Investigator preparing employee theft interview questions with case documents on the desk

Employee Theft Interview Questions: What to Ask and How to Ask

The investigative interview is one of the most consequential steps in any employee theft investigation and one of the most frequently mishandled. The questions an investigator asks, the sequence in which they are asked, and the manner in which they are posed determine whether the interview produces reliable, usable information or a legally complicated interaction with limited evidentiary value.

California employers face a specific set of obligations that shape how investigative interviews must be structured. Weingarten rights, documentation requirements, and the evidentiary standards applicable to subsequent legal proceedings all place demands on the interviewer that extend well beyond knowing which questions to ask. This article provides a practical framework for preparing and conducting interviews in an employee theft investigation, with specific guidance on witness interviews, subject interviews, and the California-specific legal considerations that apply to both.

Why Interview Methodology Matters in a Theft Investigation

A poorly conducted interview creates at least three categories of risk for a California employer. First, leading or coercive questioning can produce a response that is later challenged as unreliable, undermining the credibility of any finding based on it. Second, an interview that violates an employee’s rights, including Weingarten rights for unionized employees, can expose the employer to an unfair labor practice charge or overturn subsequent disciplinary action. Third, a confrontational or accusatory approach before sufficient evidence has been gathered can alert a subject to the investigation prematurely, prompting destruction of evidence or coordination of a counter-narrative.

The Wicklander-Zulawski non-confrontational interviewing methodology, which Kathie Allen of Allen Morris Investigations uses in her investigative practice, is built on the recognition that reliable information is produced through structured, non-accusatory questioning, not pressure or confrontation. Subjects who feel they are being heard rather than prosecuted are more likely to provide complete, accurate information. That principle applies equally to witnesses, who may be reluctant to come forward if they believe they are being drawn into a conflict.

The purpose of an investigative interview is to gather facts, not to obtain a confession, and not to establish guilt. Every question should be designed to advance the investigator’s understanding of what occurred, not to confirm a conclusion that has already been formed.

Sequencing the Interviews: Reporters and Witnesses Before the Subject

In most employee theft investigations, the subject of the investigation should not be interviewed until the investigator has first spoken with the person who reported the concern and any relevant witnesses, and has reviewed all available documentary and physical evidence. Premature subject interviews, conducted before the investigator understands the full scope of what occurred, produce two problems: the investigator cannot effectively assess whether the subject’s account is consistent with known facts, and the interview may alert the subject before the evidence is secure.

The recommended interview sequence is: (1) reporter or initial complainant, (2) witnesses with relevant knowledge, (3) subject. This sequence allows the investigator to develop a complete picture of events before engaging the subject and to identify areas of inconsistency between the subject’s account and other evidence.

Reporter and Witness Interview Questions

Opening the Interview

Every interview should begin with an explanation of the investigator’s role and the purpose of the meeting. The investigator should confirm that the meeting is confidential, explain the limits of that confidentiality (particularly that findings may need to be shared with decision-makers), and advise the witness against discussing the interview with colleagues while the investigation is ongoing. This instruction should be narrow and specific. Broad confidentiality orders on employees carry risk under the National Labor Relations Act.

Standard opening questions for a reporter or witness include: “Can you tell me, in your own words, what you observed or experienced?” / “When did this first come to your attention?” / “Who else, if anyone, was present when this occurred?” / “What did you do after you observed this?” / “Have you discussed this with anyone else?” / “Is there anything else you think I should know?”

Probing for Specificity

After the initial narrative is established, the investigator should probe for specific, concrete details rather than general characterizations. Open-ended questions, those that begin with “who,” “what,” “where,” “when,” “how,” and “describe,” produce richer responses than closed questions and are less susceptible to challenge as leading.

Probing questions include: “You mentioned the deposit was short. How often did that occur, and on which specific dates are you aware of?” / “When you say the inventory did not match the records, what specifically was missing?” / “Can you walk me through exactly what you saw, step by step?” / “How do you know the transaction was not authorized?”

Testing Consistency

After gathering the witness’s account, the investigator should test internal consistency by revisiting key points from different angles. If a witness is uncertain about a date but confident about the circumstances, note both the confidence and the limitation. Credibility assessments depend on the quality of the investigator’s documentation of both what was said and how it was said, including any apparent inconsistencies within a single witness’s account.

Employee Theft Interview Framework

Subject Interview Questions

Preparation

The subject interview requires more preparation than witness interviews because the investigator must arrive with a clear understanding of the evidence already gathered, a structured question sequence, and an approach that does not telegraph the full scope of the investigator’s knowledge prematurely. The subject should not be told, before the interview, that they are suspected of theft. The meeting should be described as part of an investigation into an area of concern that requires the subject’s input.

California Legal Considerations Before the Subject Interview

Before conducting a subject interview in California, the investigator must confirm whether the employee is represented by a union. Under the Weingarten doctrine, established by the U.S. Supreme Court in NLRB v. J. Weingarten, Inc. (1975) and extended to California public sector employees, a unionized employee who reasonably believes that an investigatory interview may result in disciplinary action has the right to request union representation. The employer is not required to advise the employee of this right, but if the employee requests a representative, the employer must either grant the request and delay the interview, deny the request and end the interview immediately, or offer the employee the choice of proceeding without representation or ending the interview.

Failing to honor a Weingarten request, or retaliating against an employee for making one, constitutes an unfair labor practice. Investigators working with unionized workforces in California should document whether a Weingarten request was made, and if so, how it was handled.

The subject interview is not a custodial interrogation. The employee is free to leave at any time, and this should be communicated at the outset. A subject interview conducted in a manner that resembles custodial detention, in terms of duration, tone, or the investigator’s conduct, exposes the employer to allegations of coercion and can undermine both the investigation and subsequent disciplinary proceedings.

Allen Morris Investigations conducts workplace investigations throughout Orange County and California using legally defensible, non-confrontational interview methodology.

Subject Interview Question Sequence

Phase 1: Establishing Context and Building Rapport. Begin with background questions: “Can you describe your responsibilities in your current role?” / “Who do you typically work with on [the relevant function]?” / “Can you walk me through how [the relevant process] normally works?” / “How long have you been in this role?” These questions establish baseline demeanor and confirm the subject’s knowledge of the relevant processes.

Phase 2: Probing the Area of Concern. Move into the area of concern through open, non-accusatory questions: “We’ve identified some discrepancies in [the relevant area]. Can you help me understand how that process is handled?” / “When did you last [perform the relevant function]?” / “Is there any reason [the relevant record or item] would not match what was expected?” / “Who has access to [the relevant system] other than you?”

Phase 3: Addressing the Evidence. After the subject has provided their account, the investigator may introduce specific evidence points without revealing the full scope of what is known: “I want to show you [a specific document or record]. Can you explain what you see here?” / “Our records show [a specific discrepancy]. What is your understanding of why that would appear?”

Phase 4: Closing. At the close of the interview, ask: “Is there anything you would like to add or clarify?” / “Is there anyone else you believe I should speak with?” The investigator should invite the subject to provide a voluntary written statement. A voluntary written statement, in the subject’s own handwriting, is among the most defensible forms of evidence a theft investigation can produce. It should never be dictated.

Documenting the Interview

Every interview should be summarized in writing by the investigator on the same day the interview occurs. The summary should identify the parties present, the date, time and location, the topics discussed, and the subject’s substantive responses. It should clearly distinguish between what was said and what the investigator observed or assessed.

Interview summaries are working documents that become part of the investigation file and may be subject to legal discovery. They should be factual, precise, and free of characterizations that could be perceived as indicative of predetermined conclusions.

FAQ: Employee Theft Interview Questions

Can an employee refuse to participate in an internal theft investigation interview?

An employee can refuse to submit to a voluntary interview, but doing so may have employment consequences. The employer cannot physically compel participation, but an unexplained refusal to cooperate with a legitimate workplace investigation may itself constitute a policy violation. Investigators should document any refusal, including the date, the reason given (if any), and the follow-up action taken.

Should investigative interviews be recorded?

California is an all-party-consent state under the California Invasion of Privacy Act (Cal. Penal Code section 632). Recording any portion of an investigative interview without the consent of all parties is potentially a criminal offense. Investigators should obtain explicit written consent before recording, or rely on contemporaneous written notes rather than recordings.

What if the subject provides an explanation that cannot be immediately verified?

Document the explanation accurately and completely. Do not dismiss it at the time of the interview. An investigation that disregards an explanation without verifying it is vulnerable to claims of predetermined outcome. Follow up on the explanation before finalizing any finding.

How many witnesses should be interviewed in a typical theft case?

Every person with relevant firsthand knowledge should be interviewed. There is no standard number. Investigators should continue interviewing witnesses until new interviews produce no material new information, a principle sometimes called information saturation.

When should a second investigator be present during the subject interview?

Having two people present during the subject interview is a best practice. It provides a second witness to the subject’s statements and conduct, reduces the likelihood of disputed accounts of what occurred, and adds a layer of procedural protection for the employer.

Conclusion

The quality of an employee theft investigation ultimately depends on the quality of the interviews conducted within it. Structured, non-confrontational questioning applied in the correct sequence, documented accurately, and compliant with California law produces findings that can withstand both internal review and external challenge.

Allen Morris Investigations conducts investigative interviews using proven, legally defensible methodologies for employers throughout Orange County and California. Contact us to discuss your investigation needs.

For a complete overview of the investigation process, visit our practical guide to investigating employee theft. For information on the full range of misconduct cases we investigate, visit our employee misconduct page.

See what clients are saying: Read Our Verified Google Reviews.

About Kathie Allen:

Kathie Allen is a licensed California Private Investigator (PI 27033) with over 20 years of experience conducting workplace investigations throughout Orange County and California. She is an Association of Workplace Investigators (AWI) trained investigator and Certified Title IX Investigator specializing in harassment, discrimination, employee misconduct, and Title IX compliance investigations for businesses, schools, and organizations.

Related resources: Read our guide to documenting evidence in employee theft investigations, see our employee misconduct investigation services, or contact us for a confidential consultation.