Our client, a Fortune 500 multi-national business, engaged The Intelligence Group to forensically analyze the computer assets of an employee within the Accounts Receivable side of their internal accounting function. Less than six months into his employment, our client had grown uncomfortable with their reimbursement of his temporary living expenses, based on a tip from another employee. Our investigation turned up the suspected: falsified receipts from various hotels and restaurants compiled from clip-art, media and legitimate advertising available on the internet. More troubling, however, was our identification of the fact that he was residing at the home of a relatively new co-employee – his father – whose real identity had also been concealed from the employer. The father, employed in the Accounts Payable side of the internal accounting function, had been cooperating with the son in setting up a large-scale, phony vendor scheme and diverting payments to themselves. Based on the recovery of non-enterprise email communications between the two, and subsequent background investigation, the father and son were identified as a team that had committed similar frauds and diversion schemes around the country.