My advice, from experience:

Keep it quiet and no one will know. Raise the issue by writing the check, and watch them go back and audit everything for the past year or two.