Following Embezzlement By Peter Murrel of SNP Funds All Organisations Large And Small should Review Their Procedures

26th May 2026

The case involving Peter Murrell has become a wider warning about governance, oversight and concentration of power inside organisations.

While the legal details are specific to that case, the broader lesson applies equally to businesses, charities, political parties, community trusts, sports clubs and voluntary organisations: no organisation should ever rely purely on trust, loyalty or personal reputation when handling money.

Many organisations only discover weaknesses after a crisis. By then the financial damage, reputational damage and loss of public trust can be enormous. The best protection is not a single anti-fraud policy but a culture where transparency, challenge and independent scrutiny are normal.

One of the most important safeguards is separation of responsibilities. The same person should never control income, approve spending and reconcile accounts. Even in small community groups this can be managed by splitting duties between committee members or trustees. If one individual dominates every financial process, risk increases dramatically.

Boards and trustees also need to stop treating financial oversight as a formality. Too many committees simply accept reports without questioning unusual movements, missing documentation or unexplained transfers. Directors and trustees do not need to be accountants, but they do need to understand enough to ask difficult questions. If financial reports are confusing or incomplete, that itself is a warning sign.

Independent audits matter, but organisations should not assume an annual audit alone guarantees safety. Fraud and misuse can continue for years between audits, especially if auditors are only reviewing selected samples. Internal controls, random checks and regular reporting are just as important. Smaller organisations that cannot afford full audits should still arrange periodic independent reviews by external accountants or qualified volunteers.

Another major issue is concentration of authority around founders, long-serving executives or dominant personalities. In many scandals, people became reluctant to challenge senior figures because they were seen as indispensable or politically powerful. Healthy organisations encourage respectful challenge. Trustees, staff and volunteers must feel able to ask questions without fear of being pushed aside.

Modern banking systems actually provide many tools to reduce risk. Dual authorisation for payments, spending limits, automatic alerts, cloud accounting systems and transparent digital records can make it much harder for improper spending to remain hidden. Cash handling should be minimised wherever possible because cash transactions are harder to track.

Whistleblowing procedures are also essential. Staff or volunteers often notice concerns long before leadership does, but they stay silent because they fear conflict or retaliation. Organisations should have confidential ways to raise concerns and clear policies protecting those who speak up in good faith.

Charities and community groups sometimes believe fraud prevention sounds too “corporate” or distrustful. In reality, good governance protects volunteers as much as finances. Strong systems stop honest people from being exposed to suspicion and protect organisations from damaging allegations.

Transparency is especially important for organisations that rely on public donations, grants or membership fees. Supporters increasingly expect regular updates explaining where money goes and how decisions are made. Openness builds trust; secrecy destroys it.

There is also a cultural lesson from many recent scandals across politics, charities and business. Organisations often become so focused on defending their image externally that they ignore internal warning signs. Reputation management should never take priority over accountability. The longer problems are hidden, the larger they usually become.

Ultimately, the strongest defence against embezzlement is not suspicion of individuals but systems that assume everyone no matter how respected should be subject to checks and balances. Good governance is not about mistrust. It is about recognising that organisations are safest when transparency, oversight and accountability are built into everyday operations rather than introduced only after a scandal occurs.

The Basic Safeguards
Organisations can take a series of practical and relatively low-cost steps to greatly reduce the risk of fraud, embezzlement or misuse of funds. The key is creating layers of oversight so no single individual has unchecked control.

A basic but highly effective safeguard is dual authorisation on payments. Any transfer above an agreed threshold should require approval from two unrelated people, such as a finance officer and a trustee or director. Online banking systems now make this easy to implement.

Bank reconciliations should also be carried out every month by somebody different from the person making payments. This means comparing bank statements against invoices, receipts and accounting records to identify missing money, unexplained transfers or unusual spending patterns.

Every organisation should require invoices and receipts for all expenditure. Random spot checks by trustees, directors or independent committee members can quickly reveal irregularities. Fraud often survives because nobody actually checks supporting paperwork.

Another important measure is segregating financial duties. The person receiving money should not be the same person approving payments or maintaining the accounting records. Even in small charities or community groups, duties can usually be split between volunteers or board members.

Organisations should also set clear spending limits. For example, managers may approve spending up to a certain amount, while larger transactions require board approval. Exceptional or unusual purchases should always face additional scrutiny.

Regular independent reviews are extremely valuable. Smaller organisations that cannot afford full external audits can still appoint an independent accountant annually or ask an experienced external volunteer to review accounts and governance procedures.

Trustees and directors should receive regular financial reports that are simple and understandable. Warning signs include:

missing receipts,
vague descriptions such as “miscellaneous expenses,”
repeated cash withdrawals,
payments to unfamiliar suppliers,
unusually large Amazon or online marketplace spending,
unexplained loans or transfers,
delays in producing accounts.

Mandatory holidays can surprisingly help uncover fraud. In some cases, irregularities are only discovered when the person controlling finances is absent and somebody else takes over temporarily.

Organisations should also maintain:

a written financial procedures manual,
an expenses policy,
procurement rules,
conflict-of-interest declarations,
an asset register listing valuable equipment and property.

Cybersecurity checks are now equally important. Many frauds involve hacked email accounts or fake invoices rather than physical theft. Organisations should use:

multi-factor authentication,
secure passwords,
restricted banking access,
staff training on phishing scams.

Whistleblowing systems are critical too. Staff, volunteers and committee members need confidential routes to report concerns safely. Some of the largest scandals continue for years because people are afraid to speak out.

Boards and trustees should avoid becoming too dependent on one “trusted” individual. Long-serving finance officers, founders or executives should still face oversight and periodic review. In many major fraud cases, the problem was not lack of trust but lack of verification.

Finally, organisations should regularly ask themselves a simple but powerful question: “If this person left tomorrow, could somebody else fully understand and verify the finances?” If the answer is no, the organisation already has a governance weakness.

Do not leave it all to the willing volunteer.