Dealership accounting offices carry more fraud risk than a typical small business. Vehicle sales, F&I products, floor plan draws, manufacturer incentives and high-dollar cash receipts all flow through a back office that is often just two or three people. That combination — large dollar volume and limited staff — is exactly where segregation of duties (SOD) breaks down, and where most dealership fraud actually occurs. It’s rarely a stranger; it’s almost always a trusted employee with too much unchecked control over a process.

Incompatible Duty Combinations to Watch

SOD asks whether one person controls more than one of: authorization, custody of assets, recordkeeping and reconciliation. Common danger pairings in a dealership include:

• Cash Receipts and Posting: The person collecting payments shouldn’t also post them to the customer ledger, or a payment can be pocketed and simply not recorded.
• Deal Entry and Cash Receipts: Separate the person posting the deal from the one receiving the down payments.
• AP Entry and Check/ACH Release: The person entering vendor invoices shouldn’t also have payment authority; this is the most common fraud vector in any business.
• Payroll Entry and Payroll/Master-File Approval: Separate hours/rate entry from the ability to add employees or change pay rates.
• Bank Reconciliation by Someone with Transaction Access: If the person reconciling the bank account also records cash activity, the one control meant to catch errors is controlled by the person who might cause them.
• Warranty/Rebate Claim Filing and the Related Cash Receipt
• Floor Plan Recordkeeping and Physical Vehicle/Title Custody
• DMS Admin Rights and Day-To-Day Data Entry: Unrestricted edit/void access defeats every other control.

Why Full Segregation Is Often Impractical

A single-point store with one controller and a clerk or two simply doesn’t have enough people to separate every incompatible pair. That’s a structural reality, not a failure of management. The answer isn’t to force an unworkable staffing model — it’s to add compensating controls that don’t eliminate the concentration of duties but reduce risk through independent detection.

Compensating Controls

• Owner/GM review of source documents, not just summaries — bank statements, canceled checks/ACH detail and a sample of deal jackets each month.
• Independent review of bank reconciliations by the owner, an outside bookkeeper or your CPA if the same person handles both cash and reconciliation.
• Dual authorization on checks/wires above a threshold, new vendors and payroll master-file changes.
• System-enforced access controls and audit logs in the DMS/accounting system, with periodic review of voids, edits and backdated entries.
• Positive pay with your bank to catch altered payees or forged checks.
• Surprise cash counts and title/key audits, reconciling vehicles on the lot to titles and the floor plan schedule.
• Mandatory vacation or job rotation — many schemes require daily upkeep and unravel once someone else looks at the account.
• Owner receives bank, lender and financial statements directly, not filtered through the controller first.
• Annual third-party review — even a limited-scope engagement from your CPA focused on cash, floor plan and payables.

The Bottom Line

You’ll likely never achieve textbook segregation of duties in a single-store accounting office — and that’s fine. What matters is that no one person can both cause a loss and conceal it without a second, independent set of eyes somewhere in the process, even if those eyes only look periodically. These controls aren’t about distrust of your staff; they protect good employees from suspicion just as much as they protect the dealership. Building even three or four of them into your monthly routine closes most of the exposure that comes from a lean accounting office.