Business

How to Catch Staff Stealing in Your Business (Kenya, 2026)

K By Kev 10 June 2026 11 min read
Share
Business guide

How to catch staff stealing: look where theft leaves traces, an unusual pattern of voids, refunds or no-sales by one person, reconciliation shortfalls on their shifts, stock that runs short faster than sales explain, and takings that dip when a particular person works. An audit trail turns these hunches into evidence. This guide lists the warning signs of staff theft and the reports that confirm it, so you act on facts, not suspicion.

Key takeaways
  • Check voids, refunds and no-sales by person; reconcile by shift
  • Compare stock movement to recorded sales for off-book selling
  • Act on the audit-trail evidence, not suspicion, and clear honest staff
  • Veira records sensitive actions per person and surfaces outliers
On this page
  1. The traces staff theft leaves
  2. How to catch staff stealing, step by step
  3. Mistakes when trying to catch theft
  4. An owner confirms a hunch with data
  5. How Veira helps you catch theft fairly
  6. Frequently asked questions

The traces staff theft leaves

Staff theft almost always leaves a trace in the data, if you capture the data. A cashier faking refunds will have more refunds than peers. One pocketing cash will create reconciliation shortfalls. Off-book selling shows up as stock falling faster than recorded sales. The trick is having a system that records these so the pattern is visible.

The danger is acting on suspicion alone, which is unfair to honest staff and legally risky. Evidence, a clear audit trail showing who did what and when, lets you address theft fairly and decisively, and protects you if you must act.

So catching theft is really about two things: knowing the warning signs to look for, and having the records that confirm or clear them. Without records, you are guessing; with them, the truth surfaces quickly.

How to catch staff stealing, step by step

Use these checks to turn suspicion into evidence.

  1. 1

    Step 1: Check void and refund reports by person

    Compare voids, refunds and no-sales across staff. One person with far more than others, especially on quiet shifts, is a red flag worth investigating.

  2. 2

    Step 2: Reconcile by shift

    Match cash and M-Pesa to recorded sales per shift. Repeated shortfalls tied to one person's shifts point to pocketing.

  3. 3

    Step 3: Compare stock movement to sales

    If stock falls faster than recorded sales account for, goods are leaving off-book. Narrow it to products and shifts.

  4. 4

    Step 4: Watch takings by staff

    Look at whether takings consistently dip when a particular person works the till. Patterns over time are more telling than any single day.

  5. 5

    Step 5: Review the audit trail

    Check the time-stamped log of sensitive actions, voids, refunds, discounts, price overrides, against the person and time. This is your evidence.

  6. 6

    Step 6: Act on evidence, fairly

    Once the records confirm a pattern, address it based on facts, following fair process. Clear honest staff just as decisively.

Mistakes when trying to catch theft

Acting on suspicion alone

Accusing without evidence is unfair and risky. Use the audit trail and reports to confirm before acting.

No data to check

If you do not record voids, refunds, logins and reconciliation, there is nothing to investigate. Capture the data first.

Looking at one day only

Theft shows in patterns over time, not a single shift. Compare across days and people.

Tipping off too early

Announcing an investigation before you have the records can let theft pause and resume later. Gather evidence first.

Ignoring small but regular signs

Small, consistent shortfalls or refund patterns matter more than one big anomaly. Watch the trend.

An owner confirms a hunch with data

Worked example

A restaurant owner in Nairobi suspected a staff member but had no proof, and did not want to accuse anyone unfairly.

Using per-person reports, she saw one server had far more voids than colleagues, clustered on quiet evenings, and those shifts had small but consistent cash shortfalls. The audit trail tied each void to that person and time.

The data turned suspicion into evidence. She acted fairly on the facts, and her honest staff, clearly in the clear, were glad the matter was settled by records rather than rumour.

Business impact

An unmonitored till is the quietest leak in Kenyan retail: small shortfalls and unrecorded sales add up long before anyone thinks to look.

Veira gives each staff member their own login and a full audit trail, so every sale, void and refund is tied to a name.

How Veira helps you catch theft fairly

Veira records every sale, void, refund and discount against the staff member and time, and reconciles cash and M-Pesa to sales per shift. Per-person reports surface the outliers, an unusual run of refunds, repeated shortfalls, so suspicion becomes evidence you can act on.

Just as importantly, the audit trail clears honest staff. You address theft on facts, fairly and decisively, all visible from your phone, from KES 2,999 a month.

Frequently asked questions

How do I catch a staff member stealing?
Check void, refund and no-sale reports by person, reconcile cash and M-Pesa by shift, compare stock movement to recorded sales, and review the time-stamped audit trail of sensitive actions. Look for patterns over time tied to one person, then act on the evidence rather than suspicion.
What are the warning signs of staff theft?
An unusual number of voids, refunds or no-sales by one person, reconciliation shortfalls on their shifts, stock falling faster than sales explain, and takings that dip when a particular person works the till. Patterns over time are far more telling than any single day.
How do refunds and voids reveal theft?
Faking a refund or void removes a sale so the cash can be pocketed. A cashier doing this will show more refunds and voids than peers, especially on quiet shifts. Comparing these by person and reviewing the audit trail exposes the pattern.
Should I confront a staff member on suspicion?
No. Acting on suspicion alone is unfair and legally risky. Gather evidence first from your reports and audit trail, confirm a clear pattern, and then address it following fair process. Evidence also protects you and clears honest staff.
Why is an audit trail important for catching theft?
An audit trail records who did what and when, every sale, void, refund, discount and override, so suspicion becomes confirmable fact. Without it you are guessing; with it, theft patterns surface quickly and honest staff are clearly cleared.
Can I catch theft without a POS system?
It is very hard. Manual records rarely capture voids, logins and reconciliation reliably, so patterns stay hidden. A system that records sensitive actions per person and reconciles money to sales is what makes staff theft visible and confirmable.

You catch staff theft with data, not hunches: per-person reports, shift reconciliation and a clear audit trail. Veira captures all of it and surfaces the outliers, so you act on evidence and clear honest staff, from KES 2,999 a month. See how Veira protects your business and book a free demo.

Keep reading

See all Business guides

Veira for your business

Browse Veira by business type