Published Wednesday 1 July 2026

Table of contents

Key takeaways

Why employee theft is a growing concern for your clients

Employee theft remains one of the most common and costly risks facing small and medium businesses. As an accountant or bookkeeper, you're often the first to spot irregularities in your clients' financial data, and that puts you in a strong position to help them act early.

According to the ACFE's 2024 Report to the Nations, the median loss from a single case of occupational fraud is $145,000, and organisations worldwide lose an estimated 5% of annual revenue to fraud. In South Africa, where many small businesses operate with lean teams and limited oversight, the impact can be even more severe relative to total revenue.

Economic pressure, rising costs of living, and high unemployment rates create an environment where the risk of internal theft grows. Your clients may not realise how vulnerable they are until the damage is already done. By helping them build stronger financial controls and monitoring processes, you're protecting their cash flow and their ability to keep trading.

Understanding the fraud triangle

Most occupational fraud follows a well-documented pattern known as the fraud triangle. Understanding these 3 elements helps you advise clients on where their vulnerabilities lie.

Your role is to help clients reduce opportunity through strong controls, while also advising on the cultural and policy measures that address pressure and rationalisation.

Types of employee theft to watch for

Employee theft takes many forms, and some are easier to miss than others. When advising clients, walk them through the most common types so they know what to monitor.

When you help clients understand the specific risks they face based on their industry and business model, you're adding real advisory value.

Build strong internal controls

Internal controls are the foundation of theft prevention. As a practitioner, you can help clients design and implement controls that match the size and complexity of their business.

Start with segregation of duties. No single employee should control an entire financial process from start to finish. Separate the responsibilities for authorising transactions, recording them, and handling the related assets. Even in small teams, basic separation, such as having different people manage payments and reconcile bank statements, makes a meaningful difference.

Establish clear bookkeeping procedures that your clients follow consistently. This includes standardised processes for recording income, managing accounts payable, and handling receipts. When processes are documented and followed, deviations become easier to spot.

Regular bank reconciliations are one of the simplest and most effective controls. Encourage your clients to reconcile their accounts weekly, not just at month-end. Cloud accounting tools make this straightforward by pulling in bank feeds automatically, giving you and your clients near real-time visibility into every transaction.

Monitor retail and cash transactions

Cash-heavy businesses are particularly vulnerable to theft because cash is harder to trace than digital payments. If your clients operate in retail, hospitality, or services, this is an area that deserves specific attention.

Advise clients to use point-of-sale (POS) systems that integrate with their accounting software. When every sale is recorded automatically and matched against bank deposits, discrepancies surface quickly. Manual cash registers with no digital trail create significant blind spots.

Cash handling procedures should be clearly documented and consistently enforced. This includes rules around who opens and closes the till, how cash is counted and verified at shift changes, and how deposits are made. Surprise cash counts, where a manager or owner randomly verifies the till balance against recorded sales, add another layer of deterrence.

Encourage your clients to move toward digital payment methods where possible. Every electronic transaction creates a record that's easier to reconcile and harder to manipulate.

Track inventory and assets

Inventory shrinkage is a common source of loss for product-based businesses, and it doesn't always get the attention it deserves until the numbers become alarming.

Help your clients establish regular physical stock counts, whether monthly, quarterly, or at a frequency that matches their turnover rate. Compare physical counts against recorded inventory levels to identify discrepancies. Consistent variances in specific product lines or locations can point to a pattern worth investigating.

For clients with significant fixed assets, such as equipment, vehicles, or technology, maintaining an up-to-date asset register is essential. Track asset locations, assigned users, and depreciation schedules. When assets aren't monitored, they're easier to misuse or remove without anyone noticing.

Inventory management software that integrates with your client's accounting platform gives both of you better visibility. When inventory adjustments, write-offs, or returns happen outside normal patterns, automated alerts can flag them for review.

Use technology to detect and prevent theft

Technology has made it significantly easier to detect and prevent employee theft, and this is an area where your advisory value really shows.

Cloud accounting platforms like Xero provide real-time visibility into your clients' financial data. You can monitor transactions as they happen, spot unusual activity quickly, and access a complete audit trail that shows who made changes and when. This level of transparency is a strong deterrent on its own.

Set up automated bank feeds so transactions flow directly into your client's accounting system. When bank data matches recorded transactions automatically, manual manipulation becomes much harder. Any unmatched or unusual transactions stand out immediately for review.

Use reporting tools to run regular exception reports. Look for patterns like unusually high refunds, frequent voided transactions, round-number expenses, or payments to unfamiliar suppliers. These reports don't replace good judgement, but they surface the data you need to ask the right questions.

For clients using Xero, features like multi-user access with role-based permissions let you control who can view, create, or approve transactions. Combined with lock dates that prevent changes to prior periods, you're building layers of protection into the system itself.

Create a culture of accountability and trust

Controls and technology go a long way, but they work best alongside a workplace culture that discourages dishonest behaviour. You can advise your clients on practical steps that build accountability without creating an atmosphere of suspicion.

It starts with hiring. Encourage clients to conduct thorough reference checks and verify qualifications for roles that involve handling money or sensitive data. In South Africa, the National Credit Act and POPIA govern what information employers can access and how they use it, so the process needs to be compliant.

Clear, written policies on acceptable use of company resources, expense claims, and financial procedures set expectations from day one. Every employee should understand the consequences of policy violations, and those consequences need to be applied consistently.

Offering staff meals, product discounts, or other benefits can reduce the temptation to take stock without permission. It's a small investment that addresses one of the more common forms of low-level theft in retail and hospitality businesses.

Employee engagement matters too. When people feel valued, fairly compensated, and connected to the business, they're less likely to rationalise dishonest behaviour. Encourage your clients to invest in open communication, regular feedback, and recognition for good work.

Watch for warning signs

Even with strong controls in place, theft can still happen. Knowing the warning signs helps you and your clients respond before losses grow.

Watch for behavioural changes in employees who handle money or financial data. Common red flags include the following:

On the financial side, review your clients' data regularly for anomalies. Unusual patterns in bank reconciliations, unexplained journal entries, or rising costs without matching revenue growth can all signal a problem. The earlier you flag these patterns, the sooner your client can investigate.

What to do when employee theft is discovered

Discovering employee theft is stressful for any business owner. Your guidance at this stage can help your client handle the situation properly, both legally and practically.

The first step is to preserve evidence. Secure all relevant financial records, CCTV footage, access logs, and digital records before the employee becomes aware of the investigation. In South Africa, POPIA governs how personal information is collected and used, so any monitoring or evidence gathering must comply with its requirements.

Advise your client to follow a fair disciplinary process in line with the Labour Relations Act (LRA). This means conducting a proper investigation, giving the employee notice of the allegations, and holding a disciplinary hearing before making any decisions. Skipping steps can lead to unfair dismissal claims at the Commission for Conciliation, Mediation and Arbitration (CCMA), even when the theft is proven.

Depending on the severity, your client may need to involve the South African Police Service (SAPS) to open a criminal case. Encourage them to consult with a labour law specialist before taking this step, as running criminal and disciplinary proceedings in parallel requires careful coordination.

Document everything thoroughly. Detailed records of the investigation, evidence gathered, and steps taken protect the business if the matter ends up in a legal forum. As the accountant or bookkeeper on the matter, your financial analysis and documentation can be critical evidence.

Strengthen your advisory practice with Xero

Helping clients prevent and respond to employee theft is exactly the kind of high-value advisory work that sets your practice apart. When you combine your financial expertise with the right technology, you can offer proactive guidance that protects your clients' businesses and deepens their trust in your practice.

Join the partner programme to access tools, training, and support that help you deliver stronger advisory services to your clients.

FAQs on employee theft prevention

Here are some frequently asked questions about preventing employee theft and advising clients on fraud risk.

What's the most effective way to prevent employee theft in a small business?

Segregation of duties and regular bank reconciliations are 2 of the most effective controls for small businesses. When no single person controls an entire financial process, and transactions are reviewed consistently, the opportunity for undetected theft drops significantly.

Can you monitor employees for theft under South African law?

Yes, but monitoring must comply with POPIA and the employee's right to privacy. Employers should have a clear workplace monitoring policy, inform employees about what's being monitored, and ensure any surveillance is proportionate to the risk. Covert monitoring is only appropriate in limited circumstances and typically requires legal advice.

What should a business owner do first when they suspect employee theft?

Secure and preserve all relevant evidence before taking any action. This includes financial records, access logs, and any digital records that could support or disprove the suspicion. Avoid confronting the employee until the evidence has been reviewed and a fair process under the LRA has been planned.

How can cloud accounting help detect employee theft?

Cloud accounting platforms provide real-time visibility into financial transactions, complete audit trails, and automated bank feeds that make manual manipulation harder to conceal. Role-based access controls and lock dates add further protection by limiting who can make changes and preventing alterations to closed periods.

How often should clients conduct stock counts to detect inventory theft?

The right frequency depends on the business, but monthly counts are a good baseline for businesses with significant inventory. High-value or fast-moving items may warrant weekly spot checks. Comparing physical counts against recorded levels consistently is what makes the process effective.