A Warehouse Employee Has Noticed That a Well-Liked Colleague Has Been Taking Small Quantities of Inventory Home for Six Months — Recorded as “Samples” That Never Get Logged. Each Amount Is Small. The Pattern Is Not. What Is the Employee’s Obligation?

Quick Answer

When an employee observes a pattern of small-quantity inventory theft by a well-liked colleague, does the small value of each individual incident reduce the obligation to report?

No. Asset misappropriation creates a reporting obligation regardless of the amount involved. Small-amount theft is often more difficult to address than large-amount theft precisely because individual incidents fall below the threshold that feels worth reporting, allowing the behavior to continue unchallenged. The ACFE’s research shows that small-amount asset misappropriation schemes are among the most common forms of occupational fraud and frequently go undetected for years. The fact that the colleague is well-liked is a social pressure that affects how reporting feels. It does not affect whether a reporting obligation exists.

The Situation

A warehouse employee at a building materials distributor has been observing his colleague, Marcus, for about 6 months. Marcus regularly takes items home labeled as “samples” — small quantities of products that are supposed to be logged in the sample tracking system. They never are. The employee has checked the system multiple times.

The individual amounts are small — a box of fasteners, a tube of sealant, a handful of connectors. Each item is worth $15–40. Over six months, the total the employee has observed is probably $800–1,200. Marcus is well-liked and has been with the company for eight years. He helps everyone out and is genuinely a good colleague. Reporting him over something this small feels massively disproportionate.

The employee has said nothing for six months and is now wondering whether that was the right call — and what to do going forward.

Choice ASay nothing. The amounts are too small to matter to the company. Marcus is valuable and well-liked. Reporting him for over $800 worth of fasteners and sealant would be a massive overreaction that would damage the relationship and possibly destroy his career over something trivial.

Choice BReport the observed pattern to the compliance hotline or loss prevention — describing specific behaviors observed (unlogged sample removals, dates, approximate quantities) without drawing conclusions about intent. Let the appropriate team investigate and determine what has occurred.

Choice CTalk to Marcus directly. Give him the chance to explain or stop before involving any official. If he has a legitimate explanation, no harm done. If he stops after the conversation, the problem is resolved.

The Right Call

Choice B — Report the observed pattern to loss prevention or the compliance hotline. Describe what was observed, not a conclusion about guilt.

Choice A accepts a false premise — that small amounts don’t matter. The cumulative amount is not insignificant, and the absence of consequences reinforces the behavior. The employee has also been observing this for six months — the failure to report has already extended the scheme. Choice C has the same problem as in similar scenarios — tipping off the subject gives him time to cover his tracks, creates a confrontational situation the employee isn’t equipped to manage, and if Marcus denies it and continues, the employee has now burned both the relationship and the ability to report without it appearing retaliatory. Choice B routes the observation to people equipped to investigate — without requiring the employee to have determined guilt or decided whether the amount justifies action. Those are the investigator’s questions, not the reporter’s.

Small amounts are how most asset misappropriation schemes begin — and persist.

The ACFE’s research consistently shows that schemes discovered within 12 months generate far lower losses than those discovered after 24 or 36 months — because small amounts don’t trigger oversight, they establish a pattern that becomes habitual, and the perpetrator’s confidence grows over time. The employee who observes a small-amount scheme and says nothing is often the person who, two years later, watches a much larger investigation unfold and wonders if they should have said something sooner.

Proportionality is the rationalization — not the standard.

“This isn’t worth reporting” evaluates the incident against a personal proportionality judgment: is this big enough to justify the social cost of reporting? That is not the compliance standard. The compliance standard is whether company property is being taken without authorization. The social cost of reporting a well-liked colleague is real, and the discomfort is genuine. But the reporting obligation doesn’t have a minimum dollar threshold.

The six-month delay is itself part of the training moment.

This scenario is unusual because the reporting question has already been deferred for 6 months. Part of the training value is examining why — the relationship factors, the amount rationalization, the waiting for certainty that never quite arrives. Decision-ready employees recognize the moment when a compliance observation crosses the threshold from “I should keep an eye on this” to “I need to report this”—and they act at that moment rather than waiting for a larger pattern that removes the social awkwardness of reporting.

What is asset misappropriation and how does it typically occur?

Asset misappropriation is the theft or misuse of an organization’s assets by someone in a position of trust. It is the most common category of occupational fraud in the ACFE’s research, accounting for the majority of reported cases. Common forms include cash theft, inventory theft, falsifying expense reports, payroll fraud, and theft of equipment or supplies. Most schemes are small-amount and ongoing rather than single large incidents — which is why they persist so long before detection.

Is an employee obligated to report suspected theft by a colleague even when the amounts are small?

Yes — under most organizations’ codes of conduct and fraud reporting policies. Employees who observe suspected theft of company property have an obligation to report it through appropriate channels regardless of the amount. The organization determines whether and how to investigate. The employee’s role is to report the observation, not to determine whether the amount justifies official attention.

What protections exist for employees who report suspected fraud by a colleague?

Most organizations’ non-retaliation policies protect employees who make good-faith reports of suspected misconduct including reports about colleagues. Anonymous reporting through an ethics hotline provides additional protection by separating the report from the reporter’s identity. Employees concerned about retaliation should use the anonymous channel if available. Retaliation against a good-faith reporter is itself a serious compliance violation under most policies and many legal frameworks.

How to Use This Scenario in Training

Recommended for warehouse, inventory management, retail, and operations teams — and for any function with physical access to company assets. Most effective when paired with a clear explanation of the anonymous reporting mechanism. Knowing exactly how to report — and that the reporter’s identity can be protected — significantly reduces the barrier to acting on the reporting obligation.

This scenario demonstrates the minimization rationalization combined with loyalty pressure from the Decision Readiness Engine™ — “the amounts are too small and he’s well-liked.” Decision-ready employees recognize that both rationalizations are evaluating the wrong variables. The reporting obligation is calibrated to the existence of the conduct, not to its scale or the reporter’s relationship with the subject.

More Fraud, Waste & Abuse Scenarios