An employee caught stealing on camera gives you something most theft cases never produce: a clear visual record of what happened. What you do in the next few hours decides whether that footage leads to a clean termination, a criminal case, money back in your pocket, or a wrongful-termination claim against you. Preserve the video first, confirm the camera was legal, run a documented termination, and then choose among police, civil court, and your insurer based on what you lost and what you want back.
Preserve the Footage Before Anything Else
Most commercial surveillance systems record on a loop and overwrite old files automatically. Pull the relevant clips off the system now and save them somewhere separate: an external hard drive, an encrypted cloud folder, or write-once storage. Lose the original and the rest of your options shrink.
Authentication is the next concern, because the employee’s side will attack the video if this ends up anywhere formal. Confirm the file’s embedded metadata — timestamp, camera identifier, creation date — lines up with when and where the theft happened. If your system supports it, generate a SHA-256 hash of the saved file right away. The hash is a digital fingerprint; alter a single frame and it stops matching, which is how you prove no one tampered with the recording. Recompute it every time the file is copied or opened.
Lock down access. Encrypt or password-protect the storage location, and keep a written log of every person who views the footage, when, and why. That chain-of-custody record is what defeats later claims that the video was edited.
Confirm the Camera Was Legally Placed
Footage from an illegal camera is worse than no footage. Cameras are never permitted in areas where employees have a reasonable expectation of privacy — restrooms, locker rooms, changing areas. A recording from any of those places is unusable and can create liability for you.
Audio raises the stakes further. The federal Electronic Communications Privacy Act prohibits intercepting oral communications without consent, with a one-party consent exception that permits recording if at least one person in the conversation knows about it.1Office of the Law Revision Counsel. 18 USC 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications Prohibited Roughly a dozen states require all-party consent, meaning everyone being recorded must know. If your system captures sound, check your state’s wiretap law before relying on the audio. Video-only recording in a common work area, with a disclosed surveillance policy, is almost always on safer ground.
Running the Termination
Even in an at-will state, how you fire a thief matters. A rushed or undocumented termination opens the door to wrongful-termination claims and makes it harder to contest unemployment later.
Hold the meeting in a private office with at least one witness present, ideally someone from HR or management taking notes. Present what the investigation found, including the surveillance evidence, and let the employee respond. People occasionally have explanations you haven’t considered, and giving them the chance protects you from claims of a one-sided process. The video usually answers for itself.
Issue a written termination notice stating the employee is being discharged for cause based on a violation of company policy, specifically theft. The “for cause” language matters later for unemployment. Collect all company property on the spot — keys, badges, equipment, uniforms — and disable system access and building credentials before the employee leaves the room if you can. Record the exact date and time of the exit.
Don’t Dock the Final Paycheck
The urge to withhold wages or deduct the value of what was stolen is strong, and giving in to it is one of the most common and expensive mistakes employers make. The Department of Labor requires that earned wages be paid by the next regular payday at the latest; some states require payment on the day of termination or within 72 hours.2U.S. Department of Labor. Last Paycheck
Under the Fair Labor Standards Act, deductions for theft, cash shortages, or damaged equipment are only permitted if the deduction does not drop the employee’s effective pay rate below the federal minimum wage of $7.25 per hour for that pay period, and does not cut into any owed overtime.3U.S. Department of Labor. Fact Sheet 16 – Deductions From Wages for Uniforms and Other Facilities Under the Fair Labor Standards Act For hourly workers near minimum wage, that leaves almost no room to deduct anything. Many states prohibit unilateral deductions for losses outright without the employee’s prior written authorization or a court order.
Pay the final wages in full. Pursue the loss through a separate civil claim. Trying to self-help your way to restitution through a withheld paycheck regularly triggers wage-and-hour complaints worth more than the stolen property.
Should You Call the Police?
In most situations you are not legally required to report employee theft, but there are strong practical reasons. A police report creates an official record that strengthens any future civil claim, insurance claim, or unemployment dispute. Many commercial crime and employee dishonesty insurance policies will not pay a theft claim unless you have filed a report and cooperated with the investigation.
When you contact law enforcement, bring a copy of the footage (not your only copy), a written summary of what the video shows, an estimate of the property value with receipts or inventory records, and the employee’s identifying information. Whether the theft is charged as a misdemeanor or felony depends on the value of what was taken, and every state sets its own threshold. If the theft spanned weeks or months, prosecutors in many jurisdictions can aggregate the total rather than treat each incident separately, which can push a series of small thefts into felony territory.
Building the Loss File
Whether you’re going to the police, your insurer, or civil court, you need a clear accounting of what was taken and what it was worth. Create a line-item inventory listing each missing item, its fair market value, and the receipt or invoice that supports the number. Each item should tie back to a specific timestamp in the footage showing the employee taking it.
Fair market value is not replacement cost. A laptop you bought for $1,200 two years ago might be worth $600 at the time of the theft. Courts and insurance adjusters will push back on inflated numbers. For cash, pull register tapes, reconcile deposits, and document the gap.
Put everything into one packet: the footage on a secure drive, the loss inventory with supporting receipts, the personnel file, the written termination notice, and any prior disciplinary records. The same packet feeds every path from here.
Civil Recovery
If property wasn’t recovered and the employee won’t make restitution voluntarily, you can sue to recover the value. This is separate from any criminal case the police bring; criminal prosecution seeks punishment, a civil claim seeks money.
Start with a formal demand letter by certified mail with return receipt requested. Identify the specific items, their documented value, the date and circumstances, and a deadline for payment, typically 15 to 30 days. Many states have civil recovery or civil theft statutes that let businesses collect not just the actual loss but enhanced damages — often double or triple — plus attorney fees and court costs. These statutes vary, so check your state’s version before you draft.
If the demand goes unanswered, small claims court is usually the most cost-effective next step for smaller losses. Maximum claim limits range from roughly $2,500 to $25,000 depending on the state, with most falling between $5,000 and $10,000. Filing fees are generally under $100 and the process is designed for people without lawyers. Larger losses require filing in a higher court, which generally requires an attorney. The former employee must be formally served; a private process server typically runs $20 to $100 per attempt.
Filing a Commercial Crime or Fidelity Bond Claim
If your business carries a commercial crime policy or a fidelity bond, employee theft is what it was built to cover. Notify the insurer as soon as possible, because many policies have strict notification deadlines that can void coverage if missed. The insurer will want the police report, the footage, and your loss documentation.
Insurers look closely at whether you had reasonable controls in place. If the theft was possible because of no inventory tracking or no oversight of cash handling, the insurer may argue the loss was preventable and reduce or deny the claim. Document whatever controls you did have, and expect the insurer’s own investigation before any payout.
A payout doesn’t close off civil recovery against the employee. If you collect from both, you may need to reimburse the insurer from what you recover, since most policies include a subrogation clause giving the insurer the right to pursue the employee for whatever it paid you.
Unemployment and Health Coverage After the Firing
An employee fired for theft will almost certainly be denied unemployment benefits. Every state treats theft as disqualifying misconduct, which the U.S. Department of Labor defines as “an intentional or controllable act or failure to take action, which shows a deliberate disregard of the employer’s interests.”4U.S. Department of Labor. Benefit Denials Stealing clears that bar easily. Some states disqualify the claimant for the entire benefit year; others require the person to earn a multiple of their weekly benefit amount at a new job before they can collect anything.
When the claim is filed, you’ll get a notice from the state and a chance to contest. Submit the footage, the written termination notice, and the rest of your documentation. Without it, the state may side with the claimant on a he-said-she-said basis.
Health coverage is the other piece. A termination normally triggers COBRA continuation coverage, letting the former employee keep the group plan by paying the full premium. The statute excludes terminations for “gross misconduct” from qualifying as a COBRA-triggering event.5Office of the Law Revision Counsel. 29 USC 1163 – Qualifying Event Theft on camera is a strong case for gross misconduct, but the term isn’t precisely defined in the statute and courts have sometimes read it narrowly. If you plan to deny COBRA on that basis, consult an employment attorney first; getting it wrong exposes you to penalties.