Summary: Most law firm fraud traces back to one person controlling too much of the money with too little oversight. Because firms hold client funds in trust, the consequences can reach past the balance sheet to a lawyer’s license. This article covers where the risk lives, the warning signs worth watching, the internal controls that help close the gaps, and what to do if you find a problem.
Law firm fraud rarely looks like a heist. It usually looks like a long-tenured bookkeeper/administrator who handles every part of the firm’s money, never takes a full week off, and is the only person who understands the trust account. Nothing about that arrangement is sinister on its own. It is simply an opening.
Fraud risk in a law firm is a structural question more than a character question. Firms run lean, partners bill rather than supervise, and one trusted person often owns the entire financial cycle. That is the condition most schemes need.
The stakes are also different in legal practices. Firms typically hold client money in trust, so theft is not only a loss to the partners but also a client, reporting, and licensing matter.
The good news is if you find yourself in this situation, there are things you can do today to fix it. What follows is where the risk sits in how law firm finances run day to day, the warning signs, the controls that help, and the steps to take if something surfaces.
Where does fraud risk commonly emerge in law firms?
- Client Trust Accounts: Where the funds belong to someone else and balances should be reconciled to the penny.
- Time and Billing: Where entries can be inflated, shifted between matters, or written off to cover a shortfall.
- Payroll: Where rates, hours, names, and bank accounts can be changed by whoever controls the payroll file.
- Expense Reimbursement: Where personal spending is easy to relabel as firm spending. This includes firm credit cards.
- Vendor and Check Payments: Where a fictitious vendor or an altered payee can pass without notice.
- Outgoing Wires: Where a single instruction can move a large balance in minutes.
What is the fraud triangle?
The fraud triangle is a model that explains why occupational fraud happens. It holds that three elements are usually present together: pressure, opportunity, and rationalization.
- Pressure is a personal financial strain, such as debt, medical costs, gambling, or spending that has outrun a salary.
- Opportunity is the gap in controls that makes theft possible and, just as importantly, makes concealment possible.
- Rationalization is the story the person tells themselves, often that it is a loan, that it is owed to them, or that it is temporary.
A firm cannot manage a person’s private pressures, and it cannot manage their reasoning. Opportunity is the element a firm governs, and it is governed with internal controls.
It also helps to know the categories. Occupational fraud is generally sorted into three types: asset misappropriation, meaning the theft or misuse of cash or property; corruption, including conflicts of interest, bribery, and kickbacks; and financial statement fraud. In law firms, asset misappropriation is by far the most common.
The most common fraud schemes in law firms
Most law firm losses come from a short list of schemes, and each one exploits the same gap: one person with end-to-end control and no independent review.
Bookkeeper embezzlement
The most frequent pattern is a bookkeeper or office manager who can both move money, account for it, and nobody else is paying attention. Unauthorized transfers, altered checks, and payments to personal accounts get concealed in a reconciliation the same person performed.
For example: an office manager who pays a personal credit card from the operating account each month, codes it to a familiar vendor, and reconciles the account herself. No one else compares the statement to the ledger.
Client trust account theft
Trust theft takes several forms: disbursing to the wrong party, moving money between client balances to cover an earlier shortfall, or paying firm expenses from trust funds. Because trust balances should be tied exactly to client ledgers, these schemes depend on unreviewed reconciliations.
Billing and time fraud
Billing schemes include inflated hours, time billed to the wrong matter, padded disbursements, and fee diversion, where a client is directed to pay a timekeeper rather than the firm. Professional exposure usually exceeds the dollars involved.
Payroll and ghost employees
Payroll schemes include fictitious names on the payroll, terminated staff left active and bank information changed, duplicate records, and quiet rate or hour changes.
Expense reimbursement and card misuse
Reimbursement schemes are small, repeated, and easy to miss. These include duplicate submissions, personal charges coded to client matters, and receipts that never arrive. They matter because they are often the first test a person runs before trying something larger.
Check and wire fraud
Check schemes involve forged endorsements, altered payees, and payments to vendors that do not exist. Wire schemes often begin outside the firm, with emailed instructions that appear to come from a partner or a client, and they succeed when one person can send a wire alone.
What are the red flags of fraud in a law firm?
Red flags are patterns: any single item below can have an innocent explanation, but several together are reason enough for an independent look at the books.
- A bookkeeper or office manager never takes a full vacation or consistently works alone after hours.
- Someone resists sharing access, passwords, or duties, and becomes defensive when routinely questioned.
- Bank and trust statements arrive already opened, or no partner has ever reviewed them unopened.
- Reconciliations are late, missing, or always prepared by the same person with no second review.
- Trust balances do not tie to the client ledgers, or transfers between accounts have no clear purpose.
- Payments go to vendors nobody recognizes, or invoices arrive without supporting documentation.
- Clients report late credits, missing refunds, or settlement funds that have not arrived.
- A team member’s spending has clearly outrun a known salary.
- Write-offs, adjustments, and voided transactions cluster around one person’s work.
- Unusual fluctuations in expense accounts or unexplained balance sheet accounts
Internal controls that help reduce law firm fraud risk
The controls that matter most in a law firm are ordinary, inexpensive, and largely about who sees what.
- Segregate incompatible duties so that the person who authorizes payments, the person who handles funds, and the person who reconciles the accounts are not the same person.
- Have bank and trust reconciliations prepared or reviewed by someone with no authority to move money.
- Send bank, trust, and credit card statements unopened to a partner who reviews them every month and asks questions.
- Set approval thresholds for payments and require a second approver above them.
- Require dual authorization for outgoing wires and confirm any change in payment instructions by phone to a known number.
- Review the payroll register each pay period against the current roster of team members.
- Require documentation for reimbursements and card charges, reviewed by someone other than the person who submitted them.
- Give team members a confidential, anonymous way to raise concerns.
- Limit system and banking access to what each role needs and remove it the day someone leaves.
- Engage an outside CPA to spot check the books, the reconciliations, and the trust account on a set cadence.
- Access to vendor creation should be limited through user access limits and passwords. A partner/shareholder should review the vendor list frequently.
- Background checks should be performed for all incoming employees and partners.
- All employees should take vacation at least once per year. In addition, cross training of critical duties is important so work can continue when an employee is out.
Together these are the working parts of a fraud prevention program, and none of them requires new software or a new hire. Most are a decision about who opens the mail and who signs off.
What is segregation of duties and how does a small firm achieve it?
Segregation of duties means no single person controls a transaction from beginning to end. Three functions belong with different people: authorizing payments, handling the money, and reconciling the account.
A small firm can do this without hiring. A partner can review statements and reconciliations without ever touching the accounting file. A second partner can approve payments above a set threshold. Recording and reconciliation can sit outside the office altogether while approval stays inside it, which is one reason firms use accounting support built around law firm operations.
Trust account fraud and IOLTA controls
Client trust accounts carry the highest consequence. The control that matters most is simple: the person who deposits and disburses trust funds should not be the person who reconciles them. Three-way reconciliation, which compares the trust bank statement, the trust ledger, and the total of the client ledgers, is the core discipline. Perform it monthly, and have it reviewed by someone who did not prepare it.
Requirements for Interest on Lawyers’ Trust Accounts (IOLTA) and for reconciliation frequency and recordkeeping are set by each state, so a firm should work from its own jurisdiction’s rules rather than by a general standard.
What should you do if you discover fraud or trust account theft?
Move deliberately rather than quickly. The first hours shape what can be recovered and what can later be proven. The sequence below is the general order and the specifics belong to counsel in the firm’s jurisdiction.
- Preserve the evidence: Secure original records, back up the accounting file and email, and keep access logs. Do not delete, reorganize, or clean up anything.
- Hold off on the confrontation: An early conversation can prompt records to disappear and can compromise both an investigation and any employment action.
- Limit further access: Restrict banking and system permissions for the individual involved, with guidance from counsel and human resources.
- Engage outside counsel and a forensic accountant early: This is so the review is structured, documented, and defensible to an insurer or a court.
- Notify the malpractice insurer: Check for a fidelity bond or crime insurance policy, which is the coverage designed for employee theft.
- Address the client trust obligations: Where client funds are affected, obligations to restore the funds, to notify affected clients, and to report to the state bar may apply, and they vary by jurisdiction.
- Decide on a police report and law enforcement referral: With counsel weighing recovery, insurance requirements, and client notification.
- Close the gap that allowed it: A scheme that ran for years points to a control that was missing, not to a person who was unusually clever.
When should you bring in a forensic accountant?
Bring in a forensic accountant when the numbers stop explaining themselves, and particularly when the answer may end up in front of an insurer, a state bar, or a court. Forensic accounting work differs from ordinary accounting: it is built to be documented, quantified, and defended.
- Quantifying the loss in a form an insurer or a court will accept.
- Tracing funds through accounts and entities to establish where money went.
- Identifying assets that have been concealed or moved.
- Calculating damages and supporting restitution or recovery.
- Serving as a witness in a proceeding, where required.
- Reviewing the firm’s internal controls to find the weak points that allowed the scheme.
Final thoughts
Law firm fraud risk is mostly a question of structure, and structure is something a firm can change without a project plan. Opportunity is the element the fraud triangle leaves in your hands.
Start with one exercise this month. Write down who authorizes payments, who handles the money, and who reconciles the accounts. If fewer than three people appear on that list, that is where to begin, and the first fix may be as small as deciding who opens the bank statements.
