Front desk fraud: how cash and rooms go missing, and the checks that catch it

Front desk fraud in a hotel is the loss of money or room revenue at the desk itself: a stay that is never recorded, a charge voided after the guest leaves, a refund sent to the wrong card. It is caught by comparing records kept by different people: room status against folios, voids and refunds against approvals, cash counts against drops.

The owner is not on site at two in the morning when a room is handed over for cash and the system is told nothing. What is left behind is not a missing receipt but a set of records that disagree with each other, and those disagreements stay readable months later. This article describes where money and rooms actually go missing at the desk, and pairs each leak with the report or check that exposes it. You will finish with a daily routine, a monthly pack and a rule for what to do when you suspect someone.

Why is the front desk the easiest place in a hotel to lose money?#

Because the desk is where a sale is created, priced and paid in one movement, and the person doing all three is usually alone.

Three powers sit in one pair of hands: opening the reservation, setting or changing the rate, and receiving the money. Any one of them alone is safe. Together they allow a stay that exists in the room but not in the system.

The guest is the least likely witness. A walk-in paying cash late at night has no reason to ask for a folio, and often prefers not to have one. The audit arrives hours later and reads the system, not the building: if the room was never entered, the night audit has nothing to disagree with. Losses are also small and repeated, one room night, one void, one refund, so nothing looks like an event and nothing gets reported.

The same gap exposes honest staff. Without a written procedure and a second signature, a clean shift and a dishonest one look identical the next morning. The purpose of a control is not suspicion. It is making the honest version of a shift provable after the fact, by someone who was not there.

How do you find a room that was used and never sold?#

Compare three records produced by three different people: the room status the desk holds, the room report housekeeping writes, and the folio list from accounting.

Start with room status against the folio list. Every room marked occupied must have an open folio with a balance, or a settled account. A room marked occupied with no account behind it is the core signal, and most systems can list it in a minute.

The housekeeping room report is written by attendants who physically entered the room, so it is independent of the desk. A room the attendant cleaned as a departure while the system still shows it vacant is a discrepancy that needs an explanation, not a shrug. You can read more about these sheets in our guide to housekeeping reports, the room report and the discrepancy sheet.

Door lock records are the third source. Most electronic locks keep an opening log by key card and time, and it is the only record that says a person entered rather than a system changed. Access to those logs, and how long they are kept, are policy and legal questions for the hotel, not technical ones.

Rule out the innocent explanations first, every time: the guest who left without checking out, the guest who stayed past departure, the room released early by housekeeping, the transfer that never posted. Then check keys issued against arrivals: if the desk issued more key cards than the arrival list shows, or more than housekeeping cleaned as occupied, the difference is the question to ask.

Make the comparison a daily routine, not an investigation. The person who runs it must not be the person who worked that shift, or the check proves nothing.

What do voids, refunds and rate changes after departure tell you?#

They are the highest-value signal at the desk, because a change made after the guest has left cannot be a service recovery the guest asked for.

There are four shapes to look for: a charge voided after checkout, a refund sent to a card that is not the one that paid, a rate lowered after departure so the difference can be taken in cash, and a discount applied at the moment of settlement. What makes each one readable is the same five fields: user, timestamp, folio, amount before and after, and a reason code. Without a reason code the list is noise and nobody reads it twice.

The control is a daily void and refund list read by a second person, with a threshold above which the reason must be written in words rather than chosen from a menu. For how to remove a charge without destroying the trail, see how to void a folio charge without breaking the audit trail.

Rate changes belong to a named authority. Publish who may discount, up to what level, and require an override reason beyond it, so that a lower rate is a decision with a name on it. Our piece on discount limits and override rules covers how to set those levels.

Refunds go back to the original payment instrument, always. A refund to a different card is either a data entry error or a transfer of money to a person, and both need an answer the same day.

Finally, read the list by folio, not by day. A void followed by a re-post at a lower rate, or a refund followed by a cash payment, is a pattern. A single day's list hides it.

Can a complimentary room or a discount hide a cash payment?#

Yes, and it is the quietest version of the leak: the room is given away on paper while money changes hands at the desk.

A complimentary stay is legitimate when a named person approved it for a stated reason. It becomes a control problem when the approval field is empty, or filled by the same person who granted it. The check is a monthly list of every stay at zero rate or below the published floor, with the approver's name and the reason. Sort it by approver, not by date: a pattern shows up as one name repeating.

House use and staff stays belong on the same list. They are normal and should stay normal; unrecorded, they are indistinguishable from a sold room. Discounts above the limit are the same test at a smaller amount: who approved it, when, and does the stated reason match the guest's file and the correspondence.

Cash recorded on a zero-rate folio is the clearest single signal there is. If a folio closes at zero and the drawer grew that night, two records disagree and one of them is wrong.

Keep the reason list short and fixed, for example complaint, group contract, sales decision, staff. Free text cannot be counted, and what cannot be counted cannot be reviewed.

Which cash controls actually work at the front desk?#

The ones that need two people and leave a record: a counted float at every shift change, drops that are witnessed, and refunds that can only go back the way the money came.

Float and handover come first. Each shift counts the drawer with the outgoing and the incoming person present, both sign, and any difference is written down rather than absorbed by the next shift. Cash leaves the drawer at set points during the shift, sealed and logged, and is counted later by someone who did not take it.

Separation of duties matters more than any single procedure. The person who receives cash should not reconcile it, and should not be the person who can void the charge that created it. In a small hotel this may mean the owner or the accountant reads the list, not the manager on duty. Surprise counts, unannounced, at handover or mid-shift, by someone with authority, add value through their unpredictability, not the counting.

Foreign currency needs one rate source, one person who sets it, and a written record of the rate used at each transaction, so the difference between the rate taken and the rate posted is never a private decision. At the card terminal, the desk should not key a card number by hand when the card is present, and terminal settlement should be reconciled to the folios every day, not every week. Our guide to front desk cash handling, float, drops and foreign currency goes through each of these in detail.

What should an owner review every month?#

Six reports, read in the same order every month, each compared with the month before rather than judged on its own.

Read by exception and by person. Totals hide; names repeat. A report that shows only the hotel total tells an owner nothing they can act on. Compare month to month and ask about change, not about size: a void list that doubled is a question; a void list that is always the same length is a baseline.

Ask the same three questions of every report: who can produce it, who can change it, and who reads it. If the same person answers all three, the report is not a control. Keep the pack short and fixed, one page per report, plus a note of what was asked and what was answered. The record of the review is itself a control, and it is what protects a manager who is doing the job properly.

Do not add reports during the year without removing one. A pack that grows stops being read, and an unread pack is worse than none because it looks like oversight.

If you suspect a member of staff, what should you do first?#

Collect facts and preserve records before you speak to anyone, and take advice before you take any step against a person.

Pull the folios, the void and refund lists, the lock logs and the cash sheets for the period, and write a dated timeline of what the records show. Nothing in that timeline should be an impression. Do not accuse in the moment and do not discuss it with other staff: an accusation that cannot be supported costs the hotel more than the loss, in trust and in staff who leave.

Preserve, do not edit. Export the records, keep the originals, and note who accessed what and when. A record that was cleaned up while being investigated is no longer evidence.

Employment law and personal data law both apply to any search, camera review, locker check or disciplinary step. Personal data in Türkiye is governed by the personal data protection law (KVKK, kişisel verilerin korunması kanunu), and how far an employer may go is a question for a lawyer, not for a blog. Take that advice before the step, not after. Confirm dates, penalties and your own case with a legal adviser or accountant.

Protect the people who did nothing. Tell staff what the procedure is and why it exists, and let the procedure decide rather than the strength of anyone's suspicion. If the review finds nothing, say so and close it in writing. An investigation that never ends damages the whole team, including the person who was right.

What to do next#

Pick one control and start it this week: the daily void and refund list, read by someone who did not work that shift. Add the room-to-folio check next month and the six-report pack after that, in that order, because each one depends on the records the previous one produces.

The aim is not to catch a person. It is to make every shift, honest or not, leave a trail that someone else can read. Systems help only when they keep that trail: in the AI Otel hotel operating system, billing is built so that financial records are never deleted, corrections are voided and reversed, and night audit closes the business day. If you want to see how that works, request a briefing.