Skip to main content

Case Study · Internal Theft Investigation

The Pour That Cost Everything

A Corporate Loss Prevention Investigation

CONFIDENTIAL | IDENTITIES WITHHELD | NAMES CHANGED TO PROTECT CLIENT PRIVACY

Investigation Duration

31 Days

Total Losses Confirmed

$34,800

Outcome

Terminated + Criminal Referral

The Situation

When the owner of a mid-sized cocktail bar and restaurant approached us, he was frustrated — and understandably so. For nearly eight months, his numbers hadn't added up. Liquor inventory was consistently short, cash register reconciliations were off by small but nagging amounts, and his pour cost had crept up nearly 11 points above industry standard. He'd spoken with his accountant. He'd reviewed his POS reports. He'd even quietly watched the bar himself on a few busy Friday nights. Nothing conclusive.

The suspected employee — a bartender we'll refer to as "Marcus" — had been with the establishment for three years. He was well-liked by regulars, efficient during rushes, and had never been flagged for a disciplinary issue. On paper, he was one of the better hires the owner had made. But the numbers told a different story, and experienced operators know: numbers don't lie.

The owner had already done what most do — warned the staff broadly about inventory accountability, adjusted par levels, and switched POS systems. Nothing changed. That's when he called us.

Our Approach

From the initial consultation, our team identified this as a classic internal theft and over-pour scheme — one of the most common and most underdetected forms of employee fraud in the hospitality industry. The challenge with bar theft isn't finding a smoking gun in one night. It's building a pattern over time that eliminates all reasonable doubt.

We recommended a 30-day covert surveillance operation. Working after hours with the owner's permission, our team installed a concealed high-definition camera system within the bar's back wall, positioned to capture the full well area, speed rail, and point-of-sale terminal — without being detectable to staff or customers. The installation took under two hours and left no visible trace.

Our investigators also reviewed 90 days of historical POS data, identified Marcus's shift patterns, and cross-referenced his scheduled hours against inventory discrepancy dates. The correlation was immediate and significant. Every major inventory gap mapped directly to his shifts.

"The correlation was immediate. Every major inventory gap mapped directly to his shifts — not the bar as a whole. Him specifically."

What the Camera Captured

Free Pouring & Over-Pouring

Marcus had developed a practiced free-pour technique that consistently delivered 1.5 to 2x the standard 1.5oz measure — effectively cutting the owner's liquor margin in half on every drink he made. On high-volume nights, this alone accounted for hundreds of dollars in lost product.

Ghost Transactions

On multiple occasions, Marcus accepted cash payment from customers, verbally confirmed the order into the POS, but voided or modified the transaction after the customer walked away. The drinks were made and served. The cash went into his pocket. The register never knew.

Bottle Skimming

On three documented occasions, Marcus arrived for his shift with a personal bag and was captured on camera removing partially-used liquor bottles from the well and placing them in his bag before clocking out. Premium spirits — including a 1.75L of top-shelf bourbon — were among the items taken.

Complicit Regulars

The footage also revealed a small group of regulars who received heavy over-pours or off-menu pours with no ticket attached. In exchange, these customers consistently tipped Marcus in cash — tips that never touched the shared tip pool.

The Numbers

Theft MethodEst. Monthly LossDocumented Incidents
Ghost transactions / cash pocketing$14,20047 confirmed
Over-pouring / product waste$11,40022 shifts tracked
Bottle removal from premises$6,3003 documented removals
Untracked 'comp' pours / tip scheme$2,900Ongoing pattern
Total Confirmed Loss$34,80031-day period

The Outcome

At the conclusion of the 31-day operation, our team compiled a full evidentiary package — including timestamped video clips, transaction audit reports, and a written investigative summary — and presented it to the client in a formal debrief. The documentation was thorough enough to withstand legal scrutiny.

Marcus was terminated immediately. The owner, armed with our report, filed a formal complaint with local law enforcement. Prosecutors reviewed the evidence and moved forward with charges of felony theft by employee. Marcus ultimately entered a guilty plea.

The owner also used our findings to implement new operational protocols: mandatory POS accountability procedures, blind cash drops, and a revised inventory management system. His pour cost returned to a healthy 18% within the first month post-termination.

"I knew something was wrong for almost a year. I just couldn't prove it. Having that footage changed everything — not just for the legal case, but for my own peace of mind."

— Bar Owner, Client (name withheld)

If you suspect internal theft at your business — don't wait. Evidence disappears. Money doesn't come back.

We operate discreetly, move fast, and deliver results that hold up.

Request a Confidential Consultation

All case details have been altered to protect client confidentiality. This document is intended for marketing purposes only.