Detecting embezzlement