You hire a trusted employee. You give them access to company accounts, customer data, or inventory. One day you discover they have been siphoning money, stealing products, or committing fraud against clients. Your first instinct is to fire them and call the police. But then you get a letter from a lawyer representing a victim—a customer or a business partner—and they are suing you, the employer, for the employee’s theft. Can they do that? Yes. In many states, the answer is yes, under a legal doctrine called vicarious liability.
Vicarious liability means that an employer can be held legally responsible for the actions of an employee, even when the employer did nothing wrong. The idea is simple: if an employee is acting within the scope of their job when they commit a harmful act, the employer should shoulder the cost because the employer benefits from the employee’s work and has the deepest pockets. But applying that idea to employee theft or fraud is tricky. The key question is whether the employee was acting “in the course and scope of employment” at the moment they stole or defrauded.
Stealing is almost always a personal act, not something the employer asked for or authorized. So you might think the employer would never be liable. Courts have a different view. They look at when and how the theft happened. If an employee uses their job position, authority, or tools to commit the fraud, the employer can be on the hook. For example, a cashier who pockets cash from the register is clearly stealing. But a salesperson who overcharges a customer and pockets the extra money is using the trust and authority the employer gave them. That is a gray area. Courts often say that even though the theft was against the employer’s rules, it was still connected to the job duties. The employer put the employee in a position where they could commit the fraud, so the employer bears the risk.
There is a second angle: negligent hiring, training, or supervision. Even if vicarious liability does not apply, a victim can sue the employer for being careless. If you hired someone with a known criminal record for theft and you did not check it, or you gave them easy access to cash without oversight, a court may find you negligent. That is a separate claim from vicarious liability, but it can be just as costly. The victim argues that you should have prevented the theft by doing a background check or implementing basic safeguards. This claim does not require the employee to have been acting within scope. It is about your own failure to act reasonably.
The third piece of the puzzle is the “frolic and detour” rule. If an employee steals while on a complete personal mission, not during work hours or using work resources, the employer is usually safe. For instance, if an employee breaks into the company warehouse at midnight using their own tools and steals inventory, that is clearly outside the scope of employment. But if they steal during their regular shift using a company key, the opposite is true.
What about fraud against customers? This is common in industries like insurance, real estate, and finance. An insurance agent collects premiums from clients but never sends them to the company. The agent is committing fraud, and the client loses money. The client sues the insurance agency. Many states say the agency is vicariously liable because the agent was acting within their apparent authority. The client had no way of knowing the agent was crooked. The employer created the opportunity and the appearance of trust. So the employer pays.
The practical takeaway: if you run a business, you need to assume you will be liable when an employee steals from or defrauds someone while doing their job. That does not mean you are helpless. You can take steps to reduce risk. First, run thorough background checks before hiring. Second, separate duties so no one person has complete control over money or data. Third, train managers to spot red flags and enforce a zero-tolerance policy for theft. Fourth, buy insurance for employee dishonesty, often called a fidelity bond, to cover losses. Fifth, document your policies and make sure every employee signs them. If a victim sues, having a clear policy and proof of enforcement can help you argue you were not negligent.
But do not rely on those steps to completely avoid vicarious liability. Courts often side with innocent victims over employers, especially in fraud cases. The law is designed to push the cost of employee crime onto the business, because the business can spread that cost across customers or insurance. It is a risk of doing business. Accept it and plan for it.
If you are a victim of employee theft—either as an employer or as a customer of a business—know your options. As an employer, you can fire the employee and report them to law enforcement, but you may still have to pay a civil judgment. As a customer, you can sue the business directly. The company may try to blame the employee, but the law usually holds the company responsible.
