From your proof system, you capture all information from cash-in and cash-out tickets plus all data from their offsetting entries. From that data set you remove "look alikes" (tellers used cash tickets when no cash actually walked through the door.) Aggregate what's left by account number of the offsetting entries. Investigate and remove false positives (aggregate cash out for payroll accounts, for example.)
_________________________
...gone fishing.