I don't know about other industries, but it's pretty rife in the beer & hospitality sector.
Unfortunately it's rarely evident until it's too late.
And the UK Limited Company system pretty much endorses this behaviour by its very structure - i.e. there's generally no repercussions for the folks running a scam like that. There is no authority that is interested in this sort of fraud.