I Think an Employee Is Stealing: What Do I Do?
You noticed something. Maybe inventory is consistently short. Maybe the numbers in the register don’t add up. Maybe a coworker said something. Maybe you caught something on camera. Whatever it is, you believe an employee may be stealing from your business.
This is one of the most stressful situations a small business owner faces, and also one of the easiest to handle badly. Here is how to approach it correctly.
Start With Evidence, Not Confrontation
The single most important thing you can do in this situation is not confront the employee. Not yet. Confronting an employee based on suspicion, without documented evidence, has three possible bad outcomes: the employee denies it and you have nothing, the employee becomes aware they are being watched and stops the behavior, or you wrongly accuse an innocent employee and face a defamation or wrongful termination claim.
Before you do anything else, gather and secure what you have. Review security camera footage and preserve copies. Pull transaction records, inventory logs, or financial reports and document discrepancies with specifics: dates, amounts, what was missing. Identify whether there are witnesses and what they observed.
Involve HR and Potentially Legal Counsel
Employee theft investigations are high-stakes situations. Before you take any action, including confronting the employee, loop in HR. If you do not have HR support, this is a situation where an hour with an employment attorney is worth the cost.
An investigation that is conducted improperly, that violates the employee’s rights, that is based on discriminatory profiling, or that results in a false accusation, exposes you to significant liability that dwarfs whatever was stolen.
Conduct a Proper Investigation
A proper investigation means:
• Documenting all evidence before taking any action
• Interviewing relevant witnesses separately and confidentially
• Not sharing the investigation details with other employees
• Maintaining objectivity: the investigation should be designed to find out what happened, not to confirm what you already believe
• Considering whether to involve law enforcement, particularly for significant theft
In serious cases involving significant financial loss, involving law enforcement from the beginning is appropriate. Law enforcement has investigative tools and authority that you do not, and a police report creates an independent record of the incident.
The Confrontation Meeting
When you have sufficient evidence and are ready to confront the employee, do it in a private meeting with HR or a witness present. Present the evidence factually. Give the employee an opportunity to respond. Their explanation may provide context you did not have, or it may make the situation clearer.
Take notes. Document everything said in the meeting contemporaneously.
Do not threaten the employee. Do not make promises about what will or will not be reported to law enforcement. Do not make statements that could be construed as defamatory to other employees.
The Termination Decision
If the investigation confirms theft, termination is almost always the appropriate outcome. Theft is typically listed as an immediate termination offense in a progressive discipline policy. Theft is the type of conduct that bypasses the standard warning process entirely.
Before you terminate, make sure your documentation is in order: the evidence you gathered, the investigation steps you took, the confrontation meeting notes, and the termination decision with its basis. This is your record if the termination is later challenged. For a complete walkthrough of the separation process, see How to Conduct a Termination Meeting.
Pay Recovery and Legal Remedies
Can you deduct the stolen amount from the employee’s final paycheck? This varies by state. Many states prohibit deductions from final pay without the employee’s written authorization, even for theft. Some states permit it with documentation. Do not assume you can make this deduction without checking your state’s wage payment laws.
For significant theft, civil litigation or a criminal complaint may be your path to recovery. An attorney can advise on the most appropriate route based on the amount involved and the strength of your evidence.
Prevention Going Forward
After a theft incident, review your internal controls. Segregation of duties ensures no single employee has complete control over a financial transaction from beginning to end, and is the most effective theft deterrent. Regular audits, inventory counts, and spot checks are also effective. A clear written policy that states the consequences of theft is both a deterrent and a legal protection. For a broader look at the policies that protect small businesses from common risks, see HR Policies Every Small Business Needs.
Get a Progressive Discipline Policy Template
Our template includes immediate termination offenses, including theft, with documentation requirements and a defensible framework for handling serious misconduct situations.
→ Progressive Discipline Policy Template — $35 | pragmatichrgroup.com
Editable Word document + PDF. Instant download. Created by a SHRM-SCP certified HR professional.
Questions about this or other HR topics? Visit pragmatichrgroup.com for more resources.
