HR & Payroll
Payroll Ghost Employee Screening
Data-analytics screening of the payroll for ghost-employee indicators such as duplicate banking and missing IDs.
Why ghost-employee screening protects the payroll
Ghost employees, fictitious or terminated staff who continue to be paid, are a recurring fraud in public-sector payrolls and a focus of both internal audit and the AGSA's data analytics. Detecting them requires testing the whole payroll for tell-tale indicators rather than relying on supervisor confirmation alone. AuditPro Core runs analytics over the payroll to surface ghost-employee red flags for investigation under PRECCA-aligned fraud response.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Records screened
12,840
Exceptions raised
146
1.1% of payroll
Confirmed ghosts
9
removed from payroll
Payroll recovered
R 4.7 m
annualised
Exceptions by indicator type
High-risk exceptions
| Ref | Indicator | Department | Status |
|---|---|---|---|
| GE-0042 | Duplicate bank acct | Public Works | Confirmed ghost |
| GE-0058 | No clock-ins | Community Svcs | Under review |
| GE-0061 | Post-termination pay | Corporate Svcs | Recovery |
| GE-0079 | Invalid ID number | Roads | Cleared |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Indicators, not proof
Duplicate bank accounts, missing or shared ID numbers and employees with no leave or tax records are indicators that warrant scrutiny, not conclusive proof of fraud. The screen prioritises cases for human investigation.
Banking duplication is the strongest signal
Multiple employees sharing one bank account is among the most reliable ghost-employee and collusion indicators. It is also easily masked, so analytics must normalise account formats before matching.
Data quality and fraud overlap
Missing IDs and incomplete records both enable ghosts and signal poor master-data hygiene. Remediating data quality reduces the attack surface for this fraud.
How AuditPro Core Bridges the Gap
- Analytics screening: AuditPro Core tests the full payroll for duplicate banking, shared or missing IDs and other ghost indicators.
- Risk ranking: flagged records are prioritised so investigators focus on the highest-probability cases first.
- Exception workflow: each flag is routed for verification with outcome and evidence captured.
- Traceability: screening runs and dispositions are retained to evidence the anti-fraud control to the AGSA.
Key Takeaways
- Screen the whole payroll, not just exceptions reported by supervisors.
- Shared bank accounts are among the strongest ghost indicators.
- Flags are leads for investigation, not conclusions.
- Improving master-data quality shrinks the fraud opportunity.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.