MCAST payroll scandal exposed by audit warnings

Education Minister Clifton Grima and the Board of Governors at the Malta College of Arts, Science and Technology (MCAST) received multiple written warnings regarding significant deficiencies in the institution’s payroll oversight. However, internal reports and sources indicate that no concrete corrective actions were implemented in response. The matter has taken on renewed urgency following allegations that a senior finance official systematically diverted college funds beginning in September 2023. The case — and the apparent failure to act upon earlier audit findings — has prompted calls for a comprehensive investigation and for those responsible for oversight to be held to account.

Background and timeline of warnings

Concerns about MCAST’s payroll administration are not new. Internal and external reviews stretching back several years flagged the absence of adequate controls within the payroll function. The National Audit Office (NAO) issued at least two formal assessments that raised alarms about persistent and systemic weaknesses. A 2019 NAO audit reportedly found “a complete lack of internal auditing mechanisms” in the college’s payroll processes, concluding that there were insufficient checks on the way payments and allowances were calculated and disbursed.

Although these issues were identified, the recommendations made by the NAO were not thoroughly put into practice. A follow-up NAO report published in June 2023 reiterated the unresolved weaknesses and noted specific technical failings in validation within the payroll software. The NAO observed: “MCAST confirmed that the payroll’s inbuilt validation system does not function.” The auditors warned that, without effective validation, manifest data-entry errors could pass through the system unchecked — for example, an implausible entry such as “100 hours of overtime entered by a lecturer for a single day” would not automatically trigger an alert.

According to sources close to the institution, the June 2023 report should have represented a final and urgent call for management and governors to overhaul payroll controls. Rather, just weeks later, the purported diversion of funds commenced.

The allegations

The alleged perpetrator named in public reporting is a senior finance manager at MCAST, who is identified in local media as Francine Farrugia. She is identified as a former Nationalist Party councillor. It is alleged that starting in September 2023, she systematically redirected public funds from the college over nearly two years. Sources quoted by journalists have claimed that transfers totalling about €2.3 million were made to a personal account.

These allegations remain subject to criminal investigation. The public reporting indicates that the police intervened and that their involvement was crucial to uncovering the irregularities; sources told The Shift that the scheme may have continued undetected were it not for law enforcement action.

Given the serious legal implications for the individual allegedly involved and for those in positions of oversight, it is important to stress that the term used throughout reporting is “alleged” or “accused.” No court conviction has been referenced in the material provided for this rewrite, and any coverage that treats allegations as proven fact would risk legal exposure.

Governance failures and accountability questions

A recurring theme in coverage and expert commentary is not merely the alleged misappropriation itself but the institutional failures that allowed it to occur.

The NAO’s 2019 and June 2023 reports are central to that narrative. According to those reports and to persons familiar with them, there was a failure to implement basic internal audit mechanisms and to ensure that core IT and payroll controls functioned correctly. Those gaps, combined with apparently insufficient board-level scrutiny, created an environment in which anomalous transactions could escape detection.

“The least one expects is their resignation en bloc,” said one source quoted in press coverage, referring to the President and the Board of Governors, after noting that the NAO had documented the shortcomings “black on white.” The source posed a pointed question about oversight: “Where were the auditors? How can someone transfer €2.3 million to their own account over two years, and no one notices?”

Carmel Cacopardo, Deputy Chair of the ADPD, has urged the NAO to conduct a comprehensive investigation to determine who is accountable for ignoring the repeated warnings. Calls for stronger oversight have also come from financial analysts and former investigators who have reviewed elements of the college’s past governance.

Reaction from experts and commentators

Financial analyst Paul Bonello — who previously led a probe for the Education Ministry into separate allegations at MCAST in 2019 — took to social media to express sharp criticism. He described the institution as “a total mess” and argued that responsibility lay with government-appointed officials and with the boardroom culture. Mr Bonello wrote: “The government had all the evidence that MCAST’s management lacked even the most basic competencies. Chairpersons were more interested in public appearances than proper governance, sweeping warning signs under the carpet and even hiding inquiry reports from board members.” He further suggested that political leadership, including Prime Minister Robert Abela, had failed to insist on reforms: “You reap what you sow, RA,” he wrote.

Such commentary illustrates how the matter has moved beyond technical accounting weaknesses to become a question of institutional culture and political oversight.

Leadership at MCAST during the period under review

At the time the NAO issued warnings and during much of the period when the alleged irregularities are said to have occurred, MCAST’s governance structure was led by Board President Professor Ian Refalo and Principal James Calleja. Public reporting has noted that Professor Calleja — described as a senior academic — was reportedly receiving two government salaries, stated to be a total of €114,000 annually.

Horace Laudi is the present President of the Board of Governors, having taken on the position following the timeframe addressed in earlier reports. The precise timing and circumstances of leadership changes are relevant to any accountability review and will be material to auditors and investigators.

Legal and procedural implications

Because the allegations involve public funds and potential criminal conduct, the response options available to authorities are varied and interlocking. They include criminal investigation and prosecution, administrative and disciplinary proceedings within the college, recoveries or civil suits to reclaim misappropriated sums, and a formal public inquiry or special audit to examine systemic failures.

From a governance perspective, the NAO’s repeated recommendations — if confirmed as not implemented — could provide the factual basis for critique of the board’s stewardship. That said, legal prudence dictates careful differentiation between failures of governance and culpability for criminal acts. Holding individuals to account for governance lapses commonly requires evidence of negligence or deliberate failure to act; proving criminal acts requires proof beyond reasonable doubt in a court of law.

For the institution itself, immediate remedial steps that are prudent irrespective of criminal proceedings would include a suspension of implicated personnel pending the outcome of investigations, an urgent external forensic audit of payroll transactions, a comprehensive review of payroll software and validation processes, and the establishment of robust internal audit and whistleblowing arrangements.

Recommendations for immediate remedial action

Industry best practice and common-sense safeguards point to several immediate measures that organizations in the public sector should adopt when confronted with similar issues:

• Commission an independent, forensic payroll audit covering the period identified in earlier reports and the period in which alleged transfers occurred.
• Implement a full review and upgrade of payroll software, including functioning validation rules, exception reporting, and multi-person sign-off for high-value or unusual transactions.
• Strengthen the internal audit function with direct reporting lines to the board’s audit committee and ensure regular, documented follow-up on recommendations.
• Introduce or reinforce segregation of duties so that no single individual has unilateral control over initiation, approval and reconciliation of payroll disbursements.
• Protect and encourage internal reporting by staff through an independent whistleblowing mechanism, with guarantees against retaliation.
• Temporarily restrict or review external payments until controls are demonstrably operating as intended.

While such steps do not prejudge individual culpability, they reduce the risk of further loss and restore public confidence.

Political and public accountability

The matter has political ramifications given that MCAST is a public institution and that board appointments are political in origin. Calls for transparency and for accountability typically include demands for a public parliamentary session or for the responsible minister to provide a full accounting of what was known, when it was known, and what action was taken.

Carmel Cacopardo’s request for the NAO to expand its probe reflects a demand for independent, authoritative scrutiny. In many jurisdictions, the NAO’s role — as an independent auditor of public bodies — is precisely to provide impartial findings that can be relied upon by parliament, prosecutors and the public.

What happens next

At this stage, public reporting indicates that police are involved and that there have been requests for broader investigations into governance failures. The timeline for criminal or administrative outcomes will depend on the pace of investigatory work and on the availability of documentary and testimonial evidence.

For the college and for government, the immediate priority will likely be to demonstrate tangible action to address the operational weaknesses identified by the NAO and to reassure staff, students, and the taxpayer that public funds are safeguarded.

Conclusion

The combination of repeated audit warnings and subsequent allegations of substantial payroll diversion at MCAST has created a complex nexus of technical, managerial and political questions. Independent verification — through forensic audit and formal investigation — will be necessary to establish the facts and to determine whether governance failures were negligent oversights or whether they involved complicity or recklessness. Whatever the outcome, the episode underscores the importance of functioning internal controls, active board oversight, and a culture that prioritizes accountability over appearances.

FAQs

What triggered the investigation into MCAST payroll practices?
Police intervention and anomalies identified by auditors and internal sources prompted a closer review that uncovered alleged irregular transfers.

What did the NAO reports find about MCAST payroll controls?
The NAO reported systemic weaknesses, including a lack of internal auditing mechanisms and non-functioning validation in the payroll software.

Has anyone been convicted in relation to the alleged embezzlement?
As of the information supplied for this article, the transfers and responsibility are described as alleged and are the subject of ongoing investigation; no court conviction is reported here.

What immediate steps should MCAST take to prevent further losses?
Commission a forensic audit, repair or replace payroll validation systems, strengthen internal audit and segregate duties related to payroll processing.

Who are the key officials implicated in governance questions?
Public reporting places scrutiny on past and present board leadership, including the board presidents named in coverage, and questions the effectiveness of oversight by appointed officials.

How much money is reported to have been allegedly diverted?
Journalistic sources cited in reporting mention approximately €2.3 million alleged to have been transferred to a personal account over about two years.

Why did earlier NAO recommendations not stop the alleged fraud?
According to follow-up NAO reporting and sources, recommendations were not fully implemented and crucial software validations remained inoperative, leaving vulnerabilities unaddressed.

Could the board face legal consequences for governance failures?
Potentially, if investigations uncover evidence of negligence or wilful failure to act; however, legal outcomes depend on the findings of independent and prosecutorial investigations.

What role can the NAO play now?
The NAO can conduct or expand independent reviews to establish the facts, assess compliance with prior recommendations, and produce evidence useful to parliament and prosecutors.

How can public confidence be restored at MCAST?
Transparent independent investigation, prompt remedial controls, clear accountability for failures, and public reporting on corrective measures will be necessary to rebuild trust.