

An employee submits fake expense receipts in Turkey. Learn how foreign employers can preserve evidence, file a criminal complaint, recover company losses and manage dismissal and internal investigations.
Foreign-owned companies operating in Turkey may discover that an employee has submitted fake, altered or misleading expense receipts to obtain reimbursement from the company. The misconduct may involve fabricated restaurant or hotel receipts, altered taxi invoices, fictitious travel expenses, duplicate reimbursement requests, inflated amounts, personal purchases presented as business expenses or digitally manipulated invoices. Such conduct can create several legal issues simultaneously. Depending on the facts, criminal offenses involving fraud, document falsification or misuse of company assets may need to be considered, while the employer may also have employment-law and compensation remedies. Fırat Fesih Kaya Law Office recommends that foreign employers treat the matter as an evidence-preservation and internal-investigation issue before confronting the employee or deleting access to relevant systems.
Not every incorrect expense report automatically constitutes a crime. An employee can make an accounting error, misunderstand a reimbursement policy or accidentally submit the same receipt twice.
The situation becomes substantially more serious where evidence indicates deliberate fabrication or alteration intended to cause the company to make a payment that the employee was not entitled to receive.
Intent is therefore central to the criminal analysis.
Foreign employers may encounter manipulated hotel invoices, fake restaurant receipts, altered amounts, fabricated transportation expenses, false business-trip claims, personal expenses disguised as corporate expenses, duplicated receipts, invented suppliers or digitally modified PDF invoices.
The employee may also cooperate with another person or business to generate false documentation.
Before confronting the employee, preserve the original expense report and all supporting documents.
The company should retain emails, reimbursement forms, invoices, receipts, accounting entries, approval records, bank-payment information and relevant corporate-system logs.
Screenshots can be useful, but original electronic records are generally more valuable for forensic analysis.
Where possible, preserve original emails, attachments, files and metadata rather than maintaining only printed copies or screenshots.
If the employee submitted a PDF, photograph or scanned invoice, preserve the exact original file.
Do not repeatedly edit, convert or resave it because doing so can affect metadata and complicate later technical examination.
The company may verify whether the restaurant, hotel, taxi company, supplier or other business identified on the document actually issued the receipt.
A denial by the purported issuer can become significant evidence.
Invoice number, transaction date, amount, payment method and customer information should be compared where legally and practically possible.
A receipt may be genuine but altered after issuance.
Where a PDF or image appears altered, technical examination may reveal editing, inconsistent fonts, overwritten amounts, metadata differences or other anomalies.
The company should preserve the original electronic file for this reason.
An employee may submit the same genuine expense more than once rather than creating a completely false receipt.
Accounting data should therefore be searched for duplicate invoice numbers, dates, amounts and vendors.
Compare claimed expenses with company credit-card statements.
If an employee received reimbursement for an expense already paid directly by the company, this may indicate double recovery.
Prepare a transaction history showing each expense claim and the amount actually reimbursed.
The criminal complaint should distinguish attempted claims from amounts that were actually paid.
Where an employee deliberately uses deceptive conduct to obtain money from the employer, fraud-related criminal provisions may become relevant depending on the precise method used.
The criminal characterization should be based on the actual conduct rather than assuming that every false expense report constitutes the same offense.
If receipts, invoices or other documents were fabricated or materially altered, offenses concerning document falsification may also require examination.
Whether a particular document qualifies as an official or private document and how it was created or used can affect the legal analysis.
The investigation should distinguish between the person who created the false document and the person who knowingly submitted or used it.
An employee does not necessarily avoid liability merely because another person physically prepared the false document.
Changing the amount, date, customer or other material information on an authentic document can create different evidentiary issues from producing an entirely fictitious receipt.
Preserve both the original issuer’s version and the employee’s submitted version where available.
An unsuccessful reimbursement attempt may still require criminal analysis depending on how far the conduct progressed and the offense involved.
The company should therefore preserve rejected expense claims as well as successful ones.
If the employee submitted false expenses over several months or years, create a chronological schedule of every suspicious transaction.
Repeated conduct may materially affect both the criminal investigation and the calculation of company loss.
Prepare an exact calculation wherever possible.
For each transaction, identify the claim date, document, amount requested, amount approved, payment date and evidence showing why the claim is allegedly false.
The employer should identify whether the misconduct is isolated or systematic.
Review the employee’s historical expense claims, approval chain, corporate card transactions and relevant accounting records.
Determine who approved the reimbursement and what supporting documentation was required.
This can reveal whether internal-control weaknesses allowed the misconduct to continue.
Repeated false invoices may involve colleagues, managers or external suppliers.
The investigation should follow evidence rather than automatically treating the matter as misconduct by a single employee.
Business communications may reveal instructions, admissions or coordination concerning false expenses.
Any review of employee communications should be conducted with appropriate consideration of privacy, data-protection and employment-law requirements.
Business-related messages may be relevant depending on how they were obtained and the circumstances of the case.
The company should preserve original devices or exports where appropriate instead of relying solely on isolated screenshots.
A foreign employer should not assume that suspicion of fraud permits unrestricted access to every aspect of an employee’s private life.
Evidence collection should remain proportionate and legally defensible.
Where the available evidence indicates criminal conduct, the company can evaluate filing a complaint with the competent Turkish prosecution authorities.
The complaint should present a structured factual chronology and supporting evidence rather than simply accuse the employee of “stealing money.”
The file should identify the employee, employment position, expense procedure, suspicious claims, allegedly false documents, payments made, company loss and available supporting evidence.
The employer can also identify evidence that may need to be obtained from third parties during the investigation.
Depending on the case, prosecutorial authorities may investigate banking records, electronic evidence, witnesses, invoice issuers and other relevant sources through lawful criminal-procedure mechanisms.
Where document authenticity or digital manipulation is disputed, expert examination may become important.
The employer should preserve originals so that meaningful examination remains possible.
The answer depends on ownership, workplace policies, privacy expectations and the manner in which the examination is conducted.
A company-owned device does not automatically eliminate all privacy and data-protection considerations.
If serious digital misconduct is suspected, avoid unnecessary access that could overwrite logs or metadata.
Consider preserving the relevant system or forensic copy through an appropriate process.
Criminal liability and employment termination should not be treated as identical proceedings.
The employer may need to assess whether the conduct constitutes grounds for termination under Turkish labor legislation independently of whether a prosecutor ultimately files a criminal case.
Not necessarily. Employment-law decisions and criminal proceedings operate under different legal standards and procedures.
However, the employer should ensure that the factual basis for termination is properly documented.
Where the employer intends to rely on misconduct for termination, applicable employment-law procedural and timing requirements should be reviewed promptly.
Waiting unnecessarily while conducting an uncontrolled investigation can create separate employment disputes.
Depending on the employment-law circumstances, obtaining the employee’s explanation may be relevant.
The employer should plan the timing carefully so that evidence is preserved before the employee is confronted.
Managers should not threaten, physically restrain or unlawfully pressure the employee to sign a confession.
A coerced statement can create additional legal problems and undermine the reliability of the investigation.
If the employee offers to repay the money, document the proposal carefully.
Repayment may affect the financial dispute but does not necessarily erase every potential criminal consequence.
Potentially. The employer may pursue appropriate civil, employment or criminal-procedure mechanisms for recovery depending on the facts.
The company should document the exact financial loss and preserve proof of every payment.
Repayment should not automatically be assumed to terminate a criminal investigation.
Its legal effect depends on the offense, procedural stage and other circumstances.
Where substantial company losses are involved and there is a genuine risk of asset dissipation, available civil or criminal-procedure mechanisms for protecting recovery should be evaluated.
Such measures require an appropriate legal basis and should not be requested merely as pressure against the employee.
Where reimbursements were ultimately funded by a foreign parent or regional headquarters, preserve intercompany accounting records showing how the loss was borne.
This can be important when identifying the injured legal entity.
A multinational group should determine which company actually employed the individual and which entity paid or suffered the disputed expense.
Corporate-group relationships should be explained clearly in the complaint.
Foreign companies pursuing proceedings in Turkey should ensure that corporate authorization and representation documents are prepared correctly.
Corporate restructuring, changes of directors and foreign-language documentation should be addressed before they delay urgent action.
Departure from Turkey does not necessarily eliminate potential criminal liability.
The procedural consequences depend on the investigation, alleged offense, available evidence and the person’s status.
Preserve company-controlled evidence immediately after suspicion arises.
If there is a specific risk that relevant evidence may be destroyed or concealed, the company should inform its lawyer so that lawful procedural options can be evaluated.
Investigate whether the supplier knowingly participated.
A genuine business may have issued an invoice for a transaction that never occurred, or an employee of the supplier may have assisted in creating false documentation.
Do not accuse the supplier publicly before the evidence is established.
False expense documents may have affected corporate accounting or tax records.
The company should coordinate the criminal investigation with appropriate accounting and tax review so that inaccurate records are identified and corrected through lawful procedures where necessary.
Correcting an accounting entry does not mean the underlying false receipt should be deleted.
Preserve the original disputed material as evidence.
A useful investigation file should show when the expense was submitted, who approved it, when payment occurred, when the irregularity was discovered, what verification was performed and what subsequent actions were taken.
Limit information about the investigation to personnel who genuinely need access.
Unnecessary internal accusations can create workplace, privacy and reputational problems.
Until the matter is legally established, corporate communications should use careful factual language.
Statements should focus on suspected irregularities or alleged misconduct rather than presenting disputed allegations as proven criminal facts.
A fraud investigation should also identify how the internal control failed.
Consider approval limits, duplicate detection, electronic invoice verification, corporate-card reconciliation and independent review for high-value expenses.
A global compliance policy may not fully address Turkish criminal procedure, employment law and data-protection requirements.
Foreign employers should therefore adapt internal investigation procedures to local legal requirements.
When a company discovers suspected fake expense receipts in Turkey, it should immediately preserve the original documents and digital files, suspend unnecessary alteration of relevant systems, calculate the suspected loss transaction by transaction, verify receipts with issuers where appropriate, review historical claims, identify possible accomplices, preserve accounting and payment records, evaluate employment measures, determine whether a criminal complaint should be filed and protect potential recovery claims.
Not every incorrect expense report is criminal. Intent, deception, the nature of the document and the surrounding facts must be examined.
Yes, where the evidence supports suspected criminal conduct, the company can evaluate filing a complaint with the competent prosecution authorities.
Usually, evidence should first be secured. Premature confrontation can create a risk that electronic or documentary evidence is lost.
Yes. Digital examination may help determine whether a document was manipulated, particularly where the original electronic file has been preserved.
Potentially, but workplace monitoring, privacy, data-protection and evidence-law considerations should be assessed before conducting a broad examination.
Potentially, depending on the established facts and applicable employment-law requirements. Criminal proceedings and employment termination are separate legal questions.
Not necessarily. The employer should assess its employment-law rights based on the available evidence and applicable procedure.
Not automatically. The effect of repayment depends on the alleged offense and procedural circumstances.
Potential recovery depends on the nature of the loss, causation, available contractual or statutory remedies and supporting evidence.
Preserve the original evidence before confronting the employee. Fake-expense cases are often won or lost on the company’s ability to connect the disputed document to the employee, prove that it was false or altered, demonstrate intentional use and establish exactly how much money the company paid because of it.
Employee expense fraud can create overlapping criminal, employment, compensation, digital-evidence, accounting and corporate-compliance issues. Fırat Fesih Kaya Law Office assists foreign-owned companies and international employers facing suspected internal fraud and employee misconduct in Turkey. Lawyer Fırat Fesih Kaya provides legal assistance with evidence preservation, internal investigations, criminal complaints, employee statements, document and digital-evidence disputes, employment termination strategy and recovery of corporate losses.
Phone:
+90 312 434 22 22
Mobile:
+90 532 769 22 22
Email:
info@firatfesihkaya.av.tr
Address:
Mevlana Boulevard No:221, Yıldırım Tower, Office No:148
06520 Balgat, Çankaya, Ankara, Turkey