How do you spot a ghost employee?

Ghost employees, also known as phantom employees, are employees who remain on a company’s payroll but do not actually work for the company. Detecting ghost employees can be challenging for employers, but being vigilant and proactive can help uncover this type of fraud.

Table of Contents

What is a ghost employee?

A ghost employee refers to someone who appears on a company’s payroll and receives a paycheck, but does not actually work for the company. The term “ghost employee” is used because the employee is essentially invisible – they do not come to work, perform any duties, or provide any services to the company, yet they continue collecting a paycheck.

Some common characteristics of ghost employees include:

Name appears on payroll records and they receive regular pay, but have no recorded work hours or productivity
No employment or personnel records beyond payroll information
No performance reviews or evaluations on file

No business cards, phone extension, computer, or assigned email address/login
Cannot be located in company directory or contacted by other employees

Ghost employees are sometimes added to the payroll by managers wanting to embezzle or steal money from the company. They may add friends, family members, or even fictitious identities as employees in order to have additional paychecks generated that they can then cash themselves.

What are some red flags that may indicate a ghost employee?

There are a few common red flags that can tip off employers to the possibility that ghost employees may be on their payroll. Watch out for:

Missing paperwork and documentation – Proper hiring paperwork, personnel files, performance reviews, and other documents are missing for the employee.
Lack of online presence – The employee has no email address, computer login, virtual workspace, etc. with the company.

No physical presence – The employee cannot be located in the office, cubicle, work station, or other areas, and is not recognized by coworkers.
No assigned responsibilities – The employee has no clear-cut role, duties, or assignments within the company.
Duplicates and suspicious patterns – The employee’s name, address, bank account number, etc. is very similar or identical to other employees, which can signal fake identities.

Manager evasiveness – If pressed for details on the employee, their manager seems evasive, guarded, or cannot provide basic info.

Being alert to these types of red flags can help companies recognize potential ghost employees that warrant further investigation.

Why do companies fail to detect ghost employees?

There are a few key reasons why companies sometimes fail to uncover ghost employee schemes:

Poor oversight – With no internal audits or checks performed on payroll systems and employee records, ghost employees can more easily slip through the cracks.
Decentralized payroll – In large companies with multiple locations, decentralized payroll makes it easier for ghost employees to be added without notice.
Weak internal controls – Lack of proper approval workflows, system permissions, and controls makes it easier for ghost employees to be created.

Collusion and complicity – Ghost payroll schemes often involve complicity from managers, HR staff, or executives who purposefully allow ghost employees.
Fake credentials and documents – Sophisticated ghost employees will manufacture fake resumes, IDs, and other documents that seem legitimate.

Failing to regularly review the payroll system and exercising inadequate oversight are the most common reasons companies fail to detect phantom employees.

How can companies prevent and detect ghost employees?

The best way for companies to combat ghost employees is by putting preventative measures in place and performing proactive monitoring and detection. Steps that can help include:

Conducting regular payroll audits to identify any anomalies or suspicious patterns.
Setting up robust internal controls for adding new employees to payroll systems.

Requiring multiple levels of approval for adding employees and issuing payments.
Comparing payroll records with other documentation like time cards, HR paperwork, etc.
Performing random desk and workstation audits in the office to match faces to names.

Using employee access card systems to monitor physical presences and track swipe entries.
Watching for signs of collusion between managers approving fake employees.
Automating notifications for employee terminations to immediately suspend access and payments.

Following clear protocols for removing departed employees from systems.

Implementing preventative measures can go a long way towards keeping ghost employee schemes at bay. But companies also need to be proactively detecting ghost employees through regular payroll audits, desk audits, access control reports, and other forensic analysis of employee and payment records. This helps identify ghosts already in the system so corrective action can be taken.

How can ghost employees be removed from payroll?

Once a ghost employee is identified, swift action is needed to remove them from the payroll system and all company records. Steps for removal include:

Documenting evidence and building the case – Compile all documentation showing the employee is a phantom employee. This creates evidence for dismissal and further fraud investigations.
Suspending payroll payments – Immediately suspend any further salary, bonuses, reimbursements or payments to the individual.
Terminating access – Revoke physical building access, remote network access, and application logins.

Removing from HR systems – Delete the ghost employee from any HR information systems, employee directories, benefit programs, etc.
Issuing a final pay – Pay out any remaining vacation/sick time, but no additional compensation.
Updating payroll records – Remove the ghost employee from payroll systems to stop any further payments.

Notifying relevant staff – Inform managers, HR, finance, security, IT staff of the ghost employee termination.
Repayment demand – Send a formal letter demanding repayment of all compensation issued to the ghost employee.

Following these steps helps systematically remove the ghost employee from the organization while creating a paper trail in case further legal action is warranted. The goal is to immediately stop payments while gathering evidence of the fraud.

What are the consequences of ghost employees?

Having ghost employees on the payroll can inflict serious negative consequences for a company, including:

Financial losses – Salary paid to ghost employees represents direct financial loss from fraud and theft.
Reputation damage – Public knowledge of ghost employees harms an organization’s reputation and investor confidence.

Non-compliance issues – Fake employees lead to inaccurate reporting and potential non-compliance with regulations.
Tax problems – Incorrect W-2s and tax filings for ghost employees can lead to potential IRS action.
Legal risks – Organizations can face lawsuits or charges related to negligence, collusion, or lack of controls.

Breach of trust – Knowledge of ghost employees erodes employee trust in leadership and damages morale.

The damage from ghost employees extends well beyond just the stolen funds. It represents deficiencies in oversight, ethics, leadership, and corporate governance that require significant work to remedy.

How can companies recover lost funds from ghost employees?

Recovering lost funds paid out to ghost employees can be challenging but is important for the company to recoup losses. Tactics include:

Freezing bank accounts where salary payments were deposited to attempt seizure of remaining funds.
Filing litigation and lawsuits against the ghost employee and any accomplices.
Engaging collection agencies to seek repayment of debts owed.

Withholding severance, benefits, or remaining vacation payouts.
Attaching liens or making claims on assets and property owned by the perpetrators.
Requiring repayments as part of legal settlements or plea bargains.

Encouraging voluntary repayment in exchange for agreement not to prosecute.
Banning the ghost employee from company premises or events.

While recovering lost funds is not guaranteed, taking legal action signals that fraud will not be tolerated and may enable the company to recoup at least a portion of stolen monies.

Can companies face any liability for failing to detect ghost employees?

Companies can potentially face legal, financial, or regulatory consequences for failing to detect ghost employees, including:

Shareholder lawsuits – Shareholders may sue for failure of oversight and breach of fiduciary duties.
Fines and sanctions – Regulatory agencies like the SEC could issue fines for incorrect financial reporting.

Tax violations – Tax agencies can penalize companies for payroll tax reporting errors.
Negligence claims – Employees or customers could claim negligence enabled the ghost employee scheme.
Reputational harm – Publicity around ghost employees can severely damage brand reputation and customer trust.

Poor business practices that enabled ghost employees, or failure to detect an ongoing scheme, can therefore expose organizations to substantial legal and financial liabilities. It is imperative companies exercise proper oversight and implement robust controls.

Conclusion

Ghost employees represent a drain on company resources and signal weak oversight and potential fraud. By proactively auditing payroll systems, requiring management approvals, and watching for red flags, companies can detect and eliminate ghost employees before substantial losses accrue. Removing ghost employees quickly, demanding repayment, and improving controls helps deter future recurrences while signaling to stakeholders that fraud will not be tolerated.