When an employee theft allegation surfaces, the first instinct of most California employers is to handle it internally. HR is notified, a manager reviews the records, the employee is called into an office, and a determination is made, sometimes within days. In straightforward situations with strong, uncontested evidence, this approach may be appropriate. In a significant number of cases, however, it is not. The decision to investigate internally when an outside investigator is warranted is one of the most consequential and most commonly regretted choices California employers make in the theft investigation context.
This article identifies the specific circumstances that call for an outside investigator, explains the California legal requirements governing who may conduct workplace investigations on behalf of an employer, and outlines what to look for when selecting a neutral, licensed investigator for an employee theft matter.
What California Law Requires
Under California’s Private Investigator Act (California Business and Professions Code section 7520 et seq.) and the position taken by the California Department of Consumer Affairs, any outside party retained to conduct an investigation of employee misconduct must be either a licensed attorney or a licensed private investigator. The Bureau of Security and Investigative Services (BSIS), a division of the Department of Consumer Affairs, licenses private investigators in California and maintains a publicly searchable database of all active licensees.
California private investigator licensure requires a minimum of 6,000 hours of compensated investigative experience (or a qualifying combination of education and experience), a written state examination, and a thorough criminal background check conducted by both the California Department of Justice and the FBI. These requirements exist because investigations of employee misconduct, including theft, produce findings that affect employment status, may form the basis for civil or criminal proceedings, and involve the legally regulated collection and handling of evidence.
An employer who retains an unlicensed outside party to conduct a misconduct investigation, even one with relevant subject-matter expertise, may find that the investigation’s findings are legally challenged and that the employer has incurred regulatory exposure. Verifying the license status of any external investigator before engagement is not optional. It is a basic due diligence obligation.
The Case for Internal Investigation and Its Limits
Internal investigation is appropriate in limited circumstances. When an allegation is straightforward, the evidence is unambiguous (clear surveillance footage of a single transaction, for example), the accused employee is in a non-supervisory role, there is no potential for litigation, and the internal HR professional conducting the inquiry has no conflicting relationship with any party, an internal approach is reasonable and cost-effective.
The problem is that few theft cases actually fit this profile. The variables that drive a case outside the internal investigation model are more common than employers tend to anticipate.
Kathie Allen of Allen Morris Investigations has been retained for employee theft investigations across a range of California industries and organizational sizes. In her experience, cases that initially appear simple, such as a cash variance, a missing inventory item, or a suspicious expense submission, frequently open into more complex questions about the extent of the conduct, the potential involvement of other employees, or the subject’s access to information that would allow manipulation of the investigation itself. The decision about who should investigate should be made based on the likely complexity of the matter, not its initial presentation.
Circumstances That Require or Strongly Favor an Outside Investigator
The Subject Is a Manager, Executive, or Senior Employee
When the person alleged to have stolen holds a position of authority over other employees, those employees may be reluctant to provide accurate information to an internal investigator they perceive as operating under the subject’s sphere of influence. An outside investigator operates without that constraint. The credibility and completeness of witness accounts is materially affected by whether witnesses believe their responses will reach the subject through internal channels.
Additionally, cases involving executives or business owners carry higher median losses. The Association of Certified Fraud Examiners’ 2024 Report to the Nations found that fraud committed by owners and executives produced a median loss of $500,000, more than eight times the median loss for non-management employees. The financial stakes at this level demand a more rigorous process.
Internal HR Has a Conflicting Relationship with Any Party
Any actual or perceived relationship between the internal investigator and the subject, the reporter, or key witnesses compromises the objectivity of the investigation and, critically, its defensibility. An internal HR professional who has worked closely with the accused, who has previously investigated or disciplined a complainant, or who reports to a business unit with an interest in the outcome should not be the investigator in that matter. California courts have scrutinized investigator neutrality in employment litigation, and a finding that the investigator had a conflict of interest can undermine findings that would otherwise have been well-supported.
The Matter May Result in Termination, Criminal Referral, or Civil Recovery
Any investigation that may produce a termination for cause, be referred to law enforcement, or form the basis for a civil lawsuit should be conducted under conditions that maximize defensibility. An outside investigator who has no prior relationship with the organization, who follows a documented and reproducible methodology, who produces a written report with specific factual findings and credibility assessments, and who can if necessary serve as an expert witness, provides a degree of protection that an internal investigation typically cannot.
California employers who have conducted legally defensible investigations are in a materially stronger position when facing wrongful termination, discrimination, or defamation claims arising from the post-investigation period. The investigation record is not merely an internal document. It is potential evidence.
The Potential Financial Exposure Is Significant
When a theft case involves amounts that, if recovered through civil litigation or restitution, would justify the cost of a rigorous external investigation, the calculus favors outside engagement. A well-documented investigation conducted by a licensed neutral investigator is a precondition to effective civil recovery in most cases. An internal investigation that was rushed, under documented, or conducted by someone with a conflict of interest is frequently challenged in the early stages of any subsequent civil proceeding, delaying and complicating recovery.
The Allegation Involves Complex Financial Fraud
Cases involving embezzlement, expense manipulation, vendor kickbacks, payroll fraud, or financial statement irregularities often require expertise beyond standard HR knowledge. An external investigator with experience in financial fraud investigations, potentially working in coordination with a forensic accountant, brings both methodological rigor and subject-matter depth that internal resources rarely match.
Multiple Employees May Be Involved
When the evidence or initial investigation suggests that more than one employee may have participated in theft, through collusion, shared access, or coordinated concealment, the complexity of the investigation multiplies. The sequencing of interviews, the management of information flow between potential subjects, and the structuring of a factual narrative across multiple actors require investigative experience that goes beyond what most internal HR departments can provide.
What to Look for in an Outside Investigator
Active California PI license.
Verify current licensure through the BSIS public database. A license number should be provided at the outset of any engagement.
Documented experience with workplace misconduct investigations. General PI work (surveillance, background checks, domestic cases) does not qualify an investigator for workplace misconduct investigations. Look for demonstrated experience with employment-related matters, including theft, fraud, and misconduct cases.
Familiarity with California employment law. An investigator who does not understand FEHA, the California Labor Code wage restrictions applicable to theft allegations, Weingarten rights, or California’s employee privacy statutes will produce findings that are more vulnerable to legal challenge.
A documented, reproducible methodology. The investigator should be able to describe the specific process they follow: how interviews are sequenced, how evidence is collected and documented, what the final report contains, and how credibility is assessed. A methodology that cannot be articulated cannot be defended.
A clear conflict of interest screening process. The investigator should confirm at the outset that they have no prior relationship with any party to the investigation.
Professional certifications. Credentials such as Certified Title IX Investigator, SHRM-SCP, or similar designations indicate investment in professional standards that translate directly to investigative quality.
FAQ: Hiring an Outside Investigator for Employee Theft in California
Is an internal HR professional prohibited from investigating employee theft in California?
No. Internal staff may legally perform workplace investigations. The licensing requirement applies only to outside parties retained specifically to conduct the investigation. However, internal investigators must be qualified, neutral, and free from conflicts of interest. Many organizations retain outside investigators not because they are legally required to, but because the case warrants a level of neutrality and expertise that internal resources cannot consistently provide.
How long does a typical employee theft investigation take?
Duration depends on the complexity of the matter. A straightforward single-subject case with accessible evidence may be completed in two to three weeks. Cases involving multiple subjects, complex financial records, or extensive electronic evidence may require six to ten weeks. An experienced investigator should provide a preliminary timeline at the outset of engagement based on the known scope of the matter.
Can the investigation report be used in litigation?
Yes, provided the investigation was conducted properly and the report was produced in accordance with applicable standards. The investigator may also be called to provide testimony regarding their methodology, findings, and credibility assessments. This is another reason why investigator qualifications and documentation practices matter from the outset.
What is the difference between a licensed PI and an attorney for this purpose?
Both are legally authorized to conduct employee misconduct investigations in California. An attorney’s communications and work product may be protected under attorney-client privilege in certain circumstances, which can be a material consideration when litigation is anticipated. A licensed PI who is not an attorney does not provide that privilege protection, but may bring different investigative experience and methodologies. Many California employers retain both: an attorney to manage legal strategy and a licensed PI to conduct the investigation itself.
What should an outside investigator deliver at the conclusion of the engagement?
A complete written investigation report that includes: a statement of the investigation’s scope, a summary of the evidence reviewed, summaries of all interviews conducted, factual findings with citation to supporting evidence, credibility assessments where relevant, and conclusions regarding whether specific conduct occurred. The report should not include legal conclusions or recommendations for discipline. Those decisions belong to the employer and, where applicable, legal counsel.
Conclusion
The decision of whether to investigate employee theft internally or externally is not a question of cost alone. It is a question of whether the investigation will produce findings that are factually sound, legally defensible, and capable of supporting the employer’s subsequent decisions without creating additional liability. California’s specific legal landscape, including its licensing requirements for outside investigators and its robust employment law framework, makes this decision consequential in ways that employers in other states may not fully appreciate.
Allen Morris Investigations provides licensed, neutral, and fully documented workplace theft investigations for employers throughout Orange County and California. Contact us to discuss the specific circumstances of your matter.
For a complete overview of the investigation process, visit our practical guide to investigating employee theft. To learn more about our credentials and approach, visit our about page or our workplace investigations service page.
See what clients are saying: Read Our Verified Google Reviews.
About Kathie Allen:
Kathie Allen is a licensed California Private Investigator (PI 27033) with over 20 years of experience conducting workplace investigations throughout Orange County and California. She is an Association of Workplace Investigators (AWI) trained investigator and Certified Title IX Investigator specializing in harassment, discrimination, employee misconduct, and Title IX compliance investigations for businesses, schools, and organizations.
Contact Information:
• Phone: 949-573-4624
• Email: Kathie@allenmorrispi.com
• Website: https://allenmorrispi.com
Schedule a consultation or learn more at Allen Morris Investigations