Restaurant Employee Theft: Polygraph for Hospitality

A Multi-Billion Dollar Problem

Employee theft is one of the most significant financial threats facing the restaurant and hospitality industry today. Revenue loss due to employee theft in the restaurant industry totals between $3 and $6 billion annually [1]Verified Restaurant Employee Theft Statistics – Data, Trends & How to Prevent Loss
Confirms restaurant employee theft costs $6 billion annually and 75% of inventory shortages from internal theft. According to a National Restaurant Association study, internal employee theft is responsible for 75% of restaurant inventory shrinkage [2]Verified Employee Theft Statistics for 2025
Confirms 75% of inventory loss in food sector due to theft and $50 billion annual cost across all industries, equating to approximately 4% of total restaurant sales [3]Verified 7 Ways Employees Steal from Restaurants
Confirms 75% of restaurant shrinkage from employee theft equating to 4% of sales with 3-5% profit margins. In an industry where profit margins typically run between 3–5%, this level of loss can be devastating.

The scope of this problem becomes even more striking in context. The restaurant and foodservice industry is expected to reach $1.5 trillion in sales in 2025, employing 15.9 million people and serving as the nation's second-largest private-sector employer [4]Verified NRA: Restaurant Industry Sales to Reach $1.5 Trillion in 2025
Confirms $1.5 trillion industry sales forecast and 15.9 million employees for 2025. With this scale comes immense vulnerability. Hospitality businesses lose approximately 4–6% of their annual revenue to various forms of theft [5]Verified Identifying and Preventing Theft in Hospitality Operations
Confirms hospitality businesses lose 4-6% of annual revenue to theft and 75% from internal theft, and a 2022 global fraud study by the Association of Certified Fraud Examiners found that the median loss to the hospitality industry amounted to $579,000 per fraud case [6]Verified Spotlight on Fraud Risk in Hospitality: A Systematic Literature Review
Confirms ACFE finding of $579,000 median loss to hospitality industry from occupational fraud.

Employee theft costs businesses across all industries approximately $50 billion every year, and the average case takes 18 months to detect [7]Verified How to Prevent Employee Theft at Your Restaurant
Confirms $3-6 billion annual losses and contribution to 50% of small business failures. About 37% of employee thefts involve managers or high-level executives [8]Verified 7 Best Practices To Catch Fraud and Theft In Your Restaurants
Confirms 49% of employees admit to time theft and $11 billion annual cost of time theft, making the problem particularly challenging in hospitality operations where managers have broad access to cash, inventory, and POS systems. For a deeper understanding of how theft investigations work in small hospitality businesses, see our guide to polygraph testing for theft in small businesses.

Why Restaurants Are Uniquely Vulnerable

Restaurants face a perfect storm of theft risk factors that make them more vulnerable than most other industries. The combination of high employee turnover, constant cash handling, perishable inventory that disappears upon consumption, and shift-based work with limited supervision creates an environment where theft can flourish undetected [9]Verified Employee Polygraph Protection Act - Wikipedia
Confirms EPPA enacted 1988, prevents most private employers from using polygraph tests with limited exemptions.

The average annual restaurant employee turnover rate exceeds 75% in 2025, with quick-service restaurants experiencing rates above 130% [10]Verified 4 Restaurant Staff Turnover Stats for 2025 Success
Confirms restaurant turnover exceeds 75% with QSR turnover exceeding 130% in 2025. This extraordinary churn means that new, less-invested employees are constantly rotating through operations. The cost of replacing a single hourly employee now averages $2,305 [11]Verified Restaurant Turnover Trends - Black Box Intelligence
Confirms average hard costs to replace hourly staff at $2,305 and management turnover trends, and this revolving door also means fewer long-tenured employees who might notice or report suspicious activity.

The retail and restaurant sectors continue to report the highest incidents of employee theft of any industry [12]Verified The Usual Suspects: 6 Ways to Prevent Restaurant Employee Theft
Confirms RLPSA data on 4-6% food cost theft and independent operations being at highest risk. Restaurants are particularly vulnerable because products — food and drinks — instantly disappear upon consumption, making them an attractive target for those intent on concealing stolen meals [13]Verified Types of Restaurant Theft & How to Prevent Them
Confirms restaurants as targets due to perishable products and POS manipulation methods. Unlike retail merchandise, a comped meal or pocketed cash payment leaves no physical evidence behind.

Common Forms of Restaurant Employee Theft

Restaurant employee theft takes many forms, ranging from petty pilferage to sophisticated fraud schemes. According to the Restaurant Loss Prevention and Security Association (RLPSA), the average cost of employee theft is between 4% and 6% of overall food cost [14]Verified Employee Theft – Protecting More Than Property
Confirms EPPA requirements for hotel theft investigations including ongoing investigation exemption details. Understanding these methods is critical for establishing the evidence needed to pursue a polygraph investigation under the EPPA.

Cash theft remains one of the most common methods. Employees may pocket bills, void legitimate transactions, issue false discounts, or use "short ringing" — charging a customer full price but entering a lower amount in the POS and keeping the difference [15]Verified Employee Polygraph Protection Act (EPPA) - American Polygraph Association
Confirms EPPA compliance requirements including $10,000 penalty per violation and examiner guidelines. POS system manipulation includes voiding purchases and taking the money, comping meals for friends and family, or ringing in only part of an order and pocketing the extra products [16]Verified Employee Polygraph Protection Act of 1988: Background and Implications
Confirms EPPA eliminated 85% of polygraph tests and was opposed by private industry concerned about internal theft. Unauthorized food and beverage consumption is another highly prevalent form, including unrecorded shift meals, free drinks for friends, and extra food disguised in to-go bags [17]Verified Employee Polygraph Protection Act - Full Text
Confirms Section 7(d) ongoing investigation exemption requirements and employee protection provisions.

Time theft is also widespread. Nearly half of employees (49%) admit to time theft, including buddy punching, extended breaks, and early clock-ins [18]Verified eCFR: 29 CFR Part 801 - Application of the EPPA of 1988
Confirms federal regulations implementing EPPA including investigation exemption procedures. Time theft alone costs U.S. employers $11 billion annually [19]Verified Polygraph Validity Research - American Polygraph Association
Confirms 89% decision accuracy for event-specific diagnostic testing and 85% for multi-issue testing. Credit card fraud schemes have also appeared in restaurants, with employees copying card information using skimming devices or processing fraudulent refunds [20]Verified Employee Theft Prevention in Restaurants, Hotels, and Bars
Confirms importance of accountability systems and hiring/training/supervision in theft prevention. When theft patterns suggest coordinated activity, our guide on theft ring investigations explains how polygraph testing can help map multiple conspirators.

How EPPA Changed the Hospitality Industry

The Employee Polygraph Protection Act of 1988 (EPPA) fundamentally transformed how the hospitality industry addresses employee theft. Before the law took effect on December 27, 1988, polygraph testing was widely used in restaurants and hotels for both pre-employment screening and ongoing employee monitoring [21]Verified 50 Alarming Employee Theft Statistics & Data (2025)
Confirms hospitality industry theft of cash, inventory, and customer data and 33% of bankruptcies linked to theft. The EPPA eliminated approximately 85% of polygraph testing nationwide [22]Verified The New Federal Polygraph Law and Its Effect On Hospitality Operators
Confirms EPPA eliminated 85% of polygraph testing and banned pre-employment screening in hospitality, and according to research by Robert Alan Palmer published in the Hospitality Education and Research Journal, the law completely banned pre-employment screening in hospitality, forcing hotels and restaurants to develop alternative methods for addressing employee theft [23]Verified Employee Polygraph Protection Act: 20 Years Later
Confirms EPPA's impact after two decades banning most private employer polygraph use with limited exemptions.

As Leonard Saxe analysed two decades after the law's passage, the EPPA banned most private employer polygraph use while maintaining exceptions for government, security, and pharmaceutical industries [24]Verified A Comparison of the Cardio-Pneumo-Psychograph and Association Methods in the Detection of Lying in Cases of Theft
Confirms early research showing physiological measurement methods had higher diagnostic accuracy in theft cases. The hospitality industry — restaurants, hotels, bars, and catering operations — falls squarely under the EPPA's general prohibitions. This means that hospitality operators cannot use polygraph testing for screening job applicants or conducting random testing of current employees.

For a complete overview of the EPPA's legislative journey and its impact on workplace testing, see our full legislative history of the Employee Polygraph Protection Act and our article on polygraph testing in the 1980s.

The Ongoing Investigation Exemption: How Restaurants Can Legally Use Polygraph

While the EPPA broadly prohibits polygraph use in private employment, it includes a critical exemption that allows hospitality employers to use polygraph testing in specific theft investigation scenarios. Section 7(d) of the EPPA provides a limited exemption for ongoing investigations involving economic loss or injury to the employer's business, such as theft, embezzlement, misappropriation, or acts of unlawful industrial espionage or sabotage [25]Verified Test of a Mock Theft Scenario for Use in the Psychophysiological Detection of Deception
Foundational research on mock theft scenarios used in psychophysiological detection of deception.

For a restaurant or hotel to legally request a polygraph examination under this exemption, four conditions must be met simultaneously. First, the test must be administered in connection with an ongoing investigation involving economic loss or injury to the employer's business [26]Verified Legal Admissibility of Employee Polygraph Examinations in Poland
Comparative research on legal frameworks for employee polygraph testing in private sector. Second, the employee must have had access to the property that is the subject of the investigation [27]Verified National Restaurant Association Statistics 2025
Confirms 77% of operators report recruiting and retaining employees as a significant challenge. Third, the employer must have a reasonable suspicion that the employee was involved in the incident or activity under investigation [28]Verified Restaurant Theft: It Doesn't Have To Happen To You
Confirms U.S. Chamber of Commerce data that 75% of employees steal at least once and NRA QSR theft data. Fourth, the employer must execute a written statement provided to the examinee before the test that sets forth the specific incident being investigated and the basis for testing that particular employee [29]Verified Cases of Employee Theft in the Hospitality Industry
Academic case study confirming hotel managers rate employee theft as uniformly unacceptable and unethical.

Importantly, even when these conditions are met, the employer cannot require the employee to take the examination. If an employee refuses a request or suggestion to take a polygraph, the employer cannot discipline or discharge the employee based on that refusal [30]Verified Fact Sheet #36: Employee Polygraph Protection Act of 1988
Official U.S. Department of Labor fact sheet confirming EPPA provisions and employer requirements. Additionally, polygraph test results cannot be used as the sole basis for any adverse employment action — additional supporting evidence is always required. Violations of the EPPA carry a penalty of $10,000 for each violation.

EPPA Compliance Checklist for Hospitality Employers

Compliance with the EPPA is essential for any hospitality employer considering polygraph testing as part of a theft investigation. The American Polygraph Association recommends that employers have their corporate attorney review all actions to ensure EPPA compliance. Here is what hospitality operators need to know:

The written statement provided to the employee before the test must include identification of the specific economic loss or injury, a description of the employee's access to the property under investigation, a description of the basis for reasonable suspicion, and the signature of a person authorized to legally bind the employer — someone other than the polygraph examiner. The employee must receive at least 48 hours advance notice of the examination date, time, and location.

The polygraph examiner must be licensed if required by the state where the test is conducted, and must be bonded or have professional liability coverage. Each examination must last at least 90 minutes, and no examiner may conduct more than five tests in a single calendar day. All records related to the examination must be retained for a minimum of three years. To learn more about how to book a theft investigation polygraph test, visit our booking guide.

Restaurant operators should also be aware that some states have laws that are more restrictive than the EPPA. If a state prohibits the use of polygraphs in all private employment, the EPPA's limited exemptions cannot override that state prohibition. Our guide to Missouri employer polygraph laws provides one example of how federal and state laws interact.

Identifying Theft Scenarios That Qualify Under EPPA

Not every instance of suspected employee theft in a restaurant or hotel will qualify for polygraph testing under the EPPA. The exemption requires a specific, identifiable economic loss — not just a general suspicion that theft is occurring. Qualified scenarios include documented cash shortages from register drawers, missing inventory that has been verified through audit, unexplained food cost increases despite consistent purchasing, confirmed unauthorized transactions in the POS system, and missing equipment or supplies where specific items can be identified.

The EPPA's ongoing investigation exemption applies to theft, embezzlement, misappropriation, or acts of unlawful industrial espionage or sabotage that result in specific economic loss or injury to the employer. For restaurants, this typically means quantifiable losses — a missing cash deposit, documented inventory discrepancies, or unauthorized comps and voids that can be traced to specific dollar amounts.

For cases involving domestic staff in hospitality settings, such as housekeeping or private catering, our theft polygraph guide for domestic workers provides specialized guidance. For understanding the typical questions asked during a theft polygraph, see theft polygraph questions: exactly what you'll be asked.

Building the Foundation for a Lawful Polygraph Request

Before requesting a polygraph examination, restaurant and hotel operators must build a solid evidentiary foundation. Employers must first gather substantial evidence linking the employee to the incident, clearly identify the loss or damage, and determine whether the employee had access or was present at the time of the alleged offence.

Practical steps include conducting thorough inventory audits to establish the scope of loss, reviewing POS data and surveillance footage to identify patterns, documenting which employees had access to the areas or systems involved, identifying specific time frames during which losses occurred, and consulting with legal counsel before making any polygraph requests.

Research in psychophysiological detection of deception, including work by Eben M. Ingram on mock theft scenarios, has contributed to the development of effective testing protocols specifically designed for theft investigations. Early research by Winter, J.E. demonstrated as far back as 1936 that physiological measurement methods showed higher diagnostic accuracy than alternative approaches for detecting deception in theft cases.

The Deterrent Power of Polygraph Testing

Beyond its investigative value, polygraph testing serves as a powerful deterrent against employee theft in hospitality settings. Loss prevention experts have found that employers with high-theft losses were often not sending a clear message that accountability systems were in place to detect employee theft. When employees know that polygraph testing is a possibility in the event of documented theft, it adds a significant layer of accountability.

The American Polygraph Association's meta-analysis of validated polygraph techniques found an aggregated decision accuracy of 89% for event-specific diagnostic testing, with a confidence interval of 83% to 95%. For multi-issue testing, the aggregated decision accuracy was 85%. These accuracy rates make polygraph testing a highly effective tool in specific-incident theft investigations — precisely the type of testing permitted under the EPPA for hospitality employers.

The deterrent effect is particularly valuable in restaurants, where studies show that employees feel empowered to steal when they believe no one is watching or cares. Establishing a clear policy that polygraph testing may be used in theft investigations — within EPPA guidelines — can help create a culture of accountability that reduces theft before it occurs. For employers exploring additional investigative technologies, our EyeDetect guide for theft investigations covers complementary approaches.

Step-by-Step Process for Hospitality Employers

Conducting a lawful and effective polygraph investigation in a hospitality setting requires careful planning and strict adherence to EPPA requirements. The process begins well before the polygraph examination itself.

First, identify and document the specific economic loss. This means pinpointing the exact amount of missing cash, the value of missing inventory, or the financial impact of unauthorized transactions. General suspicions of theft are not sufficient — the EPPA requires a specific, quantifiable loss.

Second, determine which employees had access to the property or funds that are the subject of the investigation. In a restaurant, this might mean identifying which servers had access to a particular cash register during a shift, or which kitchen staff were present when inventory went missing.

Third, develop reasonable suspicion for each employee you intend to request testing from. This goes beyond mere access — you need specific reasons to believe each individual may have been involved. This could include behavioural observations, data anomalies linked to their shifts, or witness statements.

Fourth, prepare the required written statement with the assistance of legal counsel. This statement must be signed by someone authorized to legally bind the employer and must include all particulars required by the EPPA. Contact a qualified, licensed polygraph examiner to schedule the examination, ensuring they meet all EPPA requirements.

What to Expect During the Examination

A polygraph examination conducted under the EPPA must last a minimum of 90 minutes and follow strict procedural standards across the pre-test, testing, and post-test phases. During the pre-test phase, the examiner will review the employee's rights, explain the testing procedure, and review all questions that will be asked. The employee must receive written notice of all questions in advance.

During the actual testing phase, the examiner will ask a series of carefully structured questions while monitoring physiological responses including cardiovascular activity, respiratory patterns, and electrodermal responses. Questions will be focused specifically on the theft incident under investigation.

In the post-test phase, the examiner will inform the employee of the results and allow them an opportunity to explain any reactions. Any opinion of deception or non-deception must be provided in writing, and results must be based solely on the polygraph test data, not on the examiner's observations of behaviour. The examiner must provide copies of charts, questions, and reports to the employer.

For more information about what questions are asked during a theft polygraph, visit our comprehensive guide.

After the Examination: Using Results Appropriately

How hospitality employers use polygraph results is just as important as the testing itself. Under the EPPA's ongoing investigation exemption, an employee cannot be discharged, disciplined, denied employment or promotion, or otherwise discriminated against solely on the basis of polygraph test results — additional supporting evidence is required.

This means that polygraph results should be viewed as one component of a comprehensive investigation, alongside POS data, surveillance footage, inventory records, witness statements, and other evidence. When polygraph results indicate deception, they can help focus the investigation and may prompt voluntary admissions, but they cannot be the sole basis for termination.

Employers should conduct an additional interview with the employee before taking any adverse action following a polygraph test. All records from the examination must be maintained for at least three years. The EPPA strictly limits the disclosure of information obtained during a polygraph test, so results should only be shared with those who have a legitimate need to know within the investigation.

For cases involving family-owned restaurants or businesses where theft involves family members, our domestic theft polygraph guide and money missing from family business guide provide specialised guidance.

Restaurants: From Quick-Service to Fine Dining

Different restaurant formats face different theft challenges. Quick-service restaurants (QSRs) are particularly vulnerable due to high cash transaction volumes — nearly 40% of QSR customers still pay with cash — combined with the highest turnover rates in the industry, exceeding 130% annually. QSRs may lose up to 7% of sales to employee theft according to the National Restaurant Association.

Full-service and fine dining establishments face different vulnerabilities. With higher-value inventory including premium spirits, wines, and expensive proteins, the per-incident losses can be substantial. Manager-level theft is particularly concerning in these settings, where trusted individuals have broad access to ordering systems, cash handling, and vendor relationships.

In all restaurant formats, the EPPA rules apply equally. Whether a single-location pizzeria or a multi-unit restaurant group, the same ongoing investigation exemption requirements must be met. Independent and single-unit operations without cameras or accountability systems are at the highest risk for undetected theft. For restaurant operators who also manage warehouse and distribution operations, additional theft risks may exist in the supply chain.

Hotels and Lodging Properties

Hotels present unique theft challenges that differ from restaurants. Theft in a hotel can take many forms — from identity theft and credit card fraud to theft of merchandise and guest property. Housekeeping staff have access to guest rooms and valuables. Front desk employees handle cash, credit card data, and guest information. Food and beverage operations within hotels face all the same risks as standalone restaurants.

The ACFE's global fraud study found that the median loss to the hospitality industry from occupational fraud amounted to $579,000, which was five times higher than reported losses in 2020. Hotel managers consistently rate employee theft as unacceptable, unethical, and wrong, yet the physical layout of hotels — with dispersed work areas and minimal direct supervision — creates abundant opportunities for theft.

Hotel operators should implement strong hiring, training, and supervision programmes as the foundation of loss prevention. When specific theft incidents occur despite these measures, polygraph testing under the EPPA's ongoing investigation exemption provides a valuable investigative tool. For hospitality businesses that also employ security personnel, the EPPA provides additional exemptions that may apply.

Bars, Catering, and Specialty Hospitality

Bars and nightlife venues face some of the highest theft rates in hospitality due to the combination of cash tips, expensive alcohol inventory, and environments that make close supervision extremely difficult. Bartenders can manipulate pour sizes, offer free drinks to friends, or skim cash from busy service periods with relative ease.

Catering operations face their own challenges, as inventory moves between locations and is more difficult to track. Off-site events create opportunities for both food theft and cash mishandling. The EPPA's ongoing investigation exemption applies equally to these hospitality sub-sectors.

Across all hospitality formats, the key to lawfully deploying polygraph testing is thorough documentation. Employers must be able to demonstrate a specific loss, identify employees who had access, articulate reasonable suspicion, and provide proper written notice before testing. Working with an experienced polygraph examiner who understands EPPA compliance is essential. To book a polygraph test for your hospitality theft investigation, contact our team for guidance.

Integrating Polygraph Testing into Your Loss Prevention Strategy

Polygraph testing works best as part of a comprehensive loss prevention strategy rather than as a standalone measure. A loss prevention plan to reduce employee theft must include high standards in hiring, training, and supervision — these three elements work together like the three legs of a stool.

Technology solutions including POS monitoring, surveillance cameras in high-risk areas like storage rooms and cash handling stations, and automated inventory tracking systems provide the data foundation for identifying theft patterns. Regular audits — both scheduled and unannounced — send a clear message that accountability is a priority. When these systems identify specific losses, polygraph testing under the EPPA provides a powerful tool for resolving the investigation.

For hospitality businesses exploring how private investigators can complement polygraph testing in theft cases, our guides on employee theft investigation in NYC and what private investigators can legally do provide valuable context. The combination of investigative resources and polygraph examination creates a robust approach to resolving serious theft incidents.

Creating a Culture of Accountability

Research consistently shows that employee theft losses are significantly less in businesses with high accountability, high employee satisfaction, and reduced employee turnover. The most effective approach combines proactive prevention with responsive investigation capabilities.

Establish clear policies that define what constitutes theft, communicate consequences, and outline the investigation process — including the possibility of polygraph testing when specific losses occur. Train managers to recognise warning signs of employee theft, including unexplained cash shortages, inventory discrepancies, employees living beyond their apparent means, unusual patterns in void transactions and refunds, and reluctance to take vacations.

Invest in employee well-being. Providing competitive compensation, benefits, and staff meals can reduce the financial pressures that drive some employees to steal. In an industry where 77% of operators report that recruiting and retaining employees remains a significant challenge, creating a positive workplace culture is both a retention strategy and a theft prevention strategy.

For research on international approaches to employee polygraph use, the study by Michał Widacki and Aleksandra Cempura on the legal admissibility of employee polygraph examinations in Poland provides valuable comparative perspective.