How to help your clients prevent employee theft

Published Wednesday 17 June 2026

Table of contents

• Why employee theft is a growing concern for small businesses
• Common types of employee theft
• The fraud triangle: why employees steal
• 10 internal controls to help prevent employee theft
• What to do when you suspect employee theft
• How technology can help prevent employee theft
• Protect your clients' businesses with better advisory
• FAQs on employee theft prevention

Key takeaways

• Employee theft costs Canadian businesses billions each year, and small businesses are especially vulnerable because they often lack formal internal controls.
• Accountants and bookkeepers are well positioned to help clients implement practical safeguards, from separation of duties to regular reconciliations.
• The fraud triangle of opportunity, pressure, and rationalization explains why otherwise honest employees may steal, and understanding it helps you advise clients on closing gaps.
• Cloud accounting tools like Xero give you real-time visibility into client finances, making it easier to spot anomalies before they become major losses.

Why employee theft is a growing concern for small businesses

Your clients probably don't think employee theft will happen to them. Most small business owners trust their teams and treat them like family. But the numbers tell a different story.

According to the Association of Certified Fraud Examiners (ACFE) 2024 Report to the Nations, the median loss from occupational fraud is $145,000. In 22% of cases, losses exceeded $1 million. For a small business, even a fraction of that can be devastating.

The problem is particularly acute in Canada. The Retail Council of Canada's 2025 report found that total theft and shrinkage losses reached $9.1 billion in 2024. And the ACFE reports that 38% of Canadian fraud cases happened in businesses with fewer than 100 employees.

As an accountant or bookkeeper, you're often the first person to notice when the numbers don't add up. That puts you in a strong position to help clients build defences before theft occurs, and to catch it early when it does.

Common types of employee theft

Employee theft goes well beyond someone taking cash from the register. Understanding the different forms helps you advise clients on where their vulnerabilities lie.

• Cash theft: skimming sales before they're recorded, pocketing customer payments, or taking money from the register during or after shifts
• Inventory theft: taking merchandise, raw materials, or supplies, especially common in retail, hospitality, and manufacturing
• Time theft: falsifying timesheets, buddy punching, extended breaks, or billing for hours not worked
• Expense reimbursement fraud: submitting inflated, duplicated, or entirely fictitious expense claims
• Data and intellectual property theft: downloading client lists, proprietary processes, or sensitive financial data for personal gain or to share with competitors
• Payroll fraud: creating ghost employees, inflating hours, or manipulating commission calculations

The fraud triangle: why employees steal

The ACFE's fraud triangle is a useful framework for explaining workplace theft to your clients. It identifies three factors that converge when an employee commits fraud.

• Opportunity: weak internal controls, lack of oversight, or a single person controlling too many parts of a financial process. This is the factor you can most directly help your clients address.
• Pressure: financial stress, personal debt, addiction, or lifestyle expectations that exceed income. Employees may feel they have no other option.
• Rationalization: the employee justifies their behaviour with thoughts like "I deserve better pay," "the company won't miss it," or "everyone does it"

The industry's 10-80-10 rule suggests that 10% of people will never steal, 10% are actively looking for opportunities, and the remaining 80% could go either way depending on circumstances. Whether or not those exact numbers hold, the principle is sound: most theft is driven by opportunity. Remove the opportunity, and you significantly reduce the risk.

10 internal controls to help prevent employee theft

These are practical controls you can recommend to your clients. Each one closes a gap in the fraud triangle by reducing opportunity.

1. Separation of duties

No single employee should control an entire financial process from start to finish. The person who approves purchases shouldn't be the same person who processes payments or reconciles statements.

For smaller businesses where staff is limited, suggest that the owner or a trusted manager handles at least one step in every financial workflow. Even a simple sign-off requirement adds a layer of accountability.

2. Regular bank reconciliation and statement review

Monthly bank reconciliations are a baseline, but more frequent reviews catch problems faster. Advise your clients to review business credit card statements, bank feeds, and transaction records on a weekly or biweekly basis.

Look for unusual patterns: transactions at odd hours, round-number payments, duplicate entries, or vendors that don't match the business's usual suppliers.

3. Inventory management and auditing

Physical inventory counts should happen regularly, not just at year-end. Recommend periodic spot checks, especially for high-value items. Watch for unexplained increases in damaged goods or sudden drops in sales that don't match market conditions.

Good inventory management software makes tracking much easier. It gives managers real-time visibility into stock levels from anywhere.

4. Cash handling procedures

Cash is the most commonly stolen asset. Advise clients to implement count-in, count-out procedures at the start and end of every shift. At least two people should verify any cash movement.

Modern point-of-sale systems that track transactions by employee add another layer of protection. Some require a passcode or card swipe for each transaction, preventing employees from using another person's login.

5. Petty cash controls

Petty cash drawers are easy targets because the amounts seem small. But small withdrawals add up over time. Every transaction should require a receipt and a second sign-off, preferably from a supervisor.

The drawer should be balanced weekly. This prevents even well-intentioned borrowing from going untracked.

6. Active management oversight

Business owners or managers who are visibly present and engaged in daily operations deter theft simply by being there. When leadership is involved in processing transactions and reviewing records, employees are far less likely to take risks.

This doesn't mean micromanaging. It means staying connected to the financial pulse of the business.

7. Employee benefits and workplace culture

Some theft is opportunistic, but some is driven by resentment or financial pressure. A positive workplace culture with fair compensation, employee discounts, and clear perks reduces the motivation to steal.

For example, many restaurants offer one meal per shift. Retail businesses often provide staff discounts. These small gestures can significantly reduce shrinkage.

8. Security monitoring and reporting systems

Security cameras at key points, such as cash registers, stockrooms, and exits, serve as both a deterrent and a detection tool. Modern systems are affordable and accessible, with footage available online.

Anonymous reporting channels also matter. Concerned employees are often the first to notice suspicious behaviour, and they need a safe way to raise the alarm. Remind clients to comply with all applicable privacy legislation when setting up monitoring.

9. Behavioural awareness and early intervention

Sudden changes in employee behaviour can be warning signs. These include becoming secretive, defensive, or unusually protective of certain tasks. Performance issues that seem out of character may also point to a problem.

Encourage your clients to have one-on-one conversations when they notice changes. There could be many explanations, but it's worth staying aware that fraud or theft could be one of them.

10. Pre-employment screening and background checks

For positions that involve cash handling, financial records, or access to sensitive data, background checks are a sensible investment. These should include criminal record checks and verification of prior employment.

Screening won't eliminate all risk, but it helps identify red flags before someone has access to your client's finances.

What to do when you suspect employee theft

When a client comes to you with suspicions of employee theft, your guidance matters. Here's a practical framework you can walk them through.

• Secure the records. Before confronting anyone, make sure all financial records, access logs, and relevant documents are preserved. Back up digital files and restrict the suspected employee's access to financial systems.
• Gather evidence. Review transaction records, bank statements, inventory logs, and any available security footage. Look for patterns that support or disprove the suspicion.
• Consult legal counsel. Employment law around workplace fraud varies by province. Advise your client to speak with a lawyer before taking action to avoid wrongful dismissal claims or procedural mistakes.
• Decide on reporting. Under the Canadian Criminal Code, theft over $5,000 is an indictable offence. Even for smaller amounts, filing a police report creates a formal record. Many businesses choose not to report, but your clients should make that decision with full awareness of their options.

Most employee theft goes unreported. Employers often consider the amount too small for legal action, or they're uncomfortable pursuing the matter due to personal relationships. Your role is to help clients make informed decisions, not emotional ones.

How technology can help prevent employee theft

Cloud accounting software has made real-time theft prevention practical for practices of any size. Instead of waiting for month-end reports, you can monitor client finances in near real time.

With Xero, you get live bank feeds, automatic transaction matching, and clear audit trails. If someone creates a suspicious payment or alters a record, it shows up quickly. Xero HQ lets you manage all your clients from a single dashboard, making it easier to spot anomalies across your practice.

Beyond accounting software, advise your clients to consider integrated point-of-sale systems for retail, time-tracking software for service businesses, and expense management tools that require receipt uploads and manager approvals.

Technology doesn't replace good internal controls, but it makes them far easier to enforce and monitor.

Protect your clients' businesses with better advisory

Employee theft prevention is exactly the kind of high-value advisory service that sets your practice apart. It moves you beyond compliance work and positions you as a trusted business advisor.

By helping clients implement strong internal controls and using cloud accounting tools to monitor their finances, you protect their businesses and strengthen your relationships. Join the partner program to access the tools and support you need to deliver this kind of advisory at scale.

FAQs on employee theft prevention

Here are some frequently asked questions about employee theft prevention that your clients may ask.

What is the 10-80-10 rule for employee theft?

The 10-80-10 rule originated in the loss prevention industry as a way to categorize employee risk. It's useful when advising clients because it shifts the conversation from trust to systems. Instead of asking "do I trust my staff?", your clients should ask "do my controls close the gaps for the 80% who might be tempted?" Pair this framework with the fraud triangle to build a comprehensive prevention strategy tailored to the client's industry.

How common is employee theft in Canadian businesses?

Occupational fraud affects businesses of all sizes, but the ACFE's data shows that small organizations suffer disproportionate damage relative to their revenue. In Canada, the retail sector alone accounted for a significant share of losses, and industries like hospitality, construction, and professional services also face elevated risk. The Canadian Federation of Independent Business (CFIB) has identified workplace crime as a daily pressure for small business owners across the country.

What are the most common signs of employee theft?

Watch for unexplained inventory shortages, discrepancies in cash counts, unusual transaction patterns, and sudden changes in employee behaviour. Other red flags include resistance to oversight, reluctance to take time off, and lifestyle changes that don't match an employee's salary.

Should you report employee theft to police?

The decision depends on the circumstances. Beyond criminal charges, your clients may also have options for civil recovery to recoup losses. Some business insurance policies cover employee dishonesty, so filing a police report may be required to support a claim. Encourage clients to weigh the legal, financial, and reputational factors with their lawyer before choosing a path.

How can cloud accounting software help prevent employee theft?

Yes. Look for software that lets you set user permissions so employees only access what they need, requires dual approvals for payments above a threshold, and logs every change with a timestamped audit trail. Advise clients to review their permission settings quarterly and remove access for anyone who changes roles or leaves the business.