What is Ghost Employee Scheme?

Definition

A Ghost Employee Scheme is a payroll fraud in which a fictitious or inactive individual is added to a company's payroll system so that salary payments are issued to someone who does not actually work for the organization. The fraud is typically carried out by employees who have access to payroll administration systems or human resources records.

In this scheme, the fraudulent actor creates a fake employee record or continues paying a former employee whose departure was never properly recorded. The resulting salary payments are then redirected to bank accounts controlled by the perpetrator. Because payroll processes are routine and involve large numbers of transactions, ghost employee schemes can remain undetected without strong oversight.

Organizations monitor these risks within broader enterprise risk management (ERM) frameworks and payroll governance policies to ensure financial integrity and accurate workforce reporting.

How a Ghost Employee Scheme Works

Ghost employee schemes typically occur when internal controls over payroll and employee records are weak or when a single individual has excessive authority over multiple payroll processes.

For example, a payroll administrator may create a fictitious employee profile within the payroll system and assign salary payments to a bank account under their control. The payroll system processes the payment as a legitimate employee salary, making the fraud difficult to detect if oversight procedures are limited.

In other cases, payments may continue for a terminated employee if payroll records are not updated after the individual leaves the company.

Common Variations of the Scheme

Ghost employee fraud may appear in several different forms depending on how payroll records are manipulated or exploited.

• Fictitious employees: Completely fabricated employee profiles added to payroll systems.

• Inactive employee payments: Salaries continue for former employees after termination.

• Identity misuse: Payments issued using stolen or manipulated employee identity data.

• Collusion schemes: Payroll staff and supervisors cooperate to authorize fraudulent payments.

• Payroll redirection: Fraudsters redirect legitimate employee payments to unauthorized accounts.

These schemes may also appear alongside other fraud types such as a fictitious vendor scheme or duplicate vendor scheme within broader financial fraud environments.

Financial and Operational Impact

Although individual fraudulent payroll payments may appear small, ghost employee schemes can cause significant financial losses when they persist over long periods. Repeated salary payments to non-existent employees distort payroll expenses and reduce organizational profitability.

These schemes also affect workforce performance indicators such as revenue per employee and profit per employee. If ghost employees are counted within workforce statistics, financial performance metrics may appear weaker than they actually are.

Companies frequently compare workforce productivity using benchmarks such as Revenue per Employee Benchmark and Profit per Employee Benchmark. Unexpected deviations in these metrics may indicate payroll anomalies that warrant further investigation.

Detection Methods

Organizations use multiple detection methods to identify potential ghost employee schemes and prevent payroll fraud.

• Conducting payroll audits and employee record verification

• Comparing payroll records with human resources databases

• Monitoring irregular patterns in employee reimbursement or salary payments

• Analyzing unusual bank account patterns across payroll transactions

• Reviewing workforce productivity indicators for anomalies

For example, if payroll records show employees receiving salaries but no associated work records or activity logs exist, investigators may initiate a payroll audit to verify the legitimacy of those employees.

Relationship with Other Fraud Schemes

Ghost employee schemes often appear alongside other internal fraud activities involving procurement, payroll, or reimbursement systems.

For instance, employees involved in payroll fraud may also manipulate reimbursement systems or collaborate with external parties in schemes such as a kickback scheme. In some cases, fraudulent payroll expenses may be disguised within broader accounting manipulations like a coding scheme used to hide suspicious transactions.

Understanding these interconnected schemes helps organizations strengthen fraud detection strategies and identify broader patterns of financial misconduct.

Preventive Controls and Best Practices

Organizations reduce the risk of ghost employee schemes by implementing strong payroll governance and internal control mechanisms.

• Maintain accurate employee records and termination procedures

• Separate responsibilities for employee onboarding, payroll processing, and payment approvals

• Conduct periodic payroll audits and workforce reconciliations

• Verify employee identities and employment status regularly

• Use analytics to identify unusual payroll patterns

These preventive measures improve payroll transparency and strengthen oversight of salary payments across the organization.

Summary

A Ghost Employee Scheme is a payroll fraud in which fictitious or inactive employees are added to payroll systems so that salary payments can be diverted for personal gain. These schemes often arise when payroll controls and oversight procedures are insufficient.

By implementing strong payroll governance, conducting regular audits, and monitoring workforce performance metrics such as revenue per employee and profit per employee, organizations can detect anomalies early and prevent long-term financial losses associated with payroll fraud.