Key Takeaway: Reimbursement controls reduce the risk of improper payments; they cannot guarantee prevention or detection. Use documented support, independent approval, restricted payment changes, duplicate and refund checks, and a defined response to exceptions. Keep policy compliance, accounting treatment, tax reporting, and recovery decisions separate.
This article is part of our guide to small-business payroll and worker classification.
A reimbursement process should show what was purchased, why the business should pay, who reviewed it, and where the money went. An inaccurate claim can result from a mistake, a misunderstanding, or deliberate misconduct. A warning sign is a reason to investigate the facts, not an automatic finding of fraud.
Set a usable policy and assign responsibility
Define eligible people and expense categories, spending and pre-approval limits, submission deadlines, required support, approval authority, payment timing, refund obligations, and an exception route. Give employees the policy before they incur costs and document later changes. Review it when staffing, travel patterns, payment systems, or risks change, as well as on a regular schedule.
A 30-day submission target or a second approval above a chosen amount can be a company policy choice. Neither is a universal federal reimbursement rule. Set thresholds for your business and aggregate related purchases so someone cannot avoid review by splitting one purchase into smaller claims.
Separate claim submission, approval, payment release, and reconciliation where staffing permits. When one person must perform several tasks, document a compensating review by someone with suitable authority and access to the original records. An owner reviewing the owner’s own claim is not independent; use the governance-approved route for executive and owner expenses. An outside accountant does not acquire authority to approve management’s spending merely by keeping the books.
The segregation principle and its limits are described in paragraphs 10.21–10.22 of the 2025 GAO Green Book. That document sets federal-agency standards; here, its control concepts inform practical recommendations rather than a claim that every small business is subject to those standards. Collusion, fabricated evidence, and management override can defeat controls even when a written process exists.
Follow one claim from submission to reconciliation
| Stage | Responsibility and evidence |
|---|---|
| Submission | Employee supplies a unique claim reference, transaction details, business purpose, support, required pre-approval, and an attestation that the cost has not already been paid or claimed elsewhere. |
| Approval | An authorized reviewer independent of the claim checks eligibility, business purpose, limits, and exceptions; records a dated decision; and routes higher-risk items for additional review. |
| Accounting review | Reviewer matches receipts, card activity, prior claims, advances, and vendor payments; checks coding and tax treatment; and resolves discrepancies before payment. |
| Payment | Authorized payment staff use verified payee details and the approved amount. Material changes to the approved claim go back for review. |
| Reconciliation | A reviewer traces approved claims to actual bank or card settlement, checks refunds and outstanding advances, and documents unresolved items and their owners. |
Approval does not prove that a payment cleared, and a bank withdrawal does not prove that a claim was valid. Retain both the decision and settlement evidence. Review claims before payment, reconcile accounts monthly, and examine employee and category trends periodically. Include some detailed samples below approval thresholds so review does not depend solely on amount.
Require support without confusing policy and tax rules
A practical submission form captures the employee, vendor, date, amount and currency, what was purchased, business purpose, and relevant project or trip. For meals, identify the participants and business relationship; for travel, retain the itinerary and business activity; for mileage, record dates, destinations, business purpose, and business miles. Request itemized evidence under the policy and identify any approved alternative.
A missing receipt may be addressed with a duplicate from the vendor, transaction evidence, and a contemporaneous explanation where permitted. A card total alone usually does not establish the items purchased or business purpose. For federal travel substantiation, some nonlodging costs below $75 and transportation for which a receipt is not readily available have documentary-evidence exceptions. Valid mileage and per-diem methods also have specific rules; required facts still need support. See Publication 463, recordkeeping and reimbursement guidance.
For employees, an accountable plan requires a business connection, timely substantiation, and return of excess advances within a reasonable period. A company’s approval or voluntary documentation does not convert a nonaccountable arrangement into an accountable plan. Unsupported or retained excess amounts can require wage treatment, and a defective arrangement can have broader consequences. Payroll should apply the appropriate timing and reporting rules. See Publication 15, employee expense reimbursements.
Tax deductibility is another question. Business meals are generally subject to a 50% limitation unless an exception applies, and entertainment is generally nondeductible. Documenting attendees or approving an outing does not override those limits. Food separately purchased or separately stated at an entertainment event requires its own analysis. See Publication 463, meals and entertainment.
Recipient status matters too. An employee reimbursement is different from a sole proprietor’s owner-paid business cost, a partner’s payment, or a shareholder distribution. An LLC name does not establish tax classification. Record the underlying business purpose and determine whether the amount belongs in expenses, an asset, a payable, an owner account, or compensation before deciding how to report it.
We break down Employee Expense Reimbursements separately in “Employee Expense Reimbursements: Payroll vs. Accountable-Plan Treatment.”
Check duplicates, refunds, and claims that bypass limits
- Compare across payment channels. Match personal reimbursements against company cards, accounts payable, travel bookings, cash advances, and earlier claims. A detailed receipt and a card slip can describe the same transaction.
- Compare across employees. Check vendor, date, amount, line items, trip, and attendees when two people could claim the same meal or group purchase.
- Follow later credits. Look for returned goods, canceled bookings, charge reversals, and refunds after reimbursement. The policy should require prompt disclosure and a documented return or adjustment.
- Aggregate related costs. Review several claims just below a limit as a group, while allowing for legitimate separate purchases.
- Validate the business context. Compare travel dates, work schedules, mileage routes, and activity records. A map estimate or a schedule conflict is a review prompt, not conclusive evidence.
Corporate cards can give the company direct access to transaction and refund records, but still require independent reconciliation. For personal cards, the company generally lacks that direct access; an authorized policy can request relevant transaction and refund evidence, with unrelated personal information redacted where appropriate. Avoid collecting an employee’s entire financial history when targeted support will answer the question.
Small Business Vendor Fraud Red Flags is covered in more depth in our related article, “Vendor Fraud Red Flags in Small-Business Bookkeeping.”
Protect payee details and payment access
Restrict who can create or change employee and vendor payment records. Separate those changes from payment release where possible, retain a change log, and require an independent check of bank-detail changes using a previously established contact method. Do not verify a suspicious request by replying to the same message or using the new phone number it supplies.
The FBI’s business email compromise guidance recommends independent verification of payment requests and changes to account details. Apply that check to reimbursements as well as vendor invoices. Urgency or an apparent executive request should not bypass the process.
Use individual accounts and suitable access permissions, remove obsolete access when roles change, and periodically review who can alter records or release payments. If a system cannot enforce the desired approval route, document the separate control and test that it operates.
Record the cost once and trace any overpayment
In a hypothetical accrual-basis example, an approved $300 office-supplies claim is recorded as a $300 debit to supplies expense and a $300 credit to an employee payable. Paying it debits that payable and credits cash for $300. The payment is not a second expense. Inventory, equipment, prepaid costs, and advances may require different accounts; tax timing can also differ from the books.
If the company already paid the $300 cost on its corporate card and then mistakenly reimbursed the employee another $300, total payments are $600 but the valid cost remains $300. Investigate and document the duplicate. If the duplicate is confirmed and a $300 recoverable receivable is appropriate, an amount incorrectly charged to expense can be reclassified with a $300 debit to that receivable and a $300 credit to the expense. On collection, debit cash and credit the receivable for $300.
That illustration assumes recovery is supported and collectible. A disputed or uncollectible amount requires a separate accounting assessment; do not create a receivable simply to hide a loss. A correction entry does not establish misconduct, authorize a wage deduction, or settle the tax consequences. Preserve the original posting and use a documented correction linked to it.
Whether using QuickBooks or another system, connect the support, approval, transaction, payment, and reconciliation records. Confirm the available approval, attachment, audit-history, and permission features for the actual product and subscription. A bank-feed match or automated categorization is not independent approval.
Respond objectively when an exception is credible
Name an escalation owner in advance, with an alternative route if that person is involved. Preserve original claims, receipts, messages, attachments, approval history, account-change logs, payment records, and relevant later credits. Keep an access-controlled case record showing who collected evidence, when, what was reviewed, and the decision. Suspend routine disposal of relevant records when a dispute or investigation requires preservation.
Separate verified facts from allegations and allow a documented explanation. Management should coordinate the investigation and any recovery or employment action with appropriate HR and legal advisers. A CPA or payroll specialist can assess accounting corrections and tax reporting; a forensic investigation requires its own expertise and agreed scope.
Do not automatically deduct a disputed amount from wages. Federal minimum-wage and overtime protections restrict deductions for an employer’s benefit, including certain loss recoveries; state rules and salary-basis requirements can add restrictions. See Department of Labor Fact Sheet 16. Obtain advice on a lawful recovery method and assess payroll and tax corrections separately.
Claim-review checklist
- Claim reference, employee, vendor, dates, amount, and business purpose recorded.
- Required evidence and pre-approval attached; missing-support exceptions resolved and documented.
- Prior claims, company cards, vendor payments, advances, related purchases, and later refunds checked.
- Authorized reviewer independent of the claim approved it, with any additional approval recorded.
- Payee details independently verified after a change; payment amount agrees with approval.
- Accounting and tax classifications reviewed; no duplicate expense recorded on settlement.
- Payment reconciled; unresolved items assigned to a named person with a follow-up date.
When requesting help from CPA Firm South Florida’s client team, describe the current workflow, systems, approval authority, and specific exceptions. Agree on the scope for accounting review, payroll coordination, control testing, or specialist investigation before relying on those services.
Frequently asked questions
Does a missing receipt prove reimbursement fraud?
No. It is a documentation exception that needs review. Ask for available support and an explanation, apply the policy consistently, and evaluate tax substantiation separately before reaching a conclusion.
Who should approve an owner’s expense claim?
Use an authorized reviewer who is independent of that claim, consistent with the entity’s governance. An owner’s self-review is not independent, and an outside bookkeeper needs an explicit role rather than assumed approval authority.
Do corporate cards eliminate duplicate claims?
No. Compare card charges with employee reimbursements, vendor payments, credits, and refunds. A direct company payment must not also become a personal reimbursement for the same cost.
Does approval make a reimbursement tax-free?
No. Company approval and federal tax treatment are separate. Employee accountable-plan requirements, deductible-expense rules, and the recipient’s status must each be considered.
Can the business recover an overpayment by deducting wages?
Do not assume so. Confirm the facts and obtain appropriate payroll and legal review of the recovery method. Minimum-wage, overtime, salary-basis, state-law, and other applicable restrictions can matter.