Your employee commits fraud. They steal from a customer, forge documents, or run a fake invoice scheme. The immediate loss is theirs, you might think. But the person who got hurt is almost certainly looking at your company as the one with deep pockets. And in many cases, the law lets them collect from you, not just the dishonest worker. This is not a niche problem. It is a core risk of running a business, and ignoring it can cost you everything.
The legal hook is called vicarious liability. That simply means you, the employer, are held responsible for what your employee does while acting in the course of their job. The old name for it is respondeat superior, Latin for “let the master answer.“ The idea is not that you did anything wrong. It is that the employee was doing your work, with your tools, during your time, and the harm happened because of that work. If the fraud is connected to the job, you pay.
The tricky part is deciding what counts as “connected to the job.“ Courts do not require that you approved the fraud. They ask whether the employee’s actions were within the general range of duties they were hired to perform. A salesperson who lies to close a deal is within their duties, even though lying is forbidden. A bookkeeper who writes checks to a fake vendor is within their duties, even though stealing is not in the job description. The fraud does not have to be for your benefit. In fact, it is almost always against your interest. That does not matter. What matters is that the employee used their position and authority to pull it off.
Consider a common scenario. Your office manager handles vendor payments. They create a shell company, approve invoices, and send money to their own account. The vendor never existed. You lose the money. But the real victim could be a supplier who was never paid, or a lender who relied on falsified records. That victim sues you. The court asks: Was the office manager acting within the scope of their employment when they processed the fake invoices? The answer is yes. They were doing exactly the kind of task they were hired to do. The intent was criminal, but the activity was routine. So you are liable.
Fraud by an employee who has no authority in the matter is different. If a warehouse worker steals a customer’s credit card number from an order form they had no reason to handle, and uses it for personal purchases, that is harder to pin on the employer. The worker was not doing their job when they took the card. They were on a personal errand. Courts sometimes call that a “frolic” away from work, and the employer escapes liability. But do not rely on that distinction. If the worker had any access to the card because of their job, a clever plaintiff’s lawyer will argue the access was the key. Judges often side with the victim, not the business.
There is another theory that gets even closer to home: negligent hiring, training, or supervision. This does not depend on whether the fraud was within the scope of duty. It depends on whether you knew, or should have known, that the employee was a risk. If you hired someone with a prior fraud conviction and put them in charge of accounts payable, a court can say you were careless. If you never checked references, or ignored warnings from a previous employer, that is negligence on your part. The employee’s fraud is then tied to your own failure to prevent it. This theory works even when the fraud is completely outside the employee’s normal duties. You can be liable for a janitor who scams an elderly customer if you never bothered to run a background check and the janitor had a long history of scams.
The practical message is stark. You cannot hide behind the fact that you are an honest owner or that you had a policy against fraud. Policies do not protect you. Proof of enforcement does. You need to show that you took reasonable steps to prevent your employees from committing fraud. That means real background checks before hiring, clear and enforced separation of duties so no single employee controls a transaction from start to finish, and active monitoring of financial records and vendor lists. It means taking every complaint seriously and acting on it immediately. If you look the other way because the employee is a good producer, you are signing up for liability.
Insurance is part of the answer, but not a simple one. Many general liability policies exclude employee fraud or cover it only under a separate fidelity bond or crime insurance policy. You should know exactly what your policy covers before you need it. A standard commercial policy may pay the victim’s claim, but it might also have a clause that lets the insurer deny coverage if you failed to supervise. Read the fine print, or better, have a lawyer read it.
Finally, remember that criminal charges against the employee do not help you. The victim will still sue you, and you will still pay. The best defense is a clean operation. Document every hiring decision, every training session, every audit. When fraud happens, and it will happen, the question will not be whether you feel bad. It will be whether you can prove you did enough. If you cannot, your business pays. That is the rule, and it is not going to change.
