# Nonprofit Embezzlement: Schemes and Warning Signs

- Author: PreciseBankFlow (https://precisebankflow.com)
- Published: 2026-10-17
- Category: Embezzlement and fraud schemes
- Canonical: https://precisebankflow.com/blog/nonprofit-embezzlement

> Nonprofit embezzlement schemes: diverted donations, fake vendors, personal card use and grant misuse, with the warning signs boards often miss.
Nonprofit embezzlement is theft of a charity's money by someone trusted with it, usually a treasurer, executive director or bookkeeper. The common schemes are diverted donations, payments to fake vendors, personal spending on the organization's card and misused grant funds. Boards miss it when one person controls the money and the board only sees summaries.

## Why are nonprofits exposed to embezzlement?

Nonprofits are exposed to embezzlement because they often combine a small finance function with high trust and distant oversight. One paid staff member or volunteer may receive gifts, pay bills and keep the books. The board meets monthly or quarterly, sees a summary report and has little reason to doubt a person who is giving their time to the cause.

Several features make the risk worse:

- **Few people in the finance chain.** Separating duties needs at least two or three people. A small charity may have one.
- **Volunteer officers.** A volunteer treasurer may serve for years with no review, because asking for one feels like an accusation.
- **Gifts with no invoice.** A donation has no sales record behind it. If it is never logged, nothing shows it is missing.
- **Cash events.** Bake sales, raffles and collection plates produce loose cash counted by whoever is there.
- **Mission focus.** Boards spend their time on programs, not bank statements, and finance reports are approved quickly.

None of this means nonprofit staff are less honest. It means a dishonest one meets fewer obstacles, and a loss can run for years before anyone looks.

## Diverted donations and event cash at a nonprofit

Diverted donations are gifts taken before the nonprofit records them or redirected after they arrive. Cash from events and collections is the easiest target, because nobody but the counter knows the total. Checks made out to the organization can be deposited to a look-alike account, and online gifts can be routed to a personal payment link.

### Cash at events

A single volunteer who counts the takings, fills in the deposit slip and banks it can keep part of the cash with no trace. The counter's total becomes the only record. Two unrelated people counting together, and signing a count sheet before the cash leaves the room, closes most of this gap.

### Checks and online gifts

Checks payable to the charity are harder to divert than cash, but not impossible. A person can open an account in a similar name, or endorse checks into a personal account at a bank that does not look closely. Online giving adds a newer route: a donation link on a flyer or social post that sends money to a personal account rather than the organization's processor.

### Gifts from older donors

Some diversions target the donor rather than the gift. An insider who cultivates an older supporter may steer their money to themselves, as a personal loan or a "gift" outside the organization. That overlaps with [elder financial abuse and the bank patterns that reveal it](/blog/elder-financial-abuse), and it can harm both the donor and the charity's reputation.

The test for donations is to compare what donors say they gave with what the books recorded. Gift acknowledgment letters, sent by someone other than the person who receives the gifts, do that for you: a donor who gets no letter, or a letter for the wrong amount, will often say so.

## Fake vendors and padded payroll in nonprofit embezzlement

Fake vendors and padded payroll move nonprofit money out through payments that look like normal expenses. An insider sets up a supplier that does no work, or adds a person who does not work, and pays it from the operating account. Because the payment is recorded, the books balance, and only a review of the payees exposes it.

### Invented suppliers

A fictitious vendor often has a plausible name, such as "Community Print Services", a home address or a post office box, and invoices for services that are hard to verify, like consulting or design. Payments are regular and round. The bank statement shows the payee; the question is whether anyone can describe the work.

### Payroll and stipends

In a nonprofit with part-time staff or volunteers who receive stipends, an extra name on the payroll list is easy to miss. Look for employees with no personnel file, two staff paid into the same account, or someone who stays on payroll after leaving.

### Testing payees

List every payee for the year with total paid. For each one above a threshold the board sets, ask for a contract, a contact name and evidence of the work. For payroll, have someone outside finance confirm each person on the list is a real, current worker.

## Personal spending on nonprofit cards and reimbursements

Personal spending on nonprofit cards and reimbursements happens when a staff member or officer charges private costs to the organization and records them as program or office expenses. Groceries become event supplies, a family trip becomes a conference, and a phone bill becomes outreach. The charges are real; the purpose is false.

Two weak points let this run. First, the person with the card often approves their own statement, or a board member signs it without reading the receipts. Second, reimbursement claims are paid without original receipts, so the same purchase can be claimed twice or a personal receipt can be relabeled.

Review the card statement itself, not just the summary in the finance report. Look for merchants with no link to the mission, weekend and holiday spending, charges in a home town during no event, and round cash withdrawals. The detailed tests for this are in [how employee credit card misuse shows on the card statement](/blog/employee-credit-card-misuse). For the executive director's card, the reviewer should be a board officer, not the director's own staff.

## Grant misuse and restricted funds at a nonprofit

Grant misuse is spending restricted money on purposes the funder did not approve, or taking it outright. It differs from other nonprofit embezzlement because a grant comes with a budget and reporting duties, so a theft also creates a false report to the funder. The organization can owe the money back even if the board knew nothing.

Grant money is exposed in a few ways. Costs from one program can be charged to a grant that has budget left, which is a misstatement even when nothing is stolen. Personal spending can be hidden inside a grant line where nobody reviews the detail. And a grant paid in advance can sit in a bank account that only one person watches.

Keep each restricted grant traceable. Either use a separate bank account or a separate class in the books, and reconcile spending against the approved budget each quarter. When a grant report is prepared, someone other than the preparer should tie its totals to the general ledger and to the bank.

## Nonprofit embezzlement warning signs boards miss

Nonprofit embezzlement warning signs are often visible to the board but explained away. A treasurer who will not share the bank login, reports that arrive late or only in summary, bank statements that never reach the board, and a finance person who refuses help or holidays are all common. The biggest mistake is assuming long service means safety.

The checklist below is an example of what a board can review at one meeting a month. It takes less time than most program reports.

| Record to request | Compare it with | Warning sign it catches |
| --- | --- | --- |
| Bank statements, as sent by the bank | The cash balance in the finance report | Balances that differ, or statements that cannot be produced |
| Bank reconciliation, signed and dated | The statement and the ledger | Old reconciling items, or reconciliations done by the same person who pays bills |
| List of payees paid in the month | The approved vendor list and budget | New or unknown suppliers, round payments |
| Card statements with receipts | The program calendar | Personal merchants, spending on days with no event |
| Donor acknowledgment log | Gifts recorded in the books | Gifts acknowledged but not recorded, or the reverse |
| Payroll list | Staff known to the board | Names nobody recognizes |

Some signs are in behavior rather than records. A finance volunteer who has served for many years with no handover, who insists on collecting the mail personally, or who reacts badly to a simple question deserves the same review as anyone else. An annual [fraud risk assessment that maps who can move money](/blog/fraud-risk-assessment) is a calm way to ask those questions without singling anyone out.

Reading every statement line takes time a volunteer board does not have. [PreciseBankFlow](/) checks that each statement foots, matches lines to the ledger and lists the exceptions, so the board can spend its review on the payees and gaps that need a question.

## What should a nonprofit board do after finding embezzlement?

A nonprofit board that finds embezzlement should secure the records, limit the suspect's access, take legal advice and avoid confronting the person before the evidence is preserved. Then it must decide on reporting: to the police, to the insurer, to funders, and on the organization's annual IRS return if the loss is large enough.

### First steps

1. Copy bank statements, the general ledger, card statements and email before anyone is told.
2. Remove the person's access to bank accounts, card controls and accounting software, through the bank and the software provider directly.
3. Speak to counsel and the insurer. Crime or fidelity policies often have notice deadlines.
4. Do not ask the person to "explain the numbers" first. That invites deleted files and a rehearsed story.

### The Form 990 question

Organizations that file Form 990 must say whether they became aware of a significant diversion of assets during the year. The [IRS instructions for Form 990, Part VI, line 5](https://www.irs.gov/instructions/i990) treat embezzlement and theft as diversions, and count a diversion as significant when the total discovered in the year exceeds the lesser of 5% of gross receipts, 5% of total assets, or $250,000. A "Yes" answer needs an explanation on Schedule O of what happened and what was done, without naming the person responsible.

### Repairing the controls

Once the facts are known, fix the gap that allowed the scheme rather than only replacing the person. Add a second signer or approver, send bank statements to a board member directly, and set a regular review the next treasurer cannot opt out of.