You revoked their email, not their company card
By Rajith Shaji, Co-Founder and CEO of Volopay
Want to hear a six-word horror story? Former employee, still approving your invoices.
A typical offboarding runs smoothly, with email cut off within the hour and Slack closed by evening. The laptop usually comes back before the farewell cake is finished. However, in many Indian organisations, spending authority follows a completely separate path because finance owns different systems, workflows, and access records.
Former employees retaining enough authority to approve financial activity sounds extreme, but the CAG has already documented it.
In its 2025 audit of United India Insurance Company, 39 retired-employee credentials generated 196 approval requests across intermediaries, discounts, claims, and related activity. Two additional retired-user credentials were also used for five claim approvals.
Corporate cards create another version of the same exposure. A 2025 Canadian government audit found 5% of deactivated acquisition cards remained open for more than 30 days after...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
