Most invoice fraud warnings describe a stranger: someone impersonating a supplier by email, asking you to send the next payment to a new bank account. A federal case that closed in Georgia this year is a reminder that the more common risk for a small company might already be on the payroll.
Two men were sentenced in April 2026 for a scheme that took more than $800,000 from a logistics company serving the Port of Savannah. Philip Charles Smith, an employee of the company, used his own access to create freight-hauling jobs that never existed and assigned them to Antonio Evans Sr., who owned a local trucking business. The company paid Evans for work that was never done, and Evans shared part of the money back with Smith. Both men pleaded guilty to wire fraud. Smith was sentenced to 27 months in prison, Evans to 13, and a federal judge ordered them to pay $821,899 in restitution between them.
Nothing here was a hack
There was no phishing email, no spoofed domain, no urgent wire request. Smith’s job was to award freight contracts to third-party carriers on the company’s behalf, and he simply used that authority to invent work and assign it to someone in on the arrangement. Every fake job looked like an ordinary vendor payment because the person creating it had every reason to be creating real ones too. The company’s own systems could not tell the difference between a job that happened and one that did not, because the same person who created the record was trusted to be right about it.
That is the entire mechanism. One person with the power to both create a job and have it paid is a single point of failure, and a single point of failure does not announce itself. It just quietly pays out, month after month, until someone finally asks the wrong question.
Three years of small numbers, not one big theft
The scheme ran from roughly July 2021 to August 2024. Nobody wired $821,899 in one transaction. That figure built up across dozens of individual freight invoices, each one small enough on its own to look unremarkable next to a company’s normal volume of vendor payments. A single large theft tends to get noticed fast, because it stands out against everything around it. A slow drip of fabricated invoices blends into the noise, most of all when the same person who created each one was also the person whose word closed it out.
The sentencing gap between the two men reflects where the actual control failure sat. Evans received payments for work that did not exist, but Smith was the one with the access to make the fake jobs look legitimate in the first place, and the longer sentence followed the greater breach of trust.
The fix is not a smarter employee, it is a second person
Separation of duties is not a complicated idea. Whoever creates a job, a client record, or an invoice should not be the same person who approves it for payment. That one rule would have forced every fabricated freight job through a second set of eyes who had no stake in it looking real, and a fabricated job rarely survives contact with someone asking what client it belongs to and where the paperwork is.
| Control | Who creates the job or invoice | Who approves payment | What happens |
|---|---|---|---|
| No separation | Same person | Same person | Fabricated work goes unchecked for years |
| Basic separation | One employee | A different employee or owner | A job with no real client gets questioned before it is paid |
| Documented audit trail | Tied to a named client and purchase order | Matched against that purchase order | Anomalies surface during routine review, not years later |
None of this requires new software or a compliance department. It requires that every invoice be checkable against a real, named job, and that the person signing off on payment is not the same person who typed the job up. A structured invoice record, one that shows who created it, for which client, and when, is what makes a scheme like this visible instead of invisible for three years.
A BillyPaid purchase order ties every invoice back to a specific, documented job before payment goes out, so a fabricated line item has to match something real or it never gets that far.