Audit methodology · 30 days

30-Day Forensic T&E Spend & TMC Invoice Audit Methodology

A forensic T&E audit reconciles what was booked, what was ticketed, what was invoiced and what was paid, line by line, against the contract. Done properly, it takes 30 days and four data sets: ARC/BSP settlement files, TMC invoice lines, hotel commission statements and corporate card feeds. Each one exposes a different leak.

This page sets out the method week by week, the fields each source must contain, the findings that are recoverable in cash, and an 18-point checklist that scores how many of those leaks your current controls can see.

Updated 6 Nov 2026 · 6 min read · Procurement Benchmarks, RFP Playbooks & Calculators

30 daysData intake to recovery report
4Data sources reconciled line by line
18Control points in the blind-spot checklist
6%–12%Typical leakage found, share of spend

The data the audit needs, and what each source reveals

A summary invoice and a TMC dashboard cannot be audited. The work needs transaction-level files covering the same 12 months, so a single trip can be traced across every system that recorded it.

SourceRequired fieldsWhat it reveals
ARC/BSP settlement filesTicket number, fare, taxes, carrier, issue and refund datesWhat the airline actually settled, versus what was invoiced
TMC invoice linesPNR, ticket number, fee code, booking channel, agent IDFee coding errors, offline coding, fee stacking
TMC call and OBT logsContact time, traveler, outcome, OBT session IDWhether offline and after-hours fees match real contacts
Hotel commission statementsProperty, nights, room revenue, commission paidCommission retained by the TMC on your stays
Hotel rate audit sampleRate code, rate paid, BAR on the nightRate loading errors, NLRA close-out, cap breaches
Corporate card feedsMerchant, MCC, amount, cardholder, dateBookings made outside the TMC channel
Expense reportsClaim lines, receipts, policy flagsDuplicate claims, out-of-policy spend, personal points
HR roster and leaver listEmployee ID, status, exit dateUnused ticket credits held by departed employees

Write the right to receive these files into the TMC contract before you need them; a clause is at the end of week 4 below.

Week 1 — Data intake and ARC/BSP air reconciliation

Week 1 builds the master trip table. Every ticket in the ARC/BSP file is matched to a TMC invoice line by ticket number, and every TMC line is matched back. Three populations fall out of the match.

  • Tickets settled but not invoiced by the TMC. These were bought outside the TMC, usually on consumer sites or airline websites, and show the size of channel leakage.
  • Refunds settled but not credited. A refund that the airline paid to the agency but that never reached your account is a direct cash recovery.
  • Exchanges with fare differences that do not reconcile. Residual value lost on exchanges points to agent error or missed credits.

The same week, the auditor confirms the contracted airline POS discount was applied on each contracted city pair, and pulls the open unused ticket credit list with expiry dates. The mechanics of both are set out in airline NDC surcharges and unused ticket recovery.

Week 2 — TMC invoice line audit

Every fee line is mapped to the contracted fee schedule. Lines with a fee code that maps to nothing in the contract are unauthorized. The rest are tested against the event that should have triggered them.

  1. Offline coding test. Compare offline fees with logged agent contacts for the same traveler and day. A booking with an OBT session and no contact should carry the online fee.
  2. Stacking test. Count transaction fees per trip. More than one fee on one trip breaches a per-trip schedule.
  3. Change test. Match exchange fees with carrier schedule-change messages; involuntary changes billed as exchanges are recoverable where the contract excludes them.
  4. Surcharge test. Identify GDS segment surcharges on carriers where the TMC had an NDC connection, and NDC servicing fees billed on top of the online fee.
  5. Premium test. Reconcile after-hours and VIP fees with time stamps and the approved VIP list.

Benchmark ranges for each fee line are in the 2026 TMC fee benchmarks; vendor-specific patterns are in the Amex GBT and BCD Travel contract audit guides.

Week 3 — Hotel commission and rate reconciliation

Hotel spend is usually 35%–40% of T&E, and two different leaks sit inside it.

Commission. The auditor rebuilds commissionable nights from the TMC’s booking data and compares them with commission statements. Where the contract requires pass-through, the gap is owed; where it is silent, the figure becomes the opening position for an 85%–100% pass-through clause.

Rates. A sample of stays at the top 20 properties is tested: was the negotiated rate loaded, was it displayed in the OBT, was it booked, and on how many nights did the property close it out? The NLRA close-out share found here feeds directly into the cost model in LRA vs. NLRA close-out math.

Week 4 — Card feeds, leakage and the recovery report

Card data closes the loop. Airline, hotel and car merchant transactions on corporate cards that have no matching TMC record are out-of-channel bookings. Industry average out-of-channel leakage runs at about 34% of hotel and air bookings; each 10-point reduction is worth 2.2%–3.5% of total T&E cost. The same pass catches duplicate claims, where a TMC-billed hotel also appears as an expense claim.

The report sorts findings into three groups: cash recoverable now (refunds, overbilled fees, commission owed), contract changes worth money from the next invoice, and policy or behavior changes. Each item carries the invoice lines that prove it.

Clause 9.2 · Data access and audit rights

The TMC shall deliver, within 15 business days of request and at no charge, transaction-level data for any period of the term, including invoice lines with PNR, ticket number, fee code, booking channel and agent identifier, agent contact logs, unused ticket credit records and hotel commission statements by property. The Client or its appointed independent auditor may audit fees and supplier income once per contract year; where overbilling exceeds 2% of fees in the audited period, the TMC shall refund the overbilling and bear the cost of the audit.

Interactive tool · Audit scorecard

18-Point Forensic T&E Audit Checklist

Tick each control your finance or travel team already audits today; every unticked item is a blind spot weighted by risk and estimated exposure.

$ Annual total T&E spend
$
$250K$50M

Audit blind-spot score

Critical Exposure

0 of 18 items in place

Exposure on total spend0%
Dollars at risk / year$0

Open items

    Exposure percentages are Business Travel Consulting 2026 benchmark estimates of spend lost when a control is missing, applied to total annual T&E spend; they are not a finding on your program.

    What the audit typically recovers, and how

    Recovery routes differ by finding. Overbilled TMC fees come back as credit notes against the next invoice. Hotel commission owed under an existing pass-through clause is paid by remittance. Expired ticket credits are rarely recoverable, but credits still open can be reissued if name-change waivers are negotiated with the carrier. Programs still booking mostly on consumer sites will see most of their value in the channel findings; the route from there is in the unmanaged to managed travel playbook.

    Multi-entity groups should run the audit across every entity on one data model; portfolio-wide patterns are covered in private equity portfolio travel procurement.

    Executive FAQ

    Questions procurement teams ask about this

    What is a forensic T&E audit?

    A forensic T&E audit reconciles transaction-level data from airline settlement files, TMC invoices, hotel commission statements, corporate card feeds and expense reports against your contracts and policy. Unlike a dashboard review, it traces individual trips across systems, so it finds overbilled fees, refunds not credited, commission retained, rates not applied and bookings made outside the managed channel, with the invoice lines that prove each finding.

    How much does a forensic travel audit usually find?

    Findings vary with program maturity, but combined TMC fee overcharges, forfeited unused tickets and unrecovered hotel commission typically total 6% to 12% of spend, even in programs around $500,000 a year. Part is cash recoverable immediately, such as overbilled fees and uncredited refunds, and part is recurring value captured through contract and policy changes from the next invoice cycle.

    Will our TMC cooperate with an independent audit?

    Most TMC contracts include some data access, but the scope is often vague. A TMC will normally provide invoice files and reports on request; commission statements and agent logs are harder to obtain without an explicit clause. If your contract is silent, the audit itself becomes the negotiation point for a data access and audit rights clause at renewal.

    Why should the auditor be independent of the TMC?

    An auditor paid by, owned by or affiliated with a TMC has a conflict when the findings concern that TMC’s fees, supplier income or commission retention. An independent auditor paid only by the buyer can test every line without that conflict. Ask any audit provider to disclose in writing whether it receives referral fees, overrides or commission from travel suppliers.

    Executive briefing

    Bring this page’s numbers. Leave with a recovery plan.

    A 30-minute call with a senior consultant, not a sales rep. We review the result you just modeled, tell you which savings are real for your program, and quote a fixed fee or contingency basis on the call.

    1. 01 We reply within one business day.
    2. 02 Mutual NDA before any invoice or contract is shared.
    3. 03 Written scope and fee basis within 48 hours of the call.

    Request an executive briefing

    We use your details only to reply to this request. No mailing lists, no resale. Privacy.