Disciplinary Action For Workplace Theft In Australia

Discovering or even suspecting employee theft is stressful for any small business. You’re balancing the need to protect your business with the legal requirement to act fairly and lawfully.

The good news is there’s a clear process you can follow. With a calm, step-by-step approach, you can investigate properly, make a defensible decision, and reduce the risk of unfair dismissal claims or other legal headaches.

In this guide, we’ll walk through what counts as workplace theft, how to respond, how to run a fair investigation, and the disciplinary options available to you under Australian law.

What Counts As Workplace Theft In Australia?

Workplace theft can take many forms. It isn’t limited to cash in the till. If an employee intentionally takes, uses or misappropriates your property without permission, you may be dealing with theft or fraud.

Common examples include:

• Cash theft (from registers, safes or petty cash)
• Stock or equipment walking out the door (including “freebies” without authority)
• Gift card or coupon misuse
• False refunds, voids or discounts at point of sale
• Fuel, tools or supplies taken for personal use
• Misuse of company credit cards or expense claims
• Data or IP theft (e.g. copying a customer database)

Under the Fair Work framework, theft is often treated as “serious misconduct” (conduct so serious it may justify immediate dismissal). However, whether summary dismissal is lawful depends on your process and the specific facts. A rushed decision can expose you to claims later.

First Response: How Should You Act When You Suspect Theft?

If you have a reasonable suspicion, take immediate but proportionate steps to protect your business and evidence. Keep things calm and confidential.

Secure Evidence And Reduce Risk

• Preserve CCTV footage, POS reports, system logs, and access records.
• Limit the employee’s access to cash drawers, stock rooms, or systems while you assess next steps.
• If appropriate, consider standing down an employee or suspending an employee pending investigation on pay, so you can investigate without interference.

Check Your Contracts And Policies

Review the Employment Contract, Code of Conduct and any theft or fraud policy. These documents set expectations and guide your process. If you don’t have a clear set of policies yet, it’s worth putting a tailored Workplace Policy suite in place for future incidents.

Be Careful With Surveillance

Surveillance can help, but it must be lawful. Before reviewing or relying on footage or recordings, consider the CCTV laws in Australia and your state’s recording rules (for example, phone recordings and covert audio raise separate issues-see is it legal to record a phone call in Australia?). If you operate workplace cameras, ensure signage, policy notices and consultation requirements have been met.

How To Run A Fair Investigation

A fair, well-documented process is your best protection. Even if the evidence seems strong, follow procedural fairness so your decision is defensible.

1) Plan The Investigation

• Identify the issue and timeframe (what happened, when, who may be involved).
• List evidence to collect: POS data, access logs, time sheets, witness accounts, and any relevant camera footage.
• Decide who will investigate (someone impartial, ideally not directly involved in the allegation).

2) Gather Facts Carefully

• Secure copies of relevant documents and footage.
• Interview witnesses separately and take signed notes.
• Keep your mind open-errors or system issues can mimic theft patterns.

3) Invite The Employee To Respond

Provide the employee with a clear summary of the allegation and the key evidence, and give them a reasonable chance to respond. This usually occurs through a written invitation to a disciplinary meeting or via a formal show cause letter that outlines the potential outcomes (including termination) and a reasonable response timeframe.

4) Consider The Response In Good Faith

Assess any explanation, supporting documents, or mitigating factors (e.g. length of service, prior warning history, personal circumstances). Document your analysis. Your ultimate decision should be one a reasonable employer could reach based on the evidence and the overall context.

Deciding The Outcome: Disciplinary Action Options

Once your investigation is complete, you’ll decide on an outcome. Theft is often serious misconduct, but there’s no one-size-fits-all answer. The decision should be proportionate and procedurally fair.

Verbal Or Written Warning

If the conduct is minor or there’s doubt, a warning with clear performance and conduct expectations may be appropriate. Warn about future consequences and set review dates.

Final Warning

Where there’s stronger evidence but mitigating factors exist, a final written warning with conditions (e.g. training, heightened oversight) may be suitable.

Transfer, Demotion Or Adjusted Duties

In some cases, moving the employee away from cash handling or sensitive systems can reduce risk while allowing continued employment. Ensure changes comply with the contract and any applicable award or enterprise agreement.

Termination On Notice

Where trust is broken but you assess that summary dismissal isn’t justified, you can terminate on notice in line with the contract or award. If you choose to end employment immediately and pay out the notice period, consider payment in lieu of notice requirements.

Summary Dismissal For Serious Misconduct

If you reasonably conclude the employee engaged in theft, summary dismissal (immediate termination without notice) may be lawful. Your process matters: if challenged, the Fair Work Commission will look closely at what you knew, how you investigated, whether the employee had a genuine chance to respond, and whether your decision was reasonable in the circumstances. For context on how these matters are assessed, see the factors in section 387 of the Fair Work Act (unfair dismissal criteria).

Recovering Losses

Be cautious about recouping money. Deductions from wages are tightly regulated-you’ll generally need written consent and any deductions must be principally for the employee’s benefit. Review the rules before acting and get advice, as unlawful deductions can create new liabilities. For an overview of when deductions are permitted, refer to withholding pay from employees in Australia.

Other recovery options include civil recovery through a demand and potential proceedings, insurance claims, or in some cases, reporting to police. If you’re considering police involvement, keep your investigation notes and evidence organised and stick to factual statements to avoid defamation risks.

Paying Final Entitlements

Even after summary dismissal, you must pay any outstanding wages and accrued entitlements (e.g. untaken annual leave). Document the termination outcome and keep copies of all evidence and correspondence. Using a tailored Employee Termination Documents Suite can help keep this step consistent and compliant.

Legal Risks And How To Avoid Them

The biggest risk when disciplining for suspected theft is a flawed process. The stronger your procedure, the lower your legal exposure.

Unfair Dismissal

If the employee is eligible to bring a claim, the Commission will assess whether there was a valid reason related to conduct, and whether the process was fair (notice, opportunity to respond, chance to have a support person, etc.). A fair, well-documented process is your best defence.

Adverse Action Or Discrimination

Don’t take action because an employee exercised a workplace right (like a complaint) or due to protected attributes (e.g. age, sex, disability). Keep your reasoning focused on proven conduct and your legitimate business interests.

Defamation And Confidentiality

Limit discussion of the allegations to those who need to know. Stick to facts and avoid publishing conclusions beyond your internal process or legal reporting obligations. Avoid statements that could be seen as gratuitous or damaging.

Privacy And Surveillance

Only collect, use and disclose personal information necessary for the investigation. Ensure your surveillance systems and email reviews are lawful and consistent with policy. If you need to access workplace communications, review your obligations around employer access to employee emails and any relevant surveillance notice requirements in your state or territory.

Prevention: Policies, Training And Controls

The best outcome is preventing incidents in the first place. Strong systems, training and a fair culture can significantly reduce the risk of theft.

Build A Clear Policy Framework

• Adopt a Code of Conduct and a specific theft/fraud policy outlining unacceptable conduct, investigation steps and disciplinary outcomes.
• Ensure your POS and cash handling procedures are written, simple and enforced.
• Train managers on how to handle allegations and when to seek legal help. A tailored Workplace Policy suite (with manager guidance) helps keep responses consistent.

Strengthen Internal Controls

• Segregate duties (e.g. one person doesn’t both count cash and reconcile the bank).
• Run regular stocktakes and cash reconciliations; investigate variances quickly.
• Limit access to storerooms, systems and cards on a “need to have” basis.
• Use system reports to flag unusual discounts, refunds or after-hours activity.
• Deploy lawful surveillance and signage in line with the CCTV laws in Australia, and make sure staff are aware of any monitoring in policy and induction.

Set Expectations Early

Reinforce standards during onboarding and refresher training. Make it clear that disciplinary action (up to and including termination) may apply for theft or fraud. Ensure your contracts reference serious misconduct and termination provisions, and have a consistent process for using a show cause letter when required.

Know When To Get Help

If the situation is complex (e.g. multiple employees, high-value loss, or sensitive information), it’s wise to seek legal guidance early. A short consult can help you choose between options like paid suspension, a formal investigation, or moving directly to disciplinary steps. If termination is likely, make sure you understand notice, serious misconduct, and payment in lieu of notice risks before proceeding.

Key Takeaways

• Act quickly but fairly: secure evidence, manage access, and plan a neutral, confidential investigation.
• Follow procedural fairness: give particulars, use a show cause letter where appropriate, and genuinely consider the employee’s response.
• Choose a proportionate outcome: options range from warnings to termination; serious misconduct may justify summary dismissal if your process and evidence stack up.
• Be careful with deductions and final pay: understand the limits on withholding pay and handle notice correctly, including payment in lieu of notice where used.
• Reduce legal risk: align your approach with the unfair dismissal criteria in section 387 of the Fair Work Act, protect privacy, and keep communications factual and contained.
• Prevent future issues: implement robust internal controls, lawful surveillance, and a clear Workplace Policy framework backed by training.

If you’d like a consultation on disciplinary action for theft in the workplace, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.