A report is not a finding
An internal allegation about an unusual payment in a Kuwait business needs careful handling. Record when it arrived, who raised it and which facts are known, without presenting a suspicion as established misconduct. Limit discussion to those who need to act; a premature message can harm people and the integrity of the review. Open a dated issue log with the original wording of the concern, the initial recipients and any documents attached. Use neutral labels for people and payments until the evidence supports a conclusion.
Preserve records before interviews
Keep original contracts, approvals, invoices, bank records, messages and access logs. Record who obtains copies and why. Do not ask staff to “clean up” files or agree on a shared story. Scope collection to the concern so unrelated private material is not unnecessarily copied into an investigation folder. Preserve the original file and its source, record the collection date and avoid silent edits to metadata. If a system may overwrite logs, determine the retention window promptly. Access to preserved material should be logged and limited.
Set independent roles
Identify who reviews facts, who makes decisions and who steps aside because of a conflict. Someone who approved the questioned payment should not be the sole reviewer. Plan interviews and access to personnel data with confidentiality and employment duties in mind. Keep evidence that might disprove the concern, not only material that supports it. Give each interviewer a defined scope, keep separate notes of what the witness remembers and what documents show, and offer a way to correct factual mistakes in the record. Handle a conflicted decision-maker's recusal explicitly rather than informally.
Compare payment with actual service
A surprising amount may reflect changed scope, an error or something more serious. Read the approval, invoice, work delivered and correspondence together, documenting each plausible explanation and its proof. Do not backdate approvals to make the trail look tidy. Seek Kuwait-qualified advice on current reporting or other duties before any external accusation or statement. Reconcile the purchase order, contract, invoice, recipient account, delivery evidence and any scope changes. A payment made to a different entity or account warrants a documented explanation; it is not itself proof of improper conduct.
Document conclusion and control repair separately
The record should say what was examined, what remains uncertain, who decided next steps and who may see the result. A control can need fixing even when wrongdoing is not established. Revise approval or vendor checks prospectively while leaving original evidence intact. Test a later transaction to see whether the new control works. A conclusion should state the evidential basis and limits of the review. Record whether a separate employment, regulatory or recovery decision is needed and who is authorized to make it. Keep the control-fix plan separate so a process weakness is not mistaken for a finding against an individual.
First-day review list
- Record the allegation as received, without rewriting it as fact.
- Preserve source records and confirm whether any logs have short retention.
- Assign a reviewer who did not approve the questioned transaction.
- Compare the payment, authority, recipient and delivered work before drawing a conclusion.
- Take Kuwait-specific advice before external reporting or public comment.
For related work, see our white-collar and anti-corruption practice and compliance practice.