If you run a business, you probably already worry about employees stealing from you. But what happens when one of your workers commits fraud against a customer? Maybe a salesperson fakes a warranty extension and pockets the money. Or a technician bills a client for repairs they never performed. Your instinct might be to fire the employee and wash your hands of the matter. Unfortunately, the law often sees things differently. In many situations, you as the employer can be held legally responsible for the losses that employee caused, even if you had no idea what they were doing. This is not about whether you did something wrong. It is about the basic legal principle that a business is responsible for the actions its employees take while doing their jobs.

Courts call this concept vicarious liability, which is just a fancy way of saying that the boss takes the blame for the worker’s mistakes or misconduct, provided the misconduct happened during the course of employment. The key question is not whether you authorized the fraud, but whether the employee was acting within the general scope of their job when they committed it. If a cashier rings up a fake return and pockets the refund, they are using the tools and authority you gave them to handle customer transactions. Even though they abused that authority, the law still treats it as part of their work. That means you, the employer, are the one who has to make the customer whole.

The logic behind this rule is simple. You put that employee in a position where they could interact with customers and handle money or data. You benefit from their work when it goes right, so you also bear the risk when it goes wrong. Customers trust your business, not just the individual employee. When a customer hands over money or personal information, they are relying on your company’s reputation and your promise that the transaction is legitimate. If an employee betrays that trust, the customer should not have to chase down a broke former employee to get their money back. Instead, the customer can sue you, and you can then try to recover your losses from the employee separately.

But the rule is not unlimited. You are not automatically liable for every crooked thing an employee does. The fraud must be connected to the job the employee was hired to do. If an employee waits until after hours, uses their own phone, and impersonates a customer to steal money from a bank account they happened to learn about at work, a court might decide that the fraud was too far removed from their actual duties. On the other hand, if the employee used company systems, customer lists, and their official position to pull off the fraud, the connection is strong, and you are likely on the line.

You also need to watch out for your own negligence. Even if the fraud itself was not within the scope of employment, you can still be liable if you hired the wrong person, failed to supervise them properly, or ignored clear warning signs. This is called negligent hiring or negligent supervision. If a court finds that you did not run a background check on an employee who had a known history of theft, or that you gave an employee unsupervised access to customer accounts despite previous complaints, you can be held directly responsible for your own bad decisions. That liability exists regardless of whether the employee was acting within their job duties.

So what can you do to protect yourself? First, run thorough background checks on anyone who will handle money, customer data, or sensitive transactions. Second, put clear policies in place that define what is and is not allowed. Third, monitor employee activity, especially in areas where fraud is common, such as refunds, discounts, and account changes. Fourth, train your employees on the rules and make sure they know that fraud will result in termination and possibly criminal charges. Finally, act quickly if you get a complaint or notice something suspicious. Ignoring a problem only makes it worse and can be used against you in court.

Employee fraud against customers is a real risk for any business. The legal system does not treat it as a personal problem between the thief and the victim. It treats it as a cost of doing business, and you are the one expected to cover that cost. Understanding that reality now can help you take the steps that keep you out of the courtroom in the first place.