Restaurant Financial Controls: Theft, Dine-and-Dashes, and Cash Shrinkage

The post that made me write this

The questions behind this guide, paraphrased:

• An employee was caught taking cash. What should I do next?
• A staff member seems to be taking cash payments, opening the drawer manually, and then voiding the sale. How do I confirm it?
• A long-time manager I relied on appears to have taken product and supplies. How do I handle it without wrecking the team?
• I suspect a business partner is taking money from the business. Where do I start?

Restaurants face a unique financial controls challenge. Cash is handled dozens of times a day. Inventory is a perishable commodity. Tips and wage calculations get complicated. And many restaurants, including many doing $1M-$5M in revenue, run with controls thinner than what an outside reviewer would expect, usually because the owner is stretched across operations.

Industry-wide theft and shrinkage figures circulate widely, but we could not trace one to a primary source with a stated population and method, so this guide does not use them. What you can measure is your own leakage, and the stakes scale simply: on a $2M restaurant, every 1% of revenue lost to theft, shrinkage or comp abuse is $20K a year. The checks below are designed to tell you which number applies to you.

Here's a controls stack built around that measurement.

---

Why restaurants are uniquely vulnerable

Three structural reasons:

1. Cash handling velocity. A busy restaurant can process hundreds of payment events a day across cash, cards, tips, comps and voids. Count yours from the POS transaction report. Every transaction is a potential control failure, and few small businesses combine that volume with this many people touching the drawer.

2. Perishable inventory. Steaks and chicken breasts aren't like screws and nails. You can't easily do a physical count at end-of-day. "Waste" is a legitimate expense that's trivially easy to abuse as a cover for theft.

3. Owner attention bandwidth. Many restaurant owners work long weeks on operations: hospitality, food quality, staffing. Financial oversight is the first thing to get deprioritized. And theft thrives in low-oversight environments.

A common owner question, paraphrased: if I'm working 70 hours a week and have to trust my people, how am I supposed to watch the cash drawer and the inventory count too?

Right. That's exactly why you need systematic controls, not personal oversight.

---

Three theft patterns to investigate

Listed in no measured order. Which one costs you the most depends on your concept, so size each with the check under it.

Pattern 1: Inventory shrinkage + unauthorized "waste"

An employee (often a manager or kitchen lead with inventory access) over-reports waste, steals the "wasted" product, resells it or takes it home.

How to size it: actual depletion (beginning inventory + receipts - ending inventory) minus recipe-based expected usage, priced at matched item costs, by category. Account for transfers, returns, logged waste, staff meals and count errors before calling the residual theft. Example arithmetic only: a 2-point unexplained variance on $600K of annual food and beverage purchases is $12K a year. Bar inventory (liquor, wine) is a frequent target: high unit value, easy to mis-pour, easy to over-report as "waste" or "spillage."

Pattern 2: Cash skimming + voided transactions

Employee takes a customer's cash payment, voids the transaction in the POS, and pockets the cash. Requires POS access + cash drawer access, so it's usually done by shift leads or managers.

How to size it: total post-payment cash voids by employee per month, compared against peers on the same shifts. Exposure tends to be higher wherever the same person can take cash and void without a manager, which depends on your POS permissions more than your concept.

Pattern 3: Comp abuse + discount manipulation

Employee runs comps and discounts that weren't actually given to customers. Customer pays full price (in cash), employee rings it at a discount, pockets the difference. Or: employee gives free food to friends and family, coded as "manager comp" or "marketing."

How to size it: comps and discounts as a percent of sales by employee and reason code, reviewed weekly. Often hard to detect because it shows up in the P&L as "legitimate" comps and discounts, which most owners don't audit.

Track inventory variance at cost separately from suspect cash voids and comps at selling value. These are review exposures, not proven losses. Identify transaction overlaps before summing: the same meal or stolen cash can appear in more than one report. Divide only confirmed, non-overlapping loss amounts by revenue for a loss-rate baseline. We do not cite chain or industry loss rates here because we could not trace them to public filings or a primary study.

---

The 11-point financial controls checklist

Here is a controls stack to adapt to your restaurant. Dollar limits and variance thresholds below are illustrative policy settings; set them against transaction volume, role and shift before using them.

Cash controls

1. Daily cash drawer reconciliation at shift close Cash drawer counted and reconciled to POS report at the end of every shift. Variance over $5 investigated. Variance over $20 requires manager sign-off. Pattern of variance from the same employee = documented review trigger, with discipline decisions made under your written policy and, where needed, employment counsel.

2. Dual-signature bank deposits Nobody makes the bank deposit alone. Either two employees together, or one employee with the deposit photographed before it leaves the premises. Reduces the "I was robbed on the way to the bank" theft vector.

3. Weekly variance reports by shift and by employee Even if each shift reconciles to the penny, track the aggregate pattern. Employee A runs $8 over on Tuesdays and $12 under on Thursdays, consistently, that's a pattern, not a variance. Pattern-spotting requires seeing the data aggregated.

POS controls

4. Manager-controlled void authorization and unique credentials Use a distinct manager approval step with unique credentials; a PIN or fingerprint alone is not two-factor authentication. Every void should be logged with a reason code. Daily report of all voids by employee. Voids under $10 can be server-initiated, anything above requires manager.

5. Comp reporting with owner review Every comp over $20 gets reviewed weekly by owner or GM. Comp rates by employee tracked. Employee with 3x-4x the comp rate of peers is a red flag, check role, shift, legitimate service recovery, errors and unauthorized discounts before concluding misconduct.

6. Open-check audits Every open check at end of day gets a manager look. Customers don't actually leave without paying that often; when they do, there's usually a manager-level decision to write it off. Unexplained open checks that repeat by employee or shift deserve investigation as possible theft, along with walkouts (dine-and-dashes), training gaps and POS errors.

Inventory controls

7. Weekly inventory counts, dual-verified Two people count. Two people sign. Spreadsheet tracks theoretical usage (sales × recipe yields) vs. actual usage (count variance). Variance over 3% by category investigated.

8. Bar specifically: ounce-pour tracking Every bottle weighed weekly. POS-ordered units (well pour = 1.5oz, etc.) compared to actual ounces dispensed. Variance over 5% = either training issue or theft. Consider metered pour systems, which can reduce both; get current vendor quotes, since cost depends on bar size and system.

9. Locked walk-in access with key tracking Walk-in refrigerators and freezers locked outside of prep hours. Key accountability: who had the key when. This sounds extreme for a restaurant; for high-value stock, track authorized access while preserving food-safety procedures and emergency egress.

Financial controls

10. Monthly bank reconciliation by outside bookkeeper The person writing checks and processing payroll can't also be the person reconciling the bank statements. If that's true in your restaurant today, you have an embezzlement risk waiting to happen. At a minimum, have an outside bookkeeper reconcile monthly. Better: have an outside CFO review the books quarterly.

11. Monthly prime cost tracking (cost of goods + labor) For restaurants, prime cost (COGS + labor) is commonly planned around 60-65% of revenue for full-service and 55-62% for limited-service. Treat those as illustrative planning ranges from general industry practice, not measured medians; source and population are not established here, so compare against your own trailing trend first. Track monthly. When prime cost creeps up 2+ points and you can't explain it, review supplier prices, menu mix, portioning, staffing, count accuracy and shrinkage; this checklist does not measure which cause is most common.

---

The three cases where theft was masking deeper problems

The three scenarios below are fictional. They are not client cases or composites of real engagements. Each uses internally consistent illustrative numbers to show how a theft discovery can be the visible piece of a bigger problem.

Case 1: The bar manager stealing $1K/mo, and the owner's real $18K/mo problem

Fictional scenario. A casual dining restaurant doing $2.4M in annual sales discovers its bar manager is taking an estimated $1,100/mo in cash and liquor, about $13.2K a year.

A full review surfaces a bigger issue: menu prices haven't changed in 3 years. Assume food and beverage cost at current volume was $600K a year three years ago and has risen 20% ($120K), and labor was $640K and has risen 15% ($96K). Together that is $216K a year of cost increases, about $18K a month, with no price response.

The theft is about $13.2K a year. The unpriced cost increase is about $216K a year, roughly 16 times larger.

The controls in the checklist above address the theft. The pricing gap needs its own analysis: a 9% price increase on $2.4M would add $216K only if covers and menu mix held steady, which is not guaranteed. A phased increase, tracked weekly against covers and average check, shows how much of that gap actually closes.

Case 2: The cash drawer variance that revealed a scheduling problem

Fictional scenario. A fast-casual operator with 3 locations notices one store has a persistent $50-80 daily cash variance. Management assumes theft and installs cameras. The footage shows no theft.

What the investigation revealed: the store was consistently understaffed during peak lunch hours, so employees were rushing through cash transactions, making change errors, and sometimes literally not charging for drinks or sides in the chaos. The variance was real money out the door, but not theft. It was a scheduling optimization problem.

Illustrative fix: add an extra cashier 11:30-1:30 daily at that location. If daily cash variance fell from a $60 average to an $8 average, that is $52 a day, about $19K a year (365 days). If the extra 730 labor hours cost $18K a year loaded, the fix roughly breaks even on variance alone. Whether shorter lines also lift sales is a separate question; test it by comparing peak-hour transactions and walkaways before and after, rather than assuming a result.

Case 3: The manager who wasn't stealing, the owner was

Fictional scenario. A two-location restaurant has two co-owners, each running one location. One co-owner accuses a long-time manager of theft after discovering missing deposits.

When the deposit records are lined up against the schedule, the missing deposits match the accusing co-owner's shifts, not the manager's. That co-owner has been taking cash for personal use without recording it. Whether an owner may take that cash depends on the entity type, ownership split and operating agreement; undocumented draws can also create tax reporting problems and disputes between owners, so the books and the agreement both need professional review.

The point: always look at the data before you look at the accused. A manager was nearly blamed for a pattern the records did not support.

---

Why controls work even if you trust everyone

A common objection to controls deserves a direct answer: financial controls are not a statement of distrust, they're a statement of how any system containing humans should operate. Banks have controls. Hospitals have controls. Government agencies have controls. Your $2M restaurant should have controls.

When an owner says "I trust my people, I don't need this," what they're really saying is "I don't want to have the conversation about controls." That's understandable. But:

• Controls protect your trustworthy employees from being falsely accused
• Controls catch small issues before they become big issues (an unexplained $15 variance repeated daily becomes about $450 a month, illustrative arithmetic: $15 x 30)
• Controls create operational discipline that improves everything else (inventory management, scheduling, waste)
• Controls preserve business value when you eventually sell

Buyers and lenders typically test whether reported earnings can be trusted. Weak cash and inventory controls make that harder: a buyer may discount unverifiable cash sales, add adjustments, require escrow or holdbacks, or walk away. We don't cite a multiple gap here because no measured source supports one, and small restaurant deals may be priced on SDE or EBITDA, which are not interchangeable. The practical point: clean reconciliations make your earnings easier to verify.

---

The monthly owner's "theft audit", 20 minutes

If you don't have a fractional CFO doing this for you, do it yourself once a month. Plan on about 20 minutes once your reports are set up. It won't catch everything, but it surfaces the patterns most worth a closer look.

1. Pull the voids report for the month, sorted by employee. Any employee with more than 2x the average void rate of peers? Red flag.
2. Pull the comps report, sorted by employee. Same analysis. Employee with 3x the peer comp rate merits a review of role, shift, reason codes and approvals before any accusation.
3. Pull cash variance by shift for the month. Look for patterns: specific employee, specific day of week, specific time of day.
4. Review waste log entries. Anything above normal? Same item wasted repeatedly by same employee? Look closer.
5. Check bar pour cost and overall prime cost vs. plan. If it's creeping up 2+ points over 3 months, investigate.
6. Spot-check three random days. Trace cash deposits to drawer close after change floats, tips and authorized payouts; trace card batches to processor settlements after fees, refunds and chargebacks. Match settlement dates, since sale date and deposit date can differ. If it doesn't, you have a reconciliation problem, which could be theft or could be bookkeeping error.

If anything looks weird, escalate to your bookkeeper or fractional CFO with the specific data. Don't confront an employee without evidence.

---

FAQ

How much do restaurants typically lose to theft? We don't use industry-wide loss percentages here because we couldn't trace them to a primary source with a stated method. Measure confirmed losses after resolving each variance and removing overlaps. Keep inventory at cost and suspect cash/comp exposures separately until the evidence establishes a loss; a void is not automatically theft. On a $2M restaurant, each 1% is $20K a year.

What's the single most effective theft control? Separation of duties. The person handling cash should not be the person reconciling the bank. The person ordering inventory should not be the person counting it. When one person controls both sides of a transaction, a scheme can be harder to detect. Simple separation makes many schemes harder to run and easier to spot early.

Should I install cameras? Cameras are useful but not primary. They catch theft after the fact (helpful for prosecution) but rarely prevent it. Better first investments: POS controls with void tracking, weekly inventory counts with dual verification, monthly outside bookkeeper review. Cameras are the icing, not the cake.

My books look fine but I suspect theft. What should I do? Three-step diagnostic: (1) compare theoretical food/bar cost (sales × recipe yields) to actual usage from inventory counts. Large variance calls for a review of waste, count errors, transfers, portioning and theft; it is not a diagnosis. (2) Pull void and comp reports by employee, look for outliers. (3) Do a spot cash reconciliation on 3 random days. If any of these surface issues, bring in a forensic accountant or fractional CFO before confronting anyone. Don't tip your hand to the suspected employee.

Is it legal to search employees or their bags for theft? Do not assume that a handbook clause authorizes a search or detention. Ask employment counsel to review the proposed policy, consent, privacy, discrimination and state-law requirements before using it. Preserve transaction evidence and follow a consistent investigation process.

How do I prosecute employee theft? Document everything first: dates, amounts, reports and evidence. Do not deduct suspected losses from wages or a final paycheck unless employment counsel confirms it is allowed under your state law and federal wage rules; many states restrict or prohibit it. Recovery generally runs through a demand, civil action, insurance claim or criminal referral. Whether to file a police report is a decision to make with counsel based on the evidence and amount; dollar thresholds for that decision vary by owner and jurisdiction. Consult an employment attorney before acting, as with any search policy.

---

Want a controls review for your restaurant? Start with a free 48-hour financial audit. We'll review your cash reconciliation, POS controls, inventory variance, and prime cost trends, and deliver a one-page controls gap report within 48 hours.

Related reading

• Restaurant P&L decoded, prime cost
• Restaurant profit margins by type
• Restaurant prime cost guide
• Cash flow for service businesses