Back to Insights
Payroll & Compliance3 min read

Why Every Payroll Run Needs a Second Pair of Eyes

Most organisations would never let one person approve their own payment to a supplier. Many let one person prepare, approve and release payroll every month.

By StepUp Team

Magnifying glass held over a crowd of silhouetted people

The Control Gap

Ask a finance team how supplier payments are approved and you will hear about purchase orders, approval limits and two signatories. Ask how payroll is approved and the answer is often: the payroll officer prepares it and sends it to the bank.

Payroll is usually an organisation's largest single cost. It is also the payment most often released on the word of one person.

What a Single Pair of Eyes Misses

Most payroll errors are not fraud. They are ordinary mistakes:

  • A new salary entered with an extra zero
  • A leaver still on the payroll two months after exit
  • An allowance applied to the wrong grade
  • A one-off bonus that repeats the following month
  • A bank account number with two digits swapped

Each is easy to spot for someone looking at the payroll fresh. Each is easy to miss for the person who has been building it all week.

Fraud does happen, and the patterns are well known: ghost employees, inflated overtime, bank details changed just before payday. All of them depend on one person controlling the process from start to finish.

What Good Approval Looks Like

Separate preparation from approval. The person who prepares payroll should not be the person who approves it. In a small organisation, the approver may be the owner or finance lead; that is fine, as long as it is someone else.

Review the changes, not the whole payroll. Nobody can usefully check 300 payslips line by line. A good review focuses on what changed since last month: new joiners, leavers, salary changes, unusual payments and changed bank details.

Compare totals. Gross pay, net pay and statutory deductions against last month. A big movement needs an explanation before approval, not after.

Lock it once approved. Changes made after approval should require a new approval. Otherwise the approval means nothing.

Keep an audit log. Who changed what, when and why. When a question comes up six months later, the log answers it in minutes.

Bank Details Deserve Special Attention

The most damaging single change in payroll is a changed bank account. A request to update bank details, especially one that arrives just before payday, by email or through someone other than the employee, is the classic route for payroll fraud.

Treat bank detail changes as a separate, verified step (we cover this in more detail in paying salaries by M-Pesa and bank): confirm with the employee through a known channel, record who approved it, and flag it in the payroll review.

It Protects the Payroll Team Too

Payroll staff sometimes see approval as a sign of mistrust. It is the opposite. When something goes wrong — and in payroll, something eventually does — an approved process with a clear log protects the person who prepared it. Without it, they carry the blame alone.

Building It In

Approval works when it is part of the system rather than a reminder in someone's calendar.

StepUp HRM's payroll automation separates payroll preparation from approval, highlights changes since the last run, keeps an audit log of every change and locks approved runs. Finance approves with the right information in front of them, and nobody has to rely on memory to explain what happened.

Keep reading

WhatsApp icon