Employee Theft Warning Signs & Investigations

Recognising and Addressing Employee Theft

Trust is the currency of business. When an employer hires staff, they hand over access to stock, sensitive data, and company finances, expecting that trust to be respected. Unfortunately, employee theft remains a persistent and damaging reality for many South African businesses. According to the Association of Certified Fraud Examiners (ACFE), organisations globally lose an estimated five percent of their annual revenue to occupational fraud and internal theft. [1]

Business owners and managers often miss the early indicators because they want to believe the best about their teams. However, ignoring the problem only allows it to escalate. Protecting your business requires knowing what to look for and understanding how to conduct legally sound workplace investigations in South Africa when suspicions arise.

Identifying the Warning Signs of Employee Theft

Employee theft rarely starts with a massive heist. It usually begins small: a missing petty cash receipt, a few unaccounted-for inventory items, or a supplier invoice that looks slightly altered. If these minor discrepancies go unchallenged, the behaviour becomes bolder.

One of the most common red flags is a sudden, unexplained change in an employee’s lifestyle. If a staff member is suddenly displaying wealth that does not align with their salary, it warrants closer attention. Similarly, employees who refuse to take annual leave or fiercely guard their specific duties might be hiding fraudulent activities. They fear that if someone else covers their desk, the discrepancies will be discovered.

You should also watch for behavioural shifts. An employee who becomes unusually defensive when asked routine questions about stock levels or financial reconciliations may be feeling the pressure of their actions. Frequent, unexplained shortages in inventory or regular cash register imbalances are clear indicators that a closer look is required.

Investigation vs Disciplinary Action

When dealing with suspected theft, employers must understand the difference between the investigation phase and the disciplinary phase.

When you spot warning signs, the instinct is often to confront the individual immediately. This is a dangerous mistake. Accusing an employee of theft without solid proof can lead to claims of defamation, constructive dismissal, or unfair labour practices.

In South Africa, the Labour Relations Act requires employers to follow strict procedural fairness. [2] Workplace investigations must be objective, thorough, and confidential. The goal is to gather undeniable facts before any formal allegations are made. Only once sufficient evidence is gathered should a formal disciplinary hearing be convened. Employers who skip this step risk losing at the CCMA, not because they lacked evidence, but because they failed to follow the correct process.

Using the Right Tools for the Job

Gathering evidence of internal theft can be incredibly difficult, especially when the perpetrator is skilled at covering their tracks. This is where professional forensic tools become invaluable.

Polygraph testing is highly effective during workplace investigations. While it cannot be used as the sole reason for dismissal, it is an exceptional tool for narrowing down a suspect pool in cases where multiple people had access to the stolen assets. It helps clear innocent employees and focuses the investigation on those who show physiological signs of deception.

Background screening is another critical tool, particularly as a preventative measure. Many cases of employee theft are committed by individuals with a history of similar behaviour. Comprehensive pre-employment screening, including criminal record checks and financial background verifications, helps keep high-risk individuals out of your business in the first place.

Employee theft is a betrayal that cuts deep, but it is not something you have to navigate blindly. By staying alert to the warning signs, following a structured investigation process, and relying on professional, legally compliant investigative methods, you can root out dishonesty, protect your innocent employees, and restore the integrity of your business.

References

[1] Association of Certified Fraud Examiners (ACFE). Occupational Fraud 2026: A Report to the Nations. https://legacy.acfe.com/report-to-the-nations/2024/

[2] Labour Guide South Africa. Dismissals: Theft in the Workplace. https://www.laboured.org.za/dismissals-theft-in-the-workplace/