ACFE Insights Blog

Swipe, Smile, Scam: How Your Popcorn Bill May Be Funding Fraud

Based on firsthand experience by the author, this blog exposes a likely case of cash larceny, skimming and fraudulent billing.

By Anuj  Choudhary, CFE, CA, CISA June 2025 Duration: 7-minute read
Please sign in to save this to your favorites.

Movie theatres have long been associated with entertainment, leisure and quality family time. A visit to a multiplex is often about more than just the film; it is about the experience. However, beneath the layers of buttered popcorn and fizzy drinks could lie a scheme so well-orchestrated that it goes unnoticed, not only by customers but also by management. 

What follows is one encounter at a movie theater involving questionable practices, which the author then provides details on, including controls and best practices that may be ignored in these types of fast-paced business environments.

The Initial Transaction

The server asked me to pay INR 910 — INR 400 for the nachos and INR 510 for the soda — and I gave him my card to collect the payment. The server was unable to post the sale in the system, which appeared to be for a nachos combo, which included a large popcorn, nachos and large drink, totaling INR 1190. The combo was showing up on the register as having the payment split, raising my suspicion. I followed up with the server, stating that I did not order the combo, to which he replied that it was someone else’s bill. The server then called another server over, who proceeded to change the initial nachos and large drink for INR 910 to the nachos combo for INR 1190, adding that partial payment was made in cash for INR 280 and charged my card for the remaining balance of INR 910.

My instincts flagged the transaction as suspicious, but before I could probe further, the food was handed over. I was hurriedly asked to share my mobile number since the print bill system wasn’t functioning. I complied, providing my number with an expectation that the digital bill would follow shortly. At that point, I was still optimistic and moved on. But as the movie resumed, the receipt never arrived. By the time the credits rolled, I had a growing discomfort about the entire interaction.

Post-Screening Investigation

Post-screening, I revisited the counter and requested the bill again. This time, I spoke with the on-duty manager, who checked the system and asked me for the timestamp of payment, which was available in the SMS for payment. The manager confirmed a payment of INR 910 via card. He also confirmed that the remaining portion of the combo — roughly INR 280, the cost difference of popcorn in the combo — was marked as settled via cash. I had never made any cash payment. 

I requested a copy of the invoice, to which he said that the reprint is not feasible. I then asked him to allow me to take photograph of the billing system. He refused.

I told him I had only ordered and collected the nachos and soda, so why have I been billed for popcorn as well? Rather than surprised, he was afraid. Then, I asked him to share the copy of CCTV footage. He refused to share it, but I asked him to review it and verify what I had purchased.

He checked the footage and returned and said, “Sir you are right, you have not taken the popcorn, but the bill is posted and adjusted with split payments for a combo.”

I requested him to call his manager so that I could speak to him, but he said he would look into this and would come back with a proper justification within two days, for which he even took my mobile number.

I then asked for a full refund per the multiplex’s policy; if the invoice is not provided at the time of purchase, then the food is on the multiplex. He simply took out INR 910 from the cash register and gave it to me with an assurance that he would come back to me with justification.

The Suspected Fraud Mechanism 

Thinking like a fraud examiner, I identified a potential modus of fraud via asset misappropriation through a combination of cash larceny and skimming. Let’s define what these terms are:

Cash larceny is a scheme in which an incoming payment is stolen after it has been recorded on the organization’s books.

Skimming is a scheme in which an incoming payment is stolen from an organization before it is recorded on the organization’s books.

In the suspected scheme, INR 290 is stolen per transaction by:

  • Misrepresenting the sale of popcorn as a combo sale (cash larceny).
  • Reselling the same as an a la carte item to another customer (skimming).

Let’s examine the anatomy of what appears to be a classic cash larceny scheme — a sub-category of asset misappropriation, as defined by the Association of Certified Fraud Examiners (ACFE).

Combo Pricing Arbitrage: A popcorn tub alone costs around INR 570. However, in a combo, it is effectively priced at INR 280–300 due to bundled discounts.

Unauthorized Adjustments: When a customer requests only two out of three combo items, the server bills them under the combo but does not give the third item. He charges the full amount via card and marks the remaining combo value as paid in cash, a payment never actually made.

Pocketing the Difference: The server does not hand over the unclaimed popcorn to the customer. Instead, he uses the popcorn later for another cash-paying customer, accepts INR 570 and pockets the difference of INR 290 as unrecorded income. The popcorn is already falsely billed in the earlier combo, creating a double gain opportunity.

Receipt Suppression: Customers are often not issued bills or receive them only after follow-ups, ensuring minimal evidence trails.

This scheme not only defrauds the customer by charging for items not received but also defrauds the employer by skimming cash revenue and suppressing billing records.

The Three Weaknesses

Such frauds typically exploit weaknesses, lapsing internal controls and leading to system failure.

  • Lack of Rotational Duties of Supervisor: Despite having multiple outlets, there are little to no rotations in the supervisors’ duties. This is one of the factors that leads to development of a strong collusion between the supervisor and frontline team.
  • Manual Overrides and Combo Flexibility: Systems allowing split-mode payments and combo-to-standalone adjustments enable concealment.
  • Non-Mandatory Bill Issuance: Customers often do not ask for a receipt, especially when they are carrying snacks during an intermission.

Reconciliation between combo versus à la carte sales is not stringently tracked in many POS systems. This lack of visibility fuels continued leakage.

The Psychology Behind the Fraud

This fraud works because it targets three human actions:

  • Trust in Uniformed Staff: Customers rarely doubt that cinema employees can get involved in any kind of fraudulent schemes.
  • Rush and Need: Normally, the intermission is in such a small time frame that customers rush to get the food quickly before the film resumes.
  • Bill Indifference: Customers rarely ask for receipts at food counters in multiplexes.

These behavioral signals are manipulated expertly to conduct fraud without resistance.

Ethics in Customer Experience: Compromising Customers Trust

In addition to financial losses, such actions compromise customer morale. When a brand lacks transparency, whether intentionally or unintentionally, it undermines consumer confidence. If a customer receives neither an invoice nor a detailed breakdown of charges, it raises concerns regarding:

  • The integrity of delivery service.
  • Potential misuse of personal data (such as sharing mobile numbers under false pretenses).
  • The company's culture of accountability.

Recommendations for Management:

  • Require all invoices to automatically have the payment breakup that shows the cash and other modes with amounts.
  • Utilize AI to analyze sales on a real-time basis wherein the unusual splits between card and cash are flagged.
  • Rotation of duties of supervisors if there are multiple outlets in the city.
  • Separate containers for combo and a la carte orders, and day-end reconciliation by an evening auditor of the sales register with count of containers that were liquidated.
  • Review camera footage of billing counters for transactions marked as “combo,” but visibly showing only two items handed over.
  • Combo adjustments should require a supervisor override and a detailed check during audits.
  • Regular audit of transaction logs vs. item movement in inventory by utilizing the audit trail.
  • Encourage internal staff to flag such practices anonymously.
  • Surprise audits and mystery shopping should be encouraged, by way of random checks to ensure compliance and discourage unethical behavior.

Advice to the Customers:

  • Never leave the counter without a bill. If they say the printer is not working, request a digital copy immediately. If it is not delivered within minutes, raise it with the duty manager.
  • If you paid by card, ensure the entire amount is reflected as such in the invoice. If the invoice shows “cash” or “split payment” but you did not tender cash, demand a correction.
  • If something feels wrong, escalate immediately. Ask for the store manager or file a formal complaint with corporate leadership.

Disclaimer: Please note that this article is written in a personal capacity and does not reflect the views or affiliations of any organizations the author is associated with.

Topic:
Tags: