The finance function is usually where a laundering scheme first becomes visible, because it is the one place the whole payment pattern can be seen at once. This engagement began with a CFO who noticed that a set of transactions did not behave like the business they claimed to belong to.
At a glance
Challenge Briefing
A supplier relationship the finance team had stopped thinking about started behaving strangely.
The CFO of a mid-market UK manufacturer had worked with the same overseas vendor for years without incident — invoices settled on time, no disputes, nothing that needed a second look. Then, over roughly six months, the vendor began paying more than it owed. The first instinct was the reasonable one: an error on their side.
The overpayment turned out not to be an error. The vendor asked the CFO to send the surplus onward — to bank accounts belonging to neither party to the contract. When he pressed for a reason, the answers stayed vague.
That is the moment the situation changes character. A reconciliation problem is an accounting matter. A request to move unexplained funds to third-party accounts is not. The CFO had spent the better part of a decade at the company on a reputation built for exactly this kind of judgment, and he was now one authorized payment away from being the person who moved the money.
How we worked it
We started with the transaction record, because it is the part of a story that cannot be talked around. We mapped every payment between the vendor and the company across the whole relationship — not only the six months in question — to establish when the pattern changed and what changed alongside it.
Overpay-and-refund is a recognized laundering structure rather than an exotic one. The point of the structure is the counterparty rather than the money. Funds that leave a legitimate manufacturer's account carry that manufacturer's history with them, and the transfer looks like ordinary commercial settlement to everyone downstream. The client here was not the target of the scheme so much as the paperwork that made it work.
In parallel we ran the vendor itself — ownership, corporate history, related entities, and any prior connection to investigated activity — to answer the question that determined how urgent this was: is this an arrangement, or a method?
What the finance team had run into was a method rather than an isolated incident. The structure did not depend on this client specifically, which meant there were almost certainly others.
Our advice was narrow and immediate: stop every transaction with the vendor, do not return the surplus, and report. That middle instruction is the one that matters and the one most people get wrong. Returning the money feels like the clean, conservative, blameless choice. It is also, precisely, the transfer the scheme was built to obtain.
The company halted the relationship and referred the matter. We sat with the CFO through his interviews so his account was complete and consistent from the first session — a person who has done nothing wrong can still damage his own position by recalling the sequence loosely under pressure. The multi-jurisdiction investigation that followed established that the vendor had been running the same structure through other companies.
Once the exposure was closed we did the unglamorous half of the work: reviewed the anti-money laundering policy against how the finance team actually operated day to day, rebuilt the checklists, and retrained the people who handle payment instructions. The gap had never been sophistication, but that nothing in the process obliged a second person to ask why a payment instruction did not match the contract.
What it changed
The CFO ended the matter as a witness rather than as a subject, and that distinction is what the whole engagement turned on.
Had he processed the transfer — and the instruction was plausible enough that many finance leaders would have — he would have been inside the scheme, and the claim that he had not understood what he was doing would have been his to prove rather than the authorities' to disprove. The company avoided the losses, the disclosures, and the multi-year remediation that follows a finance function implicated in someone else's laundering.
The authorities gained an entry point into a structure operating across several jurisdictions, which is the part of the outcome the client had no particular interest in and got anyway.
Worth being honest about what actually saved this: not a control, and not a system. One person declined to process an instruction he could not explain, and escalated instead of resolving it himself. The remediation work exists so that the next time, the company does not have to be that lucky.
Take this with you
Warning signs you can check without hiring anyone
- A counterparty pays more than it owes and asks for the surplus back — particularly to an account other than the one it paid from.
- Payment instructions name an account, entity, or jurisdiction that appears nowhere in the underlying contract.
- A refund is to be split across several accounts, or routed through a third party “for convenience.”
- Direct questions about the money produce vague, shifting, or suddenly urgent answers.
- You are told that asking is damaging to a good relationship. Legitimate counterparties expect a finance team to ask, and they answer without difficulty.
- The arrangement is understood by one person on your side and nobody else.
If you change one thing after reading this, make it this: no outbound payment to an account not named in the underlying contract, without a documented second approval. It is close to free, and it would have caught this in week one rather than month six.
When to bring someone in
Before you send the money back. Once funds move on your instruction, your position shifts from the person who noticed to the person who acted, and every conversation afterward is harder. The useful call is the one made while the question is still “is this what I think it is?” — that answer takes days, not months, and it costs a small fraction of the alternative.
Talk to us about this case study. Schedule a call now.
Falcone International
A similar problem?
We handle corporate investigations, due diligence, financial investigations and duty of care — usually for people who need something established quietly, and established properly, before it turns into a problem.