Cash, Credit and Internal Control Systems

Introduction

Cash and credit are the two principal settlement mechanisms through which a hotel converts rooms, food and beverage, events, transport, spa, and other services into recorded revenue. Because hotel transactions occur continuously, across multiple departments and shifts, the risk environment is unusually complex. A guest may consume services in several outlets, settle through cash, card, bank transfer, a corporate account, an online travel agency, or a combination of methods. The accounting system must therefore achieve two objectives simultaneously: facilitate efficient guest service and protect the completeness, accuracy, authorization, and collectability of revenue.

Internal control is not merely a finance-office procedure. It is a coordinated system involving front office, night audit, cashiering, food and beverage, sales, credit control, purchasing, information technology, security, and senior management. Effective controls reduce theft and error, prevent revenue leakage, identify irregularities promptly, and produce reliable information for decision-making. They also support compliance with tax, payment-card, employment, data-protection, and financial-reporting requirements.

This chapter examines the design and operation of controls for cash handling, credit sales, guest and city ledgers, banking, refunds, chargebacks, fraud prevention, segregation of duties, and departmental revenue assurance.

Learning Objectives

After studying this chapter, the learner should be able to:

1. Explain the relationship between cash, credit, guest ledgers, city ledgers, and hotel revenue.
2. Design control procedures for receipts, payments, banking, refunds, and chargebacks.
3. Distinguish preventive, detective, and corrective controls.
4. Apply segregation of duties and authorization principles in hotel operations.
5. Analyze revenue leakage and propose controls across hotel departments.
6. Evaluate the role of technology, audit trails, and analytics in internal control.
7. Apply these principles to an integrated hotel-control case.

1. The Hotel Settlement and Control Environment

A hotel’s transaction cycle normally follows this sequence:

service delivered → charge recorded → account classified → settlement authorized → payment collected or receivable created → reconciliation completed → exception investigated

A control environment consists of management integrity, organizational structure, competence, accountability, policies, and the attitude toward compliance. A hotel may possess an advanced property-management system (PMS), but weak supervision or collusion can still defeat its controls. Conversely, a well-designed manual control can be effective when responsibilities, evidence, and review are clear.

The principal control objectives are:

• Occurrence: recorded transactions actually occurred.
• Completeness: all services delivered and all receipts are recorded.
• Accuracy: amounts, taxes, dates, rates, and accounts are correct.
• Authorization: discounts, credits, refunds, and write-offs are approved.
• Cut-off: transactions are recorded in the correct accounting period.
• Safeguarding: cash, cards, documents, and data are protected.
• Validity and collectability: receivables are genuine and likely to be recovered.
• Traceability: every transaction can be followed from source document to ledger and bank statement.

Controls can also be classified by timing. Preventive controls stop an error or irregularity before it occurs, such as credit limits and locked cash drawers. Detective controls identify an event after it occurs, such as a daily cash count or exception report. Corrective controls resolve the problem and prevent recurrence, such as recovery of a shortfall, retraining, or system redesign. A mature system uses all three.

2. Hotel Ledgers and the Flow of Credit

2.1 Guest ledger

The guest ledger, also called the transient ledger in many hotels, records balances owed by guests who are currently staying in-house. Room charges, taxes, restaurant charges transferred to the room, telephone, laundry, minibar, and approved adjustments are posted to the guest’s folio. Payments and deposits reduce the balance.

A simplified folio relationship is:

The equation applies to an individual folio for a defined accounting period. Charges and payments must be recorded at their gross or net amounts according to the hotel’s accounting policy and applicable tax rules; taxes should not be omitted merely because they are collected on behalf of a government authority.

The front office commonly controls the guest ledger operationally, while the night auditor and finance department verify its completeness and accuracy. A guest should not normally be permitted to accumulate an unlimited balance. Credit limits may be based on room rate, length of stay, deposit, payment history, group policy, and management approval.

2.2 City ledger

The city ledger records amounts due from non-resident parties or from departed guests whose accounts are transferred for later collection. Typical accounts include approved corporate accounts, travel agents, conventions, airlines, local companies, government organizations, and credit-card settlements awaiting receipt. A departed guest’s unpaid balance should be transferred only with documented authorization and a clear collection responsibility.

The city ledger is an accounts-receivable system, not a convenient place to hide unresolved guest shortages. Each balance should have:

• an identified debtor;
• supporting folios, invoices, contracts, or vouchers;
• credit terms and an approved limit;
• an age classification;
• a collection owner;
• evidence of subsequent payment or dispute resolution.

A basic receivables reconciliation is:

This identity applies to a defined ledger and period. A write-off should never be used as an informal adjustment; it requires documented evidence of uncollectability and approval under the hotel’s authority matrix.

2.3 Credit approval and monitoring

Credit sales transfer risk from the guest to the hotel. Before granting credit, the hotel should verify the customer’s identity, legal status, billing address, authorized signatories, references, expected volume, payment history, and contractual terms. The approved credit limit should reflect both exposure and the hotel’s ability to recover the amount.

Useful monitoring measures include:

• Days sales outstanding (DSO):

DSO estimates the average number of days required to collect credit sales. It assumes that credit sales and receivables are measured consistently and that the period is representative. A sudden increase may indicate weak follow-up, disputed invoices, incorrect billing, or deliberate concealment.

• Collection rate:

The numerator and denominator must use the same population and time basis. A high collection rate may be misleading if old accounts are excluded or if credit notes are used to suppress balances.

Credit control should review an aged trial balance, normally grouped into current, 1–30 days overdue, 31–60 days, 61–90 days, and over 90 days. Aging is a decision tool, not proof of collectability. Management should consider disputes, insolvency, legal enforceability, deposits, guarantees, and subsequent receipts.

3. Cash Handling Systems

3.1 Cash-office design

Cash handling should be organized around a clearly assigned cashier, a unique cash drawer or float, secure storage, documented handovers, and independent review. A cashier must not be able to create a sale, approve a discount, receive cash, alter the transaction, and reconcile the drawer without oversight. This combination creates an unacceptable opportunity for concealment.

A standard cash cycle includes:

1. Establish a fixed opening float.
2. Issue the float to a named cashier against a signed acknowledgment.
3. Record every receipt through an authorized system or sequential receipt book.
4. Keep cash, cheques, vouchers, and card slips separately where practical.
5. Restrict voids, discounts, open checks, and transfers by role-based permission.
6. Count the drawer at shift end in the presence of the cashier and witness.
7. Compare physical contents and system totals with the expected balance.
8. Seal and transfer funds to the safe or bank according to policy.
9. Investigate differences promptly and retain evidence.

The expected cash may be expressed as:

The formula applies only to cash components. Card settlements, cheques, complimentary items, and account transfers must be reconciled separately. A shortage or overage is:

A negative result represents a shortage; a positive result represents an overage. The variance does not itself prove theft. It may arise from misclassification, change errors, duplicate posting, an unrecorded refund, or timing differences, and must be investigated.

3.2 Departmental cash controls

Front-office cashiers receive deposits, advance payments, room settlements, and foreign currency. Food-and-beverage cashiers handle point-of-sale transactions, shared checks, discounts, voids, transfers, and service charges. Spa, parking, golf, gift-shop, and banquet outlets create additional points of risk. Each outlet should have a documented cashiering policy tailored to its transactions.

Important controls include:

• sequentially numbered checks or electronic tickets;
• no deletion of a completed sale without an audit-trail entry;
• supervisor approval for voids, discounts, complimentary items, and reopened checks;
• reconciliation of covers or rooms served to recorded sales;
• control over employee meals and promotional items;
• daily comparison of PMS, POS, banquet event orders, and general-ledger postings;
• surprise cash counts by an independent employee;
• dual custody for safe access and bank deposits above a defined threshold.

Foreign currency creates exchange-rate and counterfeit risks. The hotel should publish authorized currencies and rates, record the currency received, give change in an approved currency, and reconcile foreign-currency holdings separately. The rate used must be authorized and communicated clearly to the guest.

3.3 Banking and deposits

Banking controls seek to ensure that all receipts are deposited intact, promptly, and in the entity’s bank account. “Deposited intact” means that receipts are not used informally for petty cash, personal loans, purchases, or cashing cheques before deposit unless a formally authorized process exists.

A deposit package should include a deposit slip, cashier summaries, cash count sheet, cheque listing, card settlement report, and evidence of bank acceptance. The person preparing the deposit should not be the only person verifying it. The finance department should perform a bank reconciliation by comparing the cashbook with the bank statement and investigating deposits in transit, unpresented payments, bank charges, errors, and unexplained entries.

4. Card Payments, Refunds, and Chargebacks

4.1 Card-payment controls

Card payments reduce physical cash but introduce authorization, settlement, privacy, and dispute risks. Hotels should use approved payment terminals, prohibit storage of sensitive authentication data, restrict access to card information, and comply with applicable payment-card security standards and local law. Staff should not write full card details in informal notebooks or send them through unsecured channels.

The payment amount should be confirmed before authorization, and the approved transaction should be matched to the guest folio or POS check. End-of-day terminal batches must be reconciled to system records and later to the bank statement. Unmatched transactions require investigation rather than automatic reclassification.

4.2 Refunds

A refund reverses or returns value to a guest or customer. It is a high-risk transaction because a dishonest employee may create a false refund, refund a genuine transaction to a personal card, or exploit a system cancellation.

A sound refund process requires:

• a documented reason and supporting evidence;
• verification that the original transaction exists;
• approval by an employee independent of the cashier where risk warrants;
• refund to the original payment method whenever possible;
• system linkage between the refund and original receipt;
• review of refunds by employee, shift, outlet, amount, and reason;
• escalation of repeated or unusual refunds.

Cash refunds should be exceptional, particularly for card transactions. A refund is not the same as a discount: a discount reduces the selling price before settlement, whereas a refund returns value after payment or reverses a completed settlement.

4.3 Chargebacks

A chargeback occurs when a cardholder disputes a transaction and the issuer reverses or withholds funds pending resolution. Common causes include fraud claims, duplicate billing, incorrect amount, services not received, or failure to follow authorization procedures.

Chargeback management should preserve the signed or electronically authenticated record, reservation details, registration card, folio, invoices, cancellation terms, correspondence, proof of service, and refund history. The hotel should maintain a case log showing notification date, amount, reason code, response deadline, evidence submitted, outcome, and responsible employee.

Prevention is preferable to litigation. Clear cancellation policies, accurate descriptions, secure authorization, prompt refunds, and reliable documentation reduce disputes. Management should analyze chargebacks by channel, outlet, employee, payment type, and root cause.

5. Revenue Recognition and Leakage Across Departments

Revenue leakage is value earned or expected by the hotel that is not properly recorded, billed, collected, or retained. It may result from error, poor process, system failure, unauthorized concession, collusion, or fraud. Leakage is not limited to cash theft.

Rooms division

Risks include unrecorded occupied rooms, unauthorized room moves, rate overrides, complimentary rooms, no-show manipulation, late check-out without charge, unposted minibar consumption, and misuse of house accounts. Controls include daily room-status reconciliation, independent comparison of housekeeping status with PMS status, authorization of rate changes, no-show reports, and review of complimentary and house-use rooms.

Food and beverage

Risks include unrecorded orders, deleted checks, under-ringing, shared checks, unauthorized discounts, wastage concealment, complimentary consumption, and inventory-sales mismatches. Controls include POS order sequencing, kitchen production records, cancellation logs, manager review of open checks, daily food-cost analysis, and reconciliation of covers, menu items, and revenue.

A useful analytical indicator is the relationship between expected and actual sales. For a controlled recipe item:

This is useful only when units, recipes, portion sizes, transfers, and wastage records are reliable. It identifies an exception, not necessarily theft.

Banquets and events

Event revenue leakage may arise from services delivered beyond the signed banquet event order, unbilled consumption, unauthorized upgrades, and late changes. The event order should specify guaranteed attendance, menu, beverage package, equipment, taxes, service charges, deposits, cancellation terms, and approval for additions. The final bill should be reconciled with the event manager’s consumption and signed by an authorized client representative.

Sales, reservations, and distribution channels

Travel-agent commissions, online travel agency commissions, package inclusions, promotional codes, and corporate rates can distort revenue if contract terms are not correctly configured. Controls should include approved rate codes, contract master-data review, commission reconciliation, booking-source analysis, and independent review of unusual discounts.

6. Segregation of Duties and the Three-Lines Perspective

Segregation of duties separates incompatible responsibilities. At minimum, the following functions should be distinguished where staffing permits:

In a small hotel, complete separation may be impossible. Compensating controls then become essential: owner review, daily bank reporting, surprise counts, restricted system access, external bookkeeping, and independent monthly review.

The three-lines perspective is useful. Operational departments own risks and perform first-line controls. Finance, revenue management, and risk or compliance functions provide second-line monitoring and policy support. Internal audit, where present, provides independent assurance as a third line. External auditors and regulators provide further external assurance but do not replace management’s controls.

7. Fraud Risk and Ethical Governance

Fraud risk is commonly analyzed through pressure or incentive, opportunity, and rationalization. Hotels face opportunity because transactions are numerous, staff turnover may be high, shifts are dispersed, and guests may not examine bills closely. Management must avoid assuming that fraud is committed only by junior cashiers; collusion involving supervisors, vendors, sales staff, or managers can be more difficult to detect.

A fraud-risk assessment should identify:

• valuable assets and vulnerable processes;
• points where one person can override a control;
• unusual transaction patterns;
• conflicts of interest and related parties;
• opportunities created by system privileges;
• reporting channels and protection for whistleblowers.

Ethical governance requires accurate bills, transparent fees, fair treatment of guests, confidentiality of personal information, non-retaliation for good-faith reporting, and proportionate investigation. Excessive surveillance may itself violate privacy expectations. Investigations should preserve evidence, respect due process, limit access to sensitive information, and distinguish suspicion from proof.

8. Technology, Data Analytics, and AI

Modern PMS, POS, enterprise-resource-planning systems, payment gateways, and banking platforms can strengthen control through role-based access, sequential transaction numbers, timestamps, immutable audit trails, automated credit limits, and interface reconciliations. However, automation can also scale an error or enable a user with excessive privileges to manipulate many transactions quickly.

Management should control:

• user creation, modification, and termination;
• privileged-access reviews;
• password and multifactor authentication policies;
• interface completeness between PMS, POS, payment, and general ledger;
• backup, recovery, and change management;
• master data such as rates, tax codes, accounts, and bank details.

Analytics can identify unusual voids, refunds just below approval thresholds, repeated discounts, transactions outside normal hours, negative folios, split payments, dormant accounts, rapid room changes, and high staff-specific variance. A simple exception rate is:

It is a screening measure, not a fraud probability. It must be interpreted with transaction volume, seasonality, outlet type, and legitimate business explanations.

AI may assist with anomaly detection, invoice matching, dispute classification, and forecasting. It should not autonomously accuse employees, approve high-risk refunds, or deny legitimate claims without human review. Models require representative data, documented thresholds, explainability, access controls, and periodic validation. Bias, privacy, false positives, and model drift are significant governance concerns.

9. Worked Application: Daily Revenue and Cash Reconciliation

A hotel cashier begins a shift with a cash float of 20,000 currency units. During the shift, cash receipts are 86,400 and approved cash refunds are 2,500. The physical cash counted at close is 103,600.

Expected cash is:

Therefore:

The cashier has a shortage of 300 currency units. The result should trigger investigation, not automatic accusation. The reviewer should examine receipt sequence, refund authorization, change errors, cash payouts, transfer records, and the possibility that 300 was included in a card or cheque total.

Suppose the same shift’s POS report shows total sales of 150,000, comprising cash 86,400, cards 55,000, and approved account charges 8,600. These components total 150,000. The finance reviewer then matches cash to the count sheet, cards to the terminal batch, account charges to signed supporting documents, and all components to the general-ledger posting. A reconciliation is complete only when differences are explained and evidenced.

10. Illustrative Case: The Unexplained Refund Pattern

Background. The illustrative Seaview Hotel operates three restaurants and a 180-room property. Monthly revenue appears stable, but the food-and-beverage margin has declined. The finance manager notices that one outlet has an unusually high number of refunds.

Problem. During a two-month review, the outlet records 420 refunds, 70 percent of which are below the manager-approval threshold. Several refunds are made shortly after a check is closed. The POS system permits a cashier to refund to a card without linking the refund to the original payment card.

Analysis. The internal review compares refund reports with guest complaints, table numbers, employee schedules, payment-terminal records, and CCTV access logs. It finds that many refunds lack documented guest contact and that two employees share a supervisor credential. Inventory usage is consistent with recorded sales, suggesting that the primary risk is settlement manipulation rather than unrecorded food production.

Approach and solution. Management disables shared credentials, requires individual authentication, links refunds to the original transaction and payment instrument, and raises no approval threshold without documented risk analysis. Refund reasons are standardized, daily exception reports are reviewed by the outlet manager, and weekly review is performed by finance. A sample of refunds is confirmed with guests, while investigations follow due-process requirements. Staff receive training, and the policy is communicated without prejudging individuals.

Outcome. Refund volume falls materially, unsupported transactions are recovered where appropriate, and the hotel identifies a design weakness rather than relying solely on employee discipline. The hotel also discovers that legitimate service-recovery refunds had been coded inconsistently, so the revised system improves both fraud prevention and management reporting.

Learning points. Thresholds alone are weak controls; many small transactions can create substantial exposure. Individual accountability, linkage to original transactions, independent review, data analytics, and ethical investigation must operate together. A control should reduce risk without making legitimate guest recovery impracticably slow.

11. Limitations and Contemporary Challenges

Internal control provides reasonable, not absolute, assurance. Controls can fail because of collusion, management override, human error, system outages, poor training, turnover, or cost constraints. A control that is too complex may be bypassed; one that is too rigid may encourage informal workarounds. The objective is a risk-based balance between control strength, guest experience, operating cost, and legal obligations.

Contemporary hotels must also manage contactless payments, mobile check-in, digital wallets, remote work, outsourced payroll and distribution, cybercrime, synthetic identities, and rapid changes in payment technology. Third-party contracts should specify access rights, incident notification, data retention, reconciliation, audit rights, and responsibility for chargebacks. Business continuity plans should cover payment-system failure, offline operation, duplicate posting after restoration, and emergency cash custody.

12. Best-Practice Control Architecture

A practical control architecture for a hotel includes:

1. A written authority matrix for discounts, refunds, credit, write-offs, and system access.
2. Unique user credentials and least-privilege access.
3. Daily reconciliation of cash, cards, guest ledger, city ledger, PMS, POS, bank, and general ledger.
4. Independent review of variances and exceptions.
5. Prompt and intact banking with documented chain of custody.
6. Credit approval, aging analysis, collection ownership, and impairment review.
7. Surprise counts and periodic internal audits.
8. Sequential transaction documents and preserved audit trails.
9. Staff training, rotation where appropriate, leave policies, and whistleblowing channels.
10. Periodic risk assessment after changes in technology, staffing, outlets, or payment methods.

The strongest system is not the one with the greatest number of forms. It is the one in which responsibility is clear, evidence is reliable, exceptions are visible, and management acts on what the controls reveal.

Chapter Summary

Cash, credit, guest ledgers, and city ledgers form an integrated hotel settlement system. The guest ledger records in-house balances, while the city ledger records approved receivables from departed guests and external organizations. Cash controls require fixed floats, authorized transactions, secure custody, independent counting, prompt banking, and investigation of variances. Credit controls require approval, limits, documentation, aging, collection follow-up, and assessment of collectability.

Refunds and chargebacks are high-risk processes requiring evidence, authorization, linkage to original transactions, and independent review. Revenue leakage may occur in rooms, food and beverage, banquets, reservations, sales, and distribution channels; it is identified through reconciliations, exception reporting, inventory analysis, and operational comparisons. Segregation of authorization, custody, recording, reconciliation, and review is fundamental, with compensating controls where staffing is limited.

Technology strengthens control through audit trails, access restrictions, automated limits, and analytics, but it introduces cyber, privacy, model, and system-interface risks. AI can support anomaly detection but requires human oversight and governance. Effective internal control is risk-based, ethical, evidence-driven, and continuously reviewed.

Key Terms

Cash float: Fixed amount issued to a cashier to provide change and support transactions.

Cash variance: Difference between actual cash counted and expected cash.

Chargeback: Reversal or withholding of a card transaction following a cardholder dispute.

City ledger: Ledger of receivables from departed guests and approved external customers.

Credit limit: Maximum approved exposure that may be owed by a customer.

Credit sale: Sale for which payment is received later rather than at the time of service.

Detective control: Control designed to identify an error or irregularity after it occurs.

Exception report: Report highlighting transactions or patterns outside defined expectations.

Guest ledger: Ledger of balances owed by current in-house guests.

Internal control: Policies and procedures designed to protect assets and ensure reliable operations and reporting.

Least privilege: Principle that users receive only the access necessary for their duties.

Night audit: Hotel process that closes the operating day and verifies transaction completeness and balances.

Preventive control: Control intended to stop an error or irregularity before occurrence.

Refund: Return or reversal of value after a payment or completed transaction.

Revenue leakage: Revenue earned or expected but not recorded, billed, collected, or retained correctly.

Segregation of duties: Separation of incompatible responsibilities among different individuals or roles.

Three lines: Operational ownership, monitoring and support, and independent assurance in risk governance.

Write-off: Authorized removal of an uncollectible receivable from the books.

Review Questions

Short Answer Questions

1. Distinguish between the guest ledger and the city ledger.
2. What is meant by depositing receipts intact?
3. State two preventive controls for hotel cash handling.
4. Why are refunds considered high-risk transactions?
5. Define revenue leakage and give one hotel example.

Long Answer Questions

1. Explain the complete cash-handling cycle from opening float to bank reconciliation.
2. Discuss the principles of credit approval and city-ledger control in a hotel.
3. Explain segregation of duties and propose compensating controls for a small hotel.
4. Analyze the causes of chargebacks and design a chargeback-prevention system.
5. Discuss how internal controls can reduce revenue leakage in rooms and food-and-beverage operations.

Analytical / Application Questions

1. A cashier has an opening float of 15,000, cash receipts of 72,500, and refunds of 1,200. Physical cash is 85,900. Calculate the expected cash and variance, then identify three investigative procedures.
2. A hotel’s city ledger shows rapidly increasing balances over 60 days, while reported occupancy and corporate sales remain stable. Develop an analytical investigation covering documentation, aging, collection, and possible control failure.
3. Design a control matrix for a restaurant covering order entry, discounts, voids, refunds, cash custody, inventory usage, and end-of-day reconciliation. Identify the responsible role and evidence for each control.

Multiple Choice Questions with Answers

Question 1

Which ledger normally records balances owed by guests who are currently staying in the hotel?

A. General ledger

B. Guest ledger

C. City ledger

D. Purchase ledger

Correct Answer: B. Guest ledger

Question 2

A cashier begins with 10,000, receives cash of 40,000, and pays an approved cash refund of 2,000. What is the expected cash?

A. 48,000

B. 52,000

C. 28,000

D. 42,000

Correct Answer: D. 42,000

Question 3

Which is the strongest example of segregation of duties?

A. One cashier receives, records, and reconciles cash

B. A manager approves refunds and independently reviews refund reports

C. A guest reviews the folio after departure

D. A system automatically prints a receipt

Correct Answer: B. A manager approves refunds and independently reviews refund reports

Question 4

What does a chargeback represent?

A. An approved employee discount

B. A reversal or withholding of a disputed card transaction

C. A transfer from guest ledger to city ledger

D. A bank deposit made intact

Correct Answer: B. A reversal or withholding of a disputed card transaction

Question 5

Which control is primarily preventive?

A. Reviewing yesterday’s cash variance

B. Investigating an old chargeback

C. Requiring authorization before a credit limit is granted

D. Comparing the bank statement with the cashbook

Correct Answer: C. Requiring authorization before a credit limit is granted

Question 6

If actual cash is less than expected cash, the cash variance is usually described as a:

A. Surplus

B. Shortage

C. Credit sale

D. Chargeback

Correct Answer: B. Shortage

Question 7

Which document is most directly useful for controlling banquet revenue?

A. Banquet event order

B. Employee attendance register

C. Housekeeping room report

D. Bank loan agreement

Correct Answer: A. Banquet event order

Question 8

What is the main purpose of receivables aging?

A. To calculate room occupancy

B. To classify amounts by how long they have been outstanding

C. To determine the cash float

D. To authorize all refunds

Correct Answer: B. To classify amounts by how long they have been outstanding

Question 9

Which practice creates a significant card-payment risk?

A. Reconciling terminal batches to POS totals

B. Using individual system credentials

C. Writing full card details in an unsecured notebook

D. Retaining evidence for a disputed transaction

Correct Answer: C. Writing full card details in an unsecured notebook

Question 10

A hotel records 12 exception transactions out of 600 total transactions. What is the exception rate?

A. 0.2%

B. 2%

C. 5%

D. 20%

Correct Answer: B. 2%