You hire someone, trust them with your money, customers, and data, and then find out they have been stealing from you or defrauding your clients. It is infuriating. But the real shock often comes when you learn that you, the employer, can be sued for what that employee did. This is not a rare legal technicality. Courts routinely hold businesses responsible for theft and fraud committed by employees, even when the owner had no idea it was happening. Understanding when that liability kicks in, and how to protect yourself, is essential for any business owner.

The main legal rule that makes employers liable is straightforward: if an employee commits a theft or fraud while doing their job, the employer can be held responsible. This is sometimes called the “scope of employment” test. The question a court asks is whether the employee was acting within the normal duties of their job when they stole or cheated. For example, a cashier who pockets money from the register is clearly doing something directly connected to their job responsibilities. They were supposed to handle cash, and they used that access to steal. The employer is liable. Similarly, a salesperson who lies to a customer to close a deal, then pockets the commission, is committing fraud while doing the work they were hired to do. The employer gets sued.

But the rule is not unlimited. If an employee steals in a way that has nothing to do with their job, the employer may not be liable. Suppose a warehouse worker breaks into the office after hours, cracks the safe, and takes company cash. That is not part of their job duties. They were not supposed to be in the office or handling the safe. In legal terms, this is called a “frolic” – a detour from the job for purely personal reasons. The employer generally escapes liability in those situations. However, the line can be blurry. Courts look at the time, place, and purpose of the theft. If the employee used a company truck during work hours to deliver products but then stopped to rob a house, the connection to work is weak. If they used the truck to make a delivery and instead stole from the delivery address, that is much closer to their job.

Beyond this basic rule, employers can also be held liable for their own negligence. This is a separate but powerful source of liability. If you hired someone with a known history of theft or fraud, or if you failed to run reasonable background checks, a court might say you were negligent in hiring. The same applies to negligent supervision or retention. If you knew or should have known that an employee was stealing but did nothing, and they continued to steal from customers, you can be sued for failing to stop them. This is why it is critical to document any red flags and take prompt action. Doing nothing is not a defense.

Employee fraud cases often follow a similar pattern. An employee might set up fake vendor accounts, create phantom customers, or redirect payments to their own bank account. If these actions appear to be part of the employee’s normal job functions, the employer is on the hook. For instance, an accounts payable clerk who approves fake invoices using the company’s payment system is doing what they were hired to do – process payments. The fraud was committed through that legitimate authority. The employer must answer for the losses suffered by victims, which could be customers, vendors, or even the company itself.

What can you do to limit this risk? First, implement clear policies that define ethical conduct and specify that any theft or fraud is grounds for immediate termination. Train employees regularly on these policies. Second, conduct thorough background checks before hiring, especially for positions involving money, data, or customer access. Third, create internal controls that require multiple approvals for large payments or inventory changes. Do not let one person have unchecked control over a process. Fourth, encourage reporting of suspicious activity without fear of retaliation. Finally, consider purchasing crime insurance or a fidelity bond that covers employee theft. This will not prevent lawsuits, but it can cover some of the financial damage.

The bottom line is that you cannot hide behind ignorance. If an employee uses their job to steal or defraud, the law often treats that as your problem. The key is to recognize the risks, take proactive steps to prevent misconduct, and document everything. When a lawsuit comes, courts will look at what you knew, what you did, and whether the employee was acting within their job. Prepare for that test before the theft happens, not after.