InsightsCase Studies
Management ConsultingExecution Mandate

Case Study: Payroll Controls Audit for a Staffing and Manpower Company

Identifying ghost employees, quantifying payroll leakage and strengthening workforce controls

By Pratham Sharma•September 23, 2026•3 MIN READ•Rs 38 Crore
Client & Engagement
Staffing and Workforce Solutions Company
Industry Sector
Staffing & Manpower Services
Jurisdiction & Geography
India
Practice Leadership
Forensic Accounting, Payroll Controls & Internal Audit
Mandate Performance Metrics
Employees on Payroll680Employee population reviewed through payroll-to-deployment reconciliation.
Ghost Employees Identified14Employees receiving salaries without supporting HR, attendance or deployment records.
Payroll Leakage IdentifiedRs 11.2 LakhEstimated salary leakage attributable to the 14 ghost employees over approximately eight months.
Monthly PayrollRs 1.8 CroreApproximate monthly payroll expenditure of the staffing business.

Executive Mandate Summary

A staffing company with Rs 38 crore annual revenue and 680 employees experienced a rising payroll-to-revenue ratio despite limited growth in client deployments. Northrop's 14-day payroll controls audit identified 14 ghost employees who had received salaries for approximately eight months, resulting in Rs 11.2 lakh of payroll leakage. Northrop reconciled payroll with deployment records, analysed salary accounts and conducted field verification. The investigation identified gaps in employee onboarding, payroll reconciliation and workforce verification. The company implemented monthly payroll-to-deployment reconciliation, verified employee onboarding and quarterly payroll testing, eliminating the identified leakage. The payroll-to-revenue ratio returned to its expected range within two months.

Key Transaction & Governance Challenges

  • •
    Payroll costs had increased over 12 months without a corresponding increase in client deployment requirements.
  • •
    The company lacked a systematic monthly process connecting employees receiving salaries with active client deployments or an approved bench list.
  • •
    Fourteen employees had no HR files, attendance records, deployment history or manager confirmation.
  • •
    Multiple unverified employee accounts showed common banking characteristics, including shared branches, clustered account-opening dates and shared mobile details.

Northrop Execution Architecture & Methodology

1
Northrop reconciled the 680-person payroll register against client deployment records and identified employees without active assignments.
2
Salary accounts of unverified employees were analysed for common characteristics and potential relationships requiring further investigation.
3
HR addresses were independently verified to establish whether the employees could be located and confirmed.
4
The identified ghost payroll was quantified and the company implemented monthly reconciliation, verified onboarding and quarterly payroll sampling.

Executive Mandate Overview

A staffing and manpower company with Rs 38 crore annual revenue and approximately 680 employees had experienced a sustained increase in its payroll-to-revenue ratio. The business suspected that salary increments did not fully explain the increase.

Northrop conducted a 14-day payroll controls audit to reconcile payroll with actual workforce deployment and identify potential payroll leakage.

Payroll-to-Deployment Reconciliation

The payroll register was reconciled against active client-site deployment records. Twenty-three employees appeared on payroll without current deployment assignments.

Nine were verified as legitimate bench employees. Fourteen had no HR file, attendance record, deployment history or manager who could confirm their employment.

Bank Account Analysis

Northrop analysed the salary accounts associated with the 14 unverified employees. Six accounts shared a common branch, three had been opened within the same week and two shared a mobile number registered for SMS alerts.

These indicators were used as part of the broader verification process rather than as standalone evidence of wrongdoing.

Physical Employee Verification

Field verification was conducted at the addresses recorded in HR files. Eight addresses were valid residential locations but residents did not recognise the employee names, four addresses were invalid and two corresponded to the residential address of a current HR executive.

Verifiable Institutional Outcomes & Value Realized

  • Fourteen payroll records lacked sufficient evidence of genuine employment or deployment.
  • The 14 employees received approximately Rs 10,000 per month for an average of eight months, resulting in Rs 11.2 lakh of identified leakage.
  • Of the initial 23 employees without active client-site assignments, nine were verified as legitimate employees between assignments.
  • Monthly payroll-to-deployment reconciliation was introduced, preventing salary processing for employees outside approved deployment or bench lists.
P

Pratham Sharma

Director•Payroll Fraud Detection, Employee Verification, Workforce Controls & Forensic Investigation
Private Mandate Advisory Desk

Facing a Similar High-Stakes Transaction or Turnaround?

Northrop partners execute buy-side due diligence, fraud forensics, and financial restructuring with strict board confidentiality and unmatched technical rigor across Indian jurisdictions.

Next Documented MandateManagement Consulting

Case Study: Ghost Trainees and Unverified Placements in a Skill Development NGO

A skill development NGO reported that 1,200 youth had been trained and 840 placed in jobs under a programme funded through a ₹1.4 crore CSR contribution. The reported 70% placement rate prompted an independent review of beneficiary records, training delivery, placement claims and programme expenditure. Northrop Management Private Limited conducted a forensic verification covering beneficiary deduplication, attendance records, direct beneficiary calls, employer confirmations, offer letters, salary claims and the underlying financial trail.

View Full Mandate Record