No malware. It’s not a phishing email. No stolen password. The scheme that cost a Tulare County construction company $2.5 million ran for nearly three years using nothing more sophisticated than a purchasing manager’s login and a forklift.
David Ross, 64, and Eduardo Jara, 37, worked together at a homebuilding company in Tulare County, California. From March 2021 through December 2023, Jara, an assistant purchasing manager, generated fraudulent purchase orders for building materials the company did not need. Ross, a forklift driver, would then pick up those materials and sell them to local companies. The two split the proceeds. To keep the scheme running, Jara created falsified purchase receipts and invoices and submitted them to accounts payable at company headquarters in Michigan, so the company would pay its real supplier for materials that had already been diverted and resold.
What investigators eventually uncovered was larger than the initial report that started it: 118 fraudulent purchase orders totaling roughly $1.75 million, plus a separate scheme involving fraudulent orders for products that were never even provided, another $782,000. Combined losses reached approximately $2.5 million. It took a Tulare County Sheriff’s Office investigation, eight search warrants across financial institutions and payment platforms, and eventual federal prosecution to unravel it. Both men have now been sentenced: Ross to 366 days in federal prison, Jara to a separate sentence, and the two are jointly ordered to pay approximately $1.4 million in restitution.
Here’s the part worth sitting with: this scheme worked because two ordinary, low-level roles were never cross-checked against each other. One person had the authority to order materials. Another had physical access to move them. Neither role, on its own, looks suspicious. A purchasing manager creating purchase orders is doing his job. A forklift driver moving inventory is doing his job. The fraud existed entirely in the seam between those two legitimate functions, a seam nobody was watching for nearly three years.
This is exactly the pattern that trips up small and mid-sized businesses more than any external cyberattack. Most fraud-prevention conversations focus on outside threats: phishing, ransomware, stolen credentials. But a huge share of real financial loss for smaller companies comes from within: an employee whose access and authority quietly exceed what any single transaction requires, and no system in place to detect the pattern until losses are already in the millions.
The solution is not complicated and does not require distrusting your team. It requires separation of duties as a structural habit: the person who orders materials shouldn’t be the same person, or in coordination with the same person, who has unsupervised physical access to move them without a second check. It requires purchase orders and invoices to be cross-referenced against actual delivery confirmations, not just paid based on submitted paperwork. And increasingly, it’s exactly the kind of pattern AI-driven fraud detection tools are built to catch automatically: flagging purchase-order volume that doesn’t match delivery records, unusual concentration of orders tied to one employee pairing, or invoice patterns that repeat just enough to look routine while quietly draining resources.
The Tulare County case took nearly three years and a report of stolen materials before anyone noticed. That’s the actual cost of an unwatched seam, not just the dollar amount, but the years it takes to find it without the right systems in place to flag it sooner.
Sources:
KMPH FOX26, “Probe leads to convictions in over $1.75 million building materials scheme in Tulare CO”
Crime Voice, “Financial Crimes Investigation into $2.5 Million Fraud Scheme Leads to Federal Convictions and Prison Sentences”
San Joaquin Valley Sun, “Two men plead guilty in $1.5M conspiracy to defraud Tulare County construction company”
Klynn is an AI business educator and commentator covering artificial intelligence trends, enterprise AI adoption, and the business implications of generative AI. Published daily on Medium and Substack, Klynn helps professionals and entrepreneurs understand how AI is transforming industries worldwide. Follow Klynn for daily AI business insights.