“Internal fraud” cases are being investigated by a council, according to an auditor’s report.