What Is a Ghost Employee? The Payroll Scam Draining Small Businesses

Payroll is usually the largest single expense a small business has, which is exactly why it is such a tempting target for fraud. One of the most common and most costly payroll schemes is the ghost employee: a name on your payroll that does not correspond to a real person doing real work. Every pay period, money flows out to that ghost, and it lands in the pocket of whoever created it.

Because payroll runs automatically and rarely gets a second look, a ghost employee can collect paychecks for months or years before anyone notices.

How a ghost employee gets created

There are a few common variations.

• The fabricated worker. Whoever controls payroll simply adds a fake person, complete with a real bank account they control, and sets up direct deposit.
• The employee who left. A worker quits or is let go, but instead of removing them, the person running payroll keeps the paychecks flowing to an account they redirected.
• The collusion case. A real employee exists, but a manager inflates their pay or adds fake overtime and splits the extra.

In every version, the fraud depends on one person having enough control over payroll that no one else verifies who is actually being paid.

Warning signs worth watching for

• A paycheck with no tax withholdings or benefits deductions. Real employees have a messy stack of deductions. A clean, deduction-free payment can be a red flag.
• Direct deposits to a bank account shared by two employees. Two different names paid into the same account deserves immediate scrutiny.
• An employee no one in the company seems to know. If a name on payroll cannot be matched to a face, ask why.
• Pay continuing after a termination date. Always reconcile your active employee list against who is actually getting paid.
• A spike in payroll that does not match hiring. If payroll jumped but you did not add staff, find out where the money went.

How to protect your business

The defenses here are mostly about separation and verification.

• Separate who can add employees from who approves payroll. The person entering new hires should not be the same person who signs off on the run.
• Reconcile payroll to your real headcount every period. Match names against a current, owner-verified employee list.
• Remove departed employees immediately. Make offboarding part of the same-day checklist when someone leaves.
• Review direct-deposit changes. Any change to where money is sent should be confirmed, not rubber-stamped.

Where monitoring helps

Even with good controls, payroll noise makes ghosts easy to miss. Sherlock watches your outgoing payroll for the patterns that betray a ghost employee, like recurring payments that continue after they should have stopped, deposits to accounts that receive more than one employee's pay, and payroll totals that drift upward without a matching change in your business. When something does not line up, Sherlock flags it so you can verify before another pay period goes out.

Curious whether your payroll holds any surprises? Sherlock can review your transactions and surface anything that looks off.