A/P Hall of Shame | Accounts Payable Specialist Steals $434,000 Through Fake Refunds
An accounts payable specialist at a St. Louis-area medical business was sentenced in April 2026 after admitting to stealing approximately $434,000 from his employer through fraudulent patient refunds.
According to the U.S. Attorney’s Office for the Eastern District of Missouri , Talon Lewis, 33, worked as an accounts payable specialist and was responsible for uploading lists of patients who were owed refunds. The company used those lists to generate and mail refund checks.
Prosecutors said Lewis exploited that process by adding himself, friends and acquaintances to the refund lists, sometimes using fake names. The company then issued checks based on the manipulated information.
Lewis recruited 14 people to participate in the scheme. Those individuals received fraudulent refund checks and returned approximately 30% of the money to Lewis as a kickback, according to federal prosecutors. The scheme ran from October 2019 through at least February 2025.
Lewis pleaded guilty to one count of mail fraud in January 2026. On April 30, U.S. District Judge Rodney W. Sippel sentenced him to one year and one day in federal prison and ordered him to repay the approximately $434,000 that had been stolen.
The AP Control Failure
For accounts payable professionals, the case provides a textbook example of why no employee should have unchecked control over information that ultimately generates a payment.
Lewis did not need to create a sophisticated cyberattack or compromise the company's banking system. He manipulated information inside an ordinary business process.
If the person preparing or uploading a refund file can also influence who receives payments without an independent review, the organization has created an opportunity for fraud.
Controls That Could Reduce the Risk
- Independent approval of refund files before payments are generated
- Validation of recipient information against original customer or patient records
- Exception reports identifying new or changed payees
- Duplicate address and bank account monitoring
- Periodic audits of refunds and other non-standard payments
- Segregation of duties between payment preparation, approval and reconciliation
- Data analytics designed to identify unusual payment patterns
One especially useful control would be comparing employee information against payment recipients. Matching employee addresses, bank accounts, telephone numbers or other identifiers against vendor and refund records can expose suspicious relationships before losses become substantial.
Read the original U.S. Department of Justice announcement →
No comments:
Post a Comment