The decision to terminate an employee for theft carries significant legal weight in California. Even when evidence of misconduct appears compelling, the manner in which an employer reaches and executes that decision determines whether the organization’s position is defensible, or whether a termination for cause becomes the foundation for a wrongful termination lawsuit, a defamation claim, or a wage and hour violation.

California is an at-will employment state, which means employers may generally terminate employees at any time for any lawful reason. That broad authority, however, operates within a framework of state and federal protections that are among the most robust in the country. Before any employer in California terminates an employee for theft, there are procedural, evidentiary, and legal requirements that must be satisfied. This article addresses those requirements in sequence, with particular attention to the California-specific rules that distinguish this state from most others.

Step One: Complete the Investigation Before Making Any Decision

The single most important principle governing termination for theft in California is that no adverse employment action, not termination, not demotion, not suspension without pay, should precede the conclusion of a thorough, documented investigation. This is not merely a best practice. It is the threshold requirement for a legally defensible outcome.

California courts have scrutinized the adequacy of employer investigations in wrongful termination cases, and findings of inadequate investigation, such as too few witnesses interviewed, documentary evidence not reviewed, or the subject never given an opportunity to respond, have been used to support employee claims. The California Department of Fair Employment and Housing Act (FEHA) and the body of case law developed under it impose on employers an obligation to investigate complaints and misconduct allegations in a manner that is prompt, thorough, and impartial.

Allen Morris Investigations provides neutral, fully documented employee misconduct investigations for California employers, including theft matters requiring legally defensible findings.

Kathie Allen of Allen Morris Investigations has conducted termination-related workplace theft investigations for employers throughout Orange County and California. A consistent pattern in cases where terminations were later challenged was that the employer took action before the record was complete. The investigation had identified the likely subject, evidence pointed clearly in one direction, and the organization moved to terminate before all witnesses had been interviewed, before the subject had provided their account, or before the documentary record had been fully reviewed. In each instance, the gap in the investigation became the central issue in the subsequent legal proceeding.

The investigation must include, at minimum: a review of all relevant financial, electronic, and physical evidence; interviews with all witnesses with material knowledge; and an interview with the subject, in which the subject is given a genuine opportunity to respond to the evidence and provide their account. That final step, the subject interview, is not optional. It is one of the most significant procedural protections an employer can demonstrate.

Step Two: Evaluate the Evidence Against the Applicable Standard

Termination for theft in California requires that the employer have a reasonable, good-faith belief, based on a thorough investigation, that the employee engaged in the conduct at issue. This is an evidentiary standard, not a criminal one. An employer is not required to prove theft beyond a reasonable doubt before terminating an employee. The employer is required to demonstrate that, based on the evidence available at the conclusion of the investigation, there was a legitimate, non-discriminatory, non-retaliatory reason for the termination decision.

That distinction matters in both directions. An employer who waits for a criminal conviction before acting will typically have waited too long. Criminal prosecutions move on law enforcement’s timeline, not the employer’s operational needs. Conversely, an employer who terminates based on suspicion alone, before evidence has been gathered and evaluated, has exposed the organization to the precise claims that a thorough investigation is designed to prevent.

The documentation of the investigation’s findings, including what evidence was gathered, what each witness said, how credibility was assessed, and what conclusion the evidence supported, is the record that will be reviewed if the termination is later challenged. Employers should ensure that this documentation exists, is specific, and is retained.

Step Three: Understand California’s Wage Deduction Prohibitions

Before executing any termination for theft in California, employers must understand California Labor Code sections 221 through 224. These provisions prohibit employers from deducting from an employee’s wages any amount the employer claims the employee owes, including amounts alleged to have been taken through theft, without specific legal authorization.

California Labor Code section 221 states that it is unlawful for any employer to collect or receive from an employee any part of wages previously paid. The prohibition covers cash shortages, losses attributed to employee error or misconduct, and direct financial theft. Employers may not recoup alleged stolen funds by withholding wages, even if the evidence of theft is strong. The permissible exceptions to this prohibition are narrow: deductions required by state or federal law, deductions expressly authorized in writing by the employee for specific purposes such as insurance premiums, and deductions authorized by collective bargaining agreements for health, welfare, or pension contributions.

An employer who deducts the amount of an alleged theft from an employee’s final paycheck, even with the sincere belief that the employee stole that amount, has violated California law and may be subject to civil penalties under Labor Code section 225, as well as waiting time penalties under Labor Code section 203 if the final paycheck is delayed or reduced. Recovery of stolen amounts, if warranted, must be pursued through civil litigation or as part of a negotiated resolution, not through wage deduction.

Step Four: Select the Appropriate Termination Basis

When the investigation supports a termination for cause, the language used to document and communicate that termination matters under California law. Employers face a specific risk when using “theft” as the explicit stated reason for termination: defamation exposure.

California recognizes theft accusations as defamation per se, meaning that a false statement accusing someone of theft is presumed to cause damages without the need for the plaintiff to prove specific harm. An employer who terminates an employee and communicates the reason as “theft,” whether to the employee in writing, to other employees, or to a prospective employer providing a reference, must be prepared to demonstrate the truth of that statement if challenged.

The more defensible practice, consistently recommended by California employment attorneys, is to document the termination as a violation of company policy, specifically the policy provision the employee’s conduct violated, rather than characterizing the conduct as “theft” in the termination paperwork or communications. This approach accomplishes two objectives: it supports the evidentiary record that a legitimate reason for termination existed, and it reduces the precision of the characterization in a way that limits defamation exposure without obscuring the substance of what occurred.

Kathie Allen notes that the distinction between “terminated for theft” and “terminated for violation of the company’s financial integrity policy” may seem semantic, but it is legally meaningful. The underlying conduct is the same. The label applied to it in the termination record and any subsequent communications is a separate, consequential choice.

Step Five: Follow Applicable Contractual and Collective Bargaining Obligations

California at-will employment does not override the terms of a written employment contract, an implied contract created by employer representations or handbook provisions, or a collective bargaining agreement. Before executing a termination, employers must review all applicable agreements to determine whether they impose procedural requirements, such as notice, progressive discipline, arbitration, or union notification, that must be satisfied.

Employee handbooks that include language suggesting employees will only be terminated for cause or through a specified progressive discipline process can create implied contract obligations. Employees in unionized settings have the rights arising from their collective bargaining agreement, which may include notification requirements, grievance procedures, and arbitration rights. Failing to follow these procedures does not render the termination improper, but it creates additional claims that compound the litigation risk.

Step Six: Provide Final Pay in Compliance with California Law

California Labor Code section 201 requires that an employee who is discharged receive their final paycheck, covering all earned, unpaid wages, at the time of termination. This requirement applies regardless of whether the employee is suspected or confirmed to have stolen from the employer. The final paycheck must include all accrued, unused vacation time (which California treats as earned wages) and all final compensation at the correct rate.

An employer who withholds or delays final pay, even in a situation where theft is confirmed, violates California Labor Code section 203 and may be subject to waiting time penalties calculated at the employee’s daily rate for each day the final paycheck is delayed, up to 30 days. This is a separate violation from any conduct by the employee and carries its own liability.

FAQ: Employee Theft Termination in California

Can a California employer terminate an at-will employee based on theft suspicion alone?

Technically, at-will employment permits termination for any lawful reason. However, terminating on suspicion alone, before an investigation is complete, significantly increases the employer’s exposure to wrongful termination and defamation claims. The employee’s response to the allegations, obtained in an investigative interview, frequently produces either corroborating information or an alternative explanation that the investigation record must address. Terminating before that step is complete leaves a documented gap.

What if the employee resigns during the investigation?

A resignation does not end the employer’s obligation to document the investigation’s findings or preserve the investigation record. The findings may be relevant to future reference inquiries, civil recovery proceedings, or if the individual is later employed in a similar role, risk management decisions. Complete the investigation to the extent possible, document the findings, and retain the record.

Should the employer notify law enforcement when theft is confirmed?

This is a decision that should be made in consultation with legal counsel. The factors that bear on it include the amount involved, the nature of the evidence, whether the employee has been or may be cooperative, and the employer’s appetite for the burdens of a criminal proceeding. Notifying law enforcement does not relieve the employer of its own obligations regarding termination procedure, final pay, or documentation.

Can an employer reference the theft in a reference check for a subsequent employer?

California law does not prevent an employer from making truthful statements about the reasons for a former employee’s termination. However, if the employer characterizes the conduct as “theft” and that characterization is challenged as false or unsubstantiated, the defamation risk discussed above applies. Many California employers choose to confirm only dates of employment and eligibility for rehire in response to reference inquiries. Legal counsel should advise on reference policy before any communication about a theft-related termination.

What is the evidentiary threshold required before termination?

California courts apply a good-faith, reasonable-belief standard. The employer must have conducted a thorough investigation, must have considered the employee’s response to the allegations, and must have concluded, based on the preponderance of the evidence developed in the investigation, that the employee engaged in the conduct. This is not a certainty standard, but it is more than suspicion.

Conclusion

Terminating an employee for theft in California is lawful when supported by a complete investigation, an evidentiary record sufficient to meet the good-faith belief standard, compliance with wage payment obligations, and careful attention to the legal risks that attach to the termination process itself. Each step in the sequence matters, and shortcuts at any stage, such as premature action, improper wage deductions, careless termination language, or delayed final pay, create independent claims that can outlast the underlying theft allegation.

Allen Morris Investigations provides fully documented, legally defensible employee theft investigations for California employers, including investigation reports structured to support post-investigation employment decisions. Contact us to discuss your matter.

For a complete overview of the investigation process, visit our practical guide to investigating employee theft. For information on our full range of employee misconduct investigation services, visit our employee misconduct page. For matters involving retaliation claims arising from termination decisions, visit our retaliation claims page.

See what clients are saying: Read Our Verified Google Reviews. Contact us to discuss your matter.