This sounds like a very familiar situation. Our Compliance/BSA officer was the one embezzling money. This person had the knowledge and expertise to know how to reverse and change trans codes to hide and disguise the moving around from examiners and other employees that might become suspicious. A good and safe bet would be to contact your regulators. Ours were helpful and discreet while helping to invistigate.