ERP Fraud Files, Part 20: The Card Statement Nobody Read

William Toulios, the former superintendent of Argo Community High School District 217 in suburban Cook County, Illinois, is charged with theft of government property, theft, forgery and two counts of official misconduct. Prosecutors say that between February 2021 and March 2024 he made more than $10,000 in unauthorized purchases on a district credit card, including more than $5,000 in Visa gift cards and more than $4,000 on golf equipment and related items. He pleaded not guilty on July 10, 2026, and was released pretrial. Everything below is an allegation or an investigative finding, not a conviction.

The news item that sent me looking for this one involved a public official, expense fraud and cigars. I could not match it to a documented case, and nothing in the Toulios sources mentions cigars. This is the closest verifiable case I found, so I used it.

What the district found before the prosecutors did

The school board suspended Toulios with pay and then hired a law firm and an accounting firm to look at the card spending. Invoices for that investigation had reached $96,637 by early September 2025, with another bill expected. The investigation found his explanations were not credible, and he resigned effective immediately on November 13, 2025. The settlement included no severance beyond the legally required vacation payout.

The cover story, according to prosecutors, was paperwork. The state's attorney says he handed a subordinate a fraudulent invoice and then directed the employee to create more. WGN reported that the invoice made some of the charges look like a publication subscription. The district's investigators said an employee hid the superintendent's spending by creating false invoices.

Where the control failed

The detail that matters for an ERP is in Patch's account of the district's investigative report, which I have not read in full. A new finance head took over in the summer of 2022, and the report says he essentially rubber-stamped the superintendent's card approvals because the superintendent, his secretary and one other employee had already reviewed them. He approved purchases without receipts and did not review the statements.

His predecessor had run a different process. According to the same account, that process tracked, reviewed and approved every school card expense, and the predecessor and his assistant pestered cardholders for documentation. The successor kept the policy on paper but said each cardholder was responsible for proper use. Investigators called his own inquiry into the spending superficial, and Patch reports he gave the board a figure for one vendor that investigators said was wrong.

Patch also reports the card spending for the superintendent himself: about $4,000 in the predecessor's last year, $15,000 in 2022-23 and $33,000 in 2023-24. Those are total card charges, not the amount prosecutors call unauthorized, and the two periods do not line up with the criminal complaint. I would not subtract one from the other. The trend is still worth a look: the climb began after the person who chased receipts left.

A fictional receipt

The receipt behind this post is fictional. It is a dinner at an invented Atlanta restaurant called Ember & Iron, dated Tuesday, October 27, 2026. It is not evidence in the Toulios case, and nothing in the case record ties him to it.

The core of the bill is a dinner for four with wine: shrimp, a board, two filets, a ribeye, a salmon and a creme brulee, $396 in all, or $99 a head. Three other lines sit on the same check. Cigars: $64. Gift card: $100. Take-home family meal: $85. Those three add up to $249, which is 38.6% of the $645 subtotal.

The rest is arithmetic. Tax at 8.9% applies to $545 of taxable items, because the gift card is not taxed, and comes to $48.51. The total is $693.51. The tip is $109, which is 16.9% of a subtotal that includes the gift card, and the card was charged $802.51. Add the tax and the share of the tip that attach to the three odd lines and the questionable amount is about $304.34, or 37.9% of what was paid. Treat the wine as a policy question and the figure goes higher.

What a reviewer should flag, human or software

Gift card. A gift card is cash with a delay, and a meal receipt is a convenient place to buy one. In the Toulios case, gift cards are the largest single category prosecutors name.

Cigars. Most expense policies have no category that fits them, so the line should stop the review rather than invite a judgment call.

Take-home meal. Four people ate at the table. A family meal boxed to go has no business purpose on its face.

Tip on a gift card. The tip was figured on a subtotal that included $100 of stored value. A person skimming the receipt will miss that. A script will not.

What one receipt cannot show. The check does not say who the four guests were or why they were there. A model reading this image cannot supply a business purpose, and it should say so rather than guess. The ERP has to hold attendees and purpose as required fields before the receipt can be approved.

The harder cases are the ones a single receipt will never reveal. A person approving statements one at a time sees one dinner. Software looking at 24 months of one cardholder sees gift card purchases recurring, a merchant category outside the person's role, and a spending line that went from $4,000 to $33,000 in two years. It can also compare each invoice payee to the vendor master and ask why a newspaper subscription is being billed to a high school.

Prompts to try

For the receipt itself:

Review the attached restaurant receipt against our expense policy. List every line that is not a meal, a beverage or a tip. For each, give the amount, the policy section that applies, and its share of the total including prorated tax and tip. Do not infer a business purpose. List what the receipt does not show: attendee names, business purpose and approver.

For the pattern:

Using 24 months of card transactions for this cardholder, compare each period with the prior one. Flag gift card purchases, merchants outside the cardholder's role, transactions approved without an attached receipt, and any invoice whose payee is not in the vendor master. Return the transactions themselves, not a summary, and show the approver for each.

Controls worth building

Block approval without a receipt. The approver should not be able to release a card line that has no receipt attached. In the district's account, purchases were approved without receipts.

Route the top executive's card to someone who does not report to them. A superintendent's statement approved by staff in the superintendent's own chain is a self-review with extra steps. The audit chair or board treasurer should see it.

Match invoices to the vendor master before payment. A payee that has never been set up, billing a school district for something unrelated to schools, should stop at intake.

Report on trend, not only on exception. A threshold rule would not have caught a rise from $4,000 to $33,000 if each charge was small. A year-over-year comparison would have.

What the sources do not say

These are allegations. Toulios has pleaded not guilty, and I found no later court update after the August 24, 2026 date. The sources I read do not say how the spending was first noticed or whether anyone used software to review the card statements. They also do not mention restaurant meals or cigars in connection with him, and the receipt above is an invented illustration of what automated review could look at. Patch's account of the district's report is secondhand; I did not read the report. The adult-content detail in the charges is not needed for the control analysis, so I left it out.

References


More of my writing lives at A Tinkerers Notebook.

My book Gamifying the Enterprise: Game Mechanics for Continuous Proficiency is on Amazon. All my books are on my Amazon author page.

The AD&D365 configuration guides are at adnd365.com/start.

Connect with me on LinkedIn.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.