study of occupational fraud, finds that the most common mechanisms used to report fraud tips were web-based channels (46%), e-mail (34%) and phone (23%). The same report states that the presence of anti-fraud controls is associated with lower fraud losses and quicker fraud detection.
Two lessons follow for a hospitality business. People report in different ways, so one channel is not enough. And a reporting channel is a control in its own right, alongside the till rules and the stock counts.
COSO and the ACFE announced the Fraud Risk Management Guide: Second Edition on 2 May 2023, as a blueprint for setting up an overall fraud risk management programme. COSO says this edition expands its material on data analytics while continuing to stress the importance of interviewing and whistleblower systems. Even a small guest house can borrow the core idea: make it easy to report, and know what to do with a report.
A reporting channel staff will trust
The channel matters less than the trust behind it. A few choices make the difference:
- More than one route. Offer at least two: perhaps an e-mail address read only by the owner, and a phone number or a simple web form. Staff who would never knock on the manager's door may send a message.
- Somewhere outside the line of fire. If the manager could be the subject of a report, the channel must reach someone above or outside them, such as the owner, a director or the external accountant.
- Anonymous if they want it. Accept anonymous reports, and say so.
- Told at induction. Put the routes on the staff noticeboard and in the welcome pack, with a plain sentence that reports made in good faith will not be punished.
Then keep that promise visibly. One reporter who is moved to worse shifts after speaking up will silence the whole team for years.
Receiving a tip: what to do and what not to do
When a report arrives, the first hours decide whether you find the truth.
Do:
- write down exactly what was reported, when and by whom, if known;
- thank the person and tell them what happens next, without promising an outcome;
- decide who will look into it, and keep that circle small;
- preserve the records before anyone has a reason to change them.
Do not:
- confront the person named straight away;
- discuss the report at a staff meeting or in the kitchen;
- move or dismiss anyone before the facts are checked;
- delete, edit or tidy any record while you look.
Records to check quietly
Most hospitality fraud leaves traces in the records the business already keeps. In Achekam:
- X and Z reports. A live X report of an open till and a Z report frozen at cash-up can be opened as PDFs. Compare the Z reports for the shifts the tip mentions with those of other shifts: voids, refunds, discounts and cash paid out are where till fraud shows.
- Till receipts. The till receipt is a PDF made by the server from the posted sale, showing every payment, VAT by rate and the business's tax number. Pull the receipts for a suspect void and see whether the sale was paid before it was reversed.
- The ledger. The general ledger lists every posted line, and the trial balance shows each account for a period or at a date. Look for unusual journals, refunds to the same card or account, and supplier payments that do not match a delivery.
A pattern that repeats across one person's shifts is worth far more than a single odd transaction. If the till logins are shared, though, the records cannot point to anyone; one till login for each waiter explains why each person must sign in as themselves. The checks a manager runs at every cash-up are set out in closing the business day.
If the records support the tip, bring in your accountant or a fraud investigator before any confrontation, so that the evidence is handled properly from the start.
Closing the loop with the reporter
The person who reported needs to know that something happened, even if you cannot tell them what. A short message saying the matter was looked into and has been dealt with is usually enough. Silence teaches staff that reporting is pointless.
Look at the controls afterwards, too. If the fraud worked because voids needed no second approval or because a login was shared, change that rule, so the next scheme fails at the till rather than surviving until a colleague speaks up. The usual schemes and their signs are described in common occupational fraud schemes.
The ACFE's Report to the Nations describes how occupational frauds are committed and detected, including how tips are reported.
Set up two reporting routes this month, tell every member of staff about them, and decide now who will receive the reports. Then the next waitress who notices something will know exactly what to do.
General guidance only, not advice on your own circumstances. Tax and payroll rules change: check the current position with the authority or your adviser.
