I'm not buying it. The information provided is way too vague and without receipts there's no way to validate it. Only one of the individuals even offered any information, and a generous amount time has passed since the data was requested.
And what's with the lack of receipts? I can only think of two reasons why someone handling other peoples money wouldn't ensure he has all receipts to verify his transactions; malice or ineptitude. Neither inspire much confidence.