A common method used by internal perpetrators to misappropriate corporate funds is the creation of a phantom shell vendor inside the supplier index, allowing them to route authorized corporate approvals to bank accounts they control. Fraud risk units can proactively detect these schemes by running cross-database matching scripts. [1]
[Human Resources Payroll Database] <─── Script Cross Match ───> [Corporate Vendor Master Directory]
│
â–¼
[Flagged Matches: Shared Bank Routing Accounts]
The matching platform extracts data tables from the corporate payroll repository and checks them against entries in the vendor directory:
Match Indicator Flags = ( HR Home Address == Vendor Street Address ) || ( HR Bank Routing == Vendor Bank Routing )
The analytics platform generates an immediate exception alert for any record matching across these parameters:
- Shared Address Fields: Cases where a vendor’s registered corporate address matches an employee’s home address.
- Shared Bank Routing Numbers: Instances where a supplier’s payment details match an active employee’s payroll account.
- Shared Communication Details: Matches across telephone numbers, personal emails, or tax identification codes.
Â