Overpaid, from one typed digit
One digit, transposed between the attendance file and the payroll file. The register balanced, the envelope was counted, and nobody caught it until the worker did.
On PayCrew there is no second file. Hours are recorded once and payroll reads from that record, so the digit has nowhere to go wrong.