The Real Reason Employees Steal From Small Businesses

Employee theft is one of those problems small business owners rarely talk about openly but almost everyone running a restaurant, retail store, or service business in the Philippines has encountered at some point. According to data from Score.org, a US-based business mentorship organization, nearly a third of business failures are linked to employee theft or fraud, and an employee is 15 times more likely than a non-employee to steal from an employer. In the Philippine context, where many small businesses operate on thin margins and rely heavily on trust, a single incident can be enough to strain cash flow, damage customer relationships, and force an owner to rethink every operational decision.

The reasons behind employee theft are rarely as simple as “a dishonest person got hired.” Most of the time, the theft happens because three things line up: opportunity, weak oversight, and a rationalization on the employee’s part that the act is justified or won’t be caught. Understanding the actual patterns, the legal categories under Philippine law, and the procedural traps that trip up business owners is more useful than assuming background checks alone will solve it.

What Employee Theft Actually Looks Like in Philippine Workplaces

Theft in a small business doesn’t always mean someone walked out with a laptop under their shirt. In practice, it takes forms that are harder to spot because they blend into daily operations. The Respicio.ph commentary on employee theft breaks down the most common categories, and the patterns are consistent across industries.

Expense and procurement fraud also shows up regularly: inflated receipts, ghost deliveries, kickbacks from suppliers, and fuel card abuse. A public relations practitioner might pad the cost of a product launch, while a purchasing staffer might collude with a vendor to split the overcharge. These are not rare edge cases — they are the standard ways trust gets exploited in a small operation.

When Theft Becomes a Crime: Qualified Theft, Estafa, and Fencing

Under Philippine criminal law, the charge depends on how the act happened, not just what was taken. The ASGLawPartners analysis explains the key distinction: if an employee took property without consent — walked out with cash from the drawer or merchandise from the stockroom — that is theft under Article 308 of the Revised Penal Code. But because the employee was entrusted with access, the charge usually becomes Qualified Theft, which carries heavier penalties.

If the employee instead received money lawfully — say, a cashier collected a customer payment or a purchasing officer was given funds to buy supplies — and then misappropriated it, the crime is Estafa (swindling) under Article 315. The legal difference matters because the evidence you need to gather changes. For theft, you prove unlawful taking. For estafa, you prove lawful receipt followed by misappropriation. Mixing them up in a complaint can slow down a case.

There is also the Anti-Fencing Law (PD 1612). If stolen inventory turns up being sold by a third party — a reseller, a online seller, or even another business — you may be able to pursue a fencing case against the buyer if there are indicators they knew or should have known the goods were stolen. This is particularly useful for small businesses that discover their products being sold at a discount by someone who is not an authorized dealer.

The Due Process Trap: Why Proof of Theft Isn’t Enough to Fire Someone

This is the part that catches most small business owners off guard. You have CCTV footage of an employee taking cash from the register. You have the inventory variance report. You have witnesses. And then you fire them on the spot — and lose the labor case.

Philippine labor law requires both substantive due process (a valid ground) and procedural due process (the correct steps). Even if the employee clearly stole, a termination can be overturned if the process was skipped. The Respicio commentary lays out the Twin-Notice rule that every employer needs to follow.

The First Notice, often called a Notice to Explain or Charge Sheet, must detail the specific acts — dates, items, locations, the policy violated — and give the employee a reasonable chance to respond in writing and to be heard in a conference. Vague accusations like “you stole from the company” without specifics are a common reason employers lose procedural fairness arguments. The Second Notice is the Notice of Decision, which states the findings, the basis, and the penalty with an effective date.

Preventive suspension is allowed if the employee’s continued presence poses a serious and imminent threat to property or to the integrity of the investigation, but it is capped at 30 days with pay. Using it beyond that without documentation creates exposure.

The standard of proof in labor cases is substantial evidence — not proof beyond reasonable doubt — but you still need a solid evidentiary trail: inventory records, audit logs, CCTV footage that was lawfully obtained and handled, witness affidavits, and any voluntary admission properly documented. A confession obtained through coercion or threats will be thrown out and may create a separate legal problem for the employer.

How to Investigate Without Creating New Legal Problems

The first 24 to 72 hours after discovering a potential theft are critical. The Respicio guide recommends a set of immediate steps: secure the inventory area and lock access, preserve and export CCTV footage, freeze system access (email, POS, cloud drives), conduct a controlled physical count with witnesses, and identify the last-known custody and access list. Keep a written timeline of everything.

Documentation that holds up in court includes: an incident report, inventory ledger and variance report, purchase and sales documents (purchase orders, delivery receipts, sales invoices, official receipts), POS logs including void and refund reports, GPS and fuel records for vehicle misuse, system access logs, affidavits of witnesses with personal knowledge, and photos or videos with date, time, location, and custodian noted. Chain-of-custody notes for any devices or recovered items are also important.

On the privacy side, you generally can monitor your premises and protect assets, but best practice includes clear workplace notices and policies on CCTV and property checks, reasonable and non-discriminatory implementation, and avoiding humiliating public shaming. Sharing footage widely on social media or posting the employee’s name publicly can create liability even if the theft is real.

Getting Your Money or Property Back

Beyond criminal charges, there are civil routes to recover losses. The first practical step is a demand letter identifying the missing items or cash, the computed loss, and a deadline for return or payment. This preserves the right to file criminal or civil action and can sometimes lead to a settlement without court involvement. If the property is identifiable and currently in someone’s possession — a laptop, a tool, a piece of equipment — replevin (a court action to recover possession) may be an option. For cash losses, a civil action for collection of sum of money with damages can be filed.

One area where small business owners often make a mistake is offsetting from wages or final pay. Wage deductions are regulated in the Philippines; unilateral deductions without a clear lawful basis and proper documentation can create separate labor exposure. If you are going to withhold amounts, ensure there is written authorization or a lawful basis, and keep the computation and acknowledgment in writing before withholding significant amounts.

Quitclaims and affidavits of desistance can help in settlement, but they do not automatically erase criminal liability. Many crimes are offenses against the State, and prosecution may still proceed if evidence exists, even if the employee signs a desistance. A quitclaim that is voluntary, for reasonable consideration, and not contrary to law or public policy is more likely to hold up.

Choosing the Right Legal Path for Your Situation

The right approach depends on the specific facts. If you have clear theft caught on CCTV with missing inventory, the combined path is: labor (Notice to Explain, hearing, termination for breach of trust or serious misconduct), criminal (qualified theft or theft), and civil (demand letter plus recovery or replevin if property is identifiable).

If an employee received collections but did not remit them, the evidence you need is different: document the authority to collect, the proof of collection, and the non-remittance. The criminal charge is estafa, not theft. The labor ground is breach of trust or fraud. The civil action is collection of sum of money plus damages.

For unauthorized use of company vehicle or equipment without clear “taking” — meaning the employee used it but brought it back — this is misuse rather than theft. Strengthen your case with clear policies on authorized use, logs, GPS tracking, and fuel controls. The labor charge is serious misconduct or willful disobedience. Civil damages may be recoverable if you can quantify the cost of repairs, fuel, or depreciation.

If stock is being diverted to a reseller, you may be able to expand the case beyond the employee to include the reseller under the Anti-Fencing Law. This is particularly useful when you discover that your products are being sold by someone who is not an authorized dealer and who has reason to know the items were not legitimately acquired.

Frequently Asked Questions

What to Watch For Next

Employee theft is not a problem you solve once and move on — it is a risk that evolves as your business grows and as your processes change. The most effective prevention is structural: segregate duties so no single person controls cash, inventory, and record-keeping; implement access controls and regular audits; and document every policy in writing so that when something does happen, you have both the evidence and the procedure to act on it. If you are still building out your operations, understanding how trust and oversight need to balance in a small business is worth studying before a loss forces the lesson. If this was useful, you might also want to read are you ready to be a boss in the Philippines.

Sources

Filipino businesses warned about untrustworthy providers — A related post on how to identify and avoid unreliable business partners and suppliers in the Philippines.

Philippine firms struggle with changing habits — Context on the broader operational challenges small businesses face in the current Philippine market.

Employee theft and misuse of company property: legal actions for small business owners in the Philippines. Respicio.ph.

Employee theft in the Philippines: legal consequences and prevention. ASGLawPartners, 2023.

Are there thieves in your companies?. Philstar, 2022.