How Do You Prevent Embezzlement in a Dental Office? Staff Controls That Work

Dental embezzlement, when it happens, exploits a gap: the space between the money a patient actually paid and the record that says where it went.

Whoever controls both sides of that gap controls the story — and in a small practice, one front-desk person may hold both.

That is not an accusation; it is the job description.

But it is why prevention is structural rather than personal.

The mechanics are mundane, not cinematic.

The positions where money and records can drift apart look like this:

• Payments that never reach the ledger. A patient pays cash or a check at the front desk; the appointment happened, the money did not.
• Payments re-coded as adjustments. The money arrives, but the entry becomes a discount, write-off or professional courtesy, and the difference walks out the door.
• Refunds and credit balances. Money going out — to a card, an address or an account the patient never sees.
• Payroll. Hours that were not worked, or a person on payroll who does not exist.
• Vendor spending. Padded, duplicated or invented invoices and supply orders.

None of these requires sophistication — only opportunity, which is exactly what a trusted, unwatched person has.

That is also why the controls in this page are about structure: they are built so that honesty is never the only thing standing between a dollar and the door.

One caution on numbers.

Search this topic and you will meet far larger figures — trade articles and fraud-consultant marketing claim everything from nearly half to 90% of dentists.

The ADA survey behind those claims was not found; the study you can stand on is the ADA’s 2007 one, and its 17.5% is sobering enough.

Treat anyone selling a control with a scarier statistic accordingly.

The principle: no one person should carry a dollar from the patient’s wallet to the bank statement alone.

Think of the money path as four hands — receiving the payment, recording it in the ledger, reconciling the ledger against the bank, and authorizing refunds, write-offs and adjustments.

In a practice with one front-desk person, you cannot give each hand to a different employee.

You can refuse to leave any two of them with the same person unwatched.

In practice that looks like: the person who opens the mail and takes payments is not the only one who posts them; whoever posts does not also reconcile the bank statement; refunds and write-offs beyond the routine need your sign-off; and the bank statement comes to you — or to your CPA — not only to the front office.

Where staffing is too thin to split the duties, your own review is the compensating control.

A recurring hour with the bank statement and the adjustment report replaces the missing second pair of eyes.

An office manager makes this system work; the role does not replace it.

An owner who never looks at a report has swapped a control for a person, which is the exact trade that gets practices in trouble.

If you are hiring someone to run the front office, our guide to hiring an office manager covers the role and the interview, and our office manager pay guide covers what to budget.

Separation has a time dimension too.

Cross-train so two people can perform each money task; keep practice-management-system permissions matched to actual duties rather than to habit; and when someone leaves — on any terms — their logins, signatures and card access end that day.

When embezzlement is happening, it tends to leave traces in the reports your practice management software already produces.

The control is not the software; it is that you — not only your office manager — look at those reports on a schedule you keep.

Ask your software vendor or your office manager to show you where each report lives in your system, then put a recurring reminder on your own calendar.

• Deposit reconciliation. Total payments posted in the schedule versus what actually cleared the bank.
• Adjustments and write-offs. Who entered them, on which accounts, and why — this is where a re-coded payment hides.
• Refunds and credit balances. Money leaving the practice, and to whom.
• Deleted or edited transactions. Ask whether your system keeps an audit trail of changes, and who can make them.
• Production versus collections. The wide view of whether what you produced and what you collected track each other.

You are not hunting a smoking gun; you are looking for a pattern that only makes sense after an explanation.

Corrections one person always makes.

Summaries emailed to you instead of the raw report.

A reconciler who resists anyone else touching the statement.

Any of those deserves a calm, closer look — and the review habit itself is what keeps the opportunity from forming.

Duties manage the job; screening manages who you hand it to.

Screening cannot predict who will steal, and a clean record is not a guarantee of honesty — but for a role that will handle payments, payroll or billing, a background check is a reasonable extra step, as long as you run it by the rules.

The full mechanics — what to order, in what order, and the state rules that modify it — are in our guide to background checks.

Here is what matters most when the hire touches your money.

If you use a screening company, the process is federal law.

Before you order the report, the applicant must receive a clear written disclosure in a document consisting solely of that disclosure (15 U.S.C.

1681b(b)(2)).

If something in the report might cost them the job, they get a pre-adverse action notice first: a copy of the report and “A Summary of Your Rights Under the Fair Credit Reporting Act.”

If you then take the adverse action, a final notice follows that includes their right to dispute the report and to get an additional free report from the screening company if they ask within 60 days.

Credit reports have their own gate.

Some states restrict the use of consumer reports — usually credit reports — for employment purposes, and fear of embezzlement is what tempts employers toward them.

Confirm your state’s rules before ordering a credit report; for a role that handles payments, a criminal-record screen run correctly may tell you more.

When the report shows a record, weigh it against the job.

EEOC guidance says an arrest alone does not establish criminal conduct, and excluding someone based only on an arrest is not job related and consistent with business necessity.

For convictions, the agency’s factors are the nature and gravity of the offense, the time that has passed since the offense or sentence, and the nature of the job — a very old misdemeanor weighed against a chairside role is a different question than a recent theft conviction for the person who opens your till.

Title VII does not require an individualized assessment in every case, but a screen that excludes without one is more likely to violate Title VII, so the safer habit is to look at the person, not just the report.

If your practice bills federal health care programs, screening has a compliance layer.

The OIG’s exclusion reaches administrative and management services payable by federal health care programs even when those services are not separately billable — so an excluded person in a front-office, billing or management role can create liability, not just an excluded clinician.

OIG advises health care entities to routinely check the List of Excluded Individuals/Entities (LEIE) so that new hires and current employees are not on it.

It belongs in your onboarding checklist and on a recurring calendar.

If your practice sponsors an employee benefit plan — a 401(k), for example — ERISA already requires a fidelity bond.

Every fiduciary and every person who handles funds of the plan must be bonded for at least 10% of the funds handled, generally not less than $1,000 nor more than $500,000 (29 U.S.C.

1112).

The statute allows a higher maximum in some cases, such as plans that hold employer securities.

Notice what that bond does not do: it does not protect the practice.

The ERISA bond makes the plan whole if someone handles its funds dishonestly — it is not employee-dishonesty coverage for the practice’s own money.

For the practice itself, the product is employee-dishonesty (crime) coverage, and it is a separate, voluntary policy.

The sources behind this page do not cover its terms, so treat any figure you read elsewhere with care and put the questions to your broker: what a policy covers, what it excludes, and what it would take to actually pay a claim.

Do not assume a policy you already carry — general liability, property, the ERISA bond — responds to theft by an employee.

Ask, and get the answer in writing, before you need it.

Do not confront anyone on a hunch.

Suspicion feels certain from the inside; records are what make it real.

Verify first, quietly, and resist announcing what you are doing — an accusation you cannot support damages the team either way, and the person you confront may be innocent.

While you verify, preserve rather than tip off.

Keep the reports and statements you have already pulled in the state you found them.

Route new deposits and mail handling to someone else.

Restrict system permissions and card-on-file access where you can do it without signaling.

Changing workflows is safer than deleting anything.

Bring in professionals early.

An attorney should advise on the legal and employment steps, including whether and how to report; an accountant who works on fraud can quantify what is actually missing.

Those judgments are hard to reverse and outside what any general guide — this one included — can make for you.

If it comes to ending the employment, do that part correctly: final pay, timing, documentation and what you say afterward all have rules of their own, and they vary by state.

Our guide to terminating an employee walks the process.

And if a termination turns into a dispute about how you handled it, employment practices liability insurance — EPLI — is the coverage that responds to employment claims; our EPLI guide explains how it fits a dental practice.

Afterwards, close the gap that let it happen: the missing second signature, the report nobody read, the login that outlived the employee.

Then keep the review schedule from this page — the habit is the control.