Collector fraud: how to detect and prevent it
By Equipo Prestafolio
The eight most common fraud patterns in street collections, the signals that give them away before it is too late, and the controls that actually prevent them.
Most cash discrepancies are errors, not fraud, and confusing the two hurts both sides: you accuse someone honest over a mistake, or you give the benefit of the doubt to someone who is systematically stealing from you. This article is not about the occasional discrepancy (that is already covered in How to reconcile your collectors' cash): it is about the deliberate patterns, what they look like, and the controls that shut them down before they cost you a real slice of your portfolio.
Why a collector is the highest-risk position
A collector handles someone else's cash, out on the street, without direct supervision at the moment, and with the trust of clients who often know them better than they know you. That combination (cash + no direct oversight + client trust) is exactly the highest-risk profile in any cash-handling business. It is not a statement of distrust toward your collectors: it is the reason the control has to come from the system, not from goodwill.
The eight most common patterns
# | Pattern | How it works |
|---|---|---|
1 | Phantom loan | The collector reports a disbursement to a "client" who does not exist or never received the money, and keeps the cash |
2 | Unrecorded collection (skimming) | Takes the client's payment, never logs it, and keeps the cash. The client believes they paid |
3 | Double charging | Charges the client twice for the same instalment, and only records one |
4 | Collected arrears, undeclared | Collects the arrears charge but only records the base instalment amount |
5 | Cash rotation (float) | Uses today's cash to cover yesterday's shortfall, always a day behind, invisible until the pattern breaks |
6 | Collusion with the client | Agrees with the client to mark a loan uncollectible and splits whatever was still outstanding |
7 | Fake receipt | Hands the client a real-looking receipt, but never enters the payment into the system |
8 | "Adjusted" late logging | Logs the day's collections hours later, from memory, tweaking figures so the till balances even though it does not reflect what really happened |
Pattern 5 (cash rotation) is the most dangerous of the eight because it does not show up in the daily count: the till balances, because the collector is covering yesterday's hole with today's cash. It is almost always discovered all at once, when the collector is out, resigns, or gets asked for an unscheduled cut-off, and the accumulated hole surfaces at once.
The signals that give away each pattern
You do not have to wait for fraud to "show itself." These are the signals that, together, almost always point to something deliberate:
Signal | What pattern it suggests |
|---|---|
A client says "I already paid that" and the system does not have it | Unrecorded collection, or a fake receipt |
A new loan with no visit or verifiable client contact | Phantom loan |
"Avg. / live loan" far below every other collector | The collector is not reporting everything they collect. See Collector performance |
Uncollectible loans concentrated on one collector, with no geographic or client-profile pattern | Possible collusion with clients |
Discrepancies that always "resolve themselves" the next day | Cash rotation: the hole is being covered with fresh cash |
Collections consistently logged hours after the route | Adjusted late logging: the reconstruction "always balances" because it is forced to |
A client claims a receipt the system does not recognise | Fake receipt |
Sudden resignation with no notice | The strongest signal of all, especially alongside any of the above |
The controls that actually prevent this
Detecting is already late; what really protects your portfolio is making the eight patterns hard to pull off, not just easy to discover afterwards:
Control | What it prevents |
|---|---|
Whoever collects does not adjust (separation of duties) | The same collector who takes the cash being the one who "corrects" the figures when they do not add up |
Daily count, at a fixed time, no exceptions | A discrepancy quietly piling up without anyone noticing in time. See Cash counts and movements |
A registered, verifiable client before any disbursement | Phantom loans: you cannot disburse to a client who does not exist in the system. See Registering a client and Trust and the bureau |
Granular permissions by function | A collector being able to mark a loan uncollectible without another person's approval. See Roles and permissions and Cash permissions |
An audit trail with the timestamp and author of every movement | A late or altered record passing through with no trace of when and who did it. See Audit trail |
Random client verification | Calling or visiting a random sample of clients to confirm their payments match what was recorded, without warning the collector when |
Weekly review of per-collector indicators | A pattern surfacing in weeks, not months. See Collector performance |
What to do once you confirm a fraud
Confirming (not just suspecting) changes what is appropriate to do:
- Block access immediately, before confronting them, so they cannot alter more records. See Blocking or deleting an agent.
- Gather the audit trail evidence before the conversation can influence your own judgement.
- Reassign their book to another collector or to yourself, and check every active loan they had, not just the ones you already suspect.
- Consider the legal route if the amount justifies it. Stealing cash from an employer is, in most jurisdictions in the region, a criminal matter, not just a labour dispute; consult a lawyer about your case.
- Do not treat it as just another discrepancy. Mixing confirmed fraud with your normal discrepancy-tolerance policy weakens both.
What this article is not
It is not a blanket accusation against collectors: the vast majority collect well, keep their route and have no interest in stealing from you. The point of a good control system is not to suspect everyone, it is to remove the opportunity, the same way a daily count does not exist to catch thieves but so that an error, anyone's error, surfaces the same day. See How to reconcile your collectors' cash.
Frequently asked questions
How do I tell an honest mistake from a deliberate pattern? An honest mistake is isolated, gets explained on the spot and does not repeat. A deliberate pattern repeats, concentrates on the same collector, and usually comes with resistance to having the detail reviewed. Frequency and reaction are the two most reliable signals.
Is it worth reviewing a collector's full history once I already suspect them? Yes, always, and before confronting them. If the pattern is real, it is almost never an isolated case: reviewing the full history tells you the real size of the problem before you decide how to act.
Do these controls slow down day-to-day operations? Well-designed controls (clear permissions, a fixed-time count, logging at the moment of collection) add seconds, not minutes, to each transaction. The real cost is on the other side: undetected fraud running for months costs far more time (and money) than any preventive control.
Summary
- Most discrepancies are errors; this article covers the deliberate patterns, which are different.
- The eight most common patterns range from phantom loans to cash-rotation adjustments, and the most dangerous one does not show up in the daily count.
- Cross-checked signals (performance indicators, client complaints, sudden resignations) catch it before the damage is large.
- The real controls are separation of duties, granular permissions and an audit trail, not personal trust in the collector.
- Once fraud is confirmed, block access first, gather evidence second, and consider the legal route if the amount justifies it.
Prestafolio separates who collects from who adjusts, leaves an audit trail with the timestamp and author of every movement, and lets you block an agent instantly if something does not add up: see Cash till per collector, Cash permissions and Audit trail.