Why managers see it first

Most workplace misconduct doesn't announce itself. It surfaces in small inconsistencies — a missing receipt, a colleague who suddenly stops contributing in meetings, a timesheet that doesn't quite add up. Managers are usually closest to these signals, yet many have never been shown what to do with them. Training managers to recognise warning signs isn't about turning them into investigators. It's about helping them notice, record and pass on concerns quickly, so that a properly independent investigation can decide what, if anything, has happened.

The warning signs worth knowing

Warning signs fall into broad categories. None is proof on its own, and several may have innocent explanations. The point is to notice patterns rather than isolated incidents.

• Behavioural shifts: a normally engaged employee becoming withdrawn, defensive or unusually secretive; sudden reluctance to take leave or hand over tasks; irritability when asked routine questions.
• Financial red flags: expenses submitted without receipts, claims just under an approval threshold, duplicate invoices, unexplained supplier relationships, or a manager who insists on handling a particular vendor personally.
• Process irregularities: bypassing procurement steps, approving their own requests, missing audit trails, or records that are amended after the fact.
• People signals: team members who avoid a particular colleague, unexplained tension, or a pattern of grievances and exit interviews pointing in the same direction.
• Data and security: accessing systems outside normal hours, downloading unusual volumes of information, or sharing credentials.

Encourage managers to think in terms of clusters. One odd expense is noise; three in a quarter, alongside a reluctance to take annual leave, deserves a closer look.

What good recognition training looks like

Recognition is a skill, not a personality trait, and it improves with practice. Effective training moves beyond a slide deck of policies and gives managers realistic scenarios to work through. Case studies drawn from the organisation's own sector — anonymised and carefully chosen — help managers test their judgement in a safe space.

Good training also sets clear boundaries. Managers should understand that their role is to observe and report, not to interview colleagues, search desks or draw conclusions. Making that distinction explicit protects both the manager and the integrity of any later investigation. It also reassures managers who worry that raising a concern means accusing someone of wrongdoing.

Documenting concerns properly

Contemporaneous notes are worth their weight in gold. Encourage managers to record what they saw or heard, when and where, and who else was present — as soon as possible after the event. Memories fade, and details that seem trivial at the time often turn out to matter.

Train managers to separate fact from interpretation. "Jordan submitted an expense claim for £480 on 14 March with no receipt" is factual. "Jordan is clearly fiddling their expenses" is a conclusion. The first is useful evidence; the second can undermine a case and expose the organisation to challenge. Ask managers to avoid loaded language, keep notes secure and confidential, and never amend a record retrospectively — a dated addendum is always better than a quiet edit.

Escalating promptly without prejudging

Speed matters. Concerns left to simmer can allow evidence to disappear, harm to continue, or the issue to become common knowledge before anyone has had a chance to assess it. Managers need a clear, simple route to escalate — a named contact in HR, a compliance lead, or a confidential reporting line — and confidence that using it won't reflect badly on them.

Just as important is the mindset they bring. Escalating a concern is not the same as making a finding. A report should trigger an assessment and, if warranted, a fair and independent investigation that gathers evidence from all sides. Managers should be reminded that the outcome is not theirs to determine, and that premature judgement — sharing suspicions with the team, treating someone differently, or discussing the matter in corridors — can prejudice the process and damage working relationships.

Building confidence over time

Training isn't a one-off. Brief refreshers, regular reminders about the escalation route, and visible senior support all help managers act when it counts. Where managers see concerns handled professionally — acknowledged, assessed and resolved — trust grows, and reporting rates rise for the right reasons.

The goal is a workforce where noticing something and saying something feels like ordinary good management, not an act of disloyalty. Get that right, and your investigations start from a stronger position: better evidence, earlier intervention, and a fairer process for everyone involved.