> what kind of regulations would serve this particular scenario?

Separation of duties so more than one person is needed to create and then approve such transactions?