In the past 17 years as a software trainer and practice management consultant, I have averaged at least one office a year that has discovered embezzlement. Too often the doctor is shocked because he "trusted" his team and did not feel it was necessary to have individual team members sign into his software with individual names and passwords.

• "We switch computers too often to change our login."
• "We’re so busy we can’t be bothered."
• "They have been with me for years."

These are just a few of the reasons I have heard over the years as to why the practice didn’t set up system security in their software.

It was 1994 and the practice was "going live" with entering transactions and payments into the computer. They had taken their ledger cards and entered the balances, outstanding insurance balances and credits into the software. We walked through the process of entering checks and sending statements to accounts with balances, but the office manager of 20+ years was having a difficult time adjusting to the changes. She liked her "paper" – haven’t we all heard that before?

During the lunch break, the doctor and I discussed system security, reports, checking audit trails. He had a hard time setting up the security system because his "girls" had been with him for such a long time. During our discussion of monitoring and using reports, he noticed that not much money had been entered in the computer, payroll was coming due and he needed money to pay his "girls". After lunch, I asked the office manager – was she sure she did not have any more "mail" for us to enter so we could continue to practice on the new system?

After a few moments, she went to a drawer and took out a few envelopes with insurance checks and personal payments to be entered. We sent billing statements to the accounts with balances. It was a great day! I left feeling good – I did a great job.

A few months later, the doctor called, very upset. He found that his "girl" of 20-plus years had been embezzling money from him, although he had no clue how much.

How did he discover it? Patients began calling, upset when they received computerized billing statements showing balances when they had receipts written on paper napkins showing they had paid their bill.

The office manager would sit in the parking lot at lunch and have the patients meet her at her car to pay her because the "office was closed for lunch". Computerizing saved this doctor from who knows how many more years of embezzlement, but unfortunately, he discovered someone he trusted for years not only cheated him, but the other team members and herself out of pension and profit sharing. We worked out a game plan for him to uncover as much as possible and recoup unpaid insurance claims going back several years.

Did he prosecute? No, he did not. He felt sorry for her! She is still out there possibly doing the same thing to another office. (Need I point out the necessity at this point of thoroughly checking references?)

Over the past 10 years, I have seen embezzlement on every scale.

• team members abusing prescriptions.
• family members embezzling from other family members.
• a relatively new employee who was given the ability to delete transactions, and a signature stamp. At least in this case the office prosecuted after their accountant pointed out discrepancies between 1099s received and bank deposits made.

Does the same person that handles the receivables also handle payables? Does everyone use the same password, or know everyone else’s password? What systems do you have in place to check petty cash?

There are innumerable areas in the office where stealing and embezzlement can and does happen, from a few hundred to hundreds of thousands of dollars. Are you doing all that you can to protect yourself and your team? Using security systems in your practice management software is a good place to start, but it’s just one step making your practice ‘embezzlement proof’.

If you want to learn more about how to set up security systems to monitor critical areas of your practice, please contact me.