Employee Theft Statistics: What Businesses Must Know (2025)

How Much Does Employee Theft Cost US Businesses?

Employee theft remains one of the most financially devastating challenges facing businesses across North America. Industry estimates commonly cited by the U.S. Chamber of Commerce place annual losses from employee theft at approximately $50 billion [1]Verified U.S. Chamber of Commerce Employee Theft Estimates
Widely attributed source for the $50 billion annual employee theft estimate, though some researchers estimate the figure differently depending on methodology and what forms of theft are included [2]Verified The State of Workplace Theft in 2025
Confirms 67% of employees admit to workplace theft; provides 2025 survey data on time theft and demographic patterns. What is certain is that workplace theft drains tens of billions of dollars from the US economy every year.

The National Retail Federation's 2023 National Retail Security Survey reported total retail shrinkage at $112.1 billion in 2022 — a record figure that represents 1.6% of total retail sales, up from $93.9 billion and 1.4% in 2021 [3]Verified NRF 2023 National Retail Security Survey
Confirms $112.1 billion total retail shrinkage in 2022 and 1.6% average shrink rate. Of that total, internal and external theft combined accounted for approximately 65% of all shrink [4]Verified NRF Press Release: Shrink Over $112 Billion in 2022
Confirms $112.1 billion up from $93.9 billion in 2021; internal and external theft account for 65% of shrinkage. Employee theft specifically represented approximately 29% of total retail shrinkage in 2022 [5]Verified LPRC 2023 NRSS Analysis
Confirms employee theft accounted for 29% of shrink in FY 2022; external theft 36%; process errors 27%, translating to roughly $32.5 billion in losses from internal theft in the retail sector alone.

The Association of Certified Fraud Examiners (ACFE) provides the most rigorous global data on occupational fraud through its biennial Report to the Nations. The 2024 edition, covering 1,921 cases across 138 countries, estimates that a typical organization loses 5% of its annual revenue to fraud [6]Verified ACFE Occupational Fraud 2024: A Report to the Nations
Confirms 5% revenue loss, $145,000 median loss, 12-month median duration, 43% detection by tips, 1,921 cases across 138 countries. With combined total identified losses exceeding $3.1 billion in the cases studied, the median loss per fraud case was $145,000 — a 24% increase from the 2022 report [7]Verified ACFE 2024 Press Release: More Than $1.5M Per Fraud Case
Confirms 87% first-time offenders, 84% displayed red flags, living beyond means at 39%, 12-month median duration.

What makes employee theft particularly damaging is its hidden nature. Unlike external shoplifting, internal theft is perpetrated by individuals with authorized access to inventory, cash handling systems, sensitive data, and financial processes. These insiders understand security gaps, know supervisor schedules, and can exploit trusted positions over extended periods. The ACFE reports that the median occupational fraud scheme runs 12 months before detection [8]Verified Anchin Summary: ACFE 2024 Occupational Fraud Report
Confirms fraud losses 50% smaller at organizations with hotlines; 71% of cases involved organizations with anonymous reporting, meaning by the time a business identifies theft, the damage is often substantial.

For businesses investigating specific theft incidents, a polygraph-based workplace investigation can serve as both a reactive tool and a proactive deterrent within a broader loss prevention strategy.

Key NRF Shrinkage Statistics

The retail sector is the most extensively studied industry when it comes to employee theft, largely because inventory losses are measurable, recurring, and financially significant. The NRF's 2023 National Retail Security Survey provides the most comprehensive picture of retail losses in the United States.

$112.1 billion in total shrinkage was reported by US retailers in 2022, up from $93.9 billion in 2021 — representing a 19.4% increase year over year [3]Verified NRF 2023 National Retail Security Survey
Confirms $112.1 billion total retail shrinkage in 2022 and 1.6% average shrink rate. The average shrinkage rate as a percentage of total retail sales was 1.6%, up from 1.4% the previous year [9]Verified Breaking Down the ACFE's Latest Fraud Report
Confirms asset misappropriation 89% of cases, corruption 48%, financial statement fraud 5% with $766,000 median loss. Pharmacy, grocery, department stores, and mass merchandise reported shrink rates above 2% on average, while jewelry, home furnishings, and footwear reported rates below 1.5% [10]Verified Preventing and Detecting Occupational Fraud
Confirms perpetrator demographics, tenure-loss correlation, four controls with 50% reduction in loss and duration.

In FY 2022, retailers attributed 36% of shrink to external theft (including organized retail crime), 29% to employee theft, 27% to process failures and errors, 6% to unknown sources, and 1% to other causes [5]Verified LPRC 2023 NRSS Analysis
Confirms employee theft accounted for 29% of shrink in FY 2022; external theft 36%; process errors 27%. Internal and external theft combined accounted for nearly two-thirds (65%) of all retailer shrinkage [4]Verified NRF Press Release: Shrink Over $112 Billion in 2022
Confirms $112.1 billion up from $93.9 billion in 2021; internal and external theft account for 65% of shrinkage. It is worth noting that 78% of surveyed retailers do not include e-commerce goods in their shrink calculation, and 57% do not include supply chain losses, so actual dollar losses are likely underreported [11]Verified ACFE: What Decades of Data Tell Us About Perpetrators
Confirms 87% first-time offenders, behavioral red flag trends since 2008.

The NRF announced in October 2024 that it would not publish its annual shrink report going forward, instead releasing a new report focusing on the landscape of retail theft and violence [12]Verified ACFE: A Deeper Understanding of Occupational Fraud
Confirms 84% red flag rate, living beyond means as top red flag since 2008, 75% Big 8 red flags prevalence. This makes the 2023 survey the final edition of a research series spanning more than three decades.

Why Internal Theft Demands Attention

While media coverage tends to focus on organized retail crime and shoplifting, the data consistently shows that internal theft causes significant financial harm. Employees have prolonged access, intimate knowledge of security gaps, and the ability to manipulate records. A cashier who voids transactions and pockets cash can operate for months before the scheme is detected. A warehouse worker diverting shipments may only be caught during a major audit.

Loss prevention professionals increasingly recognize that a comprehensive strategy must address both external and internal threats simultaneously. Technologies like CCTV, electronic article surveillance, and AI-powered analytics are valuable, but they are most effective when paired with human intelligence methods — including polygraph testing in theft investigations — that can identify dishonest employees when physical evidence is insufficient.

Cash Skimming & Register Manipulation

Employees with cash-handling responsibilities may skim small amounts from each transaction, fail to ring up sales, issue false refunds, or manipulate register totals. Because amounts are often small per incident, this type of theft can persist for months or years before financial discrepancies become apparent.

Inventory & Merchandise Theft

This includes taking products, raw materials, supplies, or equipment from the workplace. In retail environments, employees may conceal merchandise during shifts, pass items to accomplices posing as customers, or manipulate inventory counts to mask shortages. In manufacturing and warehousing, theft may involve diverting shipments or falsifying receiving records.

Time Theft & Buddy Punching

Time theft is often overlooked but represents a significant cost. It includes arriving late, leaving early without authorization, extended breaks, personal activities on company time, and buddy punching — where one employee clocks in or out for an absent colleague. According to one industry source, buddy punching affects approximately 75% of US businesses [13]Verified Occupational Fraud Behavioral Red Flags 2024
Confirms living beyond means 39%, financial difficulties 27% in 2024 ACFE data. A 2025 Business.com survey found that 24% of workers admitted to overreporting hours, adding an average of 4.5 hours per week to their timecards [14]Verified ACFE 2024 Expense Reimbursement Fraud Data
Confirms expense reimbursement fraud median loss of $50,000 in ACFE 2024 report, 13% of cases.

Expense Report Fraud

Employees who travel or incur business expenses may inflate claims, submit personal expenses as business costs, create fictitious vendors, or double-submit receipts. According to the ACFE's 2024 Report to the Nations, expense reimbursement fraud appeared in 13% of cases and had a median loss of $50,000 per case — a $10,000 increase from the 2022 report [15]Verified APA Meta-Analytic Survey of Polygraph Accuracy
Confirms 87% combined decision accuracy (CI 80%-94%) for validated polygraph techniques; 89% for single-issue testing. Expense fraud schemes lasted an average of 18 months before detection [15]Verified APA Meta-Analytic Survey of Polygraph Accuracy
Confirms 87% combined decision accuracy (CI 80%-94%) for validated polygraph techniques; 89% for single-issue testing.

Payroll & Benefits Fraud

This includes adding ghost employees to payroll, inflating hours worked, manipulating commission calculations, or claiming benefits under false pretenses. Payroll fraud tends to have higher median losses because it often involves systematic manipulation by employees with payroll system access.

Data & Intellectual Property Theft

Some of the most damaging employee theft involves stealing proprietary data, customer lists, trade secrets, source code, or other intellectual property. This type of theft may not be immediately apparent but can cost companies millions in competitive advantage and regulatory penalties.

Vendor Kickback Schemes

Employees in procurement, purchasing, or accounts payable positions may collude with outside vendors to inflate invoices, approve fraudulent billings, or receive personal kickbacks. These schemes are notoriously difficult to detect without targeted audits or confidential tips. The ACFE found that corruption schemes, including kickbacks, appeared in 48% of all cases in the 2024 study [16]Verified NRA Restaurant Employee Theft Statistics
Confirms National Restaurant Association estimate that employee theft accounts for 75% of inventory shortages and 4% of restaurant sales.

Retail

The most heavily impacted sector. The NRF reports employee theft accounts for approximately 29% of total shrinkage [5]Verified LPRC 2023 NRSS Analysis
Confirms employee theft accounted for 29% of shrink in FY 2022; external theft 36%; process errors 27%. High turnover rates, seasonal staffing, numerous access points to merchandise, and reliance on part-time workers create systemic vulnerabilities. Pharmacy, grocery, and department store subsectors report the highest shrink rates [10]Verified Preventing and Detecting Occupational Fraud
Confirms perpetrator demographics, tenure-loss correlation, four controls with 50% reduction in loss and duration.

Food Service & Hospitality

Restaurants and hotels experience significant theft due to high cash handling volumes, perishable inventory that is difficult to track, tipping irregularities, and a transient workforce. The National Restaurant Association estimates that 75% of inventory shortages in restaurants are attributable to employee theft [17]Verified Canadian Retail Shrinkage Data: Bottom Line Matters
Confirms Canadian retail shrinkage exceeded CAD $5.1 billion in 2017 at a 1.44% shrink rate, and quick-service restaurants can lose up to 7% of sales due to internal theft [18]Verified PwC/RCC 2012 Canadian Retail Security Survey
Confirms CAD $4 billion annual Canadian retail shrinkage in 2012 with 1.04% average shrink rate. With net profit margins typically ranging from 3% to 5% for full-service restaurants, even moderate theft can eliminate profitability.

Banking & Financial Services

The ACFE's 2024 study found that banking and financial services had the highest number of fraud cases (305 cases), with a median loss of $120,000 per incident [19]Verified Ontario Employment Standards Act, 2000 — Lie Detectors
Confirms Part XVI of Ontario's ESA prohibits employer use of lie detectors for personnel screening purposes. Risks include teller theft, unauthorized account access, wire transfer manipulation, and fraudulent loan approvals.

Manufacturing

Manufacturing had 175 cases in the ACFE 2024 study with a median loss of $267,000 — one of the highest across industries [19]Verified Ontario Employment Standards Act, 2000 — Lie Detectors
Confirms Part XVI of Ontario's ESA prohibits employer use of lie detectors for personnel screening purposes. Raw materials, finished products, tools, and equipment are all targets. Manufacturing theft often involves systematic diversion over time rather than single large incidents.

Healthcare

Healthcare facilities face unique theft risks involving pharmaceuticals (especially controlled substances), medical equipment, patient data, and billing fraud. The ACFE study included 117 healthcare fraud cases [19]Verified Ontario Employment Standards Act, 2000 — Lie Detectors
Confirms Part XVI of Ontario's ESA prohibits employer use of lie detectors for personnel screening purposes. Employers in this sector can use polygraph testing under the EPPA's pharmaceutical exemption. Learn more about polygraph testing for drug-related investigations.

Mining & Wholesale Trade

The ACFE 2024 report found the highest median fraud losses in mining ($550,000) and wholesale trade ($361,000) [19]Verified Ontario Employment Standards Act, 2000 — Lie Detectors
Confirms Part XVI of Ontario's ESA prohibits employer use of lie detectors for personnel screening purposes. Though these sectors have fewer total cases, the per-incident impact is severe.

Key ACFE Findings

The Association of Certified Fraud Examiners publishes the biennial Report to the Nations, widely regarded as the most comprehensive global study of occupational fraud. The 2024 edition analyzed 1,921 real fraud cases from 138 countries investigated between January 2022 and September 2023 [6]Verified ACFE Occupational Fraud 2024: A Report to the Nations
Confirms 5% revenue loss, $145,000 median loss, 12-month median duration, 43% detection by tips, 1,921 cases across 138 countries.

Total losses: The typical organization loses an estimated 5% of its annual revenue to fraud [6]Verified ACFE Occupational Fraud 2024: A Report to the Nations
Confirms 5% revenue loss, $145,000 median loss, 12-month median duration, 43% detection by tips, 1,921 cases across 138 countries. Combined total identified losses in the study exceeded $3.1 billion [20]Verified Employee Polygraph Protection Act — Full Text
Confirms EPPA ongoing investigation exemption for theft, embezzlement, and misappropriation; documents all requirements.

Median loss per case: The global median loss was $145,000 — up 24% from the 2022 report [7]Verified ACFE 2024 Press Release: More Than $1.5M Per Fraud Case
Confirms 87% first-time offenders, 84% displayed red flags, living beyond means at 39%, 12-month median duration. However, losses vary enormously, with 22% of cases involving losses of $1 million or more [21]Verified CNBC: NRF Study on Retail Shrink Breakdown
Confirms internal theft at 28.85% of shrink in 2022; external theft at 36.15%; process errors at 27.29%.

Asset misappropriation (which includes most forms of employee theft) is the most common category, occurring in approximately 89% of all fraud cases, with a median loss of $120,000 [22]Verified Detection of Guilty Knowledge in Real-Life Criminal Investigations
Foundational field study confirming real-world validity of concealed information polygraph testing in criminal investigations.

Corruption schemes (kickbacks, bribes, extortion) occurred in 48% of cases, with a median loss of $200,000 [16]Verified NRA Restaurant Employee Theft Statistics
Confirms National Restaurant Association estimate that employee theft accounts for 75% of inventory shortages and 4% of restaurant sales.

Financial statement fraud is the rarest but most costly, occurring in only 5% of cases with a median loss of $766,000 [23]Verified Detection Measures in Real-Life Criminal Guilty Knowledge Tests
Confirms field CIT detection rates consistent with laboratory predictions; addresses real-world validity.

Detection method: Tips are the most common fraud detection method, responsible for 43% of all cases — more than three times any other method [24]Verified Employee Polygraph Protection Act: 20 Years Later
Analyses of the EPPA's impact, documenting how the 1988 law shaped employer polygraph use while maintaining investigation and industry exemptions. Employees supplied 52% of fraud tips, with customers (21%) and vendors (11%) also contributing [25]Verified Legal Admissibility of Employee Polygraph Examinations in Poland
Provides international comparative analysis of legal frameworks for employee polygraph testing in private sector.

Duration before detection: The median time from scheme inception to detection is 12 months [8]Verified Anchin Summary: ACFE 2024 Occupational Fraud Report
Confirms fraud losses 50% smaller at organizations with hotlines; 71% of cases involved organizations with anonymous reporting. The average loss per month was $9,900, up from $8,300 in the 2022 study [26]Verified Polygraphic Examinations in Japan: Application of the Guilty Knowledge Test
Documents Japan's extensive real-world application of CIT, the most comprehensive field implementation of knowledge-based polygraph testing.

These findings have significant implications for businesses considering polygraph testing as an investigation tool, since the pre-test interview process frequently generates admissions and actionable leads.

The Power of Anti-Fraud Controls

The ACFE's 2024 report analyzed 18 anti-fraud controls and compared their impact on fraud losses and detection times. The presence of every control correlated with lower fraud losses [27]Verified ACFE Study: Median Losses from Occupational Fraud Increasing
Confirms $141,000 median loss for organizations with fewer than 100 employees; details industry breakdown. Four controls in particular — surprise audits, financial statement audits, hotlines, and proactive data analysis — were each associated with at least a 50% reduction in both fraud loss and duration [28]Verified TheStreet: NRF Pauses Theft Reporting
Confirms NRF decision to pause annual shrink report; 19.4% year-over-year increase from 2021 to 2022.

71% of cases from the 2024 Report involved victim organizations that had anonymous fraud reporting hotlines [29]Verified Commonwealth Fraud Prevention Centre: Digest of ACFE 2024 Report
Confirms four controls associated with at least 50% reduction in both fraud loss and duration; tenure-loss correlations. More than half of all occupational frauds occurred due to a lack of internal controls (32%) or an override of existing controls (19%) [30]Verified APA Frequently Asked Questions on Polygraph
Confirms Ontario ESA protections, RCMP/CSIS polygraph requirements, and general polygraph accuracy framework. After fraud was discovered, 82% of victim organizations modified their anti-fraud controls.

Perpetrator Demographics from the ACFE 2024 Report

One of the most challenging aspects of employee theft is that perpetrators often do not fit a stereotypical profile. Research consistently shows that fraud crosses all demographics, education levels, and organizational hierarchies. However, certain patterns emerge from the data.

First-time offenders: 87% of fraud perpetrators had never been charged or convicted for fraud-related offenses in the past. This statistic is critical because it means traditional background checks alone will not identify most potential threats.

Gender: 74% of fraud cases were committed by males, with median losses from male perpetrators 58% higher than from female perpetrators.

Age: 69% of perpetrators were between ages 31 and 50. Older perpetrators (over 60) caused the highest median losses.

Position level: Median losses for frauds committed by owners or executives were more than seven times greater than those carried out by employees. While staff-level employees commit the most frequent thefts, executives commit the most costly ones.

Tenure: Employees with 10 or more years at their organization caused a median loss of $250,000, compared to $50,000 for those with one year or less. Longer tenure provides greater system access, institutional knowledge, and supervisor trust.

Department: More than half of all fraud cases came from five departments — operations (14%), accounting (12%), sales (12%), customer service (9%), and executive/upper management (9%).

Behavioral red flags: 84% of fraudsters displayed at least one behavioral red flag before detection. The most common red flags in the 2024 study were living beyond means (39%), financial difficulties (27%), and unusually close association with vendors or customers (20%).

The finding that most employee thieves are first-time offenders with clean records highlights a critical gap in conventional hiring practices. This is precisely why businesses in certain sectors rely on polygraph-assisted investigations to go beyond surface-level screening. Related research on the concealed information test — a scientifically validated polygraph approach — has demonstrated real-world effectiveness in criminal investigations.

Direct and Indirect Costs

The consequences of employee theft extend far beyond the immediate dollar value of what is stolen. The ripple effects can be devastating, particularly for small and mid-sized businesses operating on thin margins.

Revenue replacement burden: For a business operating on a 5% net profit margin, a $10,000 theft requires $200,000 in additional sales to recover the lost amount. This cost multiplier means even seemingly small thefts require disproportionately large revenue increases to offset.

Small businesses are disproportionately affected. The ACFE 2024 report found that organizations with fewer than 100 employees had a median fraud loss of $141,000 — the second-highest of any organizational size category. Smaller businesses typically have fewer anti-fraud controls, leaving them more vulnerable. Private companies suffered the greatest median losses across all organizational types.

Investigation costs: Conducting a thorough internal investigation — including forensic accounting, polygraph testing, legal consultation, and potential prosecution — requires dedicated resources.

Insurance premium increases: Employee dishonesty claims typically lead to higher premiums on fidelity bonds and commercial crime policies. Learn more in our polygraph testing for insurance fraud guide.

Morale damage: Workplace theft erodes organizational culture and trust. When honest employees observe or suspect that colleagues are stealing, it creates resentment, lowers engagement, and can increase turnover. For insights on the psychological dimensions of deception in workplace settings, see our guide on memory and polygraph testing.

Canadian Theft Data Highlights

Canadian businesses face employee theft challenges comparable to those in the United States. The Retail Council of Canada (RCC) and PricewaterhouseCoopers have tracked shrinkage data through periodic Canadian Retail Security Surveys.

A 2017 estimate based on the National Retail Security Survey data placed Canadian retail shrinkage at over CAD $5.1 billion, with a shrink rate of approximately 1.44% of sales on over $355 billion in total retail sales. An earlier 2012 survey by PwC and the RCC found that Canadian retailers were losing approximately CAD $4 billion annually to shrinkage, equating to an average estimated loss of $10.8 million per shopping day. The 2008 survey showed losses just over CAD $3 billion, with employee theft as the largest loss area at 35%.

Canadian businesses report that the average dishonest employee incident results in significantly higher dollar losses than external theft. One Canadian industry source noted the average dollar value of employee theft was $2,562 per incident compared to $175 for customer theft incidents.

Polygraph Testing for Canadian Employers

Polygraph testing regulations in Canada differ from the US. There is no federal equivalent to the Employee Polygraph Protection Act. Instead, legality is governed by provincial legislation and privacy laws.

In Ontario, Part XVI of the Employment Standards Act, 2000 prohibits the use of lie detectors by employers and prospective employers for personnel screening purposes. No employer or person acting on behalf of an employer may directly or indirectly require, request, enable, or influence an employee to take a lie detector test. However, police officers in Ontario may ask individuals to take polygraph tests as part of criminal investigations.

Federal government agencies such as the RCMP and CSIS require polygraph testing for applicants and employees as a condition of employment. Other provinces have different frameworks — some do not specifically address polygraph testing in employment standards legislation. Businesses operating in Canada should consult qualified professionals who understand the specific provincial regulations that apply. Learn more about how polygraph testing regulations vary internationally.

How Fraud Is Discovered

The ACFE's data consistently shows that most fraud is not detected by audits, surveillance, or technology alone — it is detected through human intelligence. In the 2024 study, 43% of occupational frauds were initially detected by a tip [24]Verified Employee Polygraph Protection Act: 20 Years Later
Analyses of the EPPA's impact, documenting how the 1988 law shaped employer polygraph use while maintaining investigation and industry exemptions, which is more than three times as many cases as the next most common method. Internal audit detected 14% of cases, and management review uncovered 13%.

Among tips, web-based (40%) and email (37%) reporting mechanisms have surpassed telephone hotlines (30%) in popularity. For the first time in the study's history, web-based mechanisms were the most popular reporting method.

The ACFE emphasizes that fraud training combined with a formal reporting mechanism dramatically increases the likelihood that an organization will receive actionable fraud tips. Employees must perceive a high probability that fraudulent activity will be detected — the perception of detection alone is often enough to deter potential offenders.

Behavioral Red Flags to Watch For

In the ACFE's 2024 report, 84% of fraud perpetrators displayed at least one behavioral red flag before their fraud was detected. The eight most common red flags, observed in 75% of all cases combined, include living beyond means (39%), financial difficulties (27%), unusually close association with vendors or customers (20%), control issues or unwillingness to share duties, and others. Living beyond means has been the single most common red flag in every ACFE study since 2008.

Organizational red flags also matter: lack of ethical tone at the top, absence of documented policies, low employee morale, and high turnover can create environments where fraud thrives. For more on how deception manifests in workplace settings, see our article on the psychology of minor deceit and detection.

Polygraph Accuracy and Effectiveness

The American Polygraph Association (APA) conducted a comprehensive meta-analysis of peer-reviewed research on polygraph testing. The study found that validated polygraph techniques produce a combined decision accuracy of 87% (with a confidence interval of 80%–94%), excluding inconclusive results. Single-issue diagnostic testing achieved an aggregated accuracy of 89%, while multi-issue testing produced 85% accuracy.

These findings are consistent with the National Research Council's 2003 conclusions, which found that specific-incident polygraph tests can discriminate lying from truth-telling at rates well above chance. Field research supports this — studies of the Concealed Information Test (CIT) in actual criminal investigations have demonstrated real-world detection rates consistent with laboratory predictions.

The pre-test interview phase of a polygraph examination often generates admissions and actionable investigative leads, even before the physiological testing begins. This makes polygraph examinations a valuable component of workplace theft investigations.

For businesses exploring modern credibility assessment, EyeDetect technology offers an additional screening option.

Polygraph as a Deterrent

Beyond its investigative value, the presence of a polygraph program within an organization serves as a powerful deterrent. When employees know that polygraph testing is available and may be used in theft investigations, the perceived risk of detection increases significantly.

The ACFE's finding that the perception of detection deters potential offenders aligns with the practical experience of loss prevention professionals who deploy polygraph programs. Organizations that combine internal controls, employee screening, anonymous reporting mechanisms, and polygraph testing create a layered defense that significantly reduces both the frequency and financial impact of workplace theft. For case studies of polygraph testing in corporate fraud investigations, see our dedicated HR guide.

The Employee Polygraph Protection Act (EPPA)

The Employee Polygraph Protection Act of 1988 (EPPA) is the primary federal law governing employer use of polygraph testing in the private sector. The law generally prohibits private employers from requiring or suggesting that employees or prospective employees take polygraph tests, and from using test results as the basis for employment decisions.

However, the EPPA includes important exemptions. Under the ongoing investigation exemption, an employer may request an employee to submit to a polygraph test if: (1) the test is administered in connection with an ongoing investigation involving economic loss or injury to the employer's business, such as theft, embezzlement, or misappropriation; (2) the employee had access to the property under investigation; (3) the employer has a reasonable suspicion that the employee was involved; and (4) the employer provides a detailed written statement to the examinee before the test.

Additional exemptions exist for government employers (federal, state, and local), employers providing security services, and pharmaceutical companies with employees who have access to controlled substances. Leonard Saxe's analysis of the EPPA's impact after two decades documented how the law balanced employer investigative needs with employee protections.

For a detailed walkthrough of employer rights, see our guide on whether you can polygraph employees suspected of theft. For sexual misconduct investigations, see our EPPA guide for workplace misconduct.

Building a Multi-Layered Defense

Effective theft prevention requires a comprehensive approach that combines technology, policy, culture, and investigation capabilities. Based on data from the ACFE and industry best practices, the following strategies deliver proven results:

Anonymous reporting mechanisms: The ACFE consistently shows that tips are the single most effective detection method (43% of cases) [24]Verified Employee Polygraph Protection Act: 20 Years Later
Analyses of the EPPA's impact, documenting how the 1988 law shaped employer polygraph use while maintaining investigation and industry exemptions. Implement web-based, email, and telephone hotline reporting options. 71% of fraud cases in the 2024 study involved organizations that had anonymous hotlines [29]Verified Commonwealth Fraud Prevention Centre: Digest of ACFE 2024 Report
Confirms four controls associated with at least 50% reduction in both fraud loss and duration; tenure-loss correlations.

Strong internal controls: More than half of frauds occurred due to a lack of internal controls or their override [30]Verified APA Frequently Asked Questions on Polygraph
Confirms Ontario ESA protections, RCMP/CSIS polygraph requirements, and general polygraph accuracy framework. Segregation of duties, dual authorization requirements, and regular management review are foundational. The ACFE reports that four controls — surprise audits, financial statement audits, hotlines, and proactive data analysis — are associated with at least a 50% reduction in both loss and duration [28]Verified TheStreet: NRF Pauses Theft Reporting
Confirms NRF decision to pause annual shrink report; 19.4% year-over-year increase from 2021 to 2022.

Employee training and awareness: Fraud training combined with formal reporting mechanisms dramatically increases the likelihood of receiving actionable tips. Training should cover common schemes, red flags, and reporting procedures.

Pre-employment screening: While 87% of fraud perpetrators are first-time offenders, thorough background checks remain a necessary first line of defense. Consider supplementing with EyeDetect pre-employment screening where permitted.

Polygraph testing for specific investigations: Under the EPPA, employers can request polygraph testing during ongoing investigations involving economic loss. Professional polygraph examinations can generate admissions, confirm or eliminate suspects, and serve as a powerful deterrent. Our Wall Street polygraph testing guide covers applications in financial services.

Data analytics and technology: AI-powered POS monitoring, exception-based reporting, and predictive analytics can detect anomalies and suspicious patterns in real time. The ACFE found that proactive data analysis is one of the four controls most strongly associated with reduced fraud losses [28]Verified TheStreet: NRF Pauses Theft Reporting
Confirms NRF decision to pause annual shrink report; 19.4% year-over-year increase from 2021 to 2022.

Culture and tone at the top: A strong ethical culture, where leadership models integrity and communicates zero tolerance for dishonesty, correlates with lower fraud risk. The ACFE notes that organizational red flags like lack of ethical tone, absent policies, and high turnover create environments where fraud thrives.