The case of the Phantom Cleaner

By Barry Williams, founder of SeeMySite, from 25 years of visiting cleaning companies · November 2, 2026

If you’ve been in the cleaning industry long enough, then in all likelihood you’ve either heard of the Phantom Cleaner or met one face to face. If you haven’t, let’s dive in.

The Phantom Cleaner doesn’t come dressed in a cape and a mask, with a super mop in hand. Nothing as complicated as a vacuum that turns into the equivalent of a Swiss Army knife and can clean everything.

This particular Phantom is the figment of someone’s imagination: a creation that sits on a spreadsheet somewhere, and has become part of a contract that may be residing under a layer of manila folders on a desk, hiding in plain sight. They are a Phantom because they exist as a worker assigned to a schedule and part of a crew, but they never actually pick up a mop or a sponge, other than in cyberspace, where there is no need for their services. All they have to do is exist as a name and a bank account number.

If you’re a smaller company with just a few workers, this probably won’t bother you. You know these people directly, and you’re likely in personal contact with them every day, so it’s pretty difficult to fake. But once your business starts to scale and middle management appears, you open yourself to opportunities that some people will take advantage of.

Nobody likes to think that the people they work with are ripping them off, and it isn’t a pleasant place from which to do business. But over the years I’ve met several business owners who have suffered this “leakage” from their margins, and who wondered how they could have recognized it earlier, or been better prepared with systems that identified this sort of activity.

How does it work?

In quoting for new business, it’s a case of “sizing” the job to fit the opportunity. Let’s say a contract manager is invited to quote a commercial building. (No, I’m not having a go at contract managers. I’m simply describing instances of what I’ve come across over the years.) It looks like a job for four cleaners. It’s a big building with multiple floors and a mix of offices and production facilities, so it’s a great contract to have.

Now add one more cleaner, and the four become five. The manager makes sure that the fifth cleaner, “John Doe”, submits whatever paperwork the HR process requires, including a friendly Social Security number (perhaps belonging to a family member or an associate) and a bank account. And that fifth person goes on the payroll.

“It’s not possible,” I hear you say. It is entirely possible, and it depends on the checks and balances your company has in place. The losses can add up to significant amounts over the life of an established contract, and yes, I have seen it happen, in one case over a few years. Its discovery ended, understandably, in the termination of the manager’s employment and an appearance in court on fraud charges, but not before the business had lost many thousands of dollars.

How common is it?

Nobody publishes a “Phantom Cleaner rate”. But fraud researchers do count payroll fraud, and there are real cleaning-industry cases on record.

What the research says

• The Association of Certified Fraud Examiners (ACFE) studied 2,402 real fraud cases from 143 countries for its latest report, Occupational Fraud 2026. Its fraud examiners estimate that organizations lose about 5% of their revenue to fraud each year, and a typical case ran 12 months before it was caught (ACFE press release).
• 43% of the frauds were found through a tip, and more than half of those tips came from employees (same source).
• Managers committed fraud in 41% of cases, employees in another 41%, and owners or executives in 16% (same source). It is not one type of person.
• On payroll fraud specifically, PayrollOrg’s summary of the ACFE’s 2026 figures gives a median of 13 months before discovery, about $4,800 lost every month, and a median loss of around $63,000 per scheme (PayrollOrg).

Why cleaning is exposed

PayrollOrg lists the common traits of ghost employee schemes: names similar to real employees, temporary or part-time status, “employment” in a department with high turnover, few documented duties, and a remote location that avoids regular oversight. A cleaning crew ticks a lot of those boxes, and trade press says contract cleaning is particularly exposed, because hourly employees often work off site with little or no supervision.

Two real cases

A Connecticut cleaning company. Advantage Maintenance, which employs about 500 people, found that people it had paid over ten years never actually worked for it, at a cost of nearly $1 million in wages. One site was bid and budgeted for nine cleaners; the area manager had seven real employees plus two ghosts. When the owner went to the site himself, no one showed up. He estimated those two ghosts alone cost almost $250,000. The trade-press account blames a combination of paper timesheets and gaps in the hiring, payroll and management processes (CleanLink).

An airport cleaning contract in Florida. In 2019, state investigators arrested nine people over an alleged scheme to defraud an airport authority of more than $700,000 through a janitorial contract. Investigators said the site supervisor added “ghost employees” to the overnight shift to avoid suspicion, that the ghosts’ paychecks went into their own bank accounts, and that portions were passed back to the supervisor (Florida Department of Law Enforcement). These are allegations. The authority fired the contractor, and its replacement is paid by the size of the areas cleaned, not on a cost-plus basis (Marco Eagle).

A caution about these numbers

They come from cases that were investigated and reported, not from a count of every business, and there is no cleaning-specific rate. Treat them as a guide to the scale and the pattern, not a forecast for your company.

How do you spot it?

Spotting it is the hard part. (Stopping it before it starts is easier.) As a business owner, or someone in charge of managing budgets and contracts, you are left asking “Why didn’t I see that earlier?” once it’s discovered, and the simple answer is trust. You’re part of an organization that believes people are employed to do a job and are paid to do just that. You should be able to get on with doing your part, and they should do theirs. Case closed.

But really it’s “case open”: the case that holds the purse strings has a rodent chewing a small hole in it, with coins falling out, and you can’t see the hole.

Look for changes in a person’s financial situation. Clever operators seldom show instant changes in wealth (“Did you win the lottery or something? That’s a nice new car you’re driving”), but others can’t resist showing off some bling. How many old relatives leaving them something in their will can they have? The research agrees: 84% of the fraudsters in the ACFE’s 2026 study showed at least one behavioral red flag, such as financial troubles or living beyond their means (ACFE press release).

Look at who guards access. Closely guarding access to their sites or their people is another indicator. It’s hard to see inconsistencies when you don’t get to see the physical sites or people involved.

Look at the payroll itself. PayrollOrg suggests checking whether several workers’ pay goes into the same bank account or to the same address, and whether a worker has few documented duties compared with others in the same job (PayrollOrg).

A red flag is a reason to look, not proof. PayrollOrg itself points out that many anomalies have perfectly reasonable explanations, so look first and judge second.

How do you stop it?

Trust, but verify. That incredibly true statement really does apply to the Phantom Cleaner. Everybody deserves to be treated fairly and with respect, and nobody enjoys working in an environment of suspicion and mistrust. It just isn’t fun. That said, it’s unreasonable to expect a business to suffer financial loss because of the fraud of one of its people. So trust… but verify.

Verify that your people are real. Check that every employee in the company is a real, corporeal person. (Yes, they must have a pulse to participate in the business. Let’s not talk about robots here.) Mandate that all new hires go through a sign-off process, and that all payments to bank accounts are handled centrally. If more than one person is responsible for that process, hold regular random audits over the course of the year.

Visit sites at random. Site visits should be made on a random basis by someone at a senior level. Random is the key: never advertised, never scheduled… they just happen. Nothing works quicker than the grapevine. As soon as you start random visits and reviews, the opportunity to add Phantom Cleaners shrinks dramatically. And if, after adopting this practice, you see an immediate drop in payroll or payable hours in an area, it’s time to investigate.

The research backs “random”:

• In the ACFE’s 2024 report, organizations that ran surprise audits had a median loss of $75,000, against $200,000 for those that didn’t, and their frauds lasted a median of 9 months against 18 (KPM, a CPA firm, summarizing the ACFE).
• Only 42% of the victim organizations ran surprise audits, and among organizations with fewer than 100 employees, just 17% did, against 49% of larger ones (same source).
• An Australian government counter-fraud centre’s summary of the same report found surprise audits were one of four controls linked to cuts of at least 50% in both losses and duration (counter-fraud centre summary).
• PayrollOrg recommends handing out pay in person, checking photo ID, with as little advance notice as possible.
• And in the Connecticut case above, it was the owner turning up in person that exposed the ghosts.

Where verified check-ins help, and where they don’t

A schedule says someone is assigned. It doesn’t prove they turned up. Paper timesheets and rosters are exactly where a Phantom can hide, because a name on a sheet looks the same as a person on site. (The Connecticut account above blamed paper timesheets and gaps in the process.)

With a phone check-in, every paid hour is tied to a real person’s phone, a time, and a location at the site. A Phantom on the roster never checks in. So you can see, within minutes, things like:

• a worker who is scheduled and paid, but has never been on site;
• more cleaners on a site’s payroll than ever check in there;
• budgeted hours that are never actually worked, when you compare budget and actual for each site.

That’s why SeeMySite ties check-ins to a live “who’s on site” view and to budgets, and why we say: pay from verified time, not from the schedule.

It isn’t a cure-all, and I’d rather say so. A tool can’t check someone’s identity, and a determined insider could still recruit a real accomplice. What a check-in does is move the effort from “a name on a spreadsheet” to “a real person physically turning up”, which is a much higher bar, and it leaves a record. You still need sign-offs on new hires, central payment and random visits.

A quick checklist

1. Pay from verified timeNot from the schedule.
2. Sign off every new hireHave a second person confirm each new hire is real, and see real ID.
3. Pay centrallyCheck for workers who share a bank account or an address.
4. Compare the schedule with who is on siteLook into anyone who is paid but never checks in.
5. Compare budgeted hours with actual hoursContract by contract.
6. Visit sites at randomEspecially at night and on the big sites, with someone senior.
7. Give people a safe way to raise concernsTips are how 43% of frauds are found (ACFE 2026).

Summary

It’s unpleasant to think that there may be Phantom Cleaners in your business, and nobody relishes having to deal with that. But it’s better to be thorough. Have a look at your processes and see whether you can identify any areas with extraordinarily high costs. If you aren’t already, randomize some site visits, particularly late at night and on larger sites… you might just save yourself and your company some money and heartache.

No card required.

Keep reading

Sources

• Association of Certified Fraud Examiners, Occupational Fraud 2026: A Report to the Nations, press release, May 12, 2026 (link).
• PayrollOrg, “Using Analytics to Detect Fraud”, PAYTECH, August/September 2026 (link).
• CleanLink, trade press on payroll fraud in contract cleaning (link) and on a Connecticut cleaning company’s ghost employees (link).
• Florida Department of Law Enforcement, news release, December 2019 (link); Marco Eagle, January 17, 2020 (link).
• KPM, “How Surprise Audits Protect Against Fraud”, summarizing the ACFE’s 2024 report (link); an Australian government counter-fraud centre’s summary of the same report (link).