There have been a lot of articles written that give dentists vague encouragement to allocate duties between team members as a way of lowering embezzlement risk. However, what most of these articles are lacking is any practical advice on how do do this. This lack of clear direction leaves a dentist in a predicament; they intuitively realize that an overconcentration of responsibilities in a single person is problematic but are not sure how to fix it.
This article will give three simple and implementable rules for how to allocate duties that should leave practice owners with clear direction on what to do next.
Many of the embezzlement cases we investigate involve a situation where a single employee has total control over practice finances. This person might be the office manager or perhaps a trusted financial coordinator or receptionist. Performing all duties relating to money gives this person the opportunity both to steal money and conceal the fact that it was taken. If someone is able to get away with this for a long period, the amount of money stolen can be significant.
The intent behind the division of duties is to require a would-be thief to approach a co-worker for assistance to commit their crime. Most of the time, the need to involve someone else in order to steal is sufficient deterrent to stop someone from trying. We do sometimes see "collusive fraud" with multiple people involved, but it is far less common than fraud carried out by a single person, and in cases where we see collusive fraud, there is normally a connection between the perpetrators outside the office. Typically they are related to each other or have a friendship that pre-dates their employment.
Therefore, a proper division of duties imposes a stop sign that many who desire to steal will not feel comfortable driving through. Published statistics from the Association of Certified Fraud Examiners suggest that less than 50% of embezzlement involves more than one person, and our experience in dentistry is even more restrictive, with less than 10% of our cases involving collusion.
The term "revenue cycle" is used to describe the series of activities that result in money going into your bank account. A practice's revenue cycle consists of six activities:
Our rules are designed to ensure that no single person has the ability to both steal and conceal. In other words, properly applied these rules force thieves to collude to steal.
When dividing duties, it is hard to go wrong if you follow these three rules:
1. Treatment is only entered by clinicians who performed or were present when treatment was performed.
There has been a long tradition in dentistry of clinicians entering clinical information in charts and then administrative staff turning the clinical data into financial information such as insurance claims and patient walkout statements. In the era before computerization, or when practice management software first appeared in practices (and there was a single computer located at the front desk) this approach made sense. With every operator having a computer and most practices using electronic charting, it no longer makes sense, yet there are still offices where a routing slip or paper chart is sent to the front desk for treatment to be entered into practice management software. In addition to the possibility of human error when administrative staff who may not have clinical backgrounds (or may but were not present when the treatment was done) try to translate clinical notes into CDT codes, allowing front desk staff to enter treatment creates several potential embezzlement pathways that will not exist if treatment is entered by treating clinicians.
2. Of the remaining tasks (billing, receiving payments, recording them, day-end balancing, and depositing funds) no team member should perform more than two of these tasks.
There are many offices where a single person is doing all five. This creates a situation where it is incredibly easy to steal, and if this person is not stealing, it is for one simple reason -- they have chosen honesty. The point of systems is to move past a dependence on the fundamental honesty of staff.
3. The two tasks performed should not be consecutive.
So whoever gets the mail (i.e., receives insurance payments made by check) should not record the payments in practice management software. The person doing day-end balancing should not make bank deposits, and so on.
If you have a large practice with plenty of staff, rules 2 and 3 are easier to achieve. In a small practice, perhaps with one administrative person, division of duties is more challenging. It may be possible to involve clinical staff in some of the tasks (obvious choices are getting the mail and doing day-end balancing because these activities take place once daily) or the practice owner or spouse may need to assume some of the tasks.
Don't forget that different forms of payment follow different pathways through your practice, and that this framework needs to be applied to each type of payment. There is no "safe" method of payment that cannot be embezzled, and therefore all forms of payment require these rules to be applied.
For example, when insurance companies pay by electronic funds transfer, the money arrives directly at the bank and is neither "received" nor "deposited" by your team. However an Explanation of Benefits does come to your practice, and the person receiving it should not be posting it to practice management software. And while there is no action needed to deposit EFT payments, there definitely needs to be a reconciliation of EFT collections according to practice management software with EFT amounts received by your bank. It may be a good idea to have a different person balance EFT payments (which probably could be done once per week or monthly) that the person responsible for balancing the "physical" deposit of cash and checks.
Assuming that the practical issues with segregation of duties can be worked through, properly allocating tasks among you and your team is one of the most effective and cost-efficient ways of reducing exposure to embezzlement. This is an area where most practices can use improvements, and we have provided a series of simple rules to get there.
If you want to discuss your practice or obtain one-on-one assistance with making your control systems effective, click the button below.