How Small Businesses Can Prevent, Detect And Respond To Employee Theft

Employee theft can be one of the most stressful issues you face as a small business owner.

It’s not just the financial loss (although that can add up quickly). It’s the feeling of betrayal, the impact on your team culture, and the worry that you’ll “do the wrong thing” when you respond.

The good news is that theft in the workplace is a risk you can manage with the right systems, clear rules, and a fair, legally compliant response plan.

In this guide, we’ll walk you through how employee theft typically happens, what practical controls can prevent it, how to detect red flags early, and what to do if you suspect someone is stealing from work - including key legal considerations for Australian small businesses (noting that the right approach can depend on your circumstances, your contracts and policies, and your state or territory).

What Is Employee Theft (And What Does It Look Like In A Small Business)?

Employee theft is when a worker dishonestly takes your business’ money, stock, time, data, or other property for their own benefit (or for someone else’s benefit).

When people think of theft in the workplace, they often picture cash being taken from the till. In reality, it can be much broader - and harder to spot.

Common Types Of Employee Theft

• Cash theft: taking cash from the register, skimming before sales are recorded, “voiding” sales after taking payment, or pocketing cash tips that should be pooled.
• Stock and inventory theft: taking products home, “writing off” stock as damaged, or giving friends free items.
• Time theft: being paid for hours not worked, falsifying timesheets, long breaks, or “buddy punching” (one employee clocks on for another).
• Misuse of company resources: using company vehicles, fuel cards, tools, materials, or accounts for personal use.
• Expense and reimbursement fraud: claiming personal expenses as business costs, fake receipts, or inflating amounts.
• Data and IP theft: taking customer lists, supplier pricing, business processes, or confidential documents (sometimes to set up a competing business).

Why Small Businesses Are Especially Exposed

Small businesses often run lean. You might have fewer staff, less segregation of duties, and more trust-based processes.

That’s not a “mistake” - it’s often the only way to operate efficiently.

But it does mean your business can be more vulnerable if one person can control an entire process end-to-end (for example: receiving stock, updating inventory, processing refunds, and reconciling the register).

How Can You Prevent Employee Theft Before It Happens?

Prevention is about creating a workplace where theft is difficult to carry out and easy to detect - without turning your business into a hostile environment.

You can think of prevention as a mix of (1) culture, (2) clear rules, and (3) practical controls.

1. Set Clear Expectations Early

Many workplace disputes escalate because expectations were “understood” but never clearly stated.

Start with a written Employment Contract that covers duties, confidentiality, and expectations about honesty and misuse of company property.

Then back it up with a Workplace Policy that sets out practical rules like:

• handling cash and EFTPOS terminals
• discounts, refunds, and voids (who can approve them)
• staff purchases and staff discounts
• stock write-offs (damaged/expired stock process)
• use of tools, vehicles, fuel cards, devices, and accounts
• confidential information rules (customer lists, pricing, supplier details)
• consequences of misconduct (including theft)

When employees know the rules and the consequences, you reduce “grey areas” that can be exploited later.

2. Use Simple Controls That Don’t Slow You Down

You don’t need an enterprise-level system to make a meaningful difference. For many small businesses, the best controls are simple and consistent.

• Separate key tasks: where possible, don’t have one person responsible for sales, refunds, and reconciliation.
• Daily cash reconciliation: count the till at the start and end of shift, and record it.
• Refund and discount approvals: set a threshold and require manager approval above it.
• Lock down access: restrict who can change prices, void transactions, edit timesheets, or write off stock.
• Stock cycle counts: do smaller, regular checks rather than one big stocktake once or twice a year.
• Clear audit trails: ensure your POS/accounting systems track who did what and when (logins should not be shared).

3. Be Careful With Surveillance (And Do It Lawfully)

Cameras, monitoring software, and recorded calls can help prevent and detect employee theft - but they can also create legal risk if implemented poorly.

As a starting point, consider:

• Whether surveillance is reasonably necessary for your business (for example, protecting stock and cash handling areas).
• Whether staff have been notified (signage, policies, onboarding training).
• Whether surveillance could reasonably be seen as excessive or unfair (particularly in private areas).

If you’re installing cameras, it’s worth checking the rules that apply to your business and location, because surveillance obligations can differ depending on the state/territory and the circumstances. For many businesses, the starting point is understanding CCTV laws and how they apply in workplaces.

Similarly, if you’re thinking about recording calls (for example, customer orders, complaints, or internal discussions), it’s important to understand the business call recording laws that may apply.

4. Train Managers On Consistent, Fair Enforcement

Controls only work if they’re applied consistently.

If one manager lets staff “borrow” stock and another doesn’t, you end up with confusion - and it becomes much harder to enforce standards later.

Run short training sessions on:

• cash handling and end-of-shift procedures
• how to document incidents and escalate concerns
• how to approve refunds/discounts properly
• the difference between mistakes, negligence, and intentional theft

How Do You Detect Theft In The Workplace Early?

Most small business owners don’t want to “spy” on their team - and you don’t need to.

Detection is mainly about paying attention to patterns and having reporting and review processes that surface issues early.

Practical Red Flags To Watch For

• Unexplained stock shrinkage: stock levels don’t match sales trends, or shrinkage spikes on certain days/shifts.
• High refund/void activity: repeated refunds, discounts, or voided transactions, especially by one employee.
• Cash variances: frequent “small” discrepancies in the till that are dismissed as errors.
• Timesheet anomalies: repeated edits, identical start/finish times, or inconsistent clock-on locations (where relevant).
• Supplier irregularities: duplicate payments, changed bank details, or invoices that don’t match deliveries.
• Behavioural changes: defensiveness around processes, refusing to take leave, or insisting on controlling a task alone.

Encourage A Speak-Up Culture (Without Creating Drama)

Your honest employees are often your best early warning system - but only if they feel safe speaking up.

Make it clear that:

• concerns can be raised confidentially
• you’ll look into concerns fairly (without “assuming guilt”)
• retaliation is not acceptable

This is also where strong internal policies help: they give your team a clear process to follow, rather than relying on rumours and informal complaints.

Use Data You Already Have

Before you invest in new tools, check what you already have access to. Many POS platforms and accounting systems can generate reports like:

• refunds/voids by staff member
• discount usage by staff member
• cash vs EFTPOS sales patterns
• inventory adjustments and write-offs

For a time-poor business owner, even a quick weekly review can make a difference.

What Should You Do If You Suspect An Employee Is Stealing From Work?

This is the point where many small businesses feel stuck.

You want to act quickly to stop further loss. But you also don’t want to accuse someone unfairly, breach privacy laws, or mishandle a disciplinary process in a way that creates legal risk.

A sensible response is usually: preserve evidence, investigate fairly, then take proportionate action.

1. Don’t Confront Immediately (Preserve Evidence First)

If you confront someone too early, they may delete records, influence witnesses, or change their behaviour in ways that make the issue harder to prove.

Start by securing relevant information, such as:

• POS and refund logs
• stock adjustment records
• timesheets and roster data
• emails and internal messages (where lawful and appropriate)
• CCTV footage (if you have it and it was collected lawfully)
• witness notes (dated, factual summaries)

Keep your notes factual. Record dates, times, what happened, and who was involved. Avoid emotional language or assumptions.

2. Run A Fair Investigation Process

Even if you’re confident theft occurred, a fair process matters.

In practice, this often involves:

• setting out the allegations clearly
• giving the employee an opportunity to respond
• reviewing the response alongside the evidence
• documenting the outcome and reasons

In some cases, you may want the employee away from the workplace while you investigate. How you do this (for example, temporary alternative duties, a direction not to attend the workplace, or a stand down) needs to be handled carefully, because there are strict rules around when an employee can be stood down under the Fair Work Act, and what your contract and policies allow. If you’re considering this step, the rules around standing down an employee pending investigation are a helpful starting point - and it’s often worth getting tailored advice before you implement it.

3. Consider Whether This Is Misconduct Or A Process Failure

Not every discrepancy is theft.

Sometimes what looks like employee theft is actually:

• a training issue (staff don’t understand the refund process)
• a system permissions issue (too many people can adjust inventory)
• poor supervision (no reconciliation process in place)
• an honest mistake (incorrect data entry)

That said, if the evidence suggests dishonesty, you should treat it seriously and act consistently with your policies and contracts.

4. Decide On The Right Response (Termination, Warning, Repayment, Police)

Your options depend on the facts, the evidence, the amount involved, the employee’s role, and whether there’s a breakdown of trust.

Common outcomes include:

• Performance management or retraining (where the issue is capability, not dishonesty).
• Formal warning (where appropriate and consistent with your process).
• Termination (often considered where there is serious misconduct or a clear trust breach - and where you’ve followed a fair process).
• Seeking repayment (for example, asking for property to be returned, or negotiating repayment where a loss can be clearly quantified - noting you generally can’t simply “deduct it” from wages unless a lawful exception applies).
• Reporting to police (particularly where the suspected theft is significant, repeated, or involves fraud - and where you have sufficient evidence to support the report).

If you decide to seek repayment, be careful about deductions from wages. In Australia, wage deductions are regulated, and simply taking it out of their pay can create its own legal issues. If you’re considering any form of deduction, it’s worth understanding the rules around withholding pay.

5. Manage The Team And Communications Carefully

Once you start investigating theft in the workplace, it can affect morale quickly.

A few practical tips:

• Limit who knows: keep the matter on a need-to-know basis.
• Don’t gossip or vent: it can expose your business to unnecessary risk and damage trust.
• Focus on process: reassure the team that you’re reviewing systems and keeping things fair.
• Update procedures: if theft was possible due to weak controls, tighten them and retrain staff.

What Legal Documents And Workplace Systems Help Protect You?

If employee theft occurs, your documents and systems often determine how smoothly you can respond.

They help you set expectations, establish investigation processes, and show that you’ve acted consistently and fairly.

Key Documents To Consider

• Employment Contract: sets baseline expectations about duties, confidentiality, misuse of business property, and disciplinary consequences. Having a clear Employment Contract can make it much easier to manage misconduct issues.
• Workplace Policies: provides practical rules for cash handling, stock control, timesheets, and acceptable conduct. A well-drafted Workplace Policy also supports consistent enforcement.
• Device and access rules: if staff use company devices or access customer data, set clear terms on usage, passwords, sharing logins, and what happens when employment ends.
• Confidentiality clauses: helps protect customer lists and pricing. This is especially important if the theft involves information rather than physical items.
• Surveillance and monitoring notices: if you use cameras or call recording, written notices and clear signage can be crucial to help ensure your approach is lawful and transparent.

Don’t Forget Privacy And Surveillance Compliance

It’s understandable to want to increase monitoring after an incident. But the goal is to protect your business without creating fresh risk.

Before rolling out new monitoring measures, it’s worth stepping back and checking whether your approach is consistent with workplace surveillance and privacy expectations, including how you collect and store recordings. As a practical starting point, many employers review both CCTV laws and the broader recording laws in Australia (particularly if audio is involved).

Having a plan upfront is far easier than trying to “patch” compliance after an incident occurs.

Key Takeaways

• Employee theft can involve cash, stock, time, expenses, or confidential information - not just taking money from the till.
• Prevention usually comes down to clear rules, consistent training, and practical controls like approvals, reconciliations, and restricted system access.
• Early detection is easier when you regularly review POS/accounting data and encourage staff to raise concerns confidentially.
• If you suspect an employee is stealing from work, preserve evidence first, run a fair investigation, and document each step before taking action.
• Be careful when using cameras or call recording for theft investigations - surveillance and recording need to be handled lawfully and transparently.
• Strong workplace documents (including an Employment Contract and Workplace Policies) make it much easier to prevent theft and respond confidently if it occurs.

If you’d like help reviewing your contracts and workplace policies or responding to suspected employee theft, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat. This article provides general information only and is not legal advice.