Misappropriation of Company Funds in New Zealand

If you run a small business, you’re probably used to watching cash flow like a hawk. But even with good sales and steady work, money can still “go missing” in ways that aren’t obvious until it’s already caused serious damage.

Misappropriation of company funds is one of those issues that can hit any business - especially when you’ve got a lean team, everyone’s wearing multiple hats, and there’s a lot of trust built into day-to-day operations.

The good news is you can reduce the risk significantly with the right controls, clear documentation, and an action plan for what to do if you spot a problem.

What Is Misappropriation Of Company Funds (And What Does It Look Like In A Small Business)?

Misappropriation of company funds is when someone uses business money for an unauthorised purpose. In plain terms: company money is spent, transferred, withdrawn, or redirected in a way the business hasn’t approved.

This can happen in a lot of “real world” ways in small businesses, including:

Unauthorised bank transfers to personal accounts (including “temporary loans” that never get repaid).
Personal expenses put through the business (fuel, groceries, rent, holidays, subscriptions).
Cash skimming (taking cash sales before they’re recorded, or under-reporting takings).
Fake or inflated invoices (including paying a “supplier” that’s actually connected to the person processing payments).
Payroll manipulation (extra hours, fake employees, higher pay rates than approved).
Misuse of company credit cards without proper approval or documentation.
Refund fraud (processing refunds to personal cards or to friends).

It’s also worth noting that misappropriation doesn’t always involve an employee. It can involve:

a contractor or bookkeeper with payment access
a co-founder or business partner
a director using business money outside what’s properly authorised
an external third party (including scams) exploiting weak processes

Sometimes it’s blatant. Sometimes it starts small and grows over time. Either way, it’s a business risk you’ll want to treat like any other: identify it early and build systems to manage it.

Why Does Misappropriation Happen, And What Are The Red Flags?

In small businesses, misappropriation of company funds often happens because the business is moving fast - and processes haven’t caught up yet.

Common risk factors include:

One person controls the whole payment process (they approve invoices, make payments, and reconcile accounts).
No clear approval rules for spending, reimbursements, and supplier onboarding.
Limited financial reporting (you’re not seeing accurate, timely data each month).
Too much reliance on trust without verification (very common in tight-knit teams).
Weak record-keeping (missing receipts, unclear descriptions, “miscellaneous” expenses).

Practical Red Flags Small Businesses Often Miss

Misappropriation isn’t always obvious. Some early warning signs that something needs a closer look include:

unusual “urgent” requests to pay invoices quickly or change bank details
supplier invoices with vague descriptions or repetitive amounts
duplicate payments or multiple payments just under an approval threshold
refunds or discounts increasing without a clear business reason
one team member being defensive about financial processes or refusing oversight
bank reconciliations falling behind, or reports being consistently delayed
expenses rising but sales staying flat (or margins shrinking unexpectedly)

Not every red flag means fraud - but they do mean your business needs better visibility and controls.

What Does New Zealand Law Say (And What Risks Do You Face As An Owner Or Director)?

When misappropriation of company funds happens, there are usually two layers to think about:

the person who took or misused the money (potential employment, civil, and criminal consequences), and
the business’ governance and response (how you investigate, what processes you follow, and what duties you owe).

Criminal Risk: Theft And Fraud

Depending on what happened, misappropriation of company funds can amount to criminal offending (for example, theft or fraud-related offences under the Crimes Act 1961). In more serious situations, you may consider reporting the matter to Police. If you’re unsure whether the conduct is potentially criminal, it’s a good idea to get advice early about preserving evidence and managing risk (including whether you should speak to a criminal law specialist).

That said, not every suspected issue should immediately become a criminal complaint. You’ll usually want to:

secure records first,
work out what evidence exists,
assess whether it’s an internal process failure, an honest mistake, or deliberate conduct, and
get advice on the safest next step.

Employment Risk: A Fair Process Still Matters

If the suspected wrongdoer is an employee, you generally still need to follow a fair process before taking disciplinary action or dismissing them. In New Zealand, employment law expects a process that’s substantively and procedurally fair - even where allegations are serious.

This is where a well-drafted Employment Contract and clear workplace policies can make a big difference, because they set expectations around:

financial authority limits,
expense and reimbursement rules,
conflicts of interest,
record-keeping obligations, and
investigation and disciplinary processes.

Director And Governance Risk: Duties And Decision-Making

If you operate through a company, directors have duties under the Companies Act 1993, including duties to act in good faith and in the best interests of the company. That doesn’t mean you’re automatically “liable” because someone stole money - but it does mean you should take governance seriously.

Two practical examples where this matters:

Oversight: If a company has no real financial oversight, poor approval controls, and no separation of duties, the business may be exposed to wider disputes later (including between shareholders).
Decision records: If the company needs to take formal steps (like approving a settlement, appointing an investigator, or changing financial authorities), having clean written records can be crucial.

For many small companies, good governance starts with having a Company Constitution (where appropriate) and clear internal decision-making processes.

How Can You Prevent Misappropriation Of Company Funds? (A Practical Small Business Checklist)

Most small businesses don’t need “big corporate” controls - but you do need sensible systems that match your size, turnover, and risk profile.

Here are practical steps that can significantly reduce the risk of misappropriation of company funds.

1) Separate Duties (Even If Your Team Is Small)

The most important principle is: don’t let one person control the entire money trail.

Where possible, split responsibilities so that:

one person creates suppliers and enters invoices,
another person approves invoices for payment, and
a different person reconciles bank statements and reviews exceptions.

If you’re a very small team, you can still separate duties by having the owner/director review bank feeds weekly and approve payments above a certain threshold.

2) Set Clear Approval Limits And Document Them

Misappropriation often hides in “grey areas” - when nobody knows what was authorised.

Consider documenting:

spend limits for each role
what needs pre-approval (e.g. subscriptions, refunds, supplier changes)
what evidence is required for reimbursement (e.g. receipts, business purpose)
who can approve payroll changes

If you operate through a company, you may also want a paper trail that shows what the directors approved. A Directors Resolution Template can be a practical way to document key financial authorities and changes to delegations.

3) Tighten Supplier Controls

Supplier fraud is one of the easiest ways to misappropriate company funds because it can look like a normal business expense.

Practical controls include:

only onboarding new suppliers with a standard form and verified details
requiring a second check before changing supplier bank account details
matching invoices to purchase orders (where your business uses POs)
periodically reviewing supplier lists for duplicates or unusual names

4) Use Banking Controls That Match Your Risk

Most NZ banks allow you to set controls such as:

dual authorisation for payments over a threshold
restricted user roles (e.g. “prepare only” vs “authorise”)
transaction notifications to an owner/director
daily payment limits

These controls won’t slow you down much - but they can prevent a lot of damage.

5) Set Expectations Early With Strong Contracts And Internal Rules

If you have co-owners, one of the best preventative steps is agreeing upfront on financial controls, reporting, and what happens if something goes wrong. A tailored Shareholders Agreement can help by setting out:

who controls bank accounts and spending approvals
how disputes are handled
how shareholders/directors are removed or exited
decision-making thresholds and deadlock pathways

This is especially useful if your business is growing, taking investment, or you’re not all working in the business day-to-day.

6) Do Regular Reviews (Not Just Year-End Accounts)

Year-end accounts are important, but they’re not designed to be a fraud detection tool.

Consider a simple monthly routine:

review profit and loss against budget
scan for unusual categories or “misc” spending
review supplier payments by top spenders
spot-check reimbursements and credit card transactions
ensure reconciliations are up to date

If you want a broader check of whether your legal and operational foundations are set up properly, a Legal Health Check can help identify gaps before they become expensive issues.

What Should You Do If You Suspect Misappropriation Of Company Funds?

If you suspect misappropriation of company funds, your next steps matter. It’s easy to act on emotion - especially if the person involved is someone you trusted - but moving too quickly can create legal risk, employment risk, and evidence problems.

Here’s a practical approach we often recommend for small businesses.

1) Preserve Evidence And Limit Access Immediately

Your first goal is to stop further loss and preserve information.

Common immediate steps include:

changing banking passwords and revoking access where appropriate
freezing or limiting company cards
downloading bank statements and accounting system audit logs
securing devices if they’re company-owned (laptops/phones)

Be careful about accessing private accounts or personal devices. If personal information is involved, you’ll also want to stay aligned with the Privacy Act 2020 and your internal privacy practices. If your business collects or holds personal information (employee or customer), having a clear Privacy Policy is a good baseline.

2) Work Out Whether This Is An Error, Misconduct, Or Fraud

Not every irregular transaction is deliberate wrongdoing. Before you make allegations, try to map:

what transactions are in question (dates, amounts, payees)
what policy or authority was (or wasn’t) in place
who had access and what approvals were recorded
what explanation is possible (and what evidence supports it)

This step is also where a lawyer can help you plan the investigation so it’s fair, defensible, and doesn’t accidentally compromise your position.

3) Follow A Fair Process (Especially For Employees)

If the suspected person is an employee, jumping straight to dismissal can backfire if you don’t follow a fair process - even where the underlying conduct seems serious.

A fair process usually involves things like:

putting the allegations clearly in writing
providing relevant evidence (where appropriate)
giving the employee a reasonable chance to respond
considering their explanation with an open mind
making a reasoned decision and documenting it

In some cases, suspension (on pay) while you investigate may be appropriate - but it should be handled carefully and consistently with your agreements and policies.

4) Consider Your Recovery Options

Once you have a clearer picture, your options might include:

Internal repayment arrangements (only where appropriate and documented properly).
Civil recovery (for example, pursuing a debt or damages claim).
Insurance notifications (some policies require early notice).
Negotiated settlement to finalise the dispute and document repayment and exit terms.

Where you reach an agreement to resolve the dispute, a properly drafted Deed Of Settlement can help make sure the outcome is clear (for example: repayment terms, confidentiality, non-disparagement, return of property, and a release of claims).

5) Decide Whether To Report The Matter

Whether to report suspected misappropriation of company funds to Police (or another authority) depends on the facts, the strength of evidence, and your commercial objectives.

Things to weigh up include:

the amount involved and whether it’s ongoing
whether you need urgent intervention to stop further loss
the evidence available (and how it was obtained)
employment implications and workplace safety considerations
reputation and customer impacts

Getting advice early can help you choose a path that protects your business without creating extra risk.

Key Takeaways

Misappropriation of company funds is unauthorised use of business money, and it can happen through transfers, expenses, supplier fraud, payroll manipulation, or cash handling issues.
Small businesses are often more exposed because one person may control approvals, payments, and reconciliations - simple separation of duties can make a big difference.
In New Zealand, misappropriation may involve employment, civil, and potentially criminal issues, so it’s important to respond carefully and preserve evidence.
Prevention is usually cheaper than recovery: clear approval limits, supplier controls, banking permissions, and regular reviews reduce risk without slowing your business down.
If you suspect misappropriation, avoid rushing to conclusions - secure access, investigate fairly (especially for employees), and get advice before taking disciplinary or legal action.
Well-drafted documents (like a Shareholders Agreement and clear internal approvals recorded by director resolutions) help prevent disputes and make it easier to act decisively if something goes wrong.

If you’d like help putting better financial controls in place, reviewing your contracts, or responding to suspected misappropriation of company funds, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.

Misappropriation Of Company Funds In New Zealand: What To Know