Tracing a Bookkeeper's Diversions Through Six Accounts

The situation

Layla had built her group of franchised restaurant locations over almost a decade, starting with one site and adding three more as the business grew. Somewhere along the way, the bookkeeping had become more than she could manage herself, so she hired Alejandro, who came recommended by another franchise owner and had handled payroll, supplier payments, and monthly reconciliations for small hospitality businesses for years. He worked independently, billed by the hour, and had full access to the group's banking and accounting software across all four locations.

For most of that time, nothing seemed wrong. Margins in the restaurant business are thin and variable by design — food costs swing with suppliers, staffing costs swing with the season, and Layla had learned not to panic over a soft month here or there. It was only when she brought in an outside accountant to prepare financing documents for a fifth location that the numbers stopped adding up. Reported supplier payments for one location were consistently higher than what the actual suppliers, contacted directly, confirmed receiving. The gap was not enormous in any single month, which is exactly why it had gone unnoticed for so long, but added up across several years it came to a serious sum.

What the review found

Layla retained Treadstone Law once the outside accountant's findings made clear this was not a bookkeeping error but a pattern. Civil fraud in Ontario has a specific legal shape: a claimant has to show a false representation was made, that the person making it knew it was false or was reckless as to whether it was true, that it was intended to be acted on, and that the claimant relied on it and suffered a loss as a result. Suspicion is not enough to get a court to act — the evidence has to trace the money.

Treadstone's team worked with a forensic accountant to reconstruct the payment history across all four locations. The pattern that emerged was methodical rather than opportunistic. Alejandro had been creating supplier invoices in the accounting system that mirrored real suppliers closely enough not to draw attention — same supplier names, slightly altered payment details — and routing the payments to accounts he controlled rather than the actual suppliers. He then adjusted the reconciliation reports each month so the numbers matched what Layla expected to see, meaning the fraud was self-concealing by design rather than something a routine review would catch.

Tracing where the money went mattered as much as proving it had been taken. Ontario law allows a claimant to trace misappropriated funds through a chain of transactions — following money as it moves from one account into another, even through several intermediate stops, so long as the trail can be reconstructed and the funds (or property bought with them) can still be identified at the end of it. In this file, the diverted payments moved through two intermediate accounts before landing in accounts and investments that could be tied back to Alejandro. That chain was the difference between a claim resting on Layla's word against his and a claim resting on a documented, bank-record trail a court could follow.

Altogether, the reconstruction identified roughly $1,150,000 diverted over the relevant period, spread unevenly across the four locations and concentrated more heavily in the two years before the fraud was discovered.

What we did

1. Engaged a forensic accountant before filing anything. A civil fraud claim lives or dies on the paper trail. Treadstone's team worked with the accountant to build a transaction-by-transaction reconstruction before drafting a claim, so the allegations in the statement of claim were backed by specific dates, amounts, and account records rather than a general sense that something was wrong.
2. Brought a claim in the Superior Court for civil fraud, breach of fiduciary duty, and an accounting. Because Alejandro had been given trusted, independent control over the company's finances, the claim also alleged breach of fiduciary duty — a higher standard than an ordinary contract dispute, but one that opened up broader remedies once the underlying facts were established.
3. Sought a Mareva injunction to freeze the traced assets. This is a court order restraining a defendant from moving, hiding, or dissipating assets before a case can be resolved, available only where there is a real risk the assets will disappear before judgment. Given how deliberately Alejandro had concealed the diversions for years, Treadstone argued the risk of dissipation was concrete, not theoretical, and the court agreed to freeze the identified accounts pending trial.
4. Used the freeze to bring Alejandro to the table. Once his ability to move or spend the traced funds was cut off, continuing to litigate the full claim to trial offered him little upside. Settlement discussions opened within a few months of the freezing order, rather than the case running its full course.
5. Negotiated a consent judgment secured against the frozen assets. Rather than accepting a payment plan resting on Alejandro's future income, Treadstone pushed for the judgment to be satisfied directly out of the assets already traced and frozen, since a court order against someone with no remaining assets is only a piece of paper.

The outcome

The case resolved by consent judgment roughly a year after the claim was filed, rather than proceeding to a full trial. Layla recovered approximately $980,000 of the roughly $1,150,000 traced, paid directly out of the frozen accounts and liquidated investments once the judgment was entered. The remaining shortfall of about $170,000 reflected funds that had already been spent by the time the fraud was discovered and could not be traced to any remaining asset — money that had gone toward day-to-day living expenses rather than anything Treadstone's team could locate and recover.

Litigation of this kind is expensive and slow by nature, and Layla's case moved faster than most civil fraud claims largely because the freezing order changed the incentives early. Cases where a defendant's assets are never located, or are moved offshore before a freeze can be obtained, often end in a judgment that is legally sound but practically worthless — a piece of paper confirming a wrong occurred, with nothing left to collect against. Layla's result depended on the tracing work happening quickly enough, and thoroughly enough, to catch the assets before they moved further.

Layla also changed how the business handles its finances going forward: a second person now reviews and approves supplier payments above a set threshold, bank statements are reconciled by someone outside the bookkeeping function, and no single person holds unsupervised control over both entering transactions and approving them. None of those changes would have stopped a determined fraud on day one, but together they close the specific gap Alejandro had operated in for years — one person with full access and no one checking the reconciliations against the underlying bank records.

What you can learn from this