Lapping fraud is a form of accounts receivable theft in which an employee steals an incoming customer payment and hides the shortage by applying a later customer’s payment to the first account. The scheme creates a rolling cover-up: every new payment has to be misapplied to patch the previous hole, and the chain grows more tangled by the day until it collapses. It is one of the more common asset misappropriation schemes because it needs no accomplice and no technical skill, only access to both incoming payments and the customer ledger.
How the Scheme Works
Picture a receivables clerk who opens the mail and also posts payments. Customer A mails in a $2,000 check. The clerk pockets it. Customer A’s account still shows $2,000 owed, so a past-due notice is coming unless the clerk does something.
When Customer B’s $2,000 check arrives a few days later, the clerk records it as a credit to Customer A. Customer A’s balance now looks paid. Customer B, however, still shows an outstanding $2,000. So when Customer C pays, that payment gets applied to Customer B. Customer D covers C. And so on.
Every day the clerk has to move the newest payment onto the oldest exposed account. Robbing Peter to pay Paul, indefinitely.
The math rarely lines up cleanly. If a $2,000 theft is being covered by a $1,500 payment, there is still a $500 gap that needs its own patch. Multiply that across dozens of accounts and the bookkeeping becomes a second job on top of the real one. Some fraudsters try to escape by writing off the stolen amounts as bad debt or issuing fake credit memos, but those cleanup entries leave their own tracks.
Why Lapping Schemes Collapse
Lapping is inherently unstable. The employee has to be at their desk every single day to keep the chain moving. One sick day, one vacation, one week when payments come in slower than usual, and the gaps become visible to whoever covers the work. That is why the classic profile of a lapping fraudster is the employee who never takes time off, guards their duties jealously, and comes in even when they shouldn’t. The behavior meant to hide the fraud is itself the red flag.
How to Prevent Lapping Fraud
Lapping requires one person to control both the cash coming in and the records that show it applied. Break that combination and the scheme becomes nearly impossible without a second person in on it.
Segregate Cash Handling From Ledger Posting
The single most important control is separating the person who opens envelopes and processes checks from the person who posts payments to customer accounts. In a small office where two-person separation isn’t practical, a supervisor should review and approve every batch of payment postings before they hit the ledger.
Use a Bank Lockbox
A lockbox removes employees from the payment-handling chain entirely. Customers mail their checks to a post office box managed by the company’s bank, and the bank processes the deposits and sends remittance data to the business.1Cornell University Division of Financial Services. Lockbox Processing No employee ever touches the check.
Require Two Consecutive Weeks Off
Because lapping depends on the fraudster’s constant presence, requiring employees in cash-handling roles to take at least two consecutive weeks off each year is one of the most effective controls available. The Federal Reserve Bank of New York recommends this minimum, noting that “most frauds or embezzlements require the continual presence of the wrongdoer” and that the absence has to be long enough for pending transactions to clear while a different employee handles the daily work.2Federal Reserve Bank of New York. Required Absences from Sensitive Positions The absent employee should also lose remote access to accounting systems during the time away.
Restrictive Endorsements and Electronic Payments
Every incoming check should be stamped “For Deposit Only” with the company’s account number the moment it arrives. A restrictive endorsement prevents anyone from cashing the check at a bank window.3Consumer Financial Protection Bureau. What Does It Mean For A Check To Be Indorsed For Deposit Only Moving customers onto ACH and wire payments reduces risk further, since electronic payments flow directly into bank accounts with automated matching and no physical instrument for anyone to intercept.
How Auditors Detect Lapping
Lapping leaves a specific pattern that experienced auditors know how to find. The key is looking at timing, not just totals, because the ledger balances can look correct on any given day even while the fraud is running.
Compare Deposit Dates to Posting Dates
The most direct test compares the dates on authenticated bank deposit slips against the dates the corresponding payments were recorded in the accounts receivable ledger. In a clean process, those dates match closely. When someone is lapping, there is a consistent lag: the bank received the deposit on Monday, but the ledger didn’t credit the customer until Wednesday or Thursday because the payment was being held and misapplied. A pattern of delayed postings clustered around one employee’s transactions is a strong signal.
Confirm Balances Directly With Customers
Auditors should send confirmation requests directly to a sample of customers, asking each to verify the balance the company shows they owe. The Public Company Accounting Oversight Board requires auditors to perform confirmation procedures for accounts receivable, or otherwise to obtain audit evidence directly from an external source.4PCAOB. AS 2310: The Auditors Use of Confirmation When a customer replies that they already paid a balance the company still shows as open, lapping is one of the first explanations to investigate. The confirmation has to travel directly from the auditor to the customer, never through the employee under review.
Watch the Aging Report
Lapping gradually inflates the average age of outstanding receivables. The fraudster is always delaying clearance of the oldest accounts, so the aging report shows an unexplained creep in balances sitting in the 60-day and 90-day columns. If the customer base and credit terms haven’t changed but receivables are aging faster, someone may be cycling payments through the ledger out of order.
Flag Unusual Journal Entries and Write-Offs
A sudden spike in credit memos or bad-debt write-offs on accounts that previously had no collection issues deserves scrutiny. Employees caught in a lapping spiral sometimes try to escape by writing off the stolen amounts as uncollectible. Manual journal entries that adjust receivables without documentation, entries made by employees who don’t normally post journal entries, and adjustments made right before an audit period closes all deserve a second look.
Criminal Penalties for the Perpetrator
Lapping is theft, and depending on the amounts involved and the type of organization, it can bring serious charges at both the state and federal level.
State Embezzlement Charges
Every state prosecutes embezzlement, and most draw the line between misdemeanor and felony somewhere between $500 and $2,500 in stolen funds. Because lapping schemes grow over time, even one that starts with a single small payment can cross into felony territory within weeks. Felony embezzlement sentences vary by state but commonly range from two to twenty years, with longer terms for larger amounts.
Federal Charges
When the victim organization receives federal funding, lapping can trigger prosecution under the federal theft statute, which carries a maximum sentence of 10 years in prison.5Office of the Law Revision Counsel. 18 USC 666 – Theft or Bribery Concerning Programs Receiving Federal Funds If the scheme involves mailed payments, federal mail fraud charges can apply, with penalties up to 20 years of imprisonment.6Office of the Law Revision Counsel. 18 US Code 1341 – Frauds and Swindles
Mandatory Restitution
Federal courts are required to order restitution in property offenses committed by fraud. The convicted employee must repay the full value of the stolen funds and reimburse the victim for costs incurred during investigation and prosecution.7Office of the Law Revision Counsel. 18 US Code 3663A – Mandatory Restitution to Victims of Certain Crimes In practice, restitution orders often go partially uncollected because the employee has already spent the money.
Recovering the Money After Discovery
Discovering a lapping scheme is only the start. Recovering the funds is harder than finding them.
Employee Dishonesty Insurance
Businesses that carry employee dishonesty coverage or a fidelity bond can file a claim for stolen funds. These policies typically cover theft of cash, checks, securities, and other financial instruments by employees. Filing requires an incident report, a proof of loss statement, and supporting documentation such as witness statements, deposit records, and ledger printouts. Timeliness matters. Most policies require prompt notice after discovery, and delays of more than 30 days can jeopardize a claim. Business owners who don’t already carry this coverage can often add it as an endorsement to an existing commercial property policy.
SEC Whistleblower Awards
If the lapping happens at a publicly traded company and involves material misstatements of financial results, an insider who reports it to the Securities and Exchange Commission may qualify for a whistleblower award. Under the Dodd-Frank Act, whistleblowers who provide original information leading to an enforcement action with sanctions exceeding $1 million are entitled to an award of 10% to 30% of the collected sanctions, paid from those sanctions rather than from taxpayer funds.8Office of the Law Revision Counsel. 15 US Code 78u-6 – Securities Whistleblower Incentives and Protection
Civil Suits Against the Employee
The business can pursue a civil case against the employee independently of any criminal prosecution. A civil judgment may allow recovery of the stolen amount plus damages, legal fees, and investigation costs. Collecting on that judgment against a former employee already facing criminal charges is often difficult. Between criminal restitution, insurance, and civil suits, a victim business has multiple paths to recovery, but full recoupment is the exception. Early detection is what keeps the loss small, and small losses are the ones that actually get recovered.