Employee theft is a challenge that can hit any business, but for a small retailer the consequences are especially severe. One independent liquor store in North Dakota discovered that a trusted employee had taken thousands of dollars over the course of several months.
Their experience points at a problem every retailer has to solve: staff need access to the tools that let them do their jobs, but that access has to be monitored. This is how the pattern was found, what it took to prove, and what the owner would tell other store owners.
The Store
A busy 8,000-square-foot independent liquor store in North Dakota, running 10 to 15 employees depending on the season. Using Cloud Retailer’s Sales Transaction Receipts Search and Detailed No Sale reporting alongside camera footage, the owner identified eight months of employee theft, documented it for law enforcement, and recovered the evidence needed to press charges.
The Challenge
Balancing Trust With Accountability
The employee had been inherited from the previous owners and was regarded as reliable: a morning opener, trusted with unlocking the store and handling inventory. Nobody suspected them.
For nearly eight months they exploited that role, using a method built entirely around cash. When a customer paid cash, the employee cancelled the transaction at the point of sale and used the “No Sale” button to open the drawer, making the sale look like it had gone through. They handed over change, waited for the customer to leave, and pocketed the rest. On paper, the sale never happened.
The estimated loss was around $6,000. The first sign was not the cash — it was inventory that would not reconcile.
How the Theft Was Uncovered
Inventory discrepancies were the first clear warning sign, and for months they were the only one. As the owner recalled: “It had been months of inventory issues and trying to figure it out. We counted Budweiser suits last week, how are we missing 5 suits again?” After ruling out delivery errors and purchase order mistakes, they turned to the two records that could be checked against each other.
Matching Receipts to Camera Footage
Using the Sales Transaction Receipts Search, the owner replayed every transaction from opening alongside the camera feed. A bottle of champagne was scanned with no matching sale in the system, while the transactions either side of it appeared normally. “I kept watching that moment, and then I saw them put the cash in their pocket instead of the till.”
Proving the Pattern
The Detailed No Sale Report showed transactions being cancelled and the drawer then opened with “No Sale.” Cloud Retailer built a memorized Employee Cancelled Transaction Report to surface every instance where a cancelled transaction was immediately followed by a No Sale — revealing months of matching activity, including shifts worked under another employee’s login.
Building the Case
Identifying the method took days. Documenting it took a month. “It took us an entire month to get all the evidence, pull the reports, and match every incident. We can only press charges for the amount we had on camera footage, so it was actually only about $2,600.” Asked whether law enforcement needed anything the Cloud Retailer back office could not produce, the answer was one word: “Nope.” Inventory claims, time sheets, daily till counts and camera footage covered it.
Why This Matters for Liquor Stores
Theft does not always look like theft. It can look like routine, like reliability, like the employee you would never suspect. What exposed this one was not a dramatic tool — it was reports, cameras and consistent inventory counts, working together.
The gap between what was taken and what could be proven is the part worth sitting with. The estimated loss was roughly $6,000, but only the incidents matched to camera footage could be referred for prosecution: about $2,600. The rest was real and unrecoverable, because it could not be documented.
There is no system that prevents theft outright. Lock down one method and a determined employee finds another — and too much restriction simply drives the behaviour somewhere harder to see. The goal is not prevention but visibility: making sure every action can be traced, verified and reviewed. As the owner put it: “Don’t get complacent. You have to trust your employees, but still run your reports, keep an eye on everything, watch cameras.”
Protect Your Store with Cloud Retailer
Four controls make theft visible, and none of them require you to distrust your team. Run the Detailed No Sale Report and the Sales Transaction Receipts Search on a regular cadence, not only when something looks wrong. Require individual employee logins, and enable settings like POS Auto Logout or Logout After Each Transaction so nobody stays signed in indefinitely. Count inventory regularly and investigate discrepancies immediately — repeated gaps are a strong signal. And give your cameras a clear view of the register and the cash drawer, with enough storage to review old incidents.
If you do find theft, document everything before you act: reports, inventory counts and footage. Cameras are usually the only way to tie a specific loss to a specific person. Then talk to law enforcement before confronting anyone, and take their guidance on how it should go.
See what your reports would show with Cloud Retailer’s POS software features for loss prevention and reporting.
FAQ
How can a liquor store detect employee theft at the register?
Watch the reports that expose cash-handling patterns rather than individual transactions. A cancelled transaction followed immediately by a “No Sale” drawer opening is a recognisable signature, and it shows up in reporting long before it shows up in your bank balance. Pair that with regular inventory counts, because persistent discrepancies in specific products are often the first symptom.
What is a No Sale report and why does it matter?
A No Sale opens the cash drawer without recording a sale. There are legitimate reasons to use it, so the button itself is not the problem — the pattern is. The Detailed No Sale Report makes that pattern visible, and Cloud Retailer can build a memorized report that flags cancelled transactions immediately followed by a No Sale.
What evidence do you need to press charges for employee theft?
In this case law enforcement needed inventory claims, employee time sheets, daily till counts and time-stamped camera footage — all of which came out of the back office. The limiting factor was footage: only incidents that could be matched to camera were chargeable, which is why the provable figure was about $2,600 against an estimated $6,000 loss.
Can you prevent employee theft entirely?
No, and trying to can make things worse. Remove every option to void or ring a No Sale and a determined employee finds a less visible method. The realistic goal is traceability: make sure every action can be reviewed after the fact, so a discrepancy leads somewhere.
