Most society owners worry about fraud from outside: fake files sold by touts, forged allotment letters, buyers with bounced cheques. The more expensive losses often start inside the building. A cashier pockets a cash instalment and issues a receipt from an old book. A sales manager approves a "special discount" for a dealer who shares the difference. A file is quietly created for a plot that does not exist. Internal fraud controls are the routines that make this hard to do and easy to detect. This guide is for owners, directors and CFOs of housing societies and development companies in Pakistan who want to know where their sales and recovery operations are exposed, and what to do about it.
The stakes are not theoretical. In May 2026, NAB began investigating a cooperative society in Islamabad where investigators believe tens of thousands of files were issued against a layout that could support only around 6,000 plots. Complete payment and allotment records for thousands of files were reportedly missing. Former office-bearers were among those arrested. Cases like this involve more than one bad actor; they rely on records that nobody independent was checking.
Where Internal Fraud Happens in a Sales Office
| Scheme | How it typically works | Warning signs |
|---|---|---|
| Duplicate or ghost files | Extra files are created for plots already sold, for plots that do not exist, or outside the approved layout, and sold privately | File count exceeds plot inventory; file numbers out of sequence; files with no linked plot |
| Backdated or reused receipts | Cash is received but recorded later, or not at all, using old receipt books or edited dates | Gaps or repeats in receipt numbers; receipts dated before the bank deposit by days or weeks |
| Unrecorded cash (skimming) | Instalments paid in cash at the counter are pocketed; the buyer gets a receipt that never reaches the ledger | Buyer complaints about "unpaid" dues they have paid; daily cash lower than counter activity suggests |
| Discount and waiver abuse | Discounts, late-payment surcharge waivers or plot-feature exemptions are granted without authority, often in exchange for a kickback | Discounts clustered on one staff member or dealer; waivers just below approval thresholds |
| Dealer collusion | Staff tip off a dealer about good plots or cancellations, or book fake sales to earn commission, then cancel | High cancellation rates for a dealer; commission paid on bookings that later lapse |
| Unauthorised transfers | A file is transferred without the genuine owner's consent, or transfer fees are waived or pocketed | Transfers without biometric or in-person verification; owner disputes after the event |
| Cancellation and refund manipulation | A defaulter's file is cancelled and resold privately, or refunds are paid to a third-party account | Cancellations without the notice trail; refunds to accounts not in the buyer's name |
Double bookings caused by poor inventory control are covered in our guide to plot file management software. This article is about deliberate fraud by people who already have access.
The Core Controls
1. Segregation of duties
The basic principle is that no single person should be able to start, approve, record and reconcile the same transaction. In a sales office, that means:
- the person who books a plot does not approve the price or discount
- the cashier who receives money does not post entries to the customer ledger or reconcile the bank
- the person who prepares a transfer does not verify the seller's identity and also sign the transfer letter
- the person who maintains plot inventory does not also issue files
Small offices cannot always separate everything. Where one person must wear two hats, add a compensating control, such as a daily review by the finance head or owner.
2. Maker-checker approvals
Every sensitive action should need a second person to approve it before it takes effect. That includes discounts, surcharge waivers, cancellations, refunds, transfers, changes to a buyer's payment plan, and edits to posted receipts. Set clear approval limits. A branch manager might approve discounts up to a set percentage, with anything above that going to a director. Make sure the system enforces those limits rather than relying on a policy document.
3. Serially controlled receipts
- Use system-generated, sequential receipt numbers that cannot be reused or deleted. Cancelled receipts should remain visible, marked as cancelled, with a reason and an approver.
- If manual receipt books are still used at sites or events, issue them against signature, record the number range, and reconcile every leaf, including spoilt ones, when the book is returned.
- Send buyers an SMS or WhatsApp confirmation for each payment from a central system. A buyer who receives a receipt but no confirmation will tell you.
4. Daily cash and bank reconciliation
- At day end, total all receipts issued by mode: cash, cheque, pay order, online transfer.
- Count physical cash and compare it to cash receipts. Investigate any difference the same day.
- Deposit cash intact the next banking day. Do not use collections to pay expenses.
- Match deposit slips and online credits to receipts in the system.
- Have someone other than the cashier sign off the reconciliation.
- Track cheques through to clearance. Follow up bounced instruments formally and in writing.
Reducing cash itself is the strongest control. Encourage bank transfers and pay orders, and make cash the exception.
5. Role-based access
Staff should see and do only what their role requires. A dealer should not see the whole inventory's pricing logic. A recovery officer should not edit plot features. A front-desk executive should not delete receipts. The details of designing roles are covered in Role-Based Access Control in Real Estate. The fraud-control point is simple: remove access the day someone changes role or leaves, and review user lists at least quarterly.
6. Audit trails that cannot be edited
Every create, edit, approve and delete action should leave a permanent log showing who did it, when, and what changed. The audit trail is what turns "the system shows this" into evidence. It also deters most staff, because they know edits are visible. Ask your software vendor whether ordinary administrators can switch logging off or edit logs. If they can, it is not a real audit trail.
7. Periodic file and inventory audits
At least once a year, and ideally on a rolling basis, an independent person should reconcile:
- approved layout plan plots against plot inventory records
- plot inventory against issued files and allotments
- a sample of physical files against system records, checking payments, transfers and supporting documents
- customer balance confirmations, by sending a statement to a sample of buyers and asking them to confirm or dispute it
- dealer commission payments against bookings that are still active
Customer confirmations are especially effective. Skimming and unauthorised transfers usually surface quickly when buyers are asked directly what they have paid.
Controls for Dealers and Commissions
Dealer networks bring volume and risk. Practical safeguards include:
- pay commission only on bookings that have cleared a minimum payment threshold, with clawback on cancellation
- allocate inventory to dealers through the system, with time-limited holds that release automatically
- never let a dealer collect money on the society's behalf except into the society's bank account
- review cancellation and re-booking patterns by dealer every month
Our guide on tracking dealer commissions covers commission logic in more detail.
Controls for Transfers
Transfers are where a file changes hands, and where an insider can do the most damage in a single step. Require the seller and buyer to appear in person or through verified biometric or video identification. Match CNICs against the file's ownership history. Collect transfer fees only through the society's bank account. Have a second officer approve every transfer before the transfer letter is printed. The legal exposure created by informal, paper-only transfers is explained in The Legal Risks of Manual Property Transfers in Pakistan.
A 30-Day Internal Control Health Check
- List everyone with system access and what they can do. Remove ex-staff and excess rights.
- Pull a receipt number report and check for gaps, duplicates and cancelled receipts without approval.
- Reconcile last month's receipts to bank statements, line by line.
- Compare total files issued with total plots in the approved layout, by block and category.
- Extract all discounts, waivers and refunds for the last six months and sort by approver and dealer.
- Review all transfers in the last quarter for proper identity verification and fee receipts.
- Send balance confirmations to a random sample of buyers.
- Write down approval limits and check that your system enforces them.
How Software Supports These Controls
Most of these controls fail in manual environments because they depend on people remembering to do them. A real estate ERP such as CAPITALESTATEPK can build the controls into the workflow instead. It can issue system-generated sequential receipts that cannot be deleted. It can route discounts, cancellations and transfers through maker-checker approval with limits. It can restrict each user to a defined role. It can keep a full audit log of changes and link every file to a specific plot in the inventory, so a file without a plot cannot exist. Reports on discounts by approver, receipts by cashier and cancellations by dealer then make reviews quick.
Software does not remove the need for an owner or auditor to look at the reports. It makes looking quick, and it makes manipulation visible. The same records also help when tax authorities or auditors ask questions. Regulators are moving in the same direction. Amendments to Punjab's private housing scheme rules approved in June 2026 include a requirement that allotments be managed digitally, once notified.
The ACFE's 2026 Report to the Nations, based on more than 2,400 occupational fraud cases worldwide, again found that anti-fraud controls are associated with lower losses and faster detection. The same logic applies in a Lahore or Rawalpindi sales office.
If you want to see how maker-checker approvals, receipt controls and audit trails would work across your own sales and recovery teams, book a demo with CAPITALESTATEPK.
Frequently Asked Questions
What is the most common internal fraud in housing society offices?
Typical patterns include skimming cash instalments, backdated or unrecorded receipts, unauthorised discounts, and duplicate or ghost files. Which is most common depends on how much cash the office handles and how tightly inventory and receipts are controlled.
What does maker-checker mean in a real estate office?
One person prepares or enters a sensitive transaction, such as a discount, refund, cancellation or transfer. A second, authorised person must approve it before it takes effect. This prevents any one employee from completing a risky transaction alone.
How often should a society reconcile cash?
Daily. Cash received should be counted against receipts at day end, deposited intact the next banking day, and matched to the bank, with sign-off by someone other than the cashier.
Can a small society with five staff segregate duties?
Partially. Where roles must be combined, add compensating controls: system-enforced approval limits, daily review of receipts and discounts by the owner or finance head, and regular customer balance confirmations.
Do audit trails really deter fraud?
Yes, when they cannot be edited or disabled and someone actually reviews them. Staff behave differently when they know every change is logged with their name and time.
How do we detect ghost files?
Reconcile the approved layout plan, plot inventory and issued files regularly. Make sure every file in the system is linked to exactly one plot. Any file without a plot, or any plot with more than one active file, needs immediate investigation.