CORAA
University · Payroll audit

Payroll Register Anomaly Finder.

Paste one month of the payroll register with the previous month's gross pay. The tool looks for repeated employee IDs, bank accounts shared by two employees, repeated names, zero pay and pay that moved by more than the limit you set. Flags are leads to inquire into, not conclusions.

Register and tests

Paste from Excel or CSV. Columns are found by header names; if a name is not recognised the default position above is used.

Set the limit from your client's pay cycle. A bonus month or an increment month will move many records. Remove personal data you do not need before pasting; nothing leaves your browser.

Flagged employees
Employees read7
Employees flagged7
Total current gross2,70,000.00
Current gross of flagged employees2,70,000.00
Same name as another employee4
Bank account shared with another employee3
Employee ID appears more than once2
Bank account missing1
Zero or negative pay1
Pay moved more than the limit1
Emp IDNameBank accountPreviousCurrentFlags
E002Sunita Rao91802004567155,000.0055,000.00Employee ID appears more than once; Bank account shared with another employee; Same name as another employee
E002Sunita Rao91802004567155,000.0055,000.00Employee ID appears more than once; Bank account shared with another employee; Same name as another employee
E006Tarun Gupta0.000.00Bank account missing; Zero or negative pay
E001Ravi Kumar50100234567842,000.0042,000.00Same name as another employee
E003Anil Shah91802004567130,000.0030,000.00Bank account shared with another employee
E004Meera Joshi60200345678938,000.0061,000.00Pay moved more than the limit
E005Ravi Kumar70100456789027,000.0027,000.00Same name as another employee

Ghost employees show up in the data before they show up in a story.

A payroll that pays someone who does not work there rarely looks odd in the totals. It looks odd in the detail: an ID used twice, two employees paid into one account, a pay figure that jumped for no stated reason. Run the tests on the register, then trace each flagged record to the appointment letter, attendance and the person who approved the change.

Payroll compliance calendarHire-to-retire audit workbook

How the tests work

Employee IDs, bank account numbers and cleaned names are counted across the register. Any value that appears more than once is flagged on every record that carries it.

For pay movement, the current gross is compared with the previous gross. A record is flagged when the change, as a percent of the previous figure, is larger than the limit you enter. Records with no previous pay are not tested for movement.

Zero or negative pay and a missing bank account are flagged separately. All figures are read exactly as pasted.

Worked example — one account, two employees

Two employees in different departments are paid into the same bank account, and one record moved from 38,000 to 61,000.

Inputs
EmployeesSunita Rao and Anil Shah
Pay movement limit20 percent
Output
Shared accountBoth records flagged
Meera Joshi pay change60.5 percent, flagged
A shared account can be a family member or a data entry error. A large rise needs an approved increment or an arrears explanation. Both are prompts to ask, not findings.

Common mistakes

Treating a shared account as a ghost employee
Spouses and dependants can legitimately share an account. Ask for the explanation and the approval.
Testing one month in isolation
A one-month register cannot show a ghost who was added and removed in the same year. Test several months.
Ignoring leavers
Include employees who left during the year. Pay after the exit date is a separate test on dates.

Frequently asked questions

What columns does the pasted data need?+
A header row, then employee ID, name, bank account, department, previous gross and current gross. Other orders work if the header names contain words such as ID, name, bank, previous or current.
Does it check statutory deductions?+
No. It looks only at identity and pay movement. Check current statutory rules separately.
Is my data uploaded?+
No. Everything is processed in your browser.

Authoritative sources

ICAI — SA 240, The Auditor's Responsibilities Relating to Fraud — Fraud risk and data analytics. Check the current text.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
Hire-to-retire audit workbook →Vendor master data test filter →Payroll compliance calendar →
Share this tool
Last reviewed: 2026-10-17 · For informational purposes only — not professional advice.