Skip to content

Preventing Register Theft and Fraud

15 min read Training Guide

Recognize sweethearting, void and refund abuse, return fraud and scams at the register, and report what you see.

Table of contents

The register is where a business's money changes hands, so it is where theft and scams are most likely to happen. Some of it comes from people outside the business, and some comes from people on the staff. Following the register rules protects the business, and it also protects you, because your ID is on every transaction you ring. This is about knowing the patterns and reporting them, not about investigating anyone.

What You Will Be Able to Do

  • Recognize the common forms of employee theft at a register.
  • Follow the drawer habits that prevent it.
  • Spot return fraud and handle a suspicious return without accusing anyone.
  • Recognize short-change tricks, gift card scams and impersonators.
  • Report a concern about a coworker the right way.

How Employees Steal at the Register

In retail surveys, employee theft is a large share of total loss. It can be harder to catch than shoplifting, because employees know the systems, the schedules and the blind spots.

Scheme What happens What it looks like in the records
Sweethearting Cashier skips scanning items, or gives unauthorized discounts, for friends or family Low-value tickets for full carts, repeat discounts for the same person
Skimming Cashier takes cash from a customer and never rings the sale Items missing from inventory, unexplained no-sales
Void abuse Cashier voids a paid sale after the customer leaves and keeps the cash High void counts, voids just after a sale
Refund fraud Cashier rings a refund with no customer there and keeps the money Refunds with no matching return, refunds to the same card
Discount abuse Employee discount used for friends, or codes used when they don't apply Heavy discount use by one ID
Gift card abuse Cashier loads value onto a card without payment Activations with no matching tender

Sweethearting is theft, even when it feels like a small favor. Ringing a friend's order at all is often against policy, so ask a coworker to do it, or follow your store's rule.

Why a No-Sale Gets Attention

A no-sale opens the drawer without a transaction. There are real reasons to do it, such as making change for the drawer. But each one is logged, because opening the drawer with nothing rung up is how cash can be taken. LP teams watch for high counts of no-sales, so use them only when needed and only as your store allows.

Drawer Habits That Prevent Theft

These rules aren't there because anyone assumes you are dishonest. They make it possible to prove what happened when a drawer comes up short.

  1. One person, one drawer. Only you work your drawer, under your own ID. Never share a login or let a coworker ring on your ID. You answer for every transaction under it.
  2. Keep the drawer closed between transactions, and lock the register when you step away.
  3. Use the drop safe. Make drops as your store requires, so that excess cash doesn't build up in the drawer.
  4. Support blind counts. In a blind count you count the drawer without seeing what the system expects, so the count can't be adjusted to match.
  5. Get the required approval. Voids, large refunds and price overrides often need a manager's approval. Don't share a manager's code, and if you are a manager, don't hand yours out.
  6. Give every customer a receipt. It proves the sale was rung up.

How Stores Catch It

Exception-based reporting (EBR) is software that reads register data and flags unusual patterns, such as one cashier with far more voids than others, refunds just under the approval limit, or repeat refunds to the same card. It doesn't prove anything. It tells LP where to look, and then they check the footage and the records.

Other controls include surprise cash counts, reviews of over and short records, and tip lines.

Warning Signs in a Coworker

Certain patterns can point to employee theft: frequent voids or returns, wanting to work alone, avoiding days off or vacations so no one else touches their work, and a lifestyle that doesn't match their income. These are not proof. Most people who show one of these signs have an innocent reason.

If something worries you, report it to a manager, LP or your employer's anonymous tip line. Don't confront the coworker, don't investigate on your own, and don't spread it around the break room. An accusation that spreads can harm an innocent person and tip off a guilty one. Retaliating against someone for making a good-faith report is against most company policies.

Return Fraud

Return fraud means abusing a return policy to get money or goods. It is one of the most common ways stores lose money at the service desk.

Type How it works What to look for
Returning stolen goods Takes an item from the shelf and "returns" it No receipt, pressure for cash, item with no sign of leaving the store
Receipt fraud Uses a fake, altered or found receipt Receipt doesn't match the item, date or store
Wardrobing Buys an item, uses it once, returns it Signs of wear, makeup, odors, tags reattached
Item swap Returns a cheap or broken item in a new item's box Serial number or weight doesn't match
Price switching Moves a low price tag to a costly item at purchase, then returns at the higher price Tag doesn't match the item

To handle returns well:

  1. Follow the policy the same way for every customer.
  2. Look over the merchandise and check serial numbers when they apply.
  3. Ask for ID on no-receipt returns if your store requires it.
  4. Call a manager when something doesn't add up. Say "Let me get my manager to approve this," not "This looks fake."

Scams Aimed at Cashiers

Social engineering means manipulating people instead of breaking into systems. The scammer uses your trust, your wish to be helpful, or your fear of getting in trouble. Most of these tricks rely on rushing you.

  • Quick change. A customer asks for change, then switches what they want halfway through, adding bills and asking for a different mix, until you lose track and hand over too much. Finish one transaction before starting another. If you get confused, close the drawer, start again, or call a manager.
  • Fake authority on the phone. A caller claims to be from corporate, IT or the police and asks for gift card numbers, a code or your login. They may say someone will be fired if you don't act now. Hang up and call your manager using a number you already know.
  • Fake vendor or technician. Someone in a uniform or with a clipboard asks to be let into the back room, or to take equipment away. Check with a manager first. A real technician will wait.
  • Distraction. One person keeps you busy with questions while another reaches for the drawer or the merchandise. Close the drawer before you help.
  • Gift card fraud. A shopper buys a large amount of gift cards while on the phone with someone giving instructions. They may be the victim of a scam. Follow your store's rule, and get a manager involved.

Warning: Never give out a code, password or card number because someone on the phone told you to, whoever they say they are. Real companies and police do not work this way.

Common Mistakes

Mistake What it costs
Letting a coworker use your login "just this once" Their shortage or theft is recorded as yours
Ringing up your friend at a discount It counts as theft, and it can end your job
Accusing a customer of return fraud A complaint, or a lawsuit, if you are wrong
Rushing because a customer is pressuring you Quick-change losses and bad refunds
Telling coworkers about your suspicions It harms an innocent person, or warns a guilty one

Check Your Understanding

1. A coworker asks you to ring your break snack under her ID, since yours is logged out. What do you do?

Say no and log in under your own ID. Anything rung under her ID counts as hers, and shared logins break the record that protects you both.

2. You notice one cashier voids sales right after customers leave, again and again. What should you do?

Tell a manager, LP or the tip line exactly what you saw. Don't confront her, and don't discuss it with other coworkers. There may be an innocent reason, and it isn't your job to find out.

3. A customer brings back a blender with no receipt. The box looks new, but it feels too light. What do you do?

Open the box and check it, as your policy allows. If something doesn't match, tell the customer you need a manager to approve the return. Don't accuse them.

4. A customer buys a pack of gum, gets change, then asks for a $10 bill for ten ones, then changes his mind and hands you a $5. You feel lost. What should you do?

Stop, close the drawer, and go back to the start. Finish one exchange before you begin another, and call a manager if he keeps going. Confusion is how quick-change scams work.

Key Takeaways

  • Your ID is your signature, so never share it.
  • Sweethearting, skimming, and void and refund abuse are all theft, and register data makes them visible.
  • Keep to one person per drawer, keep it closed between sales, and use the drop safe.
  • Follow the return policy the same way every time, and bring in a manager when something doesn't add up.
  • Slow down when someone rushes you. Pressure is the sign of a scam.
  • Report concerns about coworkers privately. Don't investigate.