Property management fraud prevention isn't something most PM company owners think about — until it's too late. The industry is uniquely vulnerable: large cash flows, multiple bank accounts, vendor relationships with minimal oversight, and employees who handle both money and recordkeeping. It's a fraud examiner's nightmare and an embezzler's dream.
According to the Association of Certified Fraud Examiners, small businesses lose a median of $150,000 per fraud case. For property management companies handling millions in trust funds, the exposure is significantly higher — and the legal consequences extend far beyond the financial loss.
Here's what the most common property management fraud schemes look like, how to spot them, and the bookkeeping controls that actually prevent them.
Three structural factors make property management companies more vulnerable to fraud than most businesses:
Important: Fraud thrives where controls are weak and trust is high. The employee you trust the most is statistically the most likely perpetrator — because they've earned the access and autonomy that makes fraud possible.
These aren't hypothetical scenarios. I've seen every one of these in real PM companies — some discovered during routine bookkeeping, others only after an owner demanded an audit.
Your maintenance coordinator steers all plumbing work to their cousin's company at inflated rates. The vendor invoices $800 for a job that should cost $400, and kicks back $200 to your employee. You're paying market rate (or so you think), owners are absorbing the cost, and nobody questions it because the invoices look legitimate.
An employee creates work orders for maintenance that never happened. They either pocket the payment directly (if they have check-signing authority) or route it to a shell company they control. On paper, Unit 7A got a new garbage disposal. In reality, nothing happened.
A property manager collects rent — especially cash or money order payments — and pockets a portion before depositing the rest. They record the lower amount as the total collected. If the tenant pays $1,500 and the manager deposits $1,300, the owner's statement shows $1,300 in rent collected. Unless someone cross-references the lease amount against the deposit, this goes undetected for months.
When a tenant moves out and their deposit should be returned, an employee processes the refund check — but makes it payable to themselves or to a fictitious name they can cash. Alternatively, they simply don't return the deposit and pocket the money, telling the tenant it was applied to damages.
Similar to kickbacks, but without the external vendor's knowledge. An employee intercepts a $300 repair invoice, creates a modified version for $500, and pockets the $200 difference. With access to basic editing software and the ability to approve their own payments, this requires almost no sophistication.
| Fraud Scheme | How It Works | Red Flags | Bookkeeping Control |
|---|---|---|---|
| Vendor kickbacks | Employee steers work to preferred vendor at inflated prices; receives cash back | Single vendor dominates a category; prices consistently above market; no competitive bids | Require 3 bids over $500; rotate vendors quarterly; benchmark pricing |
| Phantom maintenance | Fake work orders for work never performed; payment routed to employee or shell company | Work orders without tenant complaints; vendor with P.O. Box only; no before/after photos | Require photo documentation; tenant confirmation for unit access; surprise property inspections |
| Rent skimming | Portion of collected rent pocketed before deposit | Deposits consistently less than lease amounts; cash-only tenants; unexplained vacancies | Online-only rent collection; monthly bank reconciliation against lease schedules |
| Security deposit theft | Refund checks issued to employee or fictitious payee | Deposit refunds to names not on lease; missing deposit ledger entries; tenant complaints | Separate trust account; dual-signature requirement on refunds; deposit reconciliation |
| Inflated invoices | Employee modifies vendor invoice amount upward; pockets the difference | Round-number invoices; amounts just below approval thresholds; vendor invoices without detail | Require original invoices from vendors directly; expense threshold alerts; invoice matching |
You don't need a forensic accountant on retainer. You need bookkeeping controls that make fraud difficult, detectable, and not worth the risk. Here's the checklist we implement for every property management client:
Reconcile every bank account — operating and trust — every single month. Not quarterly. Not "when we get to it." Monthly. Bank reconciliation is the foundation of fraud detection. If you skip it, nothing else on this list matters.
The person who records transactions should not be the same person who approves payments or reconciles accounts. In a small PM company, this might mean the owner reviews and approves all payments over $250. In a larger operation, it means defined roles with no overlap.
No payment goes out without documented approval from someone other than the person who requested it. Set dollar thresholds: under $250 gets one approval, $250–$1,000 gets two, over $1,000 requires owner sign-off.
Configure your accounting software to flag expenses that exceed normal ranges. If average monthly maintenance per unit is $150 and a property suddenly hits $600, that's an automatic review trigger — not necessarily fraud, but worth investigating.
Pick a random month each quarter and do a deep-dive review: pull 10 vendor payments, verify the work was completed, check pricing against market rates, confirm the vendor exists. The expectation of audits deters fraud more than the audits themselves.
Eliminate cash and money order payments entirely. When all rent flows through an online portal directly into your bank account, there's no opportunity to skim. The deposit matches the payment record automatically.
Have someone outside your operations team review the books monthly. This could be an outsourced bookkeeper, a CPA, or a fractional CFO. The key is independence — they have no incentive to cover up discrepancies.
Pro Tip: If you're managing trust funds for property owners, most states require you to maintain a separate trust account and perform regular reconciliations. Failure to comply isn't just bad bookkeeping — it's a license violation that can shut down your business.
Your bookkeeping controls are for prevention and early detection. But if you suspect active, ongoing fraud, you need a specialist. Here are the signals that it's time to call a forensic accountant:
The cost of a forensic investigation ($5,000–$20,000) is almost always less than the cost of ongoing undetected fraud. And if you need to terminate an employee or pursue legal action, you'll need the documentation a forensic accountant provides.
The strongest fraud prevention control is also the simplest: have someone independent handle your money. When your bookkeeping is handled by an outsourced team, you get built-in separation of duties that's nearly impossible to achieve with a small in-house staff.
At Steph's Books, we've helped property management companies discover — and prevent — fraud that would have gone undetected for years. Not because we're forensic accountants, but because clean books with proper controls make fraud visible.
Worried about fraud exposure in your PM company? Get an instant quote from Steph's Books for property management bookkeeping with built-in fraud prevention controls. Or read about how law firms prevent embezzlement with the same approach.
Get a free quote and see how Steph's Books can save you 40-60% vs hiring in-house.
