Introduction

In Philippine labor law, employee “malversation” is not usually the technical term used in the Labor Code. Strictly speaking, malversation is a criminal law term commonly associated with public officers who misappropriate public funds. In the private employment setting, the more accurate legal concepts are theft, qualified theft, fraud, embezzlement, misappropriation, dishonesty, breach of trust, or willful breach of the trust reposed by the employer.

Even so, many employers and HR practitioners use “malversation” informally to refer to an employee’s unauthorized taking, diversion, pocketing, misuse, concealment, or conversion of company money or property. In Philippine practice, when an employee is dismissed for this kind of conduct, the legal basis is usually just cause termination, especially under:

Serious misconduct
Fraud
Willful breach of trust or loss of confidence
In some cases, gross and habitual neglect, dishonesty, or analogous causes

The subject is important because dismissal cases involving missing cash, falsified receipts, unauthorized reimbursements, diverted collections, inventory shortages, fake suppliers, ghost payroll entries, or manipulation of company funds often end in labor complaints for illegal dismissal. An employer may have a valid ground to dismiss, but still lose if the substantive and procedural requirements are not met.

This article explains the Philippine legal framework, the grounds for dismissal, the standards of proof, the required procedure, the role of criminal cases, the treatment of rank-and-file versus managerial employees, preventive suspension, final pay issues, evidence, due process, and litigation risks.

I. Legal Framework in the Philippines

Termination of employment in the Philippines is principally governed by the following:

1. The Labor Code of the Philippines

The Labor Code allows an employer to terminate an employee for just causes. In employee malversation-type cases, the relevant just causes are commonly found under the provisions on employee fault.

2. Rules on Due Process

Even where a just cause exists, the employer must observe the two-notice rule and give the employee an opportunity to be heard.

3. Civil Code, company rules, and contracts

Company codes of conduct, HR manuals, cash-handling policies, accounting controls, and employment contracts help define what conduct is prohibited and what sanctions apply. These do not replace the Labor Code, but they are important in proving the employee was aware of the rule violated.

4. Criminal law

Where the conduct involves unlawful taking or diversion of money or property, the employer may also consider criminal action such as:

Theft
Qualified theft
Estafa
Falsification
Other related offenses

For public officers, “malversation” may be the correct criminal concept, but for ordinary private employment disputes, labor tribunals focus on whether there is a valid just cause to dismiss.

II. What “Employee Malversation” Usually Means in Private Employment

In private employment, “malversation” commonly refers to acts such as:

Pocketing customer payments
Failing to remit collections
Altering official receipts or invoices
Diverting funds to a personal account
Making fake disbursements
Creating ghost reimbursements
Manipulating petty cash
Padding payroll or procurement
Misappropriating inventory for sale or personal use
Taking company property without authority
Concealing shortages through false reports
Conspiring with outsiders, suppliers, or co-employees to siphon company assets

Legally, the issue is not what label the employer uses, but whether the proven acts constitute a valid ground for dismissal.

III. Grounds for Termination Applicable to Malversation-Type Acts

A. Serious Misconduct

1. Meaning

Misconduct is improper or wrongful conduct. It becomes a just cause for dismissal when it is serious, related to the employee’s work, and shows unfitness to continue working.

2. Requisites

For misconduct to justify dismissal, it generally must:

Be serious
Relate to the performance of the employee’s duties
Show that the employee has become unfit to continue working for the employer

3. Application

If a cashier steals collections, an accounting employee falsifies liquidation documents, or a warehouse custodian diverts inventory, the act is usually serious misconduct because it directly affects the employee’s duties and the employer’s property.

B. Fraud

Fraud is a classic basis for termination when an employee intentionally deceives the employer for unlawful gain or to cause loss.

Examples:

Fake reimbursement claims
Fraudulent payroll entries
Dummy purchase orders
False liquidation reports
Fabricated supplier transactions
Manipulation of statements to conceal missing funds

Fraud often overlaps with dishonesty and breach of trust.

C. Willful Breach of Trust / Loss of Confidence

This is one of the most common grounds used in employee malversation cases.

1. Meaning

An employer is justified in dismissing an employee who commits an act that destroys the trust required by the position.

2. Who may be dismissed on this ground

This ground is commonly invoked against:

Managerial employees, who are entrusted with broad discretion and confidence
Fiduciary rank-and-file employees, such as cashiers, property custodians, bookkeepers, auditors, payroll personnel, treasury staff, warehouse custodians, and others who regularly handle money or property

3. Why it is common in these cases

When an employee handles cash, collections, stock, confidential financial records, or approval authority, dishonesty or fund diversion naturally erodes the employer’s trust. Continued employment becomes difficult or impossible.

4. Standard differs by position

The law is generally more protective of rank-and-file employees, but it also recognizes that employees in fiduciary roles may be validly dismissed for loss of trust when supported by substantial factual basis.

D. Dishonesty and Analogous Causes

Even if the company rule uses the word “dishonesty,” the act may still fall under just causes recognized by law, especially if the act is analogous to fraud, serious misconduct, or breach of trust.

Examples:

Altering supporting documents
Lying during audit
Concealing shortages
Falsifying signatures
Using company assets for personal gain
Misdeclaring collections or inventories

IV. Distinguishing Public-Sector Malversation from Private Employment Cases

A common source of confusion is the word malversation itself.

1. In criminal law

Malversation is usually associated with public officers who are accountable for public funds or property and misappropriate them.

2. In private employment

A private employee accused of “malversation” is more commonly facing:

Administrative or labor consequences based on just cause dismissal
Possible criminal action for theft, qualified theft, estafa, or falsification

Thus, in a labor case involving a private company, the question is not whether the employee committed the exact crime of malversation, but whether the employer had a valid just cause and observed due process.

V. Substantive Due Process: The Employer Must Have a Valid Ground

To validly terminate, the employer must prove the existence of a lawful cause. Mere suspicion is not enough.

1. Standard of proof in labor cases

The employer is not required to prove the charge beyond reasonable doubt, which is the criminal standard. In labor cases, the usual standard is substantial evidence—that amount of relevant evidence which a reasonable mind might accept as adequate to justify a conclusion.

This is important because employers sometimes think they need a criminal conviction before dismissal. They do not. But they do need actual evidence, not rumor or speculation.

2. Substantial evidence may include:

Audit findings
Cash count reports
Inventory reconciliation reports
CCTV footage
Signed statements
Admissions
Incident reports
Bank records
Receipts and vouchers
Emails and chat messages
Access logs
Transaction histories
Witness affidavits
Documentary trails showing diversion, falsification, or concealment

3. Suspicion is insufficient

Unexplained shortages alone may not always be enough if there is no credible link to the employee. The employer should be able to show:

The employee had custody, access, or control
There was a shortage, diversion, or falsification
The employee’s acts, omissions, admissions, or surrounding circumstances reasonably establish responsibility

VI. Procedural Due Process: The Two-Notice Rule

Even if the employee clearly stole from the company, dismissal may still be defective if procedural due process is ignored.

The employer must generally comply with:

1. First Written Notice (Notice to Explain)

This notice must:

Specify the acts or omissions complained of
State the rule, policy, or legal ground violated
Direct the employee to submit a written explanation within a reasonable period
Give enough detail for the employee to intelligently answer the accusation

This should not be vague. A notice that merely says “explain cash shortage” may be too bare if the allegation involves multiple dates, transactions, amounts, or documents.

A proper notice usually states:

Dates of questionable transactions
Amounts missing or diverted
Specific documents found falsified
Specific acts, such as non-remittance, unauthorized withdrawal, fake liquidation, or inventory conversion
Rule or policy violated
Possible penalty, including dismissal where appropriate

2. Opportunity to Be Heard

After the first notice, the employee must be given a real chance to respond. This may be through:

A written explanation
An administrative conference
A formal hearing, if needed
Assistance of a representative, if company policy allows or circumstances require fairness

A full trial-type hearing is not required in every case. What is required is a meaningful opportunity to answer the charge and present a defense.

3. Second Written Notice (Notice of Decision)

If the employer decides to dismiss, the second notice must state:

That the employer considered the employee’s explanation and evidence
The findings
The specific ground for dismissal
The effectivity date of termination

The decision should be reasoned and tied to evidence. Boilerplate language increases litigation risk.

VII. How the Procedure Should Usually Unfold

A sound Philippine HR process in a malversation-type case often follows this sequence:

1. Discovery of irregularity

The company detects shortages, falsification, missing collections, questionable disbursements, or audit discrepancies.

2. Fact-finding or investigation

Before issuing a charge, the employer usually conducts an internal investigation:

Secure documents
Reconcile records
Preserve CCTV and electronic logs
Interview relevant personnel
Identify who had custody or access
Quantify loss
Prevent destruction of evidence

This stage is important. Employers should avoid premature accusations without basic verification.

3. Preventive suspension, if justified

If the employee’s continued presence poses a serious and imminent threat to life, property, or the investigation, the employer may place the employee under preventive suspension for the allowable period under the rules. This is not yet dismissal. It is a temporary measure.

In money or property diversion cases, preventive suspension may be justified where the employee:

Still has access to funds or records
Can tamper with evidence
Can intimidate witnesses
Can continue the fraudulent scheme

But preventive suspension should not be used automatically or punitively.

4. Service of first notice

The employer issues a detailed notice to explain.

5. Employee explanation

The employee submits a written answer and may attach supporting evidence.

6. Administrative hearing or conference

This is conducted if needed to clarify matters, confront evidence, or hear witnesses.

7. Evaluation

Management evaluates the evidence, the employee’s defense, prior record, position of trust, and the applicable company rules.

8. Decision

If the charge is established, the company issues the second notice terminating employment for just cause.

VIII. Preventive Suspension

Preventive suspension deserves special treatment because it is often mishandled.

1. Nature

Preventive suspension is not a penalty. It is a temporary protective measure.

2. When proper

It may be imposed when the employee’s continued employment during investigation poses a serious and imminent threat to:

Company property
Records and evidence
Co-workers
Business operations

3. Practical use in malversation-type cases

It is often proper for employees with access to:

Cash vaults
Collections
Petty cash funds
Inventory systems
Accounting entries
Supplier master files
Reimbursement approvals
Payroll systems

4. Limits

The employer should follow the applicable rules on duration. If the suspension extends beyond the permissible period and no valid extension is supported by pay consequences required by law or rule, it can create liability.

5. Risk of abuse

An employer should not treat preventive suspension as a substitute for prompt decision-making. Long, indefinite suspension without resolution is risky.

IX. Does There Need to Be a Criminal Case Before Dismissal?

No. A criminal case is not a prerequisite for dismissal.

An employer may dismiss an employee for just cause based on substantial evidence even if:

No criminal complaint has yet been filed
A criminal complaint is still under investigation
The prosecutor dismissed the criminal complaint for lack of probable cause
The criminal case is pending
The employee was acquitted because guilt was not proven beyond reasonable doubt

This is because labor cases and criminal cases have different purposes and standards of proof.

1. Labor case

Question: Was there substantial evidence of a just cause for dismissal?

2. Criminal case

Question: Was the accused proven guilty beyond reasonable doubt?

An acquittal in a criminal case does not automatically make the dismissal illegal. Conversely, filing a criminal case does not automatically make the dismissal valid.

X. Must the Employer Wait for the Audit to Finish?

Not always, but it should have enough evidence to support the charge.

Employers often face a practical tension:

Act too early, and the dismissal may look arbitrary
Act too late, and evidence may be lost or further damage may occur

The prudent approach is:

Conduct enough investigation to establish the core facts
Secure documentary basis
Issue a sufficiently detailed first notice
Continue internal validation as needed
Avoid relying on incomplete or speculative accusations

If the audit is partial, the notice should not exaggerate certainty. It should accurately describe the findings available at the time.

XI. Rank-and-File Employees vs. Managerial Employees

The law recognizes a distinction in loss of trust cases.

A. Managerial Employees

For managerial employees, the employer is generally given wider latitude because managers occupy positions that require a high degree of trust and confidence.

Examples:

Finance manager
Branch manager
Treasury manager
Procurement head
Accounting manager
Operations manager with fund approval powers

A single serious act of dishonesty may be enough to justify dismissal if it reasonably shows unfitness for continued employment.

B. Fiduciary Rank-and-File Employees

Certain rank-and-file employees also occupy positions of trust:

Cashiers
Tellers
Bookkeepers
Property custodians
Warehouse custodians
Payroll clerks
Collection personnel
Receiving clerks handling accountable goods

They may also be dismissed for loss of trust when there is substantial basis.

C. Ordinary Rank-and-File Employees

For employees not in positions of trust, the employer must be more careful about invoking loss of confidence. In such cases, serious misconduct, fraud, theft, dishonesty, or analogous cause may be a more precise ground depending on the facts.

XII. The Importance of Company Policies and Job Description

In litigation, the employer’s case is stronger if it can show:

The employee’s job involved custody or handling of funds/property
There were clear written rules on remittance, liquidation, approval, or safekeeping
The employee acknowledged the rules
The employee was trained on the process
The offense is classified as serious and punishable by dismissal

Helpful documents include:

Employment contract
Job description
Code of conduct
Finance and accounting manual
Cash handling policy
Procurement rules
Warehouse SOPs
Petty cash guidelines
Reimbursement and liquidation policies
Authorization matrix

Without these, the employer can still prevail if the wrongdoing is inherently serious, but clear policies reduce ambiguity.

XIII. What Evidence Commonly Supports a Valid Dismissal

In Philippine labor cases, documentation is critical. Useful evidence includes:

1. Documentary evidence

Cash count sheets
Daily collection reports
Deposit slips
Official receipts
Acknowledgment receipts
Petty cash vouchers
Liquidation statements
General ledger extracts
Inventory reports
Delivery receipts
Purchase orders
Bank transfer records
Approval emails
System audit trails

2. Electronic evidence

CCTV
Access control logs
POS transaction histories
ERP logs
Email threads
Chats
USB transfer logs where relevant

3. Testimonial evidence

Affidavits of auditors
Statements of cashiers, supervisors, witnesses
Testimony of customers or suppliers
Admissions of co-employees

4. Employee admissions

An admission can be powerful, but it should be obtained lawfully and voluntarily. Employers should avoid coercive practices.

5. Circumstantial evidence

Direct proof of pocketing is not always available. A chain of circumstances may suffice, such as:

Exclusive access
Unexplained shortage
False reporting
Fabricated supporting documents
Admission of deviation
Attempt to conceal
Personal benefit or suspicious transfers

XIV. Is Restitution or Repayment a Defense?

Not necessarily.

If an employee returns the money, promises to repay, or signs an undertaking to reimburse, that does not automatically erase the offense. In many cases, repayment may even support the finding that the employee was responsible, though it depends on context.

1. Repayment does not compel retention

An employer is not required to keep an employee simply because the missing money was returned.

2. But context matters

If the case is actually due to negligence, accounting error, unauthorized but non-fraudulent practice, or a system failure, repayment alone should not be treated as an admission of theft without careful review.

XV. What If the Employee Resigns During Investigation?

This creates several possibilities:

1. Resignation before dismissal

If the resignation is voluntary and accepted before dismissal, employment may end by resignation rather than termination.

2. Resignation under pressure

If the resignation was forced, it may be challenged as constructive dismissal.

3. Employer may still pursue accountability

Even if the employee resigns, the employer may still:

Document the findings
Proceed with clearance and deductions only where legally allowed
File civil or criminal action if appropriate

4. HR caution

Employers should avoid coercing resignation in order to avoid due process. Forced resignation can create separate liability.

XVI. Clearance, Final Pay, and Deductions

After dismissal, the employer must still address final pay correctly.

1. Final pay generally includes amounts lawfully due

This may include unpaid salary, earned benefits, and other accrued amounts subject to lawful deductions.

2. Deductions are regulated

An employer cannot simply deduct alleged losses from final pay without legal basis or employee authorization where required by law. The rules on deductions must be observed carefully.

3. Clearance process

Clearance may be used to account for company property, accountabilities, and pending obligations, but it should not be used to withhold amounts indefinitely or unlawfully.

4. Separation pay

For dismissal due to just cause, the general rule is no separation pay.

5. Exception in equity is limited

In some cases involving grounds other than serious misconduct or acts reflecting moral depravity, equitable relief has been discussed in jurisprudence. But in theft, fraud, dishonesty, or misappropriation cases, separation pay is generally not awarded.

XVII. Are Employers Required to Hear the Employee With Counsel?

Not in the same way as a criminal case. Administrative due process in employment does not always require a lawyer or formal trial. What matters is a real opportunity to explain and defend.

Still, the process should be fair:

The employee should know the exact charges
The employee should be allowed to answer
The employer should genuinely consider the defense
The decision should not be pre-judged

XVIII. Common Defenses Raised by Employees

Employees accused of malversation-type conduct often argue:

1. No direct proof

They may claim the employer only has suspicion or audit discrepancy, not proof of personal taking.

2. Lack of exclusive custody

They may argue several people had access to the funds, inventory, passwords, or documents.

3. Poor internal controls

They may assert the shortage arose from:

Shared logins
Weak controls
No turnover procedure
No double-checking
System errors
Unrecorded prior discrepancies

4. Coerced confession

They may claim the admission or undertaking was forced.

5. Denial of due process

They may allege:

No first notice
No hearing or chance to explain
Vague charges
Immediate dismissal without investigation
Predetermined outcome

6. Penalty too harsh

They may argue there was no intent to steal and that a lesser penalty should apply.

7. Selective enforcement

They may say others committed similar acts but were not dismissed.

Employers should anticipate these defenses and prepare evidence accordingly.

XIX. Common Employer Mistakes in These Cases

Even strong cases fail because of procedural or evidentiary mistakes.

1. Using vague accusations

A generic charge of “malversation” without particulars is risky.

2. Skipping the first notice

Immediate termination without notice and explanation process is defective.

3. Relying only on an audit summary

The employer should preserve the underlying records and witnesses.

4. No proof of custody or access

It is not enough to show a shortage; the employee’s connection must be shown.

5. Forcing admissions

Coercion undermines credibility and creates separate issues.

6. Delayed action without explanation

Long inaction may weaken the claim or create inconsistencies.

7. Wrong legal characterization

Calling a private employee’s act “malversation” is not fatal by itself, but the dismissal notice should clearly state the actual factual acts and the relevant just cause under labor law.

8. Ignoring procedural due process because “the evidence is obvious”

Even obvious dishonesty requires the proper process.

XX. Drafting the Notice to Explain in a Malversation-Type Case

A legally sound first notice should identify:

The employee’s name and position
The specific incident dates
The funds or property involved
The amount or nature of shortage
The documentary basis
The acts constituting misappropriation, fraud, or falsification
The policies violated
The legal grounds potentially applicable
The period for written explanation
The schedule of hearing or conference, if any

It is better to describe the conduct factually, for example:

You were found to have received customer payments on specified dates totaling a stated amount, which were not remitted to the company and do not appear in the official deposit records. The internal audit further found altered entries in the daily collection report and supporting receipts bearing discrepancies in handwriting and sequence. These acts may constitute serious misconduct, fraud, dishonesty, and willful breach of trust.

That is much stronger than saying only:

Explain why you should not be dismissed for malversation.

XXI. Is a Hearing Always Mandatory?

Not always in the sense of a formal evidentiary hearing. What is required is ample opportunity to be heard.

A conference or hearing becomes more important where:

The employee requests one
Facts are disputed
Witness credibility matters
Clarification is needed
Company policy provides for one
The accusations are complex and document-heavy

For sensitive fund diversion cases, a hearing is usually prudent even if not strictly indispensable in every circumstance.

XXII. Preventive Suspension vs. Constructive Dismissal

Improper handling of preventive suspension can create a separate claim.

1. Valid preventive suspension

Temporary, justified, documented, and within legal limits.

2. Problematic preventive suspension

Indefinite, punitive, unexplained, or used to pressure resignation.

If the employee is left floating indefinitely without lawful basis, the situation may be attacked as constructive dismissal or procedural abuse.

XXIII. Relation to Internal Control Failures

An employee may be guilty even if the company had weak controls. But weak controls make proof harder.

Examples of weak controls:

Shared cash drawers
Shared passwords
No segregation of duties
No witness during cash counts
No turnover logs
No dual custody for key assets
No approval matrix
Missing source documents

Where controls are poor, employers should be especially careful in assigning responsibility. Labor tribunals may scrutinize whether the conclusion of guilt was grounded or speculative.

XXIV. Can One Isolated Incident Justify Dismissal?

Yes, in many cases. Theft, dishonesty, fraudulent taking, or deliberate misappropriation is often so serious that a single act can justify termination, especially when committed by an employee in a position of trust.

The employer does not need to wait for repeated offenses where the first act already demonstrates dishonesty incompatible with continued employment.

XXV. What About Negligence vs. Intentional Taking?

This distinction is critical.

Not every shortage equals theft. A shortage might arise from:

Careless recordkeeping
Accounting mismatch
Unauthorized but known practice
Failure to follow turnover procedures
System defects
Customer disputes
Misposting or reconciliation errors

Termination for malversation-type conduct is strongest where there is evidence of:

Intentional concealment
False documents
Personal diversion
Inconsistent explanations
Secret benefit
Tampering
Unauthorized possession
Attempted cover-up

If the facts only show carelessness, the proper ground may be negligence rather than fraud or breach of trust, depending on the seriousness and frequency.

XXVI. The Role of Intent

Intent is often inferred from acts rather than admitted directly.

Indicators of dishonest intent may include:

Altered receipts
Missing original documents
Duplicate reimbursements
Fictitious vendors
Undeclared collections
Incorrect entries benefiting the employee
Deletion or concealment of records
False certifications
Unauthorized transfers

An employer should avoid conclusory statements and instead build a factual narrative from the evidence.

XXVII. Criminal Complaint and Labor Case Running at the Same Time

It is common for both to proceed in parallel:

1. Labor side

The employee files a complaint for illegal dismissal.

2. Criminal side

The employer files theft, qualified theft, estafa, falsification, or related charges.

These cases are independent. A labor arbiter focuses on dismissal validity. The criminal court or prosecutor focuses on criminal liability.

The employer should keep its positions consistent across both proceedings. Contradictions in amounts, dates, access, or theory of the case can damage credibility.

XXVIII. Impact on Benefits and Employment Record

1. Separation pay

Generally unavailable in just cause dismissal for theft, fraud, or serious dishonesty.

2. Service incentive leave and accrued salary

Lawfully earned benefits are handled according to law and lawful deductions.

3. Certificate of employment

A dismissed employee may still generally be entitled to a certificate of employment reflecting factual employment details. It is usually not meant to be a character reference.

4. Retirement benefits

This depends on retirement plan terms, company policy, and applicable law. Forfeiture is not automatic unless validly provided under governing rules and not contrary to law.

XXIX. Unionized Employees and CBA Considerations

If the workplace is unionized, the employer must also check:

The collective bargaining agreement
Grievance procedures
Any specific disciplinary process
Representation rights in hearings, where applicable

But CBA procedures do not remove the employer’s obligation to satisfy statutory due process.

XXX. Resignation, Settlement, and Quitclaims

Sometimes employers and employees settle:

Employee resigns or agrees to separation terms
Employer withdraws or refrains from criminal complaint
Employee executes quitclaim and release

Philippine law scrutinizes quitclaims carefully. A quitclaim is more defensible when it is:

Voluntary
Clear
Supported by fair consideration
Not contrary to law or public policy

A settlement does not automatically cure a due process defect unless the compromise itself is valid and enforceable.

XXXI. Burden of Proof in Illegal Dismissal Cases

In illegal dismissal cases, the employer bears the burden to prove that the dismissal was for a valid or authorized cause. This means:

The employee does not need to prove innocence first
The employer must show a factual and legal basis for dismissal
The employer must also show procedural compliance

If the employer cannot discharge this burden, the dismissal may be declared illegal.

XXXII. Consequences of Illegal Dismissal

If the dismissal is found illegal, the employer may be ordered to provide:

Reinstatement without loss of seniority rights, or
Separation pay in lieu of reinstatement where proper
Full backwages
Possible damages and attorney’s fees in appropriate cases

This is why even a morally strong case must be carefully documented and procedurally correct.

XXXIII. What If There Was Valid Cause But Procedural Defect?

Philippine labor law recognizes that there can be cases where the ground for dismissal is valid, but the employer failed to observe proper procedural due process. In such cases, the dismissal may remain valid as to the cause, but the employer may still be liable for nominal damages due to the due process violation.

This is a major reason employers should never ignore the notice-and-hearing requirements.

XXXIV. Practical Guidance for Employers

In Philippine practice, employers handling a suspected employee malversation case should generally do the following:

1. Preserve evidence immediately

Secure documents, devices, CCTV, logs, and records.

2. Limit access

Revoke access where needed to prevent tampering.

3. Consider preventive suspension only where justified

Document why the employee’s continued presence poses a serious risk.

4. Conduct a real investigation

Establish amounts, dates, access, roles, and supporting records.

5. Use precise charges

Describe acts factually, not merely with labels.

6. Follow the two-notice rule

First notice, opportunity to explain, second notice.

7. Hold a conference when useful

Particularly in document-heavy or disputed cases.

8. Base the decision on substantial evidence

Not rumor, not assumption.

9. Review the employee’s position

Managerial, fiduciary rank-and-file, or ordinary rank-and-file.

10. Keep the labor and criminal theories aligned

Do not allege different versions of events in different forums.

XXXV. Practical Guidance for Employees

An employee accused of misappropriation or malversation-type conduct should understand:

1. Dismissal can happen without criminal conviction

The employer only needs substantial evidence in the labor context.

2. You are entitled to due process

You must receive specific charges and a real chance to explain.

3. Answer in writing

A clear written explanation matters.

4. Request access to the basis of accusation where appropriate

Particularly for audit findings and transaction records relied upon.

5. Distinguish error from dishonesty

If the issue is negligence, process failure, or shared access, explain that concretely.

6. Be careful with admissions and repayment undertakings

These may have serious consequences.

XXXVI. Sample Fact Patterns

1. Cashier with missing daily collections

A cashier receives payments, but end-of-day remittance is short. CCTV shows the cashier placing cash in a personal bag. Daily collection forms were altered. This strongly supports serious misconduct, fraud, and breach of trust.

2. Accounting staff with fake reimbursements

An employee submits repeated reimbursement claims supported by fabricated receipts and a non-existent vendor. This is classic fraud and dishonesty.

3. Warehouse custodian with missing inventory

A custodian has sole access to controlled stock. Inventory audit shows shortages, and gate logs match undocumented withdrawals. This may support loss of trust and serious misconduct.

4. Shared access case

Multiple employees used the same POS credentials and shared the cash drawer. There is a shortage, but no evidence tying it to one employee. Dismissal of one employee alone is much weaker.

XXXVII. Why Terminology Matters, But Facts Matter More

An employer’s use of the word “malversation” in internal memos is not the heart of the case. Labor tribunals usually focus on:

What exactly happened
What evidence supports it
What job the employee held
What rule was violated
Whether the employee was heard
Whether the dismissal was proportionate and lawful

So while “malversation” may be colloquially used, the dismissal notice and legal defense should be framed in terms recognized in labor law: serious misconduct, fraud, dishonesty, and willful breach of trust.

XXXVIII. Comprehensive Rule in One Statement

In the Philippines, an employee who misappropriates, diverts, steals, conceals, or fraudulently uses company money or property may be lawfully dismissed for just cause—typically serious misconduct, fraud, dishonesty, or willful breach of trust—provided the employer proves the charge with substantial evidence and complies with procedural due process through the required notices and meaningful opportunity to be heard. A criminal conviction is not required, but unsupported suspicion is insufficient. The stronger the employee’s position of trust and the clearer the evidence of intentional wrongdoing, the stronger the employer’s case for valid dismissal.

Conclusion

The Philippine termination procedure for employee malversation is not merely about discovering missing money. It is about aligning facts, evidence, legal grounds, and due process. Employers often focus heavily on the shortage itself, but in labor litigation the decisive questions are broader: Was there substantial evidence? Was the employee clearly linked to the loss? Was the act intentional or merely negligent? Was the employee in a position of trust? Were notices properly served? Was the employee heard before dismissal?

When these elements are properly established, termination is usually sustainable. When they are not, even a suspicious and morally troubling case can fail in an illegal dismissal complaint. In Philippine labor law, the validity of dismissal for employee malversation depends not on accusation alone, but on a disciplined, lawful, and evidence-based process.