Manager's Guide: Behavioral Warning Signs of Internal Theft

Page 1 — Introduction

Why behavioral observation matters. Internal theft rarely begins with an empty shelf. It begins with behavior. Long before inventory reports surface a problem, the people closest to the loss are usually showing signs — small, repeatable, easy to dismiss in isolation, and very loud once you see them as a pattern.

How theft often develops over time. A first small boundary is tested. Nothing happens. A second is tested. Nothing happens. Accountability slips. Documentation slips. The behavior normalizes. By the time a shortage appears in a report, the behavior has been visible for weeks or months — to anyone watching for it.

Why patterns matter more than isolated events. Every item on the next page has innocent explanations. One observation proves nothing. Three or four observations clustered around the same person, the same shift, or the same process is a different conversation — one worth documenting, reviewing, and escalating through the right channels.

Page 2 — Behavioral Warning Signs Checklist

Tick anything you have observed in the last 30 days. Re-run weekly. Concentrate on repetition, not single occurrences.

• ☐ Excessive defensiveness when routine questions are asked.
• ☐ Avoids accountability or redirects responsibility.
• ☐ Resists audits, counts, or oversight of their work area.
• ☐ Controls paperwork, deposits, or information others should see.
• ☐ Frequent policy shortcuts framed as "just being efficient."
• ☐ Missing or incomplete documentation tied to their shifts.
• ☐ Inventory discrepancies recurring around the same individual.
• ☐ Excessive curiosity about ongoing investigations or audits.
• ☐ Refuses vacation, swaps, or insists on working certain shifts alone.
• ☐ Sudden, unexplained lifestyle changes inconsistent with known income.

Page 3 — Pattern Tracking Worksheet

Use one row per observation. Keep entries factual — what was seen, when, and where. Avoid conclusions, labels, or opinions about intent. Patterns will surface as the worksheet fills up.

Page 4 — What This Guide Is NOT

• This guide is not evidence of theft.
• These indicators should never be used alone to accuse, discipline, or terminate an employee.
• Managers should focus on patterns and documentation, not single moments or impressions.
• Concerns should be reviewed objectively, with a second set of eyes and the relevant data (POS, video, schedules).
• Investigations should be conducted professionally and legally — involve HR, ownership, legal counsel, or law enforcement as appropriate.

"Behavior does not prove theft. Patterns identify risk."

Informational only. Not legal, HR, or investigative advice. Always consult appropriate counsel before taking employment action.

About the author

Ray Duplechain — Founder of My LP Portal. 21+ years in Loss Prevention, Investigations, and Behavioral Analysis. Former Homicide Detective. FBI Certified Hostage Negotiator. Extensive experience conducting employee investigations, interviews, and internal theft cases — with millions of dollars in loss prevented through operational controls, behavioral analysis, and investigative technique.