I Think My Employee Is Stealing From My Business: What To Do in Tennessee

Employee theft costs American businesses tens of billions of dollars a year. In Tennessee, it's an issue that touches businesses of every size and in every industry — from retail and restaurant operations to professional service firms, construction companies, and healthcare practices. If you've noticed inventory discrepancies you can't explain, cash shortfalls that don't add up, vendor payments that seem off, or customer refunds that look suspicious, your instinct that something is wrong deserves serious attention.

At Delator Group, we investigate employee theft and internal fraud for Tennessee businesses. We do this work often enough to know that the most common mistake employers make is acting too quickly without sufficient evidence — and the second most common mistake is waiting too long. This article helps you navigate the space between those two errors.

The Most Common Forms of Employee Theft

Employee theft takes many forms, and understanding which type you might be dealing with shapes the appropriate investigative approach.

Cash theft is the most straightforward: skimming from registers, stealing from petty cash, intercepting customer payments before they're recorded. It's also the most directly provable through surveillance and transaction analysis.

Inventory theft involves employees taking merchandise, supplies, materials, or equipment. In retail, this ranges from small items slipped into pockets to coordinated organized retail theft involving multiple employees and outside fences. In construction and manufacturing, it involves materials and equipment. In food service, it involves product.

Payroll fraud includes ghost employees on the payroll, falsified hours, unauthorized overtime, and manipulation of commission or bonus calculations. This category tends to involve people with access to payroll systems — HR, accounting, management.

Accounts payable fraud involves creating fictitious vendors, inflating invoices from real vendors and pocketing the difference, or diverting payments to personal accounts. It typically requires either access to the payment approval process or collusion between an employee and an outside vendor.

Expense reimbursement fraud involves submitting fake or inflated expense reports: personal charges submitted as business expenses, receipts altered to increase amounts, or entirely fabricated expenses.

Data theft — the unauthorized taking of proprietary business information, customer lists, trade secrets, or intellectual property — is a growing category that causes harm that's harder to quantify than cash or inventory but often more damaging in the long run.

What You Should Do Before You Act

The single most important principle in employee theft investigations is this: do not act on suspicion alone. Wrongfully accusing an employee of theft exposes you to wrongful termination claims, defamation claims, and potential employment discrimination claims. In Tennessee, as in every state, there is a real difference between having a gut feeling that something is wrong and having documented evidence of what happened and who did it.

Before you confront the suspected employee, before you fire them, and before you call the police, you need evidence. The investigation that builds that evidence is where Delator Group comes in.

How Delator Group Investigates Internal Employee Theft

The first step in any employee theft investigation is assessing what type of theft is suspected, what evidence exists already, and what additional investigation is needed to either confirm or rule out the theory.

For cash and register theft, the investigation typically involves a combination of covert surveillance of register and cash handling operations, point-of-sale transaction analysis to identify patterns of suspicious activity (voids, refunds, no-sale transactions), and review of security camera footage if available. We can deploy covert camera systems if existing surveillance coverage is inadequate.

For inventory theft, the investigation involves physical inventory counts, documentation of discrepancy patterns, surveillance of loading and shipping operations, and background research on suspected employees.

For financial fraud — payroll manipulation, accounts payable fraud, expense reimbursement abuse — the investigation involves detailed transaction analysis, vendor research, document examination, and in some cases coordination with forensic accounting professionals who can quantify losses and trace flows.

For data theft, the investigation involves digital forensics — examination of what data was accessed, copied, or transmitted by the suspected employee, and to where — combined with circumstantial investigation of the employee's conduct and potential beneficiaries of the stolen information.

Throughout all of these investigations, we maintain rigorous documentation and chain of custody, ensuring that the evidence we develop is usable in both civil and criminal proceedings.

Your Legal Options After the Investigation

Once an employee theft investigation has produced documented evidence, you have several options. Criminal prosecution is appropriate for theft above certain thresholds and when you want to see criminal accountability. In Tennessee, theft of property worth $1,000 or more is a felony. Filing a police report with documented investigative findings significantly increases the likelihood that law enforcement will pursue the case.

Civil litigation allows you to sue the employee for the value of what was taken. In some cases, civil suits against multiple parties — the employee and any co-conspirators — can recover more than criminal restitution alone.

Insurance claims under crime or fidelity bonds, where applicable, may provide recovery for documented theft.

Termination, with documentation that demonstrates the legitimate nondiscriminatory basis for the decision, protects you from wrongful termination claims.

At Delator Group, we document our investigative findings with all of these downstream uses in mind. If you're a Tennessee business owner who suspects internal theft, contact us for a confidential consultation. We'll assess your situation honestly and tell you what investigation is likely to achieve.