Most boards prepare for financial trouble that comes from the outside: a lost grant, a market dip, a surprise repair. Far fewer prepare for trouble that comes from the inside, especially when the person in question is the executive director, the finance director, or another trusted leader.
When a staff member steps forward to say that a leader may have misused funds, falsified records, or steered a contract to a friend, the board is no longer a passive overseer. It becomes the last line of defense. How the board responds in the first 72 hours often matters more than what actually happened, because it signals whether the organization takes stewardship seriously.
This is not about assuming guilt. Most reports turn out to be misunderstandings, incomplete pictures, or honest errors. But every report deserves a disciplined process, because the board cannot know which kind it has until it looks.
Why This Lands on the Board, Not the ED
Normally, an employee complaint runs up the chain to management, and the executive director handles it. That chain breaks the moment the person accused is the executive director or someone the ED supervises and might protect.
In those cases, the conflict of interest is obvious. The board (usually through the chair or the audit or finance committee) has to take the report directly, because no one below the leader can investigate the leader impartially.
This is exactly why your whistleblower policy should name a board-level contact, not just an internal one. If it doesn't, fix that now, before you need it.
The First 72 Hours: Contain, Don't Conclude
Speed matters, but so does restraint. The goal in the first days is to preserve information and protect the reporter, not to decide the outcome.
- Acknowledge the report promptly and thank the person who raised it. Tell them retaliation is prohibited and will be taken seriously.
- Say little, promise a process. Do not tell the reporter what you think happened or share the allegation with people who don't need to know.
- Preserve records immediately. Financial systems, emails, bank access, and physical files should be secured so nothing can be altered or deleted.
- Assess access. If the accused controls funds or accounting systems, consider limiting that access while the review proceeds. This is a protective step, not a punishment.
- Loop in the chair and the right committee. The full board usually does not need every detail yet, but leadership must be activated.
Resist two opposite temptations: doing nothing because you can't believe it, and confronting the accused before you understand the facts. Both damage the eventual outcome.
Deciding Who Investigates
The board must not investigate as a committee of well-meaning amateurs, and it must not let the accused pick the investigator.
Ask three questions:
- How serious and how credible is the allegation? A vague concern about a sloppy expense report is different from a specific claim of forged checks.
- Is anyone on the board too close to the accused to be objective? Recuse them.
- Do we need outside expertise? For anything involving possible theft, fraud, or a leader with financial control, bring in an independent professional: a forensic accountant, an employment attorney, or both.
For smaller matters, a designated board member or committee, supported by the organization's auditor, may be enough. When in doubt, spend the money on independence. An investigation that looks captured is worse than no investigation at all.
Protecting the Reporter (and the Accused)
Two people need protection in this process, and the board owes fairness to both.
The reporter is protected by federal and state whistleblower law and by your own policy. Retaliation, whether firing, demotion, freezing out, or subtle punishment, exposes the organization to serious legal risk and destroys trust. Watch for it actively; it often comes from allies of the accused, not the board.
The accused is entitled to due process. Being named in a report is not proof of anything. Keep the circle of knowledge small, avoid drawing conclusions in writing before the facts are in, and give the person a genuine opportunity to respond once the review reaches that stage. If the allegation proves unfounded, you want to be able to say the process was fair.
What the Board Actually Controls
The board's authority is real but bounded. It generally controls:
- Personnel decisions about the executive director, including administrative leave, discipline, or termination.
- Engaging outside investigators, auditors, and counsel.
- Access to funds, accounts, and signing authority.
- Whether and when to report to authorities, including law enforcement, the state attorney general, and (for material issues) the IRS.
- Communication to staff, funders, and the public if the matter becomes known.
The board does not run the day-to-day investigation, interview witnesses casually, or negotiate side deals to make the problem quiet. Quiet settlements that hide misconduct can themselves become the scandal.
When It's Real: Acting Without Flinching
If the investigation substantiates wrongdoing, the board's job is to act cleanly and document why.
- Take appropriate personnel action based on findings, with counsel's guidance.
- Recover funds where possible, and evaluate insurance claims under any fidelity bond or crime coverage.
- Report as required. Certain thefts and diversions of charitable assets must be disclosed, including on the Form 990, and some states require notice to the attorney general. Don't guess; ask counsel.
- Fix the hole that allowed it. Almost every internal fraud traces back to weak controls: one person with unchecked authority, no separation of duties, no independent review of statements. Close those gaps.
- Debrief the board. What did you miss? What should the dashboard, the audit, or the treasurer's review have caught?
When It's Not: Closing the Loop Fairly
If the review clears the accused, say so clearly to the people who need to know, restore any access that was limited, and thank everyone for cooperating. Reaffirm to the reporter that raising a concern in good faith was the right thing to do, even though it did not pan out. That message keeps your reporting culture alive for the next time, when it might be real.
Prevention Is a Governance Job
The best time to handle financial wrongdoing is before it happens. Boards that rarely face these crises tend to share a few habits:
- A whistleblower policy with a named board-level contact, communicated to all staff.
- Separation of financial duties, so no single person can both spend and reconcile.
- Independent eyes on the numbers, whether an annual audit, a review, or a treasurer who actually reads the bank statements.
- A board culture where hard questions are welcome, not treated as disloyalty.
The Takeaway
When a staff member reports possible financial wrongdoing by a leader, the board's duty of care goes from theoretical to urgent. Move quickly to protect the reporter and preserve records, but slowly to reach conclusions. Get independent help when a leader with financial control is involved, follow a fair process for everyone, and be willing to act if the facts require it. Handle it well, and you protect not just the money, but the trust the whole organization runs on.