Fraud & Corruption
Ghost Employee Payroll Exceptions
Ghost-employee detection tests payroll against PERSAL and banking data to flag staff who may not exist, may not work, or may share an account with someone who does.
Why Ghost-Employee Detection Matters
Payroll is typically the largest single line of public expenditure, which makes it the most rewarding place for fraud to hide. A ghost employee draws a salary the state never owed, and the loss compounds silently every pay cycle until a control catches it — exactly the kind of fruitless and irregular expenditure the PFMA and MFMA require management to prevent. AuditPro Core runs continuous integrity tests against PERSAL and banking data so that the impossible and the improbable surface as exceptions before the next run.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
High-risk exceptions
1 247
▲ 9%
Duplicate bank accounts
318
Salary at risk
R286 m
Confirmed ghosts removed
204
Exceptions by detection test
Exceptions by department
| Department | Exceptions | Salary at risk (R m) |
|---|---|---|
| Education (Prov A) | 421 | 98.4 |
| Health (Prov B) | 366 | 81.2 |
| Metro C | 248 | 62.7 |
| Public Works | 212 | 43.7 |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
The Ghost Employee
A ghost is a payroll record for a person who does not exist, has left, or never rendered service. The salary flows to an account someone else controls, and the entry persists until reconciled away.
Shared Banking Detail
Two or more employees paid into the same bank account is a classic indicator of a manipulated record. Legitimate cases exist, but each one demands explanation rather than acceptance.
PERSAL Integrity
Cross-checking payroll against the PERSAL establishment exposes records with no valid post, duplicate identity numbers, or appointments never properly approved. The establishment is the control baseline.
Segregation of Duties
Where the same official can create an employee, approve them and release payment, ghost employees become trivial to insert. Exception data is most useful when read alongside who holds those rights.
How AuditPro Core Bridges the Gap
- Continuous monitoring: AuditPro Core re-runs payroll integrity tests each cycle so new ghosts surface within a pay period, not at year-end.
- Banking reconciliation: shared and mismatched account numbers are flagged against employee identity for investigation.
- Exception workflow: each flagged record routes to HR and payroll for documented clearance or escalation.
- Traceability to source: every exception links to the PERSAL record and payment that triggered it, ready for the forensic file.
Key Takeaways
- Payroll's size makes a small ghost-employee rate a large rand exposure.
- Shared bank accounts and invalid PERSAL posts are the highest-yield indicators.
- Clear every exception with evidence; an unexplained flag is a finding waiting to happen.
- Weak segregation of duties is the precondition that makes ghosts possible.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.