top of page

“I trusted them”: when employee theft leaves the business struggling to survive

Sep 6
6 min read

Updated: 7 hours ago

Business records and calculations for reviewing cash after suspected employee theft

When employee theft drains business cash, the immediate priorities are to prevent further loss, preserve evidence and establish whether the business can meet its next obligations.

The missing money may be only part of the shock. An owner can also be confronting a broken relationship, uncertainty about the accounts and the uncomfortable thought that nobody knows how long it has been happening.


Suspected employee theft needs a careful response. In an Australian business, employment decisions, reporting and possible recovery require their own advice. Meanwhile, wages and supplier bills keep arriving. A practical recovery plan must address both the incident and the cash needed to continue operating.



The short answer


  • Protect records and seek advice before confronting allegations or changing employment arrangements.

  • Reconcile cleared funds, unpaid bills and customer receipts independently of potentially unreliable records.

  • Keep uncertain recoveries outside the cash forecast needed to meet essential payments.

  • Finance may help an otherwise viable business, but it cannot repair controls that still allow losses.



Why employee theft can create more than one cash gap


The loss may involve diverted customer payments, unauthorised transfers, false purchases, stock or payroll records. Queensland Police's employee fraud guidance identifies risks across cash handling, purchasing and other business functions. A small unexplained discrepancy is a reason to investigate, not proof that a particular person committed a crime.


The number first discovered may not be the full exposure. Suppliers shown as paid may still be waiting. A recorded customer receipt might never have reached the business account. Stock thought to be available may need replacing before a job can be completed.


This is why a strong sales month does not establish that the business can fund recovery. The explanation of profit versus cash flow is useful when the accounting result and the bank balance tell different stories. Establish which records remain dependable before using them to support a finance application.



Protect the business without destroying the evidence


Get appropriate legal, accounting and technology support early. Preserve original statements, transaction records, invoices, access logs, emails and relevant system backups through lawful means. Record when discrepancies were found and who handled the evidence. Avoid editing original files to make them easier to read or circulating accusations through the team.


Ask your advisers how to restrict risky access while preserving audit trails and maintaining lawful employment arrangements. Shared passwords, a departing administrator or poorly understood payment permissions can complicate the response. Where a live transaction may still be recoverable, contact the relevant payment provider promptly through verified channels.


Discuss reporting with local police and take advice about other notifications relevant to the incident. Check any potentially applicable insurance and its notification requirements promptly. A policy's existence does not establish cover, and a submitted claim is not money available for payroll.


Keep communications factual and limited to people who need the information. Staff may be worried about their jobs and customers may need accurate payment instructions. They do not need an untested explanation of guilt.



Do not turn an investigation into another liability


Theft and fraud can amount to serious misconduct, but suspicion does not automatically justify immediate dismissal. The Fair Work Commission's guidance on conduct explains that allegations and evidence matter when assessing dismissal. Obtain independent employment legal advice, with HR support where needed, about the applicable system, investigation and any proposed suspension or termination.


Nor can an employer automatically recover a suspected loss by withholding wages or final entitlements. The Fair Work Ombudsman explains that pay deductions are permitted only in limited circumstances. Written agreement alone does not make every employer-benefiting deduction lawful.


Treat recovery of money and employment obligations as separate matters requiring advice. Acting while angry may feel decisive, but an avoidable employment dispute can create fresh costs just when the business has the least room for them.



Rebuild the cash position from independent records


Ask your accountant or an independent reviewer to reconcile actual bank movements with supplier statements, payroll records and customer balances. Prioritise the current position while the investigation works through the history. Waiting for a final loss figure can leave next week's payments unmanaged.


Create a list of essential payments by date and identify the receipts you can reasonably rely on. Include investigation costs, replacement administration support and any interruption to trading. A 13-week cash flow forecast gives those costs a place rather than treating them as surprises outside the plan.


Use a separate schedule for possible recoveries. Money an employee has promised to return, a potential insurance payment and proceeds from legal action all carry uncertainty. They should not quietly become the balancing figure that makes payroll appear funded.


The government's cash flow guide supports regular monitoring of cash and expenses. In this situation, review frequency should reflect how quickly payments and reliable information are changing. Nominate somebody to maintain the numbers while the owner handles the wider disruption.



A hypothetical loss and the cost of staying open


This illustration uses assumed figures. It is not a reported client experience or a forecast of recovery.


A business discovers $45,000 of unauthorised payments. It has $18,000 of cleared cash. During the next fortnight, wages require $22,000, essential suppliers require $14,000 and other committed costs require $6,000. Independently checked customer receipts of $16,000 are expected within that fortnight.


Before timing differences, available cash and assumed receipts total $34,000 against $42,000 of commitments. The immediate gap is $8,000. Add an assumed $5,000 for urgent accounting and replacement administration support and the gap becomes $13,000.


That does not mean a $13,000 loan is the answer. Some outgoings may precede the receipts, further losses may emerge and repayments would create another obligation. Equally, borrowing the full historical loss may exceed the operating need. The guide to calculating working capital requirements helps distinguish the loss already suffered from the cash required to operate from today.



Repair controls before adding borrowed money


Start with the route that allowed the suspected loss. If one person could create a supplier, change payment details, approve a payment and reconcile the account, consider separating those functions. In a small team, an owner or external bookkeeper may provide a second review instead of adding a new employee.


Useful controls can include independent verification of changed supplier details, individual access credentials, approval limits and reviews of unusual refunds or adjustments. Reconcile against original statements and review who can change payroll information. Match controls to the actual business rather than buying software without changing permissions or review habits.


Record who performs each check and who follows up exceptions. Trust remains valuable, but the process should not depend on one person's reputation. Practical work to improve cash flow before borrowing can run alongside those controls, including collecting verified receivables and resolving invoice errors.



Prepare an honest recovery case


If finance is still required, present what is known, what remains under investigation and what has changed. An adviser needs a credible current position, a dated forecast, existing debt commitments and evidence that further losses have been contained. The guide to working capital finance applications explains why coherent records matter.


Do not assume that describing the loss as one-off proves the business can repay a new facility. Check underlying margins and normal cash generation after the disruption. Consider the questions in when borrowing may not solve a cash flow problem before adding repayments to an already stretched business.


If a company may be unable to pay debts when due, obtain specialist advice promptly. ASIC's guidance for directors facing insolvency explains why directors need to remain informed and respond to financial distress. Waiting for an insurance decision or criminal investigation does not resolve today's obligations.



An immediate recovery checklist


  1. Preserve original records and obtain legal and accounting advice.

  2. Address ongoing access risks through a lawful, documented process.

  3. Reconcile actual funds and outstanding obligations independently.

  4. Forecast essential payments without relying on uncertain recoveries.

  5. Notify relevant parties as advised and check insurance requirements.

  6. Repair payment controls and test repayment capacity before borrowing.



Frequently asked questions


Should I dismiss an employee as soon as money is missing?

Do not assume a discrepancy proves theft or permits immediate dismissal. Seek employment advice about evidence, procedural requirements and the applicable workplace system before deciding how to investigate or change employment arrangements.


Can I take the loss out of their final pay?

Not automatically. Deductions and final entitlements are subject to legal rules, even where serious misconduct is alleged. Obtain advice about lawful recovery options rather than using the payroll system to settle the dispute.


Can I include an insurance recovery in a funding plan?

Identify it separately with its status and uncertainty. Do not rely on it to meet critical payment dates unless the amount and timing are sufficiently established. Test the business's ability to operate and repay borrowing if recovery is delayed or unavailable.



The next decision


The first funding decision is whether reliable cash and repaired controls can support recovery. Establish that before taking on repayments.



Assessing the cash gap after a business loss?


Fairlane Finance can help you assess possible funding structures against your business’s cash-flow timing.


General information only. This article does not constitute financial, credit, legal, tax, accounting, compliance or valuation advice. Finance is subject to lender approval, eligibility criteria, terms, fees and conditions. Consider obtaining independent professional advice for your circumstances before acting.



Sources and further reading


bottom of page