When an employee steals from a customer, embezzles company funds, or runs a fake invoice scheme, the employer is often the first target of a lawsuit. Victims assume the company should have known better. And in many cases, they are right. The legal theory that lets victims sue the boss directly, even when the boss had nothing to do with the theft, is called negligent supervision. It is not the same as vicarious liability, which holds an employer responsible for an employee’s action simply because the action happened during work. Negligent supervision is about what the employer failed to do before the theft occurred.

To win a negligent supervision case, the victim must prove four things. First, the employer had a duty to supervise its employees in a reasonable way. That duty exists because the employer controls the workplace and the people in it. Second, the employer breached that duty. Breach means the employer did something a reasonable boss would not have done, or failed to do something a reasonable boss would have done. Third, the breach directly caused the victim’s loss. Fourth, the victim suffered actual damages—real money or property gone.

The most common breach in employee fraud cases is a failure to check references. If a business hires a person with a known history of stealing from previous employers and that person later steals from a customer, the employer can be liable. The law does not require a full background check on every applicant, but it does expect basic due diligence. A company that hires a bookkeeper without calling a single reference may be found negligent when that bookkeeper drains the client trust account.

Another common breach is ignoring red flags. Suppose an employee suddenly starts living beyond his salary, driving a new car and taking expensive vacations. Coworkers notice and report it to management, but management does nothing. If that employee later admits to skimming cash from the register, the employer’s inaction can be used in court as evidence of negligent supervision. A reasonable supervisor would have investigated. The failure to investigate is the breach.

Employers also get sued for failing to implement basic controls. In a small business, one person often handles both billing and collections. That is a recipe for fraud. If the owner never separates those duties and an employee pockets customer payments for years, a jury may find that the owner’s lax supervision made the theft possible. The owner had a duty to set up checks and balances. Skipping that step is negligence.

But not every employee theft leads to a successful negligent supervision claim. The victim must show that the employer knew or should have known about the risk. That is the foreseeability element. If an employee with a clean record suddenly steals on his first day, the employer likely had no warning. No reasonable employer could have predicted it. In that situation, the employer is not liable for negligent supervision, though the victim might still try to sue under a different theory like respondeat superior.

Courts also consider whether the theft happened within the scope of employment. If an employee steals from a customer while making a delivery, that is clearly work-related. If the same employee steals from a neighbor on a Saturday, the employer is off the hook. Negligent supervision only applies when the employer had a chance to prevent the harm through better oversight.

From a practical standpoint, employers can protect themselves with a few straightforward steps. Run background checks on everyone who handles money. Verify past employment. Set up clear policies about handling cash and client accounts. Conduct random audits. Train managers to spot warning signs and report them. If you have a suspicious employee, do not look the other way. Investigate and document everything. A paper trail showing that you acted reasonably can be your best defense in court.

Victims of employee theft should understand that they have more than one legal path. If the employer had no reason to suspect the employee but the theft happened during a work task, vicarious liability may apply. If the employer ignored obvious dangers, negligent supervision is the stronger argument. In practice, plaintiffs often claim both, letting the jury decide which theory fits the facts.

The bottom line is simple. An employer that fails to supervise its workers opens itself to liability for their dishonest acts. The law does not require perfection, but it does require reasonable care. Cutting corners on hiring and oversight is not just bad business. It is a lawsuit waiting to happen.