WorkflowAccounts Payable Automation

Expense Report Audit

Expense audit software that reads every receipt, shows why one is doubted and waits for you to decide

Every report checked, not a sample, and no forged receipt paid without proof of payment.

See one case, screen by screen ↓
demo1,284reportsand 8,200 receipts read and checked in one pay cycle, every one of them
demo1,171clearedby the agents on their own; 38 wait for an auditor before the Thursday 12:00 pay-run cut-off
demo54receiptslikely AI-generated, stopped in 12 weeks at about $115 each. Every one of them passed the policy rules
demo99.0%agreement between auditors and the agents on the quality sample of cleared reports over 12 weeks (283 of 286)
In short

What is Expense Report Audit?

Expense Report Audit is expense audit software that checks every expense report and receipt before the pay run, not a 5–10% sample. Seven AI agents read each receipt and check it for signs of AI generation, against the policy and city rates, against the corporate card feed and across other people's claims. A cross-checker weighs those findings and proposes a decision. The expense auditor decides every doubted line and signs it with reason codes.

How to choose AI solutions for back-office and enterprise work →

Updated

The problem

Why a forged receipt still gets paid

Most expense teams audit a random 5–10% sample of reports and let rules check the rest. The rules check the amount the employee typed, not the receipt image. Free image tools now produce a convincing restaurant receipt in seconds. A forged dinner that stays inside the meal rate and the entertainment limit passes every rule, and the line manager approves it on a phone in under a minute. It is paid in the next run before anyone has looked at it.

When a report is pulled for audit, the auditor works across the expense system, the card portal and the policy PDF. A queried employee often reads the email as an accusation, and nobody tracks when the reply is due. Card spend with no receipt gets chased monthly, after the 120-day return window has gone. A dinner split between two colleagues, or one hotel room claimed by two people, can't be seen one report at a time. When internal audit later asks who decided and why, the evidence is spread across shared drives.

typical5–10%of reports: the random audit sample rate common in widely used expense tools
typical70.8%of the fake receipts one expense-audit vendor flagged were AI-generated images by May 2026, up from none in March 2025
typical40%of US workers surveyed in 2026 said they had used AI to make a fake business receipt
Where one pay cycle's audit hours goestimated
By hand48 days
With the solution7.8 days
  • Pulling the sample and opening each report and receipt6 → 0.5 d
  • Comparing receipt, card line and policy clause in three or four windows20 → 4 d
  • Writing to employees, chasing replies and reading what comes back8 → 1.5 d
  • Chasing card spend with no receipt6 → 1 d
  • Spotting split bills, double claims and repeat cases across people4 → 0.5 d
  • Assembling evidence for internal audit4 → 0.3 d

Estimated hours for one expense audit team in one weekly pay cycle. Today's hours cover a sample; with the solution, the hours cover every report.

How it works

How a report moves

Seven agents read, inspect and cross-check every receipt against the card feed, the policy and each other; the expense auditor decides and signs.

What comes in
Reports in4 channels · app, web, email, travel desk
Agents at work
Report readerevery receipt, any language
Then
Receipt forensicspixels, type, file
Policy checkerpolicy and city rates
Card reconcilercard feed
Pattern finderacross people
Then
Cross-checkerno payment record, no clearance
Then
Explanation agentasks in plain words
A person decides
Expense auditordecides and signs
What comes out
Clean lines paid
Doubted line sent back
Every step logged
One case, step by step

One forged dinner, from the agents' note to the signed decision

Kestrel & Vane Group pays expenses in a weekly run with a Thursday 12:00 cut-off. On Wednesday 14 October, Elena Varga, expense auditor for the Americas, opens the solution. The agents have already read every report sent since Thursday. This is how she works through the morning with them, screen by screen, in the working solution.

  1. 01Wednesday morning

    The agents brief her and propose what to do

    Elena Varga · Expense auditor, Americas

    Her day starts with a briefing, not a dashboard. Since Thursday the agents have read 1,284 reports and 8,200 receipts. 1,171 cleared on their own, 38 need her before the cut-off, and $18.7k is held until she decides. Each agent writes a short note with a proposal and one-click answers, and the cross-checker's note comes first: Marcus Delaney's Chicago trip, ER-20931, $2,158.52.

    “I propose paying the 11 on Thursday and asking Marcus about the dinner. The message is drafted for you.”

  2. 02Walk me through it

    Twelve receipts laid out with the agents' findings

    Cross-checker

    The report opens with its receipts laid out side by side. Each carries small badges for the forensic likelihood, the card match and the policy check. Eleven say Cleared. R6, a $312.40 dinner at Brannock's Bar & Chophouse, has 94%, a crossed-out Card badge and a Font badge, and needs a decision. Beside the receipts the agents show what they found, the evidence and what she is asked to decide.

  3. 03Look at the evidence

    The doubt is marked on the receipt itself

    Receipt forensics

    Four numbered marks on the receipt show why it is doubted. The digits of “312.40” are in a different typeface, 11% wider than every other figure. $268.00 plus $31.49 tax is $299.49, which leaves $12.91 unexplained, and there is no tip line. The paper texture is generated, with no thermal-printer dot pattern. The file is a PNG with no camera data, made on Tue 13 Oct at 17:58, a week after the dinner.

    “Escalate: the forensic flag is not cleared by any payment record (rule X-1).”

  4. 04Previous receipt

    A doubt the card answers is cleared

    Card reconciler and cross-checker

    The breakfast receipt R5, Canal Street Bagel Co. at $18.75, also scored 41% on forensics because the photo was taken in low light. The card feed shows TX-88421006, with the same merchant, the same amount and the same day, so rule X-2 cleared it with a note and no person had to look. R6 has nothing like that: the claim says it was paid on a personal card, no statement is attached, and the card shows no spend after 18:00 that day.

    “Cleared: forensic doubt answered by an exact card match (rule X-2).”

  5. 05Across people

    The same layout in three cities

    Pattern finder

    The Brannock's receipt has the same layout as two others: Ana Ruiz's $96.40 at Bayou Ember Grill in Houston and Kofi Mensah's $91.85 at The Gilded Ferret in New York. All three have the same header block and a typeface change in the total (+11%, +10%, +12%), and none has a payment record. The pattern finder files them as pattern PT-11, $500.65, with 92% confidence, and suggests sending all three to internal audit.

    “No one is named to a manager until you confirm.”

  6. 06Her decision

    Approve eleven, send one back, with reasons

    Elena Varga · Expense auditor

    Elena accepts the recommended option: approve 11 lines for $1,846.12 and send R6 back to Marcus. The reason codes are already ticked: RT-01, receipt could not be verified as genuine, and RT-02, no proof of payment. The explanation agent drafted the message in plain words, and she can edit it before signing. Rejecting R6 as a confirmed generated receipt would need Rachel Lindqvist, the T&E manager, to countersign.

  7. 07Signed

    Eleven paid on Thursday, one question sent

    Explanation agent and pattern finder

    The report moves to Waiting on the employee and R6 shows “Sent back · EX-3401”. In the conversation beside it, the explanation agent says it sent EX-3401 in plain words and will remind Marcus on day 3. The pattern finder notes that this is Marcus's second returned line in 180 days, so his line manager now has sign-off SG-5524.

    “ER-20931 signed · 11 paid · 1 sent back”

  8. 08In the expense app

    Asked, not accused

    Marcus Delaney · Key account manager, Distribution · Columbus

    Marcus sees that 11 of 12 receipts are approved, $1,846.12 paid with his salary on Thu 15 Oct, and that one needs his help by Wed 21 Oct. The message says the receipt could not be confirmed and explains why in plain words. He has four ways to answer: add the statement line, add the emailed receipt, remove the line, or say something is wrong.

    “A person reads every reply and makes the decision; nothing is decided by the system alone.”

  9. 09Repeat case

    The line manager sees only what is his to sign

    Graham Whitfield · Regional sales director (line manager)

    SG-5524 shows Graham both cases side by side. ER-19877 on 18 Aug was a lunch receipt re-used with a new date, and Marcus removed it. ER-20931 is the dinner that could not be verified. Graham records a decision: he has talked to the employee, he is asking HR for advice, or no action, with a reason. Graham raised neither case, and he cannot sign what he raised.

    “Nothing here says Marcus did wrong on purpose; the auditor decided only that the receipt could not be verified.”

  10. 10On the record

    Every step chained and verifiable

    Owen Hartley · Internal audit lead

    The audit trail lists every step on ER-20931: the report reader opening it, the four checks, the cross-checker's escalation, Elena opening R5 and R6, her signed decision with RT-01 and RT-02, the message to Marcus and the payroll queue for $1,846.12. Each entry carries a fingerprint chained to the one before. Verify the chain reports “Chain intact: 21 of 21 entries”, and an evidence pack can be exported for the report.

Who it’s for

Built for everyone between the receipt and the pay run.

The same forged dinner, seen by the five people it reaches: how their week used to go, and how it goes now.

EV
Elena VargaExpense auditor, Americas · decides 30–40 escalated reports a day before Thursday's cut-off
Expense auditor
Before
Audits a sample in three or four windows, writes her own query emails and finds out at month end that a forged dinner was paid.
Now
Starts each day with the agents' proposals, sees the doubt marked on the receipt beside the card and policy evidence, and signs each decision with reason codes.
RL
Rachel LindqvistT&E manager, group finance · owns policy TE-4, countersigns rejections and recoveries
T&E manager
Before
Hears about a weak rule only when auditors complain, and has no way to tell whether the checks are right.
Now
Gets a weekly report on what was stopped and how often auditors upheld each rule. She approves any threshold change after seeing what it would have done in the last 90 days.
MD
Marcus DelaneyKey account manager, Distribution · Columbus · travels two weeks a month
Employee
Before
Gets a terse email weeks later and waits for the whole report to be paid.
Now
Is paid for 11 of 12 receipts on Thursday. He is asked about one line in plain words and given four clear ways to answer.
GW
Graham WhitfieldRegional sales director, Distribution · approves 14 people's reports
Line manager
Before
Approves reports between meetings without seeing a receipt, and hears about problems late.
Now
Is brought into a repeat case at the second returned line in 180 days, with both cases side by side and three decisions to choose from.
OH
Owen HartleyInternal audit lead · samples decisions, exports evidence
Internal audit lead
Before
Asks for evidence and receives screenshots and email threads, with no proof that nothing changed afterwards.
Now
Reads a chained trail of every agent step and signature, verifies the chain and exports an evidence pack per report.
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents read, inspect and cross-check every receipt against the card feed, the policy and each other; the expense auditor decides and signs.

Report reader

Reads every report and every receipt: merchant, date, items, tax, tip, total and currency, in any language, and ties each receipt to its report line.

  • Never changes a report line
  • An unreadable receipt goes back to the employee
Receipt forensics

Inspects the image itself for generated textures, missing printer patterns, typeface changes, edited digits, sums that don't add up and the file's data, and checks it against earlier receipt images.

  • Never decides on its own: a doubt must be met by the payment evidence
Policy checker

Checks every line against policy TE-4 and the city rates: receipts, payment, meals, entertainment, alcohol, lodging, mileage, timing and weekends. It reads a new policy version into proposed rule changes.

  • Never applies a rule that is not in the approved policy version
Card reconciler

Matches each line to the corporate card feed. It finds claims with no payment record, card spend with no receipt, amounts that differ and lines paid twice, and asks for missing receipts.

  • Never reads a personal statement unless the employee sends it
Pattern finder

Looks across people and 12 months of receipts for the same receipt claimed twice, bills split to stay under a limit, shared fake layouts, round-number habits and repeat cases.

  • Never names a person to a manager before the auditor confirms
Cross-checker

Weighs the four checks against each other with the cross-check rules. A forensic doubt with no payment record goes to the auditor, and one answered by an exact card match is cleared with a note. It proposes a decision with its confidence.

  • Never approves or rejects a doubted line: it recommends, the auditor signs
Explanation agent

Writes the request to the employee in plain words and chases it on the service level. It reads the reply and any statement image, and says whether the explanation holds.

  • Never accuses anyone
  • Never sends without the auditor's signature
Expense auditor

Decides with reason codes; the T&E manager countersigns rejections. The agents propose; a named person decides.

Ask in plain words

Ask the agents, or tell them what to do

Every screen has a box for asking the agents about a report, a receipt, a person or a rule, or telling them what to chase. Answers cite their sources and offer the next step. Decisions stay with an auditor.

What should I do first?

Marcus Delaney's Chicago trip, ER-20931. It is the only report with a likely generated receipt and no payment record, and it must be decided before the pay-run cut-off, Thu 15 Oct 12:00. It takes about two minutes: one receipt to look at, one decision to sign.

How much is held from Thursday's pay run?

$18,719.85 on 71 reports. 38 need an auditor, 27 wait on the employee and 6 are with line managers. The largest is Daniel Kurz's June trade fair ($2,240.55, sent after 60 days). Everything else is paid on Thu 15 Oct.

Why did the breakfast receipt clear?

The card answered the doubt. The photo of R5 is dark, so forensics gave it 41%. But card ending 4471 shows Canal Street Bagel Co., $18.75, the same morning: rule X-2 clears it, with a note.

Are AI-generated receipts getting worse?

Yes: from none a week in July to 13 in the week of 5 Oct, 54 in 12 weeks, about $115 each. Every one passed the policy rules; the image and the missing payment gave them away. Three share one layout across three cities.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

Today: the agents' briefingWhat the agents read since the last pay run, what they cleared and what needs you, each as a short note with a proposal and one-click answers.
Ask the agentsA plain question gets an answer with its sources and the next step: here, what is held from Thursday's pay run and why.
One report, every receiptTwelve receipts side by side with forensic, card and policy badges, and the agents' findings, evidence and proposal beside them.
The evidence on the receiptThe doubted receipt magnified with numbered marks for typeface, arithmetic, texture and file data, next to the card transaction, the policy clause and the four checks.
Cleared by a card matchA dark breakfast photo scored 41%, but the card swipe matches merchant, amount and day, so it cleared with a note.
Patterns across peopleShared fake layouts, split bills, receipts claimed twice or re-used, with the linked receipts side by side and the signals that link them.
Decide with reason codesThe recommended decision, the alternatives with who must countersign, the reason codes and the message to the employee, drafted to edit.
After the signatureEleven lines queued for the pay run, the request sent, and the line manager told because it is a second returned line.
What the employee seesWhat is paid and when, the one line that needs help, why, in plain words, and four ways to answer.
Sign-offRepeat cases for line managers; policy exceptions, setting changes, recoveries and countersignatures for the T&E manager.
Weekly audit reportWritten by the agents for the controller: what was stopped, generated receipts week by week, and how each rule performs.
The audit trailEvery agent step and every signature with its evidence and chained fingerprint, a chain check and an evidence pack.
Thresholds with a what-ifEscalation, note-and-clear and sample thresholds, and what they would have done in the last 90 days, sent to the T&E manager to approve.
Governance

Built for audit: evidenced, signed and on the record.

A doubt needs proof of paymentA forensic doubt never clears unless a card, bank or merchant record answers it. When the card matches exactly, the receipt clears with a note. The integrity rules for split bills, receipts claimed twice and genuine receipts always reach a person and cannot be switched off.
Every finding shows its evidenceEvery finding links to its source: the marks on the receipt image, the card file line, the TE-4 clause, the merchant directory, the linked pattern or the employee's history. The agents' answers cite the same sources.
A named person decides, with reason codesThe expense auditor decides every doubted line and must give at least one reason code. Overriding two agents needs a code and a note. A rejection as a confirmed generated receipt, a recovery through payroll and a policy exception all need the T&E manager to countersign.
Nobody signs what they raisedNo one can sign what they raised, and an auditor cannot decide their own team's reports. Settings drafted by the finance systems administrator take effect only when the T&E manager approves them.
Employees are asked, not accusedThe explanation agent never accuses anyone and sends nothing until the auditor signs. The employee sees every finding about them in plain words, and the rest of the report is paid on time. The line manager is told at once about a repeat case, and copied on a request only when the employee has not answered by day 5.
A chained trail, kept seven yearsEvery read, check, message and signature, by an agent or a person, is recorded with a fingerprint chained to the one before. The trail is read-only for everyone, including administrators. Verify the chain checks it end to end, and an evidence pack exports the report, the marked images, the decision and the messages.
Configuration

Your T&E policy, your thresholds

The rules are read from your own policy, and the thresholds are yours to move. Before you send a change, you can see what it would have done in the last 90 days. Changes go to the T&E manager before they take effect.

SettingDefaultChoose from
Escalate a receipt as likely generated or altered60% forensic likelihoodAt or above it, a receipt needs a payment record to clear (rule X-1)
Escalate meals and entertainment60%55% proposed, waiting for the T&E manager (SG-5517)
Keep a note, clear on a card matchFrom 30%Between this and the escalation line, an exact card match clears the receipt (rule X-2)
Auto-clear small policy breachesUnder $25 with a card matchCleared with a note to the employee (rule X-4)
Quality sample of cleared reports2%Re-checked by a person to measure the agents
When a policy rule is hitSet rule by rule, e.g. R-01 Return, R-03 Explain, R-07 AuditorExplain · Return · Auditor; integrity rules always reach a person (rule X-3)
Explanation requests5 working daysReminder on day 3; line manager copied on day 5
Repeat casesSecond returned line in 180 days: line managerThird: the T&E manager and HR
Connections

Works with the systems T&E already runs on

Expense systemreports, lines and receipt images from the app, the web and email, as people send them
Corporate card feedthe card issuer's daily file, every transaction matched to a receipt
HR systememployees, managers, cost centres and leavers
Travel bookingflights and hotels booked through the travel desk
Payroll and general ledgerreimbursements and recoveries in the weekly run; approved expenses posted by cost centre
Merchant directory and city ratescard network merchant data and business registers; federal city rates and the group rate table
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
100%
of reports and receipts audited before payment, against the 5–10% samples common today
Sampled today5–10%
With agents100%
target
0
doubted receipts paid without proof of payment: every forensic doubt waits for a card, bank or merchant record
54 of 54 generated receipts held
in the last 12 weeks
target
< 1day
from report sent to decision, inside the weekly pay run

“demo” = seen in the working solution, on its sample expense data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (5–10%: the default and example random audit sample rates in the documentation of widely used expense tools; 70.8%: one expense-audit vendor's own data on the fake receipts it flagged, reported by the Ohio Society of CPAs, June 2026; 40%: a 2026 survey of 2,000 US and UK workers by an expense software company, US respondents). Accountable-plan windows of 60 and 120 days: IRS Publication 463. Kestrel & Vane Group, its merchants and the people named on this page are fictional: characters and sample data in the working solution.

Questions

What controllers and T&E leaders ask us.

What is Expense Report Audit?

Expense Report Audit is expense audit software that checks every expense report and receipt before the pay run, not a 5–10% sample. Seven AI agents read each receipt and check it for signs of AI generation, against the policy and city rates, against the corporate card feed and across other people's claims. A cross-checker weighs those findings and proposes a decision. The expense auditor decides every doubted line and signs it with reason codes.

How does it detect fake and AI-generated receipts?

The receipt forensics agent looks at the image itself: generated paper texture, a missing thermal-printer pattern, a total set in a different typeface, sums that don't add up, and file data such as no camera details or a creation date after the expense. It marks each finding on the magnified receipt. A forensic doubt is never a verdict on its own: it needs a card, bank or merchant record before the line can clear.

Will it flood our auditors with false positives?

A doubt that the card feed answers is cleared with a note and doesn't reach a person. One example is a dark breakfast photo that scored 41% but matched the card exactly. In the working solution the agents cleared 1,171 of 1,284 reports on their own, auditors cleared 9.6% of what the agents flagged, and a 2% quality sample showed 99.0% agreement.

Can it find split bills and receipts claimed twice?

Yes. The pattern finder compares each new receipt with 12 months of receipts across all employees. It finds one dinner split into two claims to stay under a limit, one hotel room claimed by two people, a receipt re-used with a new date, and the same fake layout used in different cities. Linked receipts are shown side by side.

How are employees asked about a doubted receipt?

The explanation agent drafts the request in plain words, and it is sent only when the auditor signs. The rest of the report is paid on time. The employee can add the statement line, add the emailed receipt, remove the line or say something is wrong. The agent chases on a five-working-day service level, reads the reply and says whether it holds.

Does it check expenses against our own T&E policy and per diem rates?

Yes. The policy checker reads your policy into rules you confirm and checks every line against them: itemised receipts, corporate card use, city meal rates, entertainment and alcohol limits, lodging caps, mileage, the 60-day submission window and weekend spend. City rates are maintained in settings. A new policy version produces proposed rule changes for the T&E manager to approve.

Do people stay in control?

Yes. The agents never approve or reject a doubted line, never accuse anyone and never send a request without a signature. The expense auditor decides with reason codes. The T&E manager countersigns rejections as confirmed forgery, recoveries, policy exceptions and setting changes. Nobody signs what they raised, and every step is on a chained audit trail.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents, including your T&E policy, your expense system and card feed, and a month of past reports. It goes live once every quality gate has passed. First-time setup includes a trial on the month before go-live, so you see what the agents would have found. In the working solution that was 5,384 reports, 471 flagged and 22 likely generated receipts.

See it on
your expense reports.

We'll run Expense Report Audit on a month of your own expense reports, receipts and card feed.