Two employees work the closing shift at a retail store. The next morning, management discovers that several expensive items are missing from a locked storage area. Both employees had access to the room, and neither can explain what happened to the merchandise.

The employer reports the suspected theft to police. Investigators interview both workers, review security footage, and examine inventory records. Weeks later, one employee faces criminal theft charges while the other returns to work without being charged.

From the accused employee's perspective, the difference may seem difficult to explain. Both had access to the missing property. Both worked the same shift. Yet only one must now defend against a criminal prosecution.

The explanation may lie in evidence that distinguishes the two employees, decisions made by prosecutors, or information investigators have not disclosed. In some circumstances, the employer's handling of the allegations may also raise questions about selective treatment.

Understanding what happened requires separating three decisions: whom the employer suspected, whom investigators linked to the alleged offense, and whom the prosecuting authority ultimately chose to charge.

How a Workplace Theft Allegation Becomes a Criminal Case

An employer's suspicion can start a criminal investigation, but it does not establish that a crime occurred or identify who committed it. Missing merchandise, unexplained cash shortages, and discrepancies in financial records may have innocent explanations.

Errors in inventory tracking, unauthorized access by someone else, or incomplete transaction records can create circumstances that initially resemble theft.

What Happens When an Employer Reports Suspected Theft?

An employer may contact police and provide an incident report describing the suspected loss. Managers might also supply surveillance recordings, transaction logs, employee schedules, or statements collected during an internal investigation.

Police then determine what further investigation is warranted. Depending on the circumstances, officers may interview witnesses, request additional records, examine physical evidence, or seek legal authorization to obtain evidence that cannot otherwise be accessed.

The employer's account may influence the initial direction of the investigation, but it is not a substitute for independent evaluation.

For example, a manager might identify one employee because that person was responsible for locking the storage room. Investigators would still need to consider whether the employee actually controlled access, whether duplicate keys existed, and when the merchandise disappeared.

Why Being Accused Does Not Automatically Lead to Criminal Charges

There is a legal difference between being suspected, being arrested, being formally charged, and being convicted. An investigation may end without charges if the available evidence does not sufficiently connect a particular employee to a criminal offense. 

Authorities may also continue investigating while additional records or witness accounts are obtained. An arrest does not automatically produce a conviction, and a workplace allegation does not automatically justify an arrest.

Criminal procedures vary by jurisdiction. Police may initiate certain charges in some systems, while prosecutors typically make or review formal charging decisions. In other cases, a grand jury may play a role.

The important distinction is that an employer cannot establish criminal liability merely by deciding that an employee is responsible.

Why Might Prosecutors Charge One Worker but Not Another?

When two people are suspected of participating in the same incident, investigators must examine the evidence connecting each person to the alleged crime.

Working the same shift or having access to the same property does not establish that both workers participated in a theft.

How Investigators Evaluate Evidence Against Individual Suspects

Consider two warehouse employees who were scheduled for the same shift and authorized to enter a restricted inventory room. A shipment disappears. Both had an opportunity to reach the goods, but that is only the starting point.

For Employee A, a badge log records an after-hours entry, a loading-door camera places A near a departing carton, and a delivery record points to an unauthorized destination. Investigators would still need to verify the records and determine whether the movement was part of legitimate duties.

For Employee B, the available records show only the shared shift and routine permission to enter. No comparable evidence connects B to the carton or its destination.

In this hypothetical comparison, both employees had access, but several records suggest a particular act by A. That difference could explain why one person is charged without establishing A's guilt or B's innocence.

Now change one fact: if badges were shared, the camera clock was wrong, or the delivery was authorized, the apparent links to A weaken. Credible evidence of B's unauthorized transfer would change B's assessment. The useful comparison is whether dependable evidence establishes identity, conduct, and the required intent—not simply how often a worker's name appears in records.

Why Access to Stolen Property Does Not Necessarily Prove Theft

A theft charge must satisfy the elements of the applicable state statute, including the prohibited conduct and required intent. Those elements cannot be inferred from workplace access alone.

Permission to enter a stockroom or use a register shows opportunity, not necessarily an unauthorized taking or intent to steal.

Investigators should look for evidence of an unauthorized act, such as removing goods or transferring them outside normal procedures, rather than relying only on presence.

The exact elements and classification of theft vary by state. Depending on the jurisdiction and circumstances, the value and type of property may also affect the available charges.

The Role of Prosecutorial Discretion in Charging Decisions

Prosecutors must assess the evidence against each individual and the legal requirements for initiating a case. The U.S. Department of Justice's Principles of Federal Prosecution provide a useful example of how these decisions are assessed in the federal system.

Under those Principles, probable cause is a threshold, not a requirement to file charges whenever it exists. Federal policy also asks whether admissible evidence will probably obtain and sustain a conviction and whether prosecution serves a substantial federal interest.

These Department of Justice principles guide federal prosecutors. State prosecutors apply their own governing laws, ethical rules, and charging policies.

Different evidence against each worker may therefore lead to different charging decisions, even when the employer originally suspected both.

The decision not to charge someone also does not necessarily establish that investigators determined the person was innocent.

What Evidence Matters in an Employee Theft Investigation?

Workplace theft cases often depend on records created for business operations rather than criminal investigations.

A useful timeline connects the last verified inventory count, employee access, recorded movements, and discovery of the loss. Clock errors or an unverified stock count can undermine an apparently precise sequence.

Surveillance Footage, Financial Records, and Witness Statements

Surveillance video may show who entered a room, handled merchandise, or approached a cash register. Its significance depends on camera coverage, recording quality, timestamps, and what happened outside the camera's view.

Financial records can also narrow an investigation. Transaction histories, refunds, inventory adjustments, and access logs may help establish when a loss occurred.

Witness statements provide additional context, particularly when employees observed conduct that was not recorded.

No single category of evidence is automatically conclusive. Video showing an employee carrying merchandise, for example, may be consistent with ordinary job duties unless other evidence establishes an unauthorized removal.

How Conflicting Testimony Can Affect the Investigation

Suppose a supervisor initially tells police that only one employee possessed a storage-room key. Another employee later explains that several workers regularly borrowed the key from a shared office.

That account changes the significance of the key record and may identify witnesses investigators should interview.

Investigators should assess when witnesses learned the facts, what they actually observed, and whether their accounts changed.

Investigators must also distinguish firsthand observations from assumptions. A witness who saw an employee leave a warehouse can testify about that observation, but the witness may not know whether the employee carried stolen property.

Why Circumstantial Evidence Requires Careful Evaluation

A criminal case does not always require an eyewitness or direct video recording of the alleged theft. Circumstantial evidence can prove a crime beyond a reasonable doubt without an eyewitness. 

In Holland v. United States, the Supreme Court explained that circumstantial evidence is not inherently inferior to direct testimony.

Its strength depends on whether the combined facts reliably support the proposed inference rather than speculation.

For example, an unusual access-log entry, a matching inventory discrepancy, and evidence of an unauthorized transfer may collectively carry more weight than any one record considered alone.

The defense may challenge those connections by examining alternative explanations, record reliability, and evidence inconsistent with the prosecution's theory.

Can an Employer's Actions Influence Who Becomes a Criminal Suspect?

Police and prosecutors make their own investigative and charging decisions, but an employer can influence what information initially reaches them.

This is especially important when investigators rely heavily on interviews, records, or conclusions supplied by management.

How Employers Identify and Report Suspected Employees

A manager may identify a particular employee because of work assignments, access permissions, prior incidents, or a witness complaint. An initial report should distinguish what the manager personally observed from what the manager suspects.

That distinction disappears when an employer presents an uncertain account as a confirmed finding. For example, management might tell police that an employee was the last person to access missing merchandise while failing to mention that another worker subsequently entered the same area.

Comparing all workers' time-stamped access records, shared-key practices, and witness accounts may reveal whether management omitted a later entry or drew conclusions from incomplete data.

What Happens When Investigators Receive Incomplete Information?

Missing details can direct police toward one worker while obscuring plausible alternatives. A workplace incident report may omit the existence of shared access cards, incorrectly identify a shift supervisor, or rely on an inventory count that was never independently verified.

Defense counsel may compare source records with the employer's summary, identify overlooked witnesses, and challenge unsupported conclusions.

Under Brady v. Maryland and later Supreme Court decisions, prosecutors must disclose material evidence favorable to the accused, including evidence that may undermine prosecution witnesses. This duty reaches qualifying information held by investigating police and other members of the prosecution team.

It does not automatically cover every record held by an independent private employer. Defense counsel may need to obtain other employer records through investigation or applicable discovery procedures.

When Selective Accusations Raise Questions About Workplace Bias

Not every uneven investigation is discriminatory. Employers may reasonably focus on different workers when credible evidence points more strongly toward one person.

A fair comparison asks whether workers had similar duties, access, evidence against them, and disciplinary histories—and whether the employer used the same investigative steps for both.

Suppose two employees had identical access privileges, similar disciplinary histories, and comparable connections to missing property. The employer reports one to police while declining to investigate the other.

That difference may support an inquiry into bias if statements, practices, or job-related consequences suggest an unlawful motive. If the accusation also affected the worker's employment, visit website for more information about California's protections against workplace discrimination. A police report alone, however, does not automatically establish an actionable employment discrimination claim.

An employee considering whether selective treatment violated California workplace protections may consult employment discrimination lawyers to evaluate the employer's decisions separately from the criminal charges.

The employer's reasons for reporting a worker must be evaluated separately from the prosecutor's independent charging decision.

When Does Unequal Treatment Become Employment Discrimination?

Unequal treatment can provide evidence of discrimination, but it is not sufficient by itself. Employers may legitimately weigh differences in conduct, supporting evidence, responsibilities, or prior discipline.

Distinguishing Different Treatment From Unlawful Discrimination

The comparison should focus on employees accused of similar conduct under reasonably similar circumstances. One employee may have admitted violating company procedures, while another denied involvement and faced little supporting evidence. One may have a relevant history of discipline, while the other does not.

Title VII of the Civil Rights Act of 1964 prohibits covered employers from disciplining or discharging employees because of race, color, religion, sex, or national origin. Comparisons must account for differences in alleged misconduct and evidence.

The Equal Employment Opportunity Commission's guidance on discharge and discipline explains that comparisons with similarly situated coworkers may help expose unequal enforcement. Investigators also consider direct statements, records, and the employer's stated reasons; a comparator is not the only possible evidence of bias.

The legal question is whether an unlawful discriminatory reason affected a covered employment decision, not merely whether colleagues received different outcomes.

How Protected Characteristics May Affect an Employer's Decisions

California's Fair Employment and Housing Act generally prohibits employers with five or more employees from discriminating in employment decisions because of protected characteristics, including race, religion, sex, and disability. Different coverage rules apply to workplace harassment.

The California Civil Rights Department explains that these protections apply to various employment practices, including termination and working conditions.

Evidence may include biased remarks, different investigative procedures for comparable workers, unequal disciplinary standards, or explanations that change after the employer is challenged.

A flawed investigation or a worker's protected status alone does not establish discrimination. The employer's motivation, actions, and consequences must be considered together.

Why Criminal Charging Decisions and Employer Discrimination Claims Must Be Evaluated Separately

A prosecutor may charge one worker based on stronger admissible evidence, regardless of whether the employer initially treated the workers alike. The employer's separate decision to suspend, fire, or discipline someone may still be examined under applicable discrimination law.

Neither proceeding automatically decides whether the other decision was lawful. Employment discrimination laws generally regulate covered employment decisions, not a prosecutor's independent exercise of criminal charging authority. 

An allegation of discriminatory law enforcement would raise separate legal questions and require its own factual and legal analysis. Evidence may overlap, but criminal guilt and discriminatory employment action require different findings.

What Rights Do Employees Have During a Criminal Theft Investigation?

A worker accused of theft may encounter both an internal workplace interview and questioning by law enforcement. Those settings have different legal consequences.

Understanding Police Questioning and the Right to Remain Silent

The Fifth Amendment protects against compelled self-incrimination. In Miranda v. Arizona, the U.S. Supreme Court established safeguards for custodial interrogation by law enforcement.

Miranda warnings generally apply when law enforcement interrogates a person in custody, not simply when officers ask voluntary questions.

Custody depends on objective circumstances, including whether a reasonable person would feel free to end the interview and leave, as the Supreme Court explained in Thompson v. Keohane.

A worker can ask whether an interview is voluntary and whether they are free to leave, then seek criminal defense advice before answering substantive questions.

The Difference Between Workplace Interviews and Criminal Interrogations

An HR manager conducting an ordinary internal investigation is generally not acting as a police interrogator. Therefore, the constitutional rules governing custodial police questioning do not automatically apply to a private employer's interview.

An internal interview may concern company rules while also producing statements useful to a criminal investigation.

Statements made during an internal investigation might later be provided to law enforcement. Conversely, refusing to participate in a private employer's investigation may have employment consequences, subject to applicable laws and workplace protections.

Special rules can apply to public employees, government-compelled statements, and other circumstances involving state action.

The National Labor Relations Board explains when union-represented employees can request representation during potentially disciplinary interviews.

For union-represented employees covered by the National Labor Relations Act, the right generally arises when the worker reasonably believes an investigatory interview may lead to discipline and requests representation. It is distinct from Miranda rights.

Why Legal Representation May Matter Before Making Statements

The first account an employee gives may affect both the criminal investigation and any employment dispute. A worker may feel pressure to explain an apparent mistake immediately, particularly when a supervisor promises that cooperation will settle the matter.

A guess about timing, an inaccurate inventory estimate, or an unclear statement may later be used against the worker.

Criminal defense counsel can help evaluate the circumstances of law-enforcement questioning, potential exposure, and appropriate responses to investigative requests.

When both investigations are underway, counsel can also help assess workplace cooperation obligations without compromising the criminal defense.

What Happens When Only One Employee Is Prosecuted?

The filing of charges begins a different stage of the legal process. It does not establish guilt, and it does not necessarily end the employer's investigation.

How the Criminal Case Proceeds

Depending on the jurisdiction, the accused employee may face an initial appearance or arraignment, pretrial proceedings, negotiations, and possibly trial.

At trial, due process requires proof beyond a reasonable doubt of every element of the charged offense, as the Supreme Court held in In re Winship. Filing charges requires a different, lower threshold.

Defense counsel may obtain prosecution disclosures, examine the reliability of records and witness accounts, investigate alternative explanations, and challenge evidence through available procedures.

Review may reveal shared credentials, inconsistent shift records, or evidence that fails to show the intent required by the charged offense.

The employee remains presumed innocent unless and until guilt is established through the criminal process.

Why the Other Employee May Still Face Workplace Discipline

An employer's disciplinary process is not governed by the same burden of proof required for a criminal conviction.

An employer may conclude that an employee violated an inventory-control policy without concluding that the employee committed criminal theft.

A worker who is not charged may still face discipline for violating inventory procedures, neglecting assigned duties, or other proven workplace misconduct.

Similarly, an employee whose charges are dismissed may not automatically be entitled to reinstatement.

Whether employment discipline is lawful depends on applicable employment laws, contractual obligations, collective bargaining agreements, and the circumstances surrounding the decision.

When Criminal Defense and Employment Law Issues Overlap

A shared timeline can be tested in two ways: against the alleged theft and against the employer's stated reasons for focusing on one worker.

Aligning the last reliable inventory count with shift records, badge activity, and camera timestamps can narrow the possible loss period. Disciplinary records may separately reveal how the employer handled comparable incidents.

Internal communications might show when management developed its suspicions and whether the reasons given for selecting one employee changed over time.

Relevant materials may include lawfully accessible schedules, written allegations, messages, disciplinary notices, and communications about suspension or termination.

Employees should preserve records they may lawfully retain, without entering restricted systems, taking confidential files without authorization, deleting evidence, or contacting witnesses to influence their accounts.

Deadlines for challenging criminal charges or pursuing employment-related remedies can differ significantly. An employee facing both problems may need coordinated advice from criminal defense and employment counsel.

Different Outcomes Do Not Always Mean the Investigation Was Fair or Unfair

Two employees suspected in the same workplace theft investigation may lawfully face different criminal outcomes. One may be charged because investigators developed stronger evidence, uncovered a meaningful difference in access or conduct, or obtained statements linking that person to the alleged offense. 

The other may remain uncharged because the available evidence does not support prosecution. The absence of charges against one worker does not itself prove that the worker was cleared or that the charged worker was singled out unlawfully.

Still, missing footage, inconsistent timestamps, overlooked witnesses, or unsupported workplace allegations can justify a closer examination of how the case developed.

The criminal case turns on evidence supporting guilt under the governing law. Any employment discrimination claim turns on the employer's actions and the reasons for them.

The same records may matter to both inquiries without producing the same legal result.

For the charged worker, reviewing the prosecution's evidence and getting timely defense advice are immediate priorities. Suspected workplace discrimination should be assessed separately under the applicable employment law.

The central question is what facts explain the different outcomes and whether each decision was lawful.