Employee fraud is the deliberate misuse of a job to take an employer’s money, property, or information for personal gain. It covers everything from pocketing cash at the register to falsifying a public company’s financial statements, and the federal penalties scale with it: prison terms run as high as 30 years, restitution to the employer is mandatory on conviction, and the IRS treats the stolen funds as taxable income. Because the person already has legitimate access to the systems they are abusing, these schemes often run for months before anyone notices.
What Counts as Employee Fraud
Most schemes fall into one of four patterns.
Taking cash, goods, or data directly. Skimming is cash taken from a transaction before it is recorded, so the money never appears on the books and the loss shows up only as thin margins or inventory that does not match sales. Larceny is taking funds already on the books, such as removing cash from a reconciled drawer. The same category covers theft of physical property like tools, electronics, and office equipment, as well as proprietary information such as customer databases, trade secrets, and product designs copied for personal use or sale to a competitor.
Manipulating payment systems. Payroll fraud includes “ghost employees” — fictitious workers whose paychecks the perpetrator collects — along with falsified timesheets and unauthorized overtime. Expense reimbursement fraud dresses personal meals, travel, or retail purchases as business costs. Check tampering means altering a payment or writing a check to a shell company the employee controls. A more sophisticated version is changing a real vendor’s bank-account details just before a large wire transfer. Because these payments flow through normal accounts payable, they look routine.
Distorting the financial statements. This is intentional misstatement or omission of material information: inflating revenue, hiding debt, failing to record expenses, or improperly valuing assets to prop up the balance sheet. The pressure usually comes from quarterly targets or financing needs.
Corruption with an outside party. Kickbacks (a vendor secretly pays the employee for being awarded a contract), bid-rigging (sharing confidential bid information with a preferred bidder), and undisclosed conflicts of interest all involve an outsider. The employer ends up overpaying while the employee profits on the side. In healthcare, kickbacks involving federal health programs carry up to 10 years in prison and a $100,000 fine per violation.1Office of the Law Revision Counsel. 42 USC 1320a-7b – Criminal Penalties for Acts Involving Federal Health Care Programs
Federal Charges and Prison Time
Prosecutors rarely charge “employee fraud” by that name. They pick from a set of overlapping federal statutes, and which one applies depends on how the scheme was carried out and what it touched.
Embezzlement is the charge most closely tied to employee fraud. It is theft of property by someone who was lawfully entrusted with it, which is what separates it from ordinary theft.
Mail fraud applies when a scheme uses the postal system or a private interstate carrier. A conviction carries up to 20 years in prison. If the scheme targets or affects a financial institution, the ceiling rises to 30 years and a fine of up to $1,000,000.2Office of the Law Revision Counsel. 18 USC 1341 – Frauds and Swindles
Wire fraud carries the same penalty structure for schemes that use electronic communications: phone calls, email, wire transfers, or any transmission over interstate wires.3Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television Almost any modern scheme touches a wire somewhere, which is why this statute shows up so often.
Bank fraud covers schemes designed to defraud a financial institution or obtain money under a bank’s control through deceptive means. A conviction carries a fine of up to $1,000,000, up to 30 years in prison, or both.4Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud
Securities fraud covers schemes to defraud anyone in connection with publicly traded securities or commodities and is the typical charge when financial statements at a public company are manipulated. The maximum penalty is 25 years in prison.5Office of the Law Revision Counsel. 18 USC 1348 – Securities and Commodities Fraud
Aggravated identity theft is a bolt-on charge. When an employee uses another person’s identifying information — a Social Security number, a coworker’s credentials, a customer’s personal data — during the course of a fraud felony like mail, wire, or bank fraud, this statute adds a mandatory two-year prison sentence. It runs consecutively, on top of the sentence for the underlying fraud, and the court cannot substitute probation.6Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft
Conspiracy applies when two or more people work together on a scheme. Each participant can be charged, and under federal law conspiracy to commit any of the fraud offenses above carries the same maximum penalties as the underlying crime.7Office of the Law Revision Counsel. 18 USC 1349 – Attempt and Conspiracy
How Long Prosecutors Have to Charge
Federal prosecutors generally have five years from the date of the offense to bring fraud charges.8Office of the Law Revision Counsel. 18 USC 3282 – Offenses Not Capital Many employee schemes involve repeated acts over long periods, such as a false invoice submitted month after month, and in those cases the clock can restart with each new fraudulent act. That extends the prosecutor’s window well past the date the scheme first began. State statutes of limitations for embezzlement and related crimes vary, but most sit in the two-to-five-year range.
Restitution and Taxes on Stolen Money
Two financial consequences land on top of any prison sentence and fine, and both catch people off guard.
First, restitution is not optional. On conviction for a qualifying federal fraud offense, the court must order the defendant to pay the victim back. The order covers the return of the stolen property where possible or, if that is not practical, the property’s value at the time of the offense, and it can also cover other losses the victim sustained as a direct result of the crime.9Office of the Law Revision Counsel. 18 USC 3663A – Mandatory Restitution to Victims of Certain Crimes
Second, the IRS treats stolen property as taxable income. The fair market value must be reported in the year the property comes into the taker’s undisputed possession, unless it is returned to the rightful owner in that same year.10Internal Revenue Service. Publication 525 – Taxable and Nontaxable Income The practical effect is that a convicted employee can owe restitution to the employer and income tax to the IRS on the same dollars.
When the Employer Sues
Criminal prosecution belongs to the government, but employers have their own track for recovering money. The usual claims are breach of fiduciary duty and conversion, the legal term for using someone else’s property for your own benefit. The employer generally has to show a relationship of trust, a duty to act in the employer’s interest, a violation of that duty, and resulting financial harm.
Employers can also ask a court to freeze the employee’s assets before the lawsuit is resolved, a step called prejudgment attachment. It prevents the employee from spending or hiding stolen funds while the case moves forward, and courts generally require a showing of likely success and a real risk that the assets will disappear without the order.
The civil track runs independently of the criminal one. An employer can sue even if prosecutors decline to charge, and a criminal conviction makes the civil case considerably easier to prove.
Protection for Employees Who Report Fraud
If you are on the other side of this — the person who spotted the scheme — federal law protects you from being punished for reporting it. Under Section 806 of the Sarbanes-Oxley Act, publicly traded companies and their officers, contractors, and agents cannot fire, demote, suspend, threaten, or otherwise retaliate against a worker for reporting conduct the worker reasonably believes involves mail fraud, wire fraud, bank fraud, securities fraud, or any violation of SEC rules.11U.S. Department of Labor. Sarbanes-Oxley Act of 2002 Section 806 The protection applies whether the report goes to a federal agency, a member of Congress, or an internal supervisor.
An employee who faces retaliation can file a complaint with the Department of Labor through OSHA. The deadline is 180 days from the date of the violation or the date the employee became aware of it.12Occupational Safety and Health Administration (OSHA). Filing Whistleblower Complaints Under the Sarbanes-Oxley Act If the agency does not issue a final decision within 180 days and the delay is not the employee’s fault, the employee can take the case to federal court.
A successful claim can bring reinstatement to the same position and seniority, back pay with interest, and compensation for litigation costs, attorney fees, and other damages caused by the retaliation.11U.S. Department of Labor. Sarbanes-Oxley Act of 2002 Section 806