ACCOUNTING & BOOKKEEPING

What questions should an owner ask about a large unexplained expense balance?

Reviewed 7 min read

Quick answer

A large expense balance needs a transaction level explanation before the owner approves the accounts or assumes overspending. Ask what makes up the balance, which period each item belongs to, what evidence supports it and whether any entry is duplicated, estimated or misclassified. Compare the explanation with operational activity and supplier records. Agree the correction or follow-up needed, preserve the original evidence and check the revised report before using it for pricing, tax or cash decisions.

Start with the report and the exact question

An expense line labelled general expenses can conceal many different questions. The amount may be unusually large for this month, large relative to sales, or simply unfamiliar to the owner. Identify which problem you are investigating before requesting every receipt in the business. Ask for the report date, period, accounting basis and version, then mark the actual line and amount. A year to date balance cannot be compared directly with one month of budget.

Confirm whether the figure includes VAT, branches, departments or transactions from another business. Also check whether the report is a first draft with outstanding bookkeeping. These are not excuses for leaving the balance unexplained. They tell you what the preparer has completed and which comparisons will be meaningful. Preserve the questioned version so that a later report can be reconciled back to it.

Ask for the entries behind the total

Request the general ledger detail showing transaction date, supplier, document reference, description, amount, tax code and journal reference. Ask the preparer to group similar items rather than send a screenshot containing only the total. Separate ordinary supplier invoices from manual journals, payroll postings, bank allocations and opening balance adjustments. The evidence needed for each group differs.

Sort the list by value and look for repeated invoice numbers, round amounts, unfamiliar payees and transactions just before or after the reporting cutoff. A repeated amount alone is not proof of duplication: monthly rent may legitimately repeat. Equally, a small repeated entry can become material across many months. Reconcile the detail back to the reported total before investigating selected items; an incomplete export produces an incomplete explanation.

Use questions that distinguish causes

QuestionWhat it can revealUseful evidence
What did the business receive?Wrong account or nonbusiness spendingInvoice, order and delivery record
Which dates does the charge cover?Prepayment, accrual or cutoff issueContract and service period
Has this cost already been recorded?Duplicate invoice, bank entry or journalSupplier account and posting references
Who approved it and why?Unauthorised commitment or missing explanationPurchase approval and business purpose
Does it relate to an asset or stock?Potential classification issueAsset register or inventory records

These questions provide investigation routes, not automatic accounting answers. An expensive item is not necessarily an asset, and a payment without an invoice is not necessarily fraudulent. The preparer must assess the facts and applicable accounting and tax rules. Record uncertainty openly while documents are being recovered.

Illustrative example: a workshop maintenance spike

Consider a fictional workshop whose maintenance account shows R72,000 for one month, compared with its ordinary monthly budget of R15,000. All figures in this example exclude VAT, and the amounts are invented for explanation. The owner initially suspects that the workshop manager exceeded authority. The ledger instead contains four different causes that require different responses.

A R24,000 repair was completed and properly approved after an unexpected machine failure. A R12,000 invoice was entered twice, creating R24,000 in the account. A R18,000 annual service agreement was charged entirely to the month despite covering future periods. The remaining R6,000 is a legitimate routine repair. Together those entries explain the original R72,000.

The duplicate requires correction. The service agreement requires an assessment of the appropriate allocation across its coverage period. The emergency repair remains a real cost and may justify a maintenance planning discussion. Removing every amount above the budget would conceal that operational issue. The owner asks for a revised ledger, the journal references and an explanation of the remaining variance rather than merely requesting a lower expense total.

Separate classification from cash and tax

A reclassification can improve the expense report without returning cash to the bank. If equipment was incorrectly expensed and is properly recognised as an asset, the supplier payment still occurred. Likewise, spreading a prepaid contract over its service period changes the timing of expense recognition but does not undo the payment. Review the bank and supplier position separately before concluding that the business has saved money.

Tax treatment is another question. A business description in the ledger does not establish deductibility or support an input VAT claim. Ask which records substantiate the tax treatment and whether a correction affects a submitted return. Use the official SARS guidance and obtain advice for the actual transaction. A management reporting correction should not silently become an unreviewed tax adjustment.

Deal with missing explanations and possible irregularities

If a staff member cannot explain an entry, assign a specific evidence request with an owner and follow-up date. Ask the supplier for a duplicate document through a verified contact, compare it with delivery records and establish who initiated the purchase. Preserve the original transaction and the request trail. Do not manufacture a replacement invoice or insert an invented business purpose to make the file look complete.

If evidence suggests an unauthorised payment, altered invoice or unexpected bank account, preserve access logs and documents and escalate to the appropriate owner, accountant or legal adviser. Avoid accusing an employee solely because a ledger description is vague. Restrict further payments where your normal authority permits and verify the facts independently. The investigation should establish what happened while keeping the accounting record accurate.

Agree corrections that can be checked

Ask for a short adjustment schedule showing the original entry, proposed change, reason, supporting record, affected period and reviewer. Establish whether the accounts are still open or whether previously issued reports or returns may be affected. A journal described only as cleanup is difficult to review later. Corrections should be traceable without deleting the history that explains them.

After changes are posted, compare the revised expense total with the original. Check that the supplier balance, bank reconciliation and relevant asset or prepaid expense schedule still agree. A correction that fixes the profit report but leaves a duplicate supplier liability creates another problem. Keep unresolved items on a separate list, with their possible effect stated rather than buried inside the final total.

Check the operational explanation against volume

Ask whether the increase reflects more work, higher prices or a different mix of activity. A delivery business might spend more on vehicle repairs because it added routes, because one vehicle failed, or because old costs were posted late. Those explanations lead to different decisions. Compare kilometres, jobs completed, machine hours or another relevant operating measure with the financial movement. Avoid inventing a productivity ratio where the underlying activity record is unreliable.

Consider supplier credits and recoveries as well. A warranty reimbursement may be expected but not yet agreed; an insurance claim may cover only part of a repair. Keep the actual expense visible and ask the preparer how a potential recovery should be treated. Do not reduce the expense merely because someone hopes to recover it. Obtain the acceptance, amount and conditions before presenting a recovery as established.

Finally, ask whether the apparent increase results from a changed account mapping. Moving cleaning costs into premises expenses can create a large variance in both lines without changing total spending. A comparison should either use consistent classifications or explain the transfer. Keep that explanation alongside the report so the next reviewer does not repeat the same investigation.

Turn the finding into a better monthly review

Use the cause to decide the next control. Duplicate invoices may call for document reference checks; repeated miscoding may need clearer account descriptions; late invoices may need a better month end cutoff. A genuine cost increase may require purchasing or pricing decisions. Applying the same remedy to every large variance wastes effort and can hide the underlying issue.

For the next review, ask for actual versus budget figures, comparable prior periods and explanations for material movements. Focus on a small number of meaningful questions that the owner can resolve. Vatco’s management accounts service can help organise the financial explanation, while the monthly close checklist supports consistent source records. Bring the questioned report and ledger detail so the discussion starts with the actual entries.

Sources and review

Checked on 30 September 2026. Use the linked official guidance for current requirements and forms.

  1. SARS record keeping

    Official requirements for preserving orderly, inspectable supporting records. Practical investigation examples are editorial illustrations.

YOUR NEXT STEP

Support for Management accounts

Discuss your records and the support your business needs.

Explore Management accounts
LET’S MOVE YOUR BUSINESS FORWARD

Submit your enquiry, then create an account to follow your request.

  1. 01 Service
  2. 02 Details
  3. 03 Contact
  4. 04 Review

STEP 1 OF 4

What can we help with?

Privacy notice (opens in a new tab)