Corporate travel approved by chat message — and why it fails at audit time
200-person professional services firm · London
Their travel policy permitted business class for flights over 8 hours. An employee booked business class, London to New York — 7h 20m. His manager replied "👍" on WhatsApp. The trip happened. The expense was filed. Finance queried it at quarter-end. Nobody could produce the policy version in effect at booking time. Nobody could prove the fare was benchmarked. The approval was on a personal device, in a private chat, unrecoverable.
This wasn't fraud. It was a governance gap.
