Back to Explore
👻

Fraud & Corruption

Ghost Employees & Payroll Anomalies

Suspected ghost employees and payroll anomalies detected through HR-finance reconciliation.

📖 6 min read🎯 Intermediate✍️ Updated 2026

Paying people who do not exist

Ghost employees, fictitious or terminated staff still drawing a salary, are a classic and costly payroll fraud that survives only where HR and finance records are never reconciled. This screen surfaces suspected ghosts and payroll anomalies detected through HR-finance reconciliation. AuditPro Core matches the payroll against the HR establishment and banking data to expose payees who should not be paid.

The Numbers

AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.

Suspected ghosts

1,470

Confirmed ghosts

612

Monthly exposure

R18.4 m

Removed from payroll

538

88% of confirmed

Payroll anomalies by type

Anomaly detail

Anomaly typeRecordsMonthly exposure (R m)
Not on establishment6128.6
Duplicate bank account3884.2
Acting allowance abuse2142.7
Overtime anomaly1761.9
Terminated still paid801

Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.

The ghost-employee scheme

A ghost employee is a payroll record with no genuine person behind it, created or retained to divert salary. It persists wherever no one reconciles who is paid against who is employed.

Reconciliation is the control

Matching the payroll to the approved establishment, to active HR records and to unique bank accounts is the control that exposes ghosts. Anomalies are the residue that does not reconcile.

Anomaly types

Red flags include shared bank accounts, missing or duplicated ID numbers, employees with no leave or tax records, and salaries paid after termination. Each anomaly type points to a different scheme.

From anomaly to confirmation

An anomaly is a lead, not proof, and must be confirmed through physical verification or documentary follow-up. The screen prioritises which anomalies to investigate first.

How AuditPro Core Bridges the Gap

  • HR-finance reconciliation: payroll is matched against the establishment, HR records and bank accounts.
  • Anomaly detection: shared accounts, duplicate IDs and post-termination pay are flagged automatically.
  • Exception workflow: high-risk anomalies route to investigators for verification.
  • Audit-ready export: confirmed ghosts and anomalies export with evidence for recovery and discipline.

Key Takeaways

  • Ghosts survive where HR and finance never reconcile.
  • Matching to the establishment is the core control.
  • Shared accounts and duplicate IDs are key flags.
  • Anomalies are leads requiring confirmation.

See This on Your Own Data

AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.