How to protect your church from embezzlement

Short answer: Church embezzlement — one person quietly diverting the congregation’s money for personal use — is more common than most boards want to believe, precisely because churches run on trust and often let a single volunteer control the offering, the checkbook, and the bank login at once. You can’t prevent it by trusting good people harder. You prevent it by separating the work so no one person handles money from start to finish, having someone outside the books review the bank reconciliation every month, and putting an annual review and a confidential reporting channel in place. None of that says you suspect anyone. It removes the temptation, and it protects the honest people who handle the money from ever being suspected.

Why churches are disproportionately targeted for embezzlement

Churches get hit far out of proportion to their size, and it isn’t because church people are worse than anyone else. It’s the setup. A church is built on trust, runs its finances on volunteers, and very often hands one person the whole money operation — they collect the offering, write the checks, reconcile the bank, and they’re the only one who sees the statements. That’s the exact arrangement every fraud-prevention guide warns against, and churches drift into it without noticing because asking for oversight feels like an accusation.

The pattern behind almost every case is the same three things lining up: pressure (a personal financial crisis nobody at church knows about), opportunity (no one else checks the money), and rationalization (“I’ll pay it back,” “I do so much for this church,” “no one will miss it”). A church can’t do much about a volunteer’s private pressures. But it owns the opportunity side completely — and that’s the whole game. The Evangelical Council for Financial Accountability, which accredits ministries on exactly this, builds its fraud-prevention checklist for ministries around closing that opportunity gap. Strong financial controls are the part of church bookkeeping that protects the church from the inside.

What counts as church embezzlement

Embezzlement is the theft of money or property by someone who was legally trusted to handle it. The defining detail is the trust: the person didn’t break in, they were given access — and then took what wasn’t theirs. In a church that covers a wide range of acts, not just someone walking off with a bag of cash:

• Skimming the offering before it’s ever counted or recorded, so the theft never shows up in the books.
• Writing checks to themselves, or to a vendor they secretly control, for things the church never bought.
• Paying personal bills with the church debit card or account and burying them in vague categories.
• Padding a reimbursement with expenses that were never incurred.
• Diverting designated gifts — money given for missions or the building fund — into general spending or their own pocket.
• Running phantom payroll or keeping a departed employee on the books.

What ties these together is that each one is invisible if a single person controls both the money and the record of it. Break that link and most of them become very hard to pull off and very easy to catch.

Warning signs of church embezzlement a board should watch for

Embezzlement leaves a trail before it’s ever discovered. The signs below don’t prove anything on their own — an overworked volunteer can trip several of them honestly — but a board that sees a cluster of them should ask questions and tighten controls, calmly and without accusation.

Warning sign	Why it matters
One person resists any oversight or review	Fraud needs secrecy; honest bookkeepers welcome a second set of eyes
The bookkeeper never takes a vacation	Many schemes unravel the week someone else has to cover the books
Bank statements go to one person, unopened by anyone else	The statement is where theft shows up; one gatekeeper means no check
Accounts go unreconciled, or reconciliations are always “almost done”	Reconciliation is the control that catches missing money — skipping it hides it
Deposits are smaller or later than the count sheets suggest	A gap between what was counted and what was banked is the classic skim
Documentation is missing — checks without invoices, expenses without receipts	Real transactions leave paper; invented ones don’t
Designated-fund balances don’t move the way giving suggests	Restricted money quietly drained into general spending
The treasurer’s lifestyle outpaces their known income	Not proof of anything, but a recognized red flag worth noting quietly

The single most telling item on that list is the first one. When a person who controls money pushes back hard against the idea of anyone else reviewing it, that resistance is itself the warning. A trustworthy treasurer wants the oversight, because it protects them too.

The financial controls that prevent church embezzlement

Controls are the heart of fraud prevention, and the good news is they’re cheap, mostly free, and they work. The principle under all of them is segregation of duties: split a money task across enough people that no single person can both commit a theft and hide it. A church doesn’t need a finance department to do this — even a small congregation can separate the key jobs. The full playbook — the who-counts-records-reconciles-approves matrix, dual-approval thresholds, and a one-page policy — is in the guide to church internal controls.

• Two unrelated people count every offering together and both sign the count sheet, before anyone is ever alone with the cash. No solo counting, ever.
• The person who records the books is not the person who reconciles the bank. Whoever enters the transactions shouldn’t be the one confirming the books match the statement — that’s the check on their own work.
• Someone outside the books reviews the monthly bank reconciliation. A finance-committee member or the church treasurer who doesn’t do the data entry actually looks at the statement and the reconciliation each month, not just the summary.
• Require dual approval for large payments. Above a set threshold — pick a number that fits your budget — a payment needs a second signature or a second person’s sign-off before it goes out.
• Run an annual audit or independent review. Once a year, a set of eyes that doesn’t touch the money checks the whole system. That’s what a church audit does, and for most churches a volunteer committee version is enough.
• Adopt a whistleblower channel. Give staff and volunteers a confidential way to report a concern that bypasses the very person a complaint might be about — that’s the purpose of a whistleblower policy.

None of these controls cost money, and none of them require distrusting anyone. They’re stewardship — the church protecting the money it holds in trust, and protecting its own people from suspicion. The IRS expects a church to keep records that substantiate its income and expenses (IRS Publication 1828, the tax guide for churches); these controls are what make those records trustworthy.

How a board should respond to suspected church embezzlement

When a board has a real concern, the instinct to handle it quietly inside the church is the wrong one — both for the church and, if the person is innocent, for them. Move carefully and in order:

1. Don’t confront the person alone or tip them off. Premature confrontation lets evidence disappear and can expose the church to a defamation claim.
2. Secure the records. Get bank statements, the accounting file, and check images into the hands of someone independent, and cut off the suspected person’s access to accounts.
3. Tell the board and bring in outside help. This is a board-level matter; engage a CPA and an attorney early. The church’s insurer may also need prompt notice for any fidelity or crime coverage to apply.
4. Report it. Embezzlement is a crime, and most boards have a duty to the congregation to report credible theft to law enforcement rather than sweep it away. Covering it up can expose leaders personally.
5. Fix the gap that allowed it. Whatever control was missing is the one to put in place, so it can’t happen the same way twice.

FAQ

What is the meaning of embezzlement of church funds? Embezzlement of church funds is the theft of money or property by someone the church trusted to handle it — a treasurer, bookkeeper, staff member, or volunteer who was given access to the accounts and took what wasn’t theirs. The defining feature is the betrayed trust: the money was entrusted to them, and they diverted it for personal use.

What are common examples of embezzlement? Common examples in a church include skimming cash from the offering before it’s recorded, writing church checks to oneself or a fake vendor, paying personal bills with the church account or debit card, padding expense reimbursements, and diverting designated gifts into general spending or one’s own pocket. Each one is easy to hide when a single person controls both the money and the records.

How do you deal with church embezzlement? Once there’s a credible concern, secure the financial records, restrict the person’s access, and bring the matter to the full board with an outside CPA and attorney before confronting anyone. Embezzlement is a crime, so credible theft generally should be reported to law enforcement, and the church’s insurer notified. Then close the control gap that allowed it. The lasting fix is prevention: segregation of duties, monthly reconciliation reviewed by someone outside the books, dual approval for large payments, and an annual review.

What is the punishment for stealing from a church? Embezzlement is prosecuted under state theft and embezzlement laws, so the punishment varies by state and by the amount taken. Smaller amounts are typically misdemeanors; larger ones are felonies that can carry prison time, fines, and a court order to pay the money back (restitution). Federal charges such as wire or mail fraud can also apply. The exact penalties depend on jurisdiction and the dollar value involved, so a local attorney is the right source for any specific case.

---

Vestrybooks builds these controls in — two-person counts, monthly reconciliation, dual approval, and an immutable audit log — so the money is protected and no one ever has to be suspected. See how it works.