How to Use Accounts Payable and Disbursements Controls to Prevent Fraud at a Small Business

Internal Controls Do Nothing Without Monitoring
Before discussing anything else, it's important to mention that having controls is worthless if they aren't followed. Controls only establish the process to follow to protect small businesses. The people within the company responsible for following that process must do so, and everyone has to hold each other accountable for their roles in that process.What Will Internal Controls Prevent from Happening?
Having a strong control process in place can prevent a small business from losing money in multiple ways. Some of the most common things proper controls will prevent from happening include:- Paying vendors for unnecessary or wasteful products/services
- Paying vendors for products/services that aren't being delivered
- Fraudulent purchases
Implementing Accounts Payable and Disbursements Controls
There are multiple steps that small businesses should take to ensure that goods and services are received, that payments are properly processed, and that your business isn't vulnerable to accounting fraud.Separation of Duties is Essential
This is a necessary component for establishing an effective internal control process. By having multiple employees responsible for different parts of the payment process, small businesses have the checks and balances in place to make sure everyone responsible for the payment process is held accountable. In an ideal scenario, different people would be responsible for:- Approving purchases
- Receiving purchased goods or services
- Approving invoices
- Preparing bank reconciliations
Key Accounts Payable and Disbursement Controls in Small Accounting Environments
There are a couple critical controls that businesses should implement and monitor in smaller accounting environments.Regular Monitoring of Vendor Master File
In order to ensure that all checks and disbursements are paid to an approved vendor, there should be a vendor master file that is strictly monitored by someone not responsible for making purchases and or processing disbursements. Any new vendor and changes made to existing vendors should be reviewed so all vendors in the master file are legitimate and information is correct. It's recommended that the master file is reviewed on a monthly or quarterly basis. There should be system limitations whereby processing of payments can only be to vendors in the system (i.e. no manual checks).Check Signing and Accounts Payable Duties Should be Separate
In order to prevent fraudulent purchases, the person responsible for the accounts payable and disbursements function shouldn't have the ability to sign the checks or execute wires. By allowing one person to handle the entire process, you put yourself at great risk for fraud. Dual signatures should be required for checks over certain dollar limits.Monitoring by a Person with Adequate Knowledge
Among small businesses, the owner or a key employee is often responsible for the check signing. This works well when the owner or a key employee is in tune with the day-to-day activities of the company and would be able to identify anything that might be fraudulent or not in the company's best interest. Often the case in small businesses, the owner isn’t always able to be that ingrained in the details. The owner or key employee should also be looking at bank statements (including cancelled checks), bank reconciliations and financial statements on a regular basis. Though separation of duties isn't easy for small businesses, it's something that can't be ignored. Putting too much trust in one or a few people makes a small business very vulnerable to fraud. Not all fraud can be stopped with internal controls, but adequate monitoring and separation of duties can reduce the company’s risk before it is too late.
- Harmony, Analytical, Communication, Consistency, Empathy
Sam Addy
Sam Addy, Audit Shareholder, began his career in 1999. He has developed comprehensive expertise in assurance and consulting services and now serves as the nonprofit niche lead, demonstrating his commitment to serving mission-driven organizations.
Leveraging his experience across multiple industries, Sam focuses on privately held companies in the nonprofit, manufacturing, distribution, technology, and service sectors, as well as employee benefit plan and surprise custody audits. He values building long-term partnerships with clients, particularly appreciating the opportunity to help nonprofits succeed in their missions. Sam's approach centers on providing value beyond compliance, helping organizations see the broader picture of their operations.
At Lutz, Sam embodies the firm's "appreciate perspective" philosophy through his understanding of both for-profit and nonprofit sectors. His ability to see each organization's unique challenges while maintaining consistent quality enables him to help clients present their best story within accounting guidelines. This balanced approach has strengthened Lutz's reputation as a trusted partner to over 300 nonprofit organizations.
Sam lives in Omaha, NE, with his wife Megan, sons Charlie and George, and their dog Lenny. Outside the office, he can be found traveling, attending sporting events, and spending time with friends and family.
Recent News & Insights
CMS Announces New Method II Billing Edits for Critical Access Hospitals
The Dollar and International Diversification + 4.30.25
Lutz Announces Ryan Cook as New Managing Shareholder
Decoding Performance: Analyzing Your Monthly Financial Statements

