The Back Hallway

Every hotel has a back hallway. You've probably walked past it a hundred times without thinking much about it. But I've spent thirty-plus years in this business, and the back hallway is the first thing I look at when I walk into any property. It tells me everything I need to know in about thirty seconds.

This chapter is about a hotel whose back hallway was telling a story nobody was reading — except for one twenty-three-year-old accountant three weeks into her first job. She had no seniority, no political capital, and no reason to stick her neck out. She did it anyway, because she'd actually read the manual.

What followed was a $1.4 million fraud discovery, two careers ended, and a lesson about purchasing and accounts payable that I wish every GM and controller in this business would sit with for a while.

Here's the story.

Every time I walk into a hotel I look at the same thing first. Not the lobby. Not the front desk. Not the breakfast spread or the carpet in the elevator landing. I look at the back hallway. The one that runs from the receiving dock past the engineer's shop and the housekeeping office and the dry storage room. You can tell more about a hotel in thirty seconds in that hallway than you can in a thirty-minute tour of the public space. Boxes stacked neatly on a clean floor with delivery slips taped to the side, that's a hotel that knows what it ordered and what it got. A pile of unmarked boxes shoved against a wall, an open door to a maintenance shop with parts and tools heaped on a workbench and no log in sight, that's a hotel whose owners are one bad year away from a phone call they would rather not get.

This is a story about a hotel whose back hallway told the truth, and a young woman who was new enough to actually look at it.

Fourteen stories, midtown Midwest, downtown business district, the kind of property that had been the best room in the city in 1996 and was still pretending it was the best room in the city in 2018. Wood paneling in the lobby, gold-leaf signage on the front, two restaurants nobody under fifty went to anymore, and a room rate that was actually better twenty years ago than it was the day this story starts. You know this hotel. There are many of them in this country and most of them have a chief engineer named Big Ed, or a Tony, or a Don. Mine had a Big Ed.

Big Ed had been at the property since 1992. He started in the boiler room, worked his way up to chief, and by the time my story begins he was sixty-one years old and ran every vendor relationship in his department like he had built the building himself. The carpet supplier, the elevator service, the HVAC parts, the boiler maintenance, the pool chemicals, the locksmith, the painters, the small contractors he called for "anything urgent." He had relationships in that town going back thirty years. The GM, a man I will call Mitchell, who had been there since 2009, considered Big Ed a national asset. "Ed has saved this hotel a million dollars over the years," he said at the all-team meeting every December when he handed Big Ed his Christmas bonus. He was off by about two million dollars in the wrong direction.

Two of the vendors on the approved list were companies controlled by Big Ed's family. Midwest Mechanical Services was his younger brother. Premier HVAC Supply was his brother-in-law. Both companies were real. Both companies did real work and supplied real parts. Both W-9s on file were complete and current. There was nothing on paper that would have flagged anything as wrong, except for one thing the manual would have caught if anyone had used it. Neither company had ever appeared on a Conflict of Interest disclosure, and neither one had ever been shopped against a comparable vendor in twelve years.

Their pricing was twenty to thirty percent above market. Sometimes more.

The way the scheme worked was simple, which is how the long-running ones always work. Big Ed would identify a need. He would write the requisition. He would call his brother or his brother-in-law for a quote. The quote would come back. Big Ed would take it to the front office, where Mitchell signed the Purchase Authorization Form without reading, because Big Ed was Big Ed. The order would go in. The goods or the service would arrive. Big Ed would receive them. Big Ed would sign the Receiving Log. Big Ed would code the invoice and send it to AP. AP would three-way match the invoice to the PO and the receiving record, and of course they all matched, because the same person had touched all three. Mitchell would sign the check. The check would clear. Sometimes a small percentage of the difference between what the work cost and what the property paid would find its way back to Big Ed in cash on a Sunday morning at his brother's house. Sometimes it stayed inside the family business as profit, and Big Ed enjoyed a steady stream of family loyalty and the occasional free contracting job at his own home.

Twelve years of this. Compounded by inflation. Compounded by the size of the property's engineering budget, which ran around $850,000 a year. The forensic accountant who eventually counted it landed at a working estimate of $1.4 million in excess pricing across the period, although the precise number was always going to be soft because there is no perfect accounting for what the work would have cost from somebody else.

The reason the property had not caught it was not because the controls were missing. The Vendor Application was on file. The W-9 was on file. The PO Register was tidy. The Receiving Log was filled out. The Invoice Approval Checklist had a checkmark in every box. The three-way match was completed every time. The trouble was that the manual said receiving should not be done by the same person who placed the order whenever staffing allows, and the property had quietly decided it could not allow it because nobody else knew what an evaporator coil was. The Conflict of Interest disclosure the manual asks for was a form Mitchell had never printed, never circulated, and never signed.

I want to tell you about Natalia.

Natalia was twenty-three years old and three weeks into her first job out of college. She was an entry-level accountant in the property's small back office. She had been hired because the assistant controller had quit suddenly, and the corporate office had pushed for a fresh hire to be brought in directly from the local university rather than promoting from within. She came in on day one with a folder corporate had given her during onboarding. Inside the folder were several sections of a manual. She had read all of them in the airport on the way in. She was the kind of new hire who actually reads the manual.

In her second week she was assigned to help with the monthly close. Part of her job was to file vendor invoices. She noticed how often Midwest Mechanical and Premier HVAC came up. She noticed the pricing on a small repair to a hallway sconce was eight hundred and fifty dollars and that the parts cost one hundred and twelve. That seemed like a lot of labor for a sconce. So she did what new accountants in their first month sometimes do. She called another property in the same flag in a city about three hours away and asked the assistant controller there what they paid for the same kind of work. The number she heard back was less than half.

She did not run upstairs. She did not write an email. She wrote down what she had heard, with the date and the name of the person she had spoken to, and put the note in the same folder corporate had given her. Then she pulled three more invoices from the same vendor and called two more sister properties. The pattern held. After a week of doing this on her own time, in the evenings, she went to her boss. The controller told her she was new, that pricing varied by city, and that Big Ed knew what he was doing. He told her, and I am going to give him the benefit of the doubt that he meant well, to focus on her job.

Natalia waited a week. Then she emailed the owner directly. The email was three paragraphs long and did not accuse anyone of anything. It listed numbers. It attached the notes. It asked a single question. "Could you help me understand whether what I am seeing is normal?"

The owner did what good owners do. He read it twice. Then he picked up the phone.

A forensic accountant was inside the property within two weeks. Big Ed was placed on administrative leave on a Wednesday. Mitchell was let go on a Friday. The findings took eleven months to fully document. A civil suit was filed. The property recovered about $400,000 over five years through a settlement and an insurance claim. Big Ed retired earlier than he wanted to. His brother and his brother-in-law lost the property's business and a fair amount of their reputation in that town. Mitchell, by the way, was not accused of anything criminal. He was let go for the simpler reason that he had let it happen. That is sometimes worse for a career than being charged with something, and a lot harder to explain at the next interview.

Natalia was promoted to assistant controller six months later. The first thing she did in the new job was pull the Approved Vendor List and shop every category against three competing quotes. She rewrote the receiving procedures so that goods received by engineering were spot-checked weekly by someone outside the department, even when staffing was tight. She implemented the Conflict of Interest disclosure the manual had always called for, and the first round of disclosures revealed two more relationships nobody had known about, neither one bad, but both worth knowing. She added the Vendor Statement Reconciliation Worksheet to the monthly close as a hard requirement. And she ran the Internal Control Review on Section Three twice in her first year, once in March and once in November. The March review flagged eight things. The November review flagged two. That is what progress looks like.

Here is what I want you to take from this story.

Section Three is the section in the manual that quietly protects more of your money than any other. The Vendor Application and W-9 protect you from paying somebody you shouldn't be paying. The Approved Vendor List, properly shopped and properly refreshed, protects you from paying too much to somebody you should be paying. The Purchase Authorization Form and the Purchase Order build a paper trail that an honest team uses without thinking and a dishonest team cannot get around. The Receiving Log and the Delivery Discrepancy Report make it impossible to pay for boxes that never arrived. The Invoice Approval Checklist, the three-way match it calls for, and the Vendor Statement Reconciliation Worksheet that backs it up — those three together close almost every door a creative employee or a friendly vendor might try to pry open. The Conflict of Interest disclosure that good operators add even when the manual does not yet require it closes the last door, the one Big Ed walked through every Friday for twelve years.

And the vendor banking-change verification step, the one that says no banking update is made on an email or phone request alone, that is the policy that is going to save you in the next ten years from a kind of fraud that didn't even exist when Big Ed started. Read it twice.

Mitchell is not in this business anymore. Big Ed is in Florida. Natalia is a controller at a much bigger property now. The hotel is still open, and the owner I never named to you tells me, every time I see him, that the best money he ever spent was the airfare he paid to fly Natalia in from her hometown on the day she was hired.

The back hallway in that hotel is still the cleanest one I have ever walked through. You can tell.

About This Book and the Manual Behind It

Hotel Franchisees' Guide to Everyday Internal Controls is a companion to the Hotel Financial Coach Finance & Accounting Policies Manual — twenty sections, one hundred and forty-four numbered policies, and roughly fifty supporting forms, all built on USALI, U.S. GAAP, and the COSO internal control framework.

The manual is the working document. The book is the way you actually understand it — one chapter per section, one true story per chapter, each one walking through what goes wrong at a real property when the controls in that section are missing. Cash. Accounts receivable. Payroll. Night audit. PCI. Brand compliance. All twenty.

The operating arm of the manual is the Internal Control Review — a twelve-month rotating self-audit that puts every section on a calendar and keeps it there. The First Hundred Days Implementation Checklist gets your property from day one to the start of your first ICR rotation, in five phases, with a signed artifact at every milestone.

The central idea is simple: most of what goes wrong at a hotel goes wrong because nobody was looking at a calendar. The manual is the calendar made permanent. The ICR is the calendar made annual. The book is the calendar made memorable.

If any of this sounds like your property, send me an email. I'm happy to point you in the right direction.