9 Restaurant Employee Theft Statistics and Loss-Prevention Risks

Documented data on restaurant margins, internal controls, cybersecurity, and loss prevention for multi-unit operators

Employee theft can involve cash, inventory, unauthorized discounts, loyalty accounts, time records, or company data. However, many frequently quoted restaurant theft percentages cannot be traced to current primary research.

That does not make internal loss unimportant. Restaurants operate with narrow margins, significant food and labor expenses, high transaction volumes, and frequent employee access to cash, inventory, point-of-sale systems, and customer information.

This guide focuses on statistics and incidents that can be supported by identifiable sources. It also explains how operators can use scheduling controls, inventory reconciliation, point-of-sale reporting, access management, and training to reduce opportunities for loss.

Operators Daily publishes practical guides to workforce and restaurant operations technology.

Key Takeaways

• Food and labor historically consumed approximately 33 cents each from every restaurant sales dollar.
• A typical restaurant’s historical pre-tax margin was approximately 5% of sales, leaving little room for avoidable losses.
• In 2025, 42% of operators said their restaurant was not profitable.
• Technology can reduce opportunities for time, cash, inventory, and account misuse, but it cannot eliminate theft.
• Operators should be cautious with widely repeated theft percentages that do not disclose a study, sample, methodology, or publication date.

Understanding Restaurant Employee Theft

Employee theft is not limited to taking cash or food. It may include unauthorized discounts, false refunds, void manipulation, loyalty-account abuse, payroll falsification, inventory diversion, credential misuse, or unauthorized access to employee and customer data.

Reliable national restaurant-specific estimates are limited. Operators should therefore assess risk using their own exception reports, inventory variances, labor records, cash discrepancies, access logs, and documented incidents rather than relying on unsupported industry averages.

The Financial Context

1. Food historically consumed one-third of sales

Food costs historically represented approximately 33 cents per dollar of restaurant sales. Actual ratios vary by restaurant type, menu, sales volume, purchasing practices, and accounting methods.

In 2024, food and nonalcoholic beverage costs represented a median 32.4% of sales among limited-service respondents and 32.0% among full-service respondents.

Because food represents such a large expense, small unexplained variances in high-value ingredients can materially affect results.

2. Labor historically consumed one-third of sales

Labor also historically represented approximately 33 cents per dollar of sales.

Recent results vary significantly by profitability. Among limited-service respondents in 2024, labor represented a median 30.0% of sales for profitable restaurants and 34.1% for restaurants reporting a pre-tax loss.

Unauthorized early clock-ins, late clock-outs, missed-break manipulation, and inaccurate time records can therefore add meaningful costs even when no cash or inventory is taken.

3. Typical margins remain narrow

The National Restaurant Association has historically placed a typical restaurant’s pre-tax margin at approximately 5% of sales.

More recent data shows substantial variation. Among full-service respondents with annual sales below $2 million, median income before taxes was 1.1% of sales in 2024. For respondents with sales of at least $2 million, the median was 4.3%.

These figures illustrate why operators should investigate recurring cash, labor, and inventory discrepancies promptly.

4. Forty-two percent reported no profit

In the National Restaurant Association’s 2026 industry outlook, 42% of operators said their restaurant was not profitable in 2025.

This statistic does not measure theft. It shows the broader financial environment in which preventable losses occur.

Time and Attendance Risks

Time theft may include clocking in for another employee, recording time not worked, taking unauthorized extended breaks, or remaining clocked in after work has ended.

Reliable national restaurant-specific prevalence figures are not readily available. Operators should use location-level records to identify problems.

Controls that can help

• Geofenced clock-ins: Restrict mobile clock-ins to an approved work location.
• Photo verification: Create a visual record associated with a clock event.
• Schedule comparisons: Flag clock activity outside scheduled hours.
• Manager approvals: Require authorization for edits, early starts, and overtime.
• Audit histories: Preserve records of who created or changed a time entry.

Biometric, photo, and location controls can reduce buddy-punching opportunities, but they do not guarantee that misconduct will be eliminated.

Cash and Point-of-Sale Risks

Cash and POS misuse may involve unauthorized voids, refunds, discounts, open-drawer events, deleted items, or transactions entered after a guest has paid.

Operators can reduce these risks by reviewing exception reports and restricting sensitive functions according to job responsibility.

Recommended controls

• Review refunds, voids, discounts, and no-sale events.
• Require manager approval above defined thresholds.
• Assign unique credentials to each user.
• Prohibit shared manager accounts.
• Reconcile drawers at shift changes.
• Compare POS activity with video only when permitted by applicable law and company policy.
• Preserve investigation records consistently.

Exception reports are indicators, not proof of theft. Operators should investigate discrepancies before taking disciplinary action.

Inventory Risks

Inventory loss can arise from employee theft, customer theft, spoilage, portioning errors, receiving discrepancies, unrecorded waste, or administrative mistakes.

Operators should avoid automatically classifying every variance as theft.

Recommended controls

• Count high-value products frequently.
• Separate ordering, receiving, counting, and approval duties where possible.
• Record transfers between locations.
• Document waste and complimentary items.
• Compare theoretical and actual usage.
• Investigate recurring variances by product, shift, and location.

Focused controls are generally more useful than relying on an unsupported industry-wide shrinkage percentage.

Loyalty and Stored-Value Risks

Loyalty programs and gift cards can be abused through unauthorized adjustments, false redemptions, account takeovers, or the reclassification of cash transactions.

5. Mancino’s loyalty fraud reached approximately $130,000

A general manager at two Mancino’s locations was sentenced after using loyalty-program transactions to embezzle approximately $130,000.

Reporting indicated that approximately 99% of the questionable reward transactions were entered through one office computer. The case demonstrates the value of reviewing redemption rates by employee, device, location, and transaction type.

Operators should not confuse this type of internal loyalty fraud with FTC statistics about consumers who are instructed to pay scammers using gift cards. The FTC treats those incidents as payment scams, not restaurant employee-theft data.

Data Security Risks

Employees do not need malicious intent to create a data-security incident. Mistakes, phishing, weak credentials, excessive permissions, and poorly managed accounts can all expose restaurant information.

6. The 2024 DBIR covered 10,626 breaches

Verizon’s 2024 Data Breach Investigations Report analyzed 10,626 confirmed breaches and 30,458 security incidents.

The dataset covers multiple industries and should not be presented as restaurant-specific research.

7. Human involvement appeared in 68% of breaches

The report found that the non-malicious human element was involved in 68% of breaches. Examples include falling for social engineering or mistakenly disclosing credentials.

This finding excludes malicious privilege misuse from the human-element calculation. It should not be described as a measure of malicious insiders.

8. Stolen credentials led to initial actions

Stolen credentials represented 24% of initial breach actions in the 2024 DBIR.

Restaurants can reduce credential-related risk by using unique user accounts, multifactor authentication, prompt offboarding, access reviews, and limits on administrator privileges.

9. Golden Corral reported 183,272 potentially affected people

Golden Corral reported that an unauthorized actor accessed systems between August 11 and August 15, 2023. A regulatory filing indicated that 183,272 individuals were potentially affected.

The affected information related to current and former employees and beneficiaries. Golden Corral said customer data was not affected.

The incident shows why restaurants should treat workforce data, payroll information, and employee credentials as sensitive operational assets.

Technology and Loss Prevention

Technology can improve visibility and accountability, but no product independently proves or prevents employee theft.

Scheduling and timekeeping

Useful capabilities may include:

• Location-restricted clock-ins
• Photo or identity verification
• Schedule-adherence alerts
• Overtime approvals
• Edit histories
• Centralized multi-location reporting

Point-of-sale systems

Useful capabilities may include:

• Void and refund reports
• Discount monitoring
• Unique employee credentials
• Permission controls
• Drawer-event reporting
• Loyalty-adjustment histories

Inventory systems

Useful capabilities may include:

• Theoretical-versus-actual usage
• Waste records
• Transfer tracking
• Purchase-order matching
• Receiving logs
• Variance reporting

Onboarding systems

Onboarding software can document policy distribution, training completion, employee acknowledgments, and role-specific access requirements.

Operators Daily provides software guides for restaurant and hourly-workforce operations.

Management Practices

Technology is most effective when paired with consistent management processes.

Daily controls

• Reconcile cash and payment totals.
• Review major voids, refunds, and discounts.
• Investigate unexplained time edits.
• Restrict shared credentials.

Weekly controls

• Count selected high-value inventory.
• Review overtime and schedule exceptions.
• Compare loyalty activity across employees.
• Check unresolved cash and inventory variances.

Periodic controls

• Review system permissions.
• Disable former employee accounts.
• Update theft and information-security policies.
• Train managers on fair investigations.
• Test reporting and escalation procedures.

Managers should document facts objectively and avoid treating an exception report as conclusive evidence.

Fair Investigations and Employee Policies

Clear policies should define prohibited conduct, investigation procedures, reporting channels, and potential consequences.

Operators should apply policies consistently, preserve relevant evidence, protect employee confidentiality, and consult qualified legal counsel when an investigation could lead to termination, repayment demands, insurance claims, or criminal referral.

Compensation, scheduling predictability, supervision, and workplace culture may affect employee behavior, but no single employment practice guarantees that theft will or will not occur.

How to Choose Loss-Prevention Technology

Consider:

• The types of loss the restaurant has actually experienced
• Number of locations and management structure
• POS, payroll, accounting, and inventory integrations
• User permission controls
• Audit-log retention
• Reporting by employee and location
• Privacy and biometric-information requirements
• Hardware and implementation costs
• Contract terms
• Training and support
• Procedures for investigating alerts

A platform should be evaluated on documented functionality and operational fit, not unsupported promises that it will eliminate theft.

Frequently Asked Questions

What is the most common restaurant employee theft?

No current primary source establishes one form as universally most common across all restaurants. Frequently discussed risks include cash manipulation, unauthorized discounts, inventory diversion, loyalty-account misuse, and inaccurate time records.

How can small restaurants reduce theft?

Start with unique POS credentials, cash reconciliation, regular counts of high-value inventory, documented waste, manager approval for sensitive transactions, and review of time-entry changes.

Do biometric clocks stop buddy punching?

They can reduce the opportunity for one employee to clock in for another, but they do not guarantee prevention. Operators must also consider applicable biometric and privacy laws.

Does employee-theft insurance cover every loss?

No. Commercial crime and employee-dishonesty policies vary in covered conduct, exclusions, limits, deductibles, discovery periods, and documentation requirements. Operators should review the actual policy with an insurance professional.

How often should controls be reviewed?

High-risk exceptions may require daily review. Inventory, access permissions, policies, and training should be reviewed on a recurring schedule and whenever systems, staffing, or operating procedures change.