The Enemy Within: Detecting and Documenting Employee Fraud in Your Business

It’s the phone call every business owner dreads. You’ve noticed a discrepancy in the books, a vendor is complaining about a missing payment that shows as "cleared" in your system, or perhaps a long-time manager is suddenly driving a car that costs more than their annual salary.

At Armstrong Investigations, PLLC, we see it often across the Dallas-Fort Worth Metroplex and throughout North Texas: the "trusted" employee who has been with the company for a decade is the very person siphoning away its future. In the world of Texas business, internal fraud isn't just a "big corporation" problem. It happens in small family businesses, mid-sized law firms, and thriving tech startups alike, whether they are based in Dallas, Fort Worth, Plano, Denton, Rockwall, or the surrounding counties.

If you suspect something is wrong, you aren't just being paranoid. You are protecting your livelihood. But how you handle the next 48 hours will determine whether you recover your losses or end up on the wrong end of a wrongful termination lawsuit.

The $125,000 Reality Check

According to the Association of Certified Fraud Examiners (ACFE), the average organization loses roughly 5% of its annual revenue to fraud. Even more sobering? The average loss per fraud case hovers around $125,000.

For many Texas businesses, especially those operating across DFW, North Texas, and nearby counties like Collin, Denton, Tarrant, and Ellis, that isn't just a "loss": it’s the difference between expanding your team and closing your doors. Fraud is rarely a one-time event; it is a slow bleed that usually lasts for years before it’s discovered. By the time the "Enemy Within" is caught, the money is often spent, hidden, or moved beyond easy reach.

This is why detection isn't just an HR function; it's a core survival skill for any business owner.

Identifying the Red Flags: Behavioral vs. Transactional

Fraudsters are often the most liked people in the office. They arrive early, stay late, and never take vacations. While that sounds like a dream employee, in the world of corporate investigations, these are often the primary red flags.

Behavioral Red Flags

The ACFE reports that 84% of fraudsters display at least one behavioral red flag. Keep an eye out for:

  • Living Beyond Their Means: Sudden luxury purchases, new high-end vehicles, or expensive vacations that don't align with their known income.
  • Refusal to Take Vacations: Fraud schemes often require constant maintenance. If an employee refuses to take a week off (which would allow someone else to look at their books), they may be hiding an active "lapping" or skimming scheme.
  • Control Issues: An employee who insists on handling specific financial duties themselves and gets defensive or hostile when someone else asks to "help" or audit their work.
  • Financial Difficulties: High levels of personal debt, garnishments, or constant mentions of financial "bad luck."

A close-up of a person's hands nervously clutching a pen over a set of financial documents, with red circles drawn around specific line items, symbolizing the detection of red flags.

Transactional Red Flags

  • Vendor Anomalies: Payments to vendors with addresses that match an employee’s home address or payments to "rounded" dollar amounts.
  • Frequent Overrides: Someone constantly bypassing system controls or "fixing" errors manually in the accounting software.
  • Missing Documentation: Missing receipts, altered invoices, or photocopies being used instead of original documents.

The Legal Strategy: Documenting Without Self-Destructing

In Texas, accusing someone of "theft" or "fraud" without ironclad proof is a fast track to a defamation or wrongful termination suit. Even if you know they did it, the way you document that knowledge is critical.

Our principal investigator’s legal background (a J.D. earned in 2015) is central to how we approach these cases. We don't just "catch" the person; we build a case that stands up to the Texas Workforce Commission (TWC) and the rigorous standards of the Texas Theft Liability Act (TTLA).

The "Policy Violation" Approach

Until the evidence is undeniable, we advise our clients to document "violations of company policy" rather than "theft."

  • Did they falsify a timecard? That is a Violation of the Honesty Policy.
  • Did they take a company laptop home without permission? That is a Violation of the Asset Management Policy.

By focusing on policy violations, you protect yourself during the investigation phase. If you fire an employee for "theft" and can't prove every cent in a TWC hearing, you might find yourself paying unemployment benefits to the very person who robbed you. However, firing for a documented "misconduct connected with the work" (a specific TWC standard) is much more likely to result in a "for cause" termination that sticks.

The PI Advantage: Digital Forensics and Surveillance

Why hire a private investigator instead of just letting your HR manager handle it? Because a neutral, third-party investigation is much harder to challenge in court.

1. Digital Forensics

Most modern fraud leaves a digital trail. Whether it’s deleted emails, altered spreadsheets, or unauthorized access logs, our digital forensic tools can often recover what the employee thought was gone forever. We look for the "intent": the search history for "how to delete QuickBooks logs" or the emails to a "ghost vendor" that actually belongs to their brother-in-law. For businesses with offices, warehouses, or remote teams spread across the Dallas-Fort Worth Metroplex, this kind of evidence can be especially important when misconduct is happening across multiple locations.

2. External Surveillance

Sometimes the fraud isn't happening in the office; it's happening outside of it. If an employee is claiming Worker's Comp for a back injury while working a side gig in construction, or if they are meeting with competitors to sell your trade secrets, surveillance is the only way to get the "smoking gun" video evidence. That can mean documenting activity in Dallas, Fort Worth, Arlington, Frisco, McKinney, or out in surrounding counties such as Kaufman, Parker, Wise, Hunt, and Johnson when the facts lead there.

3. Neutral Third-Party Reporting

If your business ends up in a civil suit under the Texas Theft Liability Act, having a professional investigative report from Armstrong Investigations, PLLC is invaluable. It shows the court that you followed a structured, unbiased process. It removes the "he-said, she-said" dynamic and replaces it with documented facts, timestamps, and authenticated evidence.

A professional investigator in a plain vehicle using a high-end camera to document an interaction, representing the surveillance aspect of corporate investigations.

Protection for Every Business Owner

At Armstrong Investigations, PLLC, we believe that every business owner deserves a secure environment. These corporate protections and investigations apply equally to all business owners, regardless of their background, the industry they are in, or the nature of their domestic partnerships. Whether you are a solo entrepreneur or managing a firm with a hundred employees, the law protects your assets, and we are here to ensure those protections are enforced.

The Texas Theft Liability Act (TTLA)

One of the most powerful tools in our arsenal is the Texas Theft Liability Act. This allows a business to sue for actual damages caused by theft, plus an additional sum of up to $1,000, and: most importantly: the recovery of court costs and reasonable attorney’s fees.

Because of our founder's legal training, we understand exactly what elements of the Texas Penal Code need to be satisfied to trigger a TTLA claim. We don't just look for "suspicious behavior"; we gather the specific evidence required to show unlawful appropriation and intent to deprive.

Don't Wait Until the Well is Dry

The biggest mistake business owners make is waiting. They notice a red flag and "keep an eye on it" for six months. By then, the $20,000 loss has become $125,000, and the employee has had time to cover their tracks.

If your gut is telling you something is wrong, listen to it. A discreet, professional background check or a preliminary financial audit can either clear a good employee's name or save your business from a catastrophic loss.

We're Armstrong Investigations, PLLC, and we handle the hard work of uncovering the truth so you can get back to running your business. We serve companies throughout the Dallas-Fort Worth Metroplex, across North Texas, and in surrounding counties including Dallas, Tarrant, Collin, Denton, Rockwall, Ellis, Johnson, Kaufman, Parker, Wise, Hunt, Navarro, Henderson, Hood, Somervell, Erath, and Palo Pinto.

The scales of justice sitting on a dark wooden desk next to a law book and a magnifying glass, representing the intersection of private investigation and Texas law.


Jasen A. Armstrong, J.D.
Armstrong Investigations, PLLC
P: 214-851-3800 | W: armstronginvestigations.com
Texas DPS Lic. #: 166353101 | Affiliated with TCS Consulting (TX DPS Lic. #: C20493) & Howard Law, PLLC