Employee theft is one of the most sensitive grounds for dismissal under Philippine labor law. It affects property, trust, workplace discipline, morale, and business operations. But even where the employer strongly believes an employee stole money, products, tools, confidential resources, or company assets, dismissal is not automatically valid. In the Philippines, termination must satisfy both substantive due process and procedural due process. An employer must prove a lawful ground and must observe the required notice-and-hearing rules. Without both, dismissal can still be declared illegal or can expose the employer to liability even if the employee committed wrongdoing.

This article explains the Philippine legal framework on employee dismissal for serious misconduct and theft, including the governing rules, the distinction between serious misconduct and loss of trust and confidence, the standards of proof, due process requirements, common evidence issues, practical mistakes of employers, and the legal consequences of invalid dismissal.

I. Legal Framework in the Philippines

The main legal basis is the Labor Code of the Philippines, particularly the provisions on just causes for termination by the employer. Theft-related dismissal cases usually arise under one or more of the following just causes:

Serious misconduct
Fraud or willful breach of the trust reposed in the employee
Commission of a crime or offense by the employee against the person of the employer, any immediate member of the employer’s family, or the employer’s duly authorized representative
In some cases, analogous causes

The implementing rules, principles from labor jurisprudence, and constitutional due process norms also shape the analysis. In dismissal cases, Philippine labor law does not treat theft as a mere management issue. It is a legal question involving:

existence of a valid just cause
observance of procedural due process
adequacy of evidence
fairness of penalty
consistency of company policy application

II. Why Theft Cases Are Legally Significant

Theft in employment is serious because it goes beyond simple rule-breaking. It directly affects:

employer property
confidence in employees
workplace security
internal controls
cash handling systems
inventory integrity
client trust
fiduciary relationships

In many cases, theft also breaks the bond of confidence that the employer must be able to place in its workers. But Philippine labor law does not permit dismissal based on mere suspicion, rumor, or managerial anger. A charge of theft must rest on established facts.

This is where many cases are won or lost. The employer may honestly believe the employee is guilty, but honest belief alone is not enough if the evidence is weak or due process was defective.

III. Meaning of Serious Misconduct

A. General concept

Misconduct is improper or wrongful conduct. It involves a transgression of some established and definite rule of action, a forbidden act, a dereliction of duty, or unlawful behavior. For misconduct to justify dismissal, it must be serious.

B. Requisites of serious misconduct

For misconduct to become a valid just cause for dismissal under Philippine labor law, it generally must have these characteristics:

The misconduct must be serious.
It must relate to the performance of the employee’s duties.
It must show that the employee has become unfit to continue working for the employer.
It must have been performed with wrongful intent, not mere error in judgment, simple negligence, or isolated carelessness.

Not every company-rule violation is serious misconduct. Not every suspicious act is theft. Not every inventory discrepancy is dismissal-level misconduct.

C. Theft as serious misconduct

Theft can qualify as serious misconduct because it is inherently wrongful, intentional, and destructive of workplace order. Where an employee unlawfully takes company property, client property, co-employee property, inventory, funds, supplies, fuel, equipment, or sale proceeds, the act commonly satisfies the seriousness requirement.

Still, the employer must connect the act to evidence. The label “theft” does not prove itself.

IV. Theft as Fraud or Willful Breach of Trust

In Philippine labor cases, theft is often analyzed not only as serious misconduct but also as fraud or willful breach of trust, especially where the employee holds a position involving confidence.

This ground is especially common for:

cashiers
accountants
bookkeepers
treasury personnel
warehouse custodians
property custodians
purchasing officers
supervisors
branch managers
sales personnel handling collections
employees with access to inventory or financial systems

A. Why this ground matters

Sometimes the employer cannot prove theft in the strict criminal sense, but can prove acts showing dishonesty, falsification, diversion, unauthorized withdrawals, concealment, or manipulation of records. In such cases, the dismissal may still be upheld under fraud or willful breach of trust.

B. Two classes of employees in trust cases

Philippine labor law commonly distinguishes:

Managerial employees
Rank-and-file employees who regularly handle significant amounts of money or property

Both categories may be dismissed for loss of trust and confidence, but the standard is often treated with caution because it can be abused. The ground cannot be used as a shortcut to dismiss workers based on accusation alone.

C. Requirements for valid loss of trust and confidence

For dismissal based on loss of trust and confidence to be valid:

the employee must occupy a position of trust, or at least one where this doctrine properly applies
the act complained of must be work-related
the loss of trust must rest on a clearly established fact
the ground must not be simulated, arbitrary, or used as a pretext
it must not be a mere afterthought to justify an otherwise invalid dismissal

In theft cases, the employer often pleads both serious misconduct and breach of trust to strengthen the case.

V. Distinguishing Labor Dismissal from Criminal Theft

A major point in Philippine law is that dismissal is separate from criminal prosecution.

An employee may be:

dismissed even without a criminal conviction, if substantial evidence supports a just cause
acquitted in a criminal case yet still lawfully dismissed under labor standards, depending on the facts
criminally charged but still illegally dismissed if the employer failed to prove just cause or violated due process

A. No need for criminal conviction before dismissal

The employer does not need to wait for a theft conviction before imposing dismissal. Labor proceedings use a lower evidentiary threshold than criminal cases.

B. Different standards of proof

Criminal case: proof beyond reasonable doubt
Labor case: substantial evidence

Substantial evidence means such relevant evidence as a reasonable mind might accept as adequate to justify a conclusion. This is lower than proof beyond reasonable doubt, but it still requires real evidence.

C. Mere accusation is insufficient

Because no criminal conviction is required, some employers assume accusation alone is enough. It is not. The employer still carries the burden to prove the factual basis of dismissal.

VI. Standards of Proof in Labor Theft Cases

In illegal dismissal cases, the employer bears the burden of proving that the dismissal was for a valid cause.

A. Substantial evidence

This may include:

CCTV footage
eyewitness statements
audit findings
cash count discrepancies tied to specific conduct
inventory reports
access logs
admissions or written explanations
recovered property
transaction records
gate pass records
system logs
delivery receipts
warehouse release records
POS records
reconciliation reports
chain-of-custody records

B. What is usually insufficient by itself

rumor
anonymous allegation without support
general suspicion
unexplained shortage without proof linking it to the employee
coerced confession
unsigned statements of doubtful origin
inconsistently applied policy
accusation based only on the employee being “last seen” in an area, without more

C. Circumstantial evidence

Direct evidence is not always required. Theft can be proven by circumstantial evidence in labor cases, but the circumstances must reasonably point to employee wrongdoing and must not be speculative.

VII. Elements That Usually Make Theft-Based Dismissal Valid

An employer’s case becomes stronger when these are present:

A clear company rule or legal duty was violated.
There is actual proof of taking, diversion, concealment, unauthorized possession, or dishonest handling.
The employee was identified through reliable evidence.
The employee was given notice of the specific charge.
The employee had a real chance to explain.
The employer issued a reasoned decision based on the evidence.
The penalty is consistent with policy and prior enforcement.
The act shows moral depravity, intentional dishonesty, or unfitness to remain employed.

VIII. Due Process Requirements: The Two-Notice Rule

Even if theft occurred, an employer must still follow procedural due process.

In Philippine labor law, dismissal for just cause generally requires:

first notice: notice to explain
opportunity to be heard
second notice: notice of decision

A. First notice

The first written notice must:

specify the acts or omissions complained of
identify the company rule, policy, or legal ground involved
narrate the facts in sufficient detail
direct the employee to submit a written explanation within a reasonable period

The notice must be specific. A vague charge such as “dishonesty” or “loss of trust” without factual particulars is risky.

A better notice identifies:

date and time of incident
property allegedly taken
approximate value
manner of taking or concealment
source of evidence
relevant rule violated

B. Opportunity to explain

The employee must be given a meaningful chance to respond. This can include:

written explanation
administrative conference
clarificatory hearing if needed
chance to review evidence, where appropriate
assistance if company rules or fairness considerations require it

A formal trial-type hearing is not required in every case. But a hearing or conference becomes important where:

the employee requests it
factual disputes are substantial
company rules require it
management needs clarifications
credibility issues are central

C. Second notice

After considering the employee’s explanation and the evidence, the employer must issue a written notice of decision stating:

the findings
the ground for dismissal
the reasons why dismissal is imposed
the effectivity date

This decision should reflect actual consideration, not a pre-written conclusion.

IX. Preventive Suspension in Theft Cases

In theft or dishonesty cases, employers often impose preventive suspension while investigating.

A. Purpose

Preventive suspension is not a penalty. It is a temporary measure to prevent serious and imminent threat to:

life
property
safety of co-workers
integrity of records
workplace investigation
company operations

B. When appropriate

It is often considered appropriate where the employee:

has access to cash or inventory
may tamper with evidence
may intimidate witnesses
may repeat the offense
occupies a sensitive role

C. Legal caution

Preventive suspension must not be used as disguised punishment. It must comply with the legal limits under labor rules. If extended beyond permissible limits without proper basis or pay consequences, it may create liability.

X. Common Forms of Employee Theft in Philippine Workplaces

Theft-based dismissals can arise from many factual patterns:

stealing cash from register or collections
pilferage of inventory or supplies
unauthorized taking of company tools, gadgets, or equipment
fuel theft
substitution of genuine receipts with falsified entries
under-ringing or non-recording of sales
diversion of customer payments
skimming
false reimbursement claims
payroll manipulation
over-withdrawal from petty cash
unauthorized warehouse release
collusion with third-party suppliers or customers
use of company property for personal resale
taking scrap, rejected items, or “leftovers” without authorization
digital theft involving load credits, electronic vouchers, or data-linked assets

Even low-value items can legally justify dismissal if the act clearly shows dishonesty and intentional misappropriation. In labor law, the amount stolen is relevant but not always decisive. The dishonesty itself may be the controlling factor.

XI. Is Small-Value Theft Enough for Dismissal?

Often yes.

Philippine labor law does not require that the stolen property be of large value before dismissal becomes valid. Even theft of a low-value item may justify dismissal if it demonstrates:

deliberate dishonesty
breach of trust
moral unfitness
disregard of company rules
damage to discipline and integrity

However, the small value of the item may become relevant when evaluating:

proportionality
first offense
length of service
company practice
mitigating circumstances
whether the act was truly theft or merely unauthorized borrowing or procedural lapse

Still, courts and labor tribunals are generally reluctant to force an employer to retain an employee proven to be dishonest.

XII. Intent Matters: Theft vs Negligence vs Mistake

Not every shortage or missing item proves theft.

A. Theft or dishonesty

This involves intent to take, appropriate, conceal, divert, or benefit without authority.

B. Negligence

This may involve careless handling, weak control, failure to monitor, or procedural omission without intent to steal.

C. Error in judgment

This may involve mistaken release, clerical mistake, or wrong posting.

D. Unauthorized but non-felonious conduct

This may involve borrowing property without permission, taking home work materials by mistake, or violating property protocols without intent to appropriate.

The distinction is critical. Employers often lose cases where they jump from “there was a shortage” to “there was theft” without proving intent.

XIII. The Role of Company Rules and Code of Conduct

A written code of conduct is extremely important in theft cases. Company rules commonly define dismissible offenses such as:

theft
attempted theft
pilferage
dishonesty
fraud
misappropriation
unauthorized possession of company property
falsification
collusion
concealment of inventory loss

A. Why rules matter

They help prove that:

the employee knew the policy
the offense was classified as grave
dismissal was a recognized consequence
the rule was uniformly applied

B. Limits of company rules

A company cannot simply declare any act dismissible and expect automatic legal validity. Labor authorities still examine:

whether the rule is reasonable
whether the facts fit the rule
whether dismissal is proportionate
whether due process was followed

XIV. Admissions, Confessions, and Resignations Under Pressure

A. Written admission

A written confession can be powerful evidence, but only if voluntarily made and credible.

B. Coerced admission

If the confession was extracted through:

threats
intimidation
detention
humiliation
forced handwriting
physical pressure
denial of freedom to leave

its reliability and legal value may be attacked.

C. Forced resignation

Employers sometimes pressure accused employees to resign instead of going through disciplinary process. This is risky. A resignation obtained by coercion, fear, or lack of real choice may be treated as constructive dismissal or illegal dismissal.

D. Quitclaims

A quitclaim signed after accusation does not automatically bar claims if it was not voluntary, reasonable, and informed.

XV. Searches, CCTV, and Workplace Investigations

A. CCTV evidence

CCTV can strongly support theft charges, especially when it clearly shows:

unauthorized taking
concealment
transfer of items
failure to declare goods
tampering with storage or cash area

Still, the footage must be interpreted carefully. Grainy or incomplete footage may be ambiguous.

B. Bag checks and inspections

Employers may enforce reasonable security inspections, especially in sensitive workplaces. But the search must be:

policy-based
non-abusive
non-discriminatory
properly documented

C. Investigation fairness

The investigation should preserve:

incident reports
witness accounts
inventory verification
audit trail
chronology
employee explanation
chain of evidence

A chaotic or biased investigation weakens the dismissal case.

XVI. Theft Against the Employer, Co-Employees, or Third Parties

A. Theft against employer

This is the most common case and usually easiest to connect to serious misconduct or breach of trust.

B. Theft against co-employees

An employee may also be dismissed for theft against a co-worker if it occurs in the workplace or bears on workplace trust and discipline. It can still amount to serious misconduct and may render the employee unfit for continued employment.

C. Theft against customers or clients

This is especially grave where the employee’s duties place them in contact with clients, guests, or customer property. Such conduct can justify dismissal because it exposes the employer to reputational and legal harm.

XVII. Commission of a Crime as a Separate Ground

The Labor Code separately recognizes commission of a crime or offense by the employee against:

the person of the employer
immediate member of the employer’s family
duly authorized representative of the employer

This ground is narrower in wording than ordinary theft cases. So in many property-theft cases, employers more commonly rely on:

serious misconduct
fraud
willful breach of trust
analogous causes

Still, depending on the facts, multiple just causes may be invoked together.

XVIII. Analogous Causes

In some cases, the conduct may not fit the exact wording of theft but still constitute a valid analogous cause, especially where there is:

proven dishonesty
unauthorized appropriation
concealment
falsification linked to property loss
misuse of company resources for gain

However, analogous causes should be used carefully and not as a vague fallback.

XIX. Length of Service and First Offense: Do They Save the Employee?

Sometimes employees argue:

long years of service
clean record
first offense
low value of item
family hardship
apology
restitution

These factors may mitigate in some cases, but they do not automatically excuse theft.

Philippine labor law often treats dishonesty as a serious matter that can outweigh length of service. In fact, long service can sometimes work against the employee, because the employer trusted the worker for many years and the act represents a deeper betrayal.

Still, mitigation may matter where the facts show:

uncertainty as to intent
weak evidence of appropriation
no actual loss
procedural defect
penalty inconsistency
offense was less grave than the employer claims

XX. Restitution or Return of Property

Returning the property does not necessarily erase liability.

If an employee returns the money or item after being caught, the employer may still dismiss for the original act of dishonesty. Restitution may mitigate in some contexts, but it does not automatically cure theft.

The key issue is not only loss amount, but the breach of trust.

XXI. Acquittal in Criminal Case: Effect on Labor Case

A criminal acquittal does not automatically make the dismissal illegal.

Because labor law requires only substantial evidence, an employer may still prevail in a labor case if the facts reasonably support a finding of serious misconduct or loss of trust, even when the employee is not convicted criminally.

But if the acquittal is based on facts showing the act did not happen at all, or the employee was clearly not involved, that may significantly affect the labor case.

XXII. Dismissal Before Completion of Investigation

An employer should avoid rushing to dismiss before gathering facts and hearing the employee’s side.

Premature dismissal is vulnerable where:

first notice is too vague
evidence is incomplete
decision was pre-judged
employee explanation was ignored
second notice merely repeats accusation
investigation was performative rather than real

Even where management strongly suspects theft, procedure still matters.

XXIII. Floating, Indefinite, or Verbal Dismissal Is Risky

The employer should never rely on:

verbal firing only
text-message dismissal only
escorting the employee out without written notices
indefinite suspension instead of formal action
forcing non-reporting while “case is pending” without lawful basis

These practices commonly lead to illegal dismissal findings or at least procedural due process liability.

XXIV. Procedural Due Process Violations and Their Effect

A very important Philippine rule: dismissal may be based on a valid just cause, yet the employer can still be liable for failure to observe procedural due process.

A. If there is valid cause but defective procedure

The dismissal may remain valid, but the employer may be ordered to pay nominal damages for violation of the employee’s statutory due process rights.

B. If there is no valid cause

The dismissal is illegal, and the employer may be liable for:

reinstatement without loss of seniority rights, or separation pay in proper cases
full backwages
other monetary consequences depending on circumstances

This is why both substance and procedure must be satisfied.

XXV. Illegal Dismissal Risks in Theft Cases

An employer may lose a theft-dismissal case when any of the following is present:

no direct or substantial evidence linking the employee
inconsistent treatment of similarly situated employees
no clear rule violation identified
charge was too vague
employee was not heard
decision was arbitrary
evidence was manufactured or unreliable
confession was coerced
inventory discrepancies were unverified
chain of custody of physical evidence was broken
accusation was retaliatory, discriminatory, or union-related
employer relied purely on suspicion
no proof of intent
dismissal was disproportionate to facts actually established

XXVI. Unionized Workplaces and CBA Considerations

In unionized settings, collective bargaining agreements may contain:

disciplinary procedures
grievance steps
representation rights
hearing requirements
penalty classifications

Failure to comply with CBA procedures can complicate the dismissal. Management must observe not only minimum labor due process, but also applicable contractual procedures under the CBA where relevant.

XXVII. Theft and Managerial Prerogative

Employers have the right to discipline and dismiss employees for just causes. This falls under management prerogative. But management prerogative is not absolute. It is limited by:

law
due process
fairness
good faith
evidence
non-discrimination
proportionality

Labor tribunals do not usually interfere with valid disciplinary action. But they will strike down dismissals based on arbitrariness or insufficient proof.

XXVIII. Digital and Modern Forms of Workplace Theft

Theft is no longer limited to physical cash or stock. In modern Philippine workplaces, cases may involve:

unauthorized transfer of e-wallet balances
misuse of electronic vouchers
diversion of digital credits
unauthorized refund processing
system manipulation for discounts
misuse of loyalty points
theft of prepaid load inventories
confidential data theft with economic value
unauthorized use of company online accounts for personal gain

These may still support dismissal under serious misconduct, fraud, breach of trust, or analogous causes depending on the facts.

XXIX. Preventive Measures Employers Should Have

A lawful and defensible theft-dismissal system is easier when the employer has:

clear code of conduct
signed employee handbook acknowledgments
inventory controls
access controls
segregation of duties
CCTV policies
receipt and audit systems
standard incident report forms
fair administrative investigation procedures
witness documentation
disciplinary matrix
proper notice templates
security protocols
documented turnover and reconciliation systems

Weak controls often create evidentiary gaps that later hurt the employer in litigation.

XXX. Best Practices in Drafting the Notice to Explain

A legally strong first notice should include:

full name of employee
date of issuance
specific incident date and time
place of occurrence
detailed factual narration
specific property or money involved
source of accusation or evidence
relevant policy provisions violated
direction to submit written explanation within a reasonable period
schedule of conference if any
warning that dismissal is being considered

This makes the process more defensible and reduces claims of surprise or denial of due process.

XXXI. Best Practices in the Decision Notice

A defensible second notice should state:

summary of charge
evidence considered
employee’s explanation
management’s findings
legal and policy basis
why the act constitutes serious misconduct, fraud, or breach of trust
penalty imposed
effectivity date

A one-line notice saying “You are dismissed for theft” is weak practice.

XXXII. What Employees Commonly Argue in Their Defense

Employees accused of theft often raise one or more of the following:

denial
lack of intent
planted evidence
no exclusive access to the item or area
procedural lapse only
property was borrowed, not stolen
item was scrap or abandoned
authority existed
confession was forced
no hearing was given
selective punishment
retaliatory motive
value discrepancy or audit error
weak CCTV identification
manager personal grudge
dismissal was predetermined

These defenses do not automatically succeed, but the employer must be ready to meet them.

XXXIII. Penalty of Dismissal and the Doctrine of Proportionality

As a general rule, proven theft or dishonesty justifies dismissal because continued employment becomes incompatible with trust.

Still, labor law examines whether the penalty is tied to the actual offense proven. If the evidence shows only:

negligence
procedural noncompliance
poor judgment
unintentional possession
bookkeeping error

then dismissal may be too harsh.

The legal question is not whether the employer was offended, but whether the proved act legally warrants termination.

XXXIV. Interplay with Final Pay, Clearance, and Benefits

A dismissed employee may still be entitled to amounts already earned, subject to lawful deductions and company policy. Theft-based dismissal does not automatically forfeit all accrued entitlements unless there is lawful basis.

Issues may arise regarding:

unpaid salary
prorated benefits where applicable
service incentive leave conversion if due
authorized deductions
accountabilities subject to proper process
clearance procedures

Employers must avoid withholding everything indiscriminately.

XXXV. Can the Employer Publicly Announce the Theft?

Employers should be cautious. While internal disciplinary and security communication may be necessary, public shaming or unnecessary disclosure can create separate legal risks. Accused employees may raise claims tied to defamation, privacy, or abusive conduct depending on the facts and manner of publication.

Internal need-to-know handling is safer than public humiliation.

XXXVI. Filing of Police Complaint Alongside Dismissal

An employer may pursue both:

administrative dismissal
criminal complaint

This is legally possible because the proceedings are distinct. But the employer should keep the factual basis consistent. Contradictory theories across proceedings can weaken credibility.

XXXVII. Special Issues for Probationary Employees

Probationary status does not remove due process rights. A probationary employee may still be dismissed for just cause, including theft, but the employer must still establish the facts and observe the proper procedure. The easier dismissal rules tied to failure to meet standards do not replace due process in theft cases.

XXXVIII. Special Issues for Supervisors and Managers

The higher the position, the more serious dishonesty becomes. Supervisors and managers are held to a higher standard because they model discipline and protect company assets. Proven theft, concealment, or collusion by supervisory personnel almost always causes severe damage to the employment relationship.

XXXIX. Key Practical Distinctions

A. Missing property is not automatically theft

There must be proof linking the employee.

B. Suspicion is not substantial evidence

Even strong suspicion can fail legally.

C. Criminal conviction is not required

But facts still must be established.

D. Due process is not optional

A guilty employee may still recover nominal damages if procedural due process was denied.

E. Theft and loss of trust often overlap

Especially in money- or property-handling positions.

XL. Illustrative Legal Analysis Framework

A Philippine labor-law analysis of a theft dismissal usually asks:

What exactly was allegedly taken?
Was the employee specifically linked to the act?
What evidence exists?
Was the act intentional?
Was it work-related?
Did it show unfitness to continue employment?
Does the employee occupy a trust-sensitive role?
Were the first and second notices properly served?
Was the employee meaningfully heard?
Was the dismissal decision supported by substantial evidence?
Was the penalty consistent with policy and prior practice?
Was the action free from arbitrariness or bad faith?

XLI. Employer Errors That Commonly Cause Liability

The most common legal mistakes are:

weak investigation
vague first notice
no meaningful opportunity to explain
defective second notice
reliance on forced confession
lack of documentary support
no proof of chain of possession
assuming shortage equals theft
failure to distinguish negligence from dishonesty
retaliatory use of “loss of trust”
overreliance on uncorroborated witness rumor
noncompliance with handbook or CBA procedure
indefinite preventive suspension
verbal dismissal

XLII. Employee Rights in Theft Investigations

Even where accused of serious wrongdoing, the employee retains rights under labor law, including:

right to written notice of the charge
right to explain
right to fairness in investigation
right not to be dismissed without just cause
right to challenge the dismissal in the proper labor forum
right to earned compensation subject to lawful deductions
right against arbitrary or abusive treatment

These rights do not excuse theft. They ensure that the accusation is lawfully tested.

XLIII. Core Doctrinal Position in Philippine Law

The controlling principle is this: dishonesty and theft are among the most serious offenses an employee can commit, and they often justify dismissal because they destroy the trust indispensable to employment. But because dismissal is the ultimate penalty, the employer must prove the charge with substantial evidence and must strictly comply with procedural due process.

Philippine labor law protects both management and labor:

it protects the employer from being compelled to retain a dishonest employee
it protects the employee from being dismissed on mere suspicion or arbitrary accusation

XLIV. Conclusion

Dismissal for serious misconduct and theft in the Philippines is legally sustainable when the employer proves, by substantial evidence, that the employee intentionally committed a dishonest, work-related act serious enough to show unfitness for continued employment, and when the employer observes the required two-notice and hearing requirements of procedural due process. Theft may be charged as serious misconduct, fraud, willful breach of trust, or in some cases related just causes, depending on the employee’s position and the facts of the case.

The decisive issues are usually not abstract legal labels but concrete proof: what was taken, how the employee was linked to it, whether intent was shown, whether company rules were clear, whether the investigation was fair, and whether due process was actually followed. In the Philippine setting, a well-founded theft dismissal is often upheld because dishonesty strikes at the heart of the employment relationship. But a rushed, vague, or suspicion-based dismissal remains vulnerable to an illegal dismissal ruling, backwages consequences, reinstatement or separation pay outcomes where applicable, and nominal damages for procedural defects.