Unmasking Labor Fraud: Due Diligence Against Unscrupulous Training and Service Providers

An email arrives from a union training provider you’ve used for years, asking to pay for 200 hours of ‘compliance upskilling’ your staff never attended. The invoice references a legitimate course code and bears the correct ABN. Only the hours—and the amount—are fabricated.

Standard controls falter here because the service leaves no physical trace. You can’t count pallets or scan barcodes for ‘training delivery’ the way you would for steel or software licences. This intangibility opens the door to inflated or phantom invoicing, a persistent weakness in labour-oriented sectors where proof of work is inherently harder to verify.

You approve the payment because the paperwork checks out. The ABN is valid, the course code exists on the provider’s website, and the hourly rate matches what you paid last quarter. No one questions why 200 hours of training appeared overnight or why staff calendars show no sessions booked. The fraud isn’t in the documentation — it’s in the assumption that the service was delivered.

This vulnerability is amplified in the training and union sector where services are inherently intangible. Unlike goods that can be receipted, scanned, or stored, training hours leave no audit trail unless attendance is rigorously captured and retained. Standard three-way matching — purchase order, goods receipt, invoice — collapses when there is no goods receipt to match. Controls designed for tangible supply chains fail when the commodity is time, expertise, or compliance accreditation.

The Illusion of Compliance: Mapping Labor Service Fraud Mechanisms

The red flag isn’t always a changed bank account or a misspelled supplier name. In training and union sector fraud, it’s often buried in the service agreement itself: a consultancy fee marked up 300% above market rate for “compliance advice” that delivers no tangible output, or a block of training hours invoiced at senior trainer rates while junior staff deliver the content. These structures are designed to obscure the true cost of labour, exploiting the intangibility of the service to inflate billing without triggering standard price-check controls.

Genuine industry rates for accredited training providers in Australia typically range from $80 to $150 per hour for face-to-face delivery, depending on qualification level and sector. Fraudulent invoices frequently exceed $300 per hour by bundling non-billable activities — such as internal administration, travel time claimed as billable, or generic “strategic advice” — into the training line item. The mechanism relies on vague service descriptions that prevent AP teams from comparing like-for-like, turning compliance documentation into a tool for obfuscation rather than verification.

Another common mechanism involves splitting a single service across multiple invoices from related entities to evade approval thresholds. For example, a $15,000 training package might be billed as three separate $5,000 invoices from three different but commonly owned providers, each staying just below the $10,000 delegation limit. This exploits fragmented oversight and makes pattern recognition harder in manual processes. The fraud mechanism relies on the perception of legitimacy through formal separation, while the underlying service delivery remains unchanged or non-existent.

Required verification here includes mapping beneficial ownership across suppliers using ABN Lookup or ASIC Connect to identify common directors or addresses, and applying aggregation rules to invoices submitted within a short timeframe for the same project or cost centre. Without this, organisations remain vulnerable to structured abuse that appears compliant on a transaction-by-transaction basis but violates the spirit of internal controls.

Red flags often hide in plain sight within service agreements, particularly where payment structures deliberately obscure true cost. For instance, a provider might charge $300 per hour for "compliance advisory" when the actual delivery involves a junior administrator performing routine data entry at a market rate closer to $60 per hour. The inflated rate is justified by vague terminology and the absence of detailed deliverables, making it difficult to discern whether payment reflects genuine expertise or merely repackaged overhead. This mechanism exploits the intangible nature of the service — there is no physical good to receive, no shipment to track — allowing discrepancies to persist undetected until financial analysis reveals a pattern of excessive billing relative to outcomes.

Another common tactic involves billing for activities that are inherently non-billable under the agreement, such as internal meetings, travel time, or general "project management" that lacks a defined scope or measurable output. Genuine industry rates for accredited training providers in Australia typically range from $150 to $250 per hour for qualified facilitators, depending on certification and sector specialisation. Charges significantly above this band, especially when tied to undefined deliverables or lacking third-party validation, warrant scrutiny. The fraud persists not because controls are absent, but because they are applied to the invoice alone, without verifying whether the service described was actually rendered, let alone at the claimed value.

Beyond the Invoice: Verifying Proof-of-Work in Training Services

Checking the supplier’s ASIC registration or matching the bank account to a past payment does not confirm that the training session occurred. Proof-of-work requires tangible evidence of delivery: signed attendance sheets with participant names and IDs, timed facilitator logs, or post-training assessment results tied to specific individuals. Without this, you are merely reconciling payments to invoices — a process that validates paperwork, not performance.

Under Section 180 of the Corporations Act 2001, directors and officers must exercise due care and diligence. Knowingly authorising payment for services that were not rendered — or for which no verifiable proof of delivery exists — can constitute a breach of this duty, particularly if the payment results from reckless indifference to obvious red flags. Liability extends beyond repayment of funds; it may include civil penalties for failing to prevent the loss through inadequate oversight of the payment process.

Consider a scenario where a registered training organisation invoices for 200 hours of 'workplace safety consultancy' delivered to a manufacturing client. The invoice matches the PO, the ABN checks out, and the payment is processed. Yet no attendance records exist for the named facilitator, no participant feedback forms were collected, and the client’s site logs show no contractor inductions conducted during the billed period. Paying this invoice without proof-of-work verification means you are accepting the supplier’s word that the service occurred — a position that leaves you exposed if ASIC later investigates the transaction as part of a broader inquiry into false or misleading statements under Section 1041H of the Corporations Act 2001.

The liability risk intensifies when the service is intangible and difficult to audit after the fact. Unlike goods, where a receipt or delivery docket provides objective proof, training hours rely entirely on contemporaneous documentation created during delivery. If that documentation is absent or fabricated, reversing the payment becomes legally and practically complex, especially if funds have already been disbursed to subcontractors or used to cover operational costs. Robust proof-of-work controls shift the burden back to the supplier to demonstrate delivery, protecting your organisation from becoming an unwitting conduit for inflated or phantom billing.

Consider a scenario where a union-affiliated training provider invoices for 200 hours of workplace safety facilitation across three sites. The invoice is approved based on a signed timesheet from a site supervisor — yet cross-referencing with access logs reveals the named facilitator never swiped into any location during the billing period. The timesheet, while internally authorised, holds no evidentiary weight if it cannot be corroborated by independent, tamper-resistant data such as GPS-tagged attendance, biometric sign-ins, or timestamped participant assessments.

This is where proof-of-work transcends procedural checkboxes. Requiring suppliers to submit verifiable delivery evidence — such as LMS completion records with unique participant IDs, authenticated feedback surveys tied to specific sessions, or geofenced check-in data — transforms invoice validation from a trust-based exercise into a forensic one. Bank reconciliation confirms money left your account; it does not confirm value entered the organisation. Under Section 180 of the Corporations Act, directors who fail to implement reasonable systems to detect such discrepancies may be found negligent if a payment for non-delivered services is later deemed reckless or dishonest.

Without such verification, organisations risk becoming conduits for fraud. Paying for training that never occurred isn't just a financial loss; it can constitute recklessness under Section 180 of the Corporations Act if directors ignore clear gaps between invoiced services and verifiable delivery. Liability arises not from the fraud itself, but from the failure to implement reasonable systems to detect it — especially when red flags like unsupported timesheets or missing participant data are present in the approval workflow.

The solution isn't more paperwork; it's smarter evidence. Mandate that suppliers provide tamper-resistant proof aligned to the service: LMS logs showing individual completion, geofenced attendance for on-site sessions, or post-training assessments linked to specific invoices. Only when payment is contingent on independently verifiable delivery does the process shift from trusting paperwork to validating performance — closing the gap that labour-service fraud exploits.

Uncommon Insights

Standard due diligence stops at the supplier on the invoice. But in labour-service fraud, the risk often lives one layer deeper: in the network of associated entities that share directors, addresses, or ABNs with the billing party. A provider billing for union training may be a shell for an entity previously sanctioned by the Fair Work Ombudsman for sham contracting, or linked to a director disqualified under ASIC bans for phoenix activity.

Intelligence platforms now allow procurement teams to map these connections automatically — triggering alerts when an adverse media mention surfaces for any related party, not just the named supplier. This shifts the focus from verifying a single invoice to assessing the integrity of the entire business structure behind it, exposing risks that basic ABN checks or bank detail validation would miss entirely.

Uncommon Insights

Intelligence platforms now allow procurement teams to map these connections automatically — triggering alerts when an adverse media mention surfaces for any related party, not just the named supplier. This shifts the focus from verifying a single invoice to assessing the integrity of the entire business structure behind it, exposing risks that basic ABN checks or bank detail validation would miss entirely.

For example, a training provider may bill under a clean ABN while sharing a director with an entity recently cited by the Fair Work Ombudsman for underpaying apprenticeship wages or falsifying training records. Automated network analysis can flag such links by cross-referencing ASIC director registers, ABN relationships, and adverse media feeds in real time — turning passive due diligence into an active surveillance loop that surfaces regulatory risk before payment is authorised.

Uncommon Insights

Intelligence platforms now allow procurement teams to map these connections automatically — triggering alerts when an adverse media mention surfaces for any related party, not just the named supplier. This shifts the focus from verifying a single invoice to assessing the integrity of the entire business structure behind it, exposing risks that basic ABN checks or bank detail validation would miss entirely.

For example, a training provider may bill under a clean ABN while sharing a director with an entity recently cited by the Fair Work Ombudsman for underpaying apprenticeship wages or falsifying training records. Automated network analysis can flag such links by cross-referencing ASIC director registers, ABN relationships, and adverse media feeds in real time — turning passive due diligence into an active surveillance loop that surfaces regulatory risk before payment is authorised.

Beyond director links, shared business addresses or ABN sponsorships can reveal shell structures used to isolate liability. A provider might operate from a virtual office shared with multiple entities flagged for phoenix activity or unlawful termination claims. Intelligence tools that cluster entities by registered office, phone number, or email domain expose these co-location risks, which often precede invoice fraud by months as bad actors establish clean fronts for illicit billing.

These network patterns often emerge months before fraudulent invoicing begins, as bad actors establish clean ABNs to mask illicit activity. Tracking adverse media across the entity web — not just the billing party — surfaces early warnings: a director’s involvement in a Fair Work Ombudsman prosecution for sham contracting, or an associated entity’s ASIC-enforced undertaking for falsifying vocational training records. Such signals rarely appear on the invoice itself but are critical inputs for risk scoring.

Proactive threat mapping transforms supplier management from a periodic checkpoint into a continuous intelligence function. By linking ASIC director/address data, ABN sponsorship chains, and real-time adverse media feeds, accounts payable gains visibility into the operational reality behind the service claim — turning abstract compliance into actionable payment prevention.

Uncommon Insights

Standard supplier checks stop at verifying an ABN and bank account — a fatal gap when the service being paid for is training hours rather than steel beams. A provider can hold current ASIC registration and deliver a plausible invoice while having delivered zero actual training, relying on the intangibility of the service to evade detection. This is where basic compliance ends and real risk begins.

Due diligence must extend to the provider’s operational footprint: how long have they been delivering training in this specific sector? Do they hold current accreditation from the relevant industry body (e.g., Australian Skills Quality Authority for VET), and has it ever been suspended or conditioned? Have complaints been lodged with Fair Work Ombudsman or Training Services NSW regarding sham contracting or misrepresentation of qualifications? These historical signals predict future risk far better than a clean bank account verification.

This historical lens exposes patterns that a snapshot compliance check misses. A provider might have operated under three different ABNs in as many years, each time dissolving after a spike in complaints about non-delivered courses, only to reappear under a new entity with identical directors. Tracking these corporate successions requires checking ASIC’s historical extract for director and address overlaps, not just the current register.

The 5-point audit checklist for training provider invoices moves beyond payment details: (1) Verify the specific training item against a pre-approved scope of work signed by the requesting department; (2) Confirm attendee lists or completion records exist and match the billed hours; (3) Check the provider’s accreditation status is current and unconditional on the ASQA register; (4) Search for adverse findings in Fair Work Ombudsman or state training authority databases related to the provider’s name or key personnel; (5) Ensure the invoice aligns with contracted rates, flagging any markup on ‘consultancy’ or ‘materials’ that lacks a corresponding deliverable in the scope.

Operational history reveals what a clean accreditation certificate cannot: whether the provider has a track record of delivering as promised. A provider might hold current ASQA registration while consistently under-delivering contact hours, relying on the lag between invoicing and client verification to mask the gap. Checking past performance through client references or audited delivery reports from similar contracts exposes this pattern before payment is made.

Adverse findings from bodies like the Fair Work Ombudsman or state training authorities often surface long before accreditation is withdrawn. A provider flagged for underpaying trainers or misrepresenting course outcomes may still be legally registered but poses a reputational and compliance risk if engaged. Cross-referencing the provider’s name and key personnel against these databases catches risks that financial checks alone will miss.

This operational lens transforms accreditation from a static badge into a dynamic performance metric. A provider may satisfy ASQA’s minimum standards today while having a history of delivering only 70% of contracted hours across previous contracts — a pattern visible only through longitudinal client feedback or audited delivery logs. Relying solely on current registration ignores the behavioural risk embedded in their delivery model.

Adverse findings from the Fair Work Ombudsman or state training authorities frequently precede formal accreditation action. A provider under investigation for wage underpayment or misrepresenting qualification outcomes remains legally operable but carries significant compliance exposure. Engaging such a supplier risks implicating your organisation in indirect liability under Fair Work Act provisions, particularly if due diligence fails to uncover known patterns of non-compliance.

The final layer of validation sits within the invoice itself: does the claimed service align with the contracted scope and rate structure? Inflated line items labelled ‘consultancy’, ‘materials’, or ‘admin support’ require scrutiny — especially when no corresponding deliverable, attendance record, or trainer roster substantiates the charge. This five-point check — accreditation currency, operational history, regulatory standing, scope alignment, and rate integrity — forms a defensible audit trail that moves beyond payment verification to service assurance.

Key Takeaways

Labour fraud in training and union services thrives where proof of delivery is assumed rather than verified. Standard controls fail because the service — training hours, compliance advice, consultancy — leaves no physical receipt. Payment is often authorised on trust, not evidence, creating a gap that inflated or phantom invoices exploit consistently.

A tiered risk-scoring model must treat this sector as inherently high-risk due to the intangibility of the service and the prevalence of complex subcontractor chains. Scoring should weight factors like adverse regulatory history, ownership opacity, and reliance on vague service descriptors in contracts — not just financial stability or ASIC registration.

Action begins with tightening the verification loop at point of payment. Require suppliers to submit trainer attendance logs, session outlines, or completion certificates matched to invoice line items before release — not as an audit afterthought, but as a gate condition in your ERP workflow. For union training providers, cross-check claimed hours against registered training organisation (RTO) scope and ensure any subcontracted delivery is pre-approved and invoiced transparently.

Second, embed random, unannounced service verification into your procurement rhythm. Select a sample of paid invoices each quarter and request raw delivery evidence directly from the purported recipient — the employee who supposedly attended the training or the site where compliance advice was rendered. This breaks the collusion risk inherent in relying solely on supplier-provided documentation.

Finally, institutionalise the consequence. Build a clause into every master services agreement that permits immediate suspension of payments and recovery of overpayments if proof-of-work cannot be produced within five business days of request — shifting the burden of proof firmly onto the supplier. This isn't punitive; it aligns incentives, making fraud computationally expensive to attempt while preserving the commercial relationship for legitimate providers who can readily demonstrate delivery.

Implement a tiered risk-scoring model where labour and union service providers are automatically flagged as high-risk due to the intangible nature of deliverables and historical fraud prevalence in the sector.

Require that all new supplier onboarding in this category includes mandatory verification of RTO scope, subcontractor approvals, and proof-of-work clauses before the first invoice is processed.

Establish a quarterly review cycle for high-risk suppliers that triggers re-verification of accreditation status, adverse media checks, and random sampling of service delivery evidence.

• Automate risk tiering in your ERP: Use supplier master data to auto-assign labour/union trainers to a high-risk tier requiring enhanced controls.
• Mandate proof-of-work at onboarding: Make delivery verification a gate condition, not an audit afterthought, for all intangible service contracts.
• Institutionalise consequence clauses: Embed payment suspension and recovery rights in MSAs for failure to produce service evidence within five business days.