Dental practice embezzlement prevention begins with independent checks on who authorizes money movements, who executes them, and who reconciles the results. Give the owner direct access to bank and payment records, require evidence for adjustments, and investigate unexplained differences promptly. Trust works better when the process does not depend on one person's unchecked control.
The ADA recommends separating financial functions so one employee cannot control both sides of the money trail. In a small office, the owner or an independent accounting professional may need to supply the second review. No control guarantees that theft will be prevented. ADA guidance on billing and accounting responsibility
Draw the money trail before adding another report
For each major money flow, identify its starting document, approval, execution record, ledger entry, and bank result. Include patient payments, insurer payments, refunds, vendor purchases, payroll, and owner transactions.
Then write the actual person responsible for each step. Highlight combinations that allow someone to create a transaction, release it, and decide whether it reconciled without independent inspection.
| Money flow | Preparing or recording | Independent check |
|---|---|---|
| Patient and insurer receipts | Record the payment and its account reference | Match source receipts, deposits, and account application |
| Refunds | Prepare the reason, amount, and proposed recipient | Verify entitlement and approve before release |
| Vendor payments | Assemble invoice and evidence of receipt | Approve the expense and verify the payment destination |
| Payroll | Enter approved time and compensation changes | Review the employee-level preview and actual funding |
| Manual adjustments | Record the proposed reason and supporting document | Review authority and the effect on the account |
An outsourced bookkeeper can still occupy several columns. Ask which checks the provider performs and which remain with the practice. Do not call a review independent if the reviewer sees only a summary prepared by the person whose work is being checked.
CDA's financial-control guidance recommends separating payment preparation, signing, bank-statement review, and reconciliation, while requiring supporting documents for payments. Use those principles to assign a practical second check for your office's staffing level. CDA guidance on business controls
Reconcile source records in both directions
Begin with a payment recorded by the office. Find the original receipt or remittance, its deposit or processor reference, the bank result, and the account to which it was applied. Then start with a bank transaction and work backward to its authorization and source.
The second direction matters. A deposit total can match while individual accounts contain errors, and a plausible expense total does not prove that every payment was authorized.
Keep cash, checks, card settlements, and insurer transfers distinct during reconciliation. Timing, processing fees, reversals, and grouped deposits may require separate reconciling items. Each difference needs a dollar amount, specific explanation, supporting reference, owner, and recheck date.
Use the accounts receivable workflow to correct affected patient accounts. Financial oversight should also establish where the money went, rather than ending when an aging balance disappears.
A hypothetical difference that needs investigation
Suppose the day's receipt record shows $4,800 in cash and checks, while the corresponding bank credit is $3,600. The unexplained difference is $1,200.
The preparer says a $1,200 check went into the following day's deposit. The reviewer should locate the identified check in the deposit documentation and confirm the later bank credit. Until that evidence matches, keep the difference open as an unverified timing item.
If the explanation is confirmed, document it and consider whether the cutoff instructions need improvement. If it is not, escalate the unresolved difference. Neither the initial shortfall nor a verbal explanation alone establishes what happened.
Make changes to payments visible
Require documented approval for new vendors, changed bank instructions, refunds, unusual adjustments, and compensation changes. The reviewer should see what changed, who requested it, the supporting authority, and the effective date.
For vendor payment changes, verify through a known contact channel independent of the request. An email that appears to come from a familiar supplier can still be fraudulent. The FBI recommends independently checking payment requests and changes to account details. This protects against outside impersonation as well as weaknesses in the internal payment process. FBI business email compromise guidance
Review payroll by employee as well as by total. Compare new workers, changed rates, bonuses, and payment instructions with the approved roster and records. The payroll checklist supports that recurring review; the owner still needs to understand who approved each material change.
Set approval thresholds from the practice's actual risk and workload. Include a rule for multiple related transactions so splitting a purchase does not remove its review. Define who acts when the usual approver is away.
Give reviewers their own access and evidence
Use individual accounts with permissions matched to duties. Keep owner review access separate from routine payment preparation, and verify that bank statements and alerts reach the authorized reviewer directly through a secure channel.
Ask the practice-system provider which audit reports show changes to payments, adjustments, and user permissions. Confirm who can change settings or remove access. Use the cybersecurity checklist for the broader account and system safeguards.
A weekly owner packet can remain short: completed reconciliations, open differences, unusual adjustments, new or changed payees, and overdue reviews. Include links or references to protected source records. Record which items the owner inspected and what needs follow-up; a signature on an unread total is weak evidence of review.
Respond to a concern without turning suspicion into an accusation
Treat unexplained transactions as findings to investigate. Avoid judging employees by personality, personal finances, length of service, or willingness to work extra hours. Apply the same documented controls to everyone, including owners.
If evidence suggests possible misconduct, contact counsel and the appropriate accounting or fraud-investigation professional. Preserve relevant original records, audit history, statements, approvals, and communications in a restricted location under their guidance. Keep a factual record of discovery and actions taken.
The ADA's suspected-fraud checklist supports preserving records, consulting qualified advisers, and avoiding confrontation without evidence. It is educational guidance; employment actions, reporting, insurance notice, and recovery decisions need review for the actual facts and jurisdiction. ADA checklist for suspected fraud
Do not edit records to make them easier to explain or run an improvised confrontation. Coordinate any protective access or payment changes with the responsible advisers while preserving evidence. If a suspected fraudulent transfer has just occurred, contact the financial institution promptly through its established fraud channel.
Finish each review with a supported explanation or a named investigator and next step. After resolution, repair the specific control that failed and verify it on a later transaction. The operating goal is a money trail that another authorized person can independently follow from beginning to end.
