The problem of employee theft by contractor’s workers is a legally complex issue in Philippine law because it does not belong to a single field alone. It lies at the intersection of criminal law, labor law, civil law, contracts, torts, employer liability, workplace discipline, contracting and subcontracting regulation, property law, and evidence. The issue usually arises where a principal engages a contractor, and workers deployed by that contractor are alleged to have stolen money, goods, equipment, documents, confidential materials, inventory, tools, or other property from the principal, from co-workers, from customers, or from third parties within the workplace.

The legal analysis becomes complicated because the wrongdoer is not always a direct employee of the establishment where the theft occurred. The suspected offenders may be janitors, security aides, service crews, delivery personnel, technicians, warehouse helpers, agency-hired staff, project personnel, or labor supplied by a contractor or subcontractor. In Philippine practice, this raises immediate questions:

Who has the right to investigate?
Who may discipline or dismiss the workers?
Who bears civil liability for the loss?
Can the principal deduct from payments due the contractor?
Is the contractor solidarily liable?
Does labor-only contracting affect the answer?
What due process must be observed?
What criminal remedies are available?
Can the principal bar the workers from the premises?
What happens if the accusation is wrong?

This article addresses the topic in full Philippine context, distinguishing criminal liability from labor and civil consequences, explaining the role of the principal and contractor, analyzing the effect of legitimate job contracting versus labor-only contracting, and discussing the rights and liabilities of all parties involved.

I. The Basic Legal Setting: Principal, Contractor, and Deployed Workers

In many workplaces, the persons performing work on the premises are not all direct employees of the business owner. A company may engage a contractor for:

janitorial services;
security-related support;
logistics and hauling;
warehousing;
maintenance and technical repair;
merchandising and stock handling;
project work;
manufacturing support;
information technology support;
food service;
back-office functions;
other specialized or non-core activities.

The contractor then deploys its own workers to the principal’s workplace.

This gives rise to a triangular relationship:

The principal – the company or business that engages the contractor;
The contractor – the independent entity that supplies the service;
The contractor’s workers – the individuals deployed to perform the work.

When theft occurs, liability does not automatically fall on one party alone. Philippine law separates several layers of responsibility:

criminal liability of the actual offender;
disciplinary and employment liability within the employer-employee relationship;
civil liability for damages or restitution;
contractual liability between principal and contractor;
administrative and labor regulatory consequences if the contracting arrangement is defective.

II. Theft as a Criminal Offense

At the core of the problem is theft, which is a criminal offense under Philippine penal law. In essence, theft involves the taking of personal property belonging to another, without consent, with intent to gain, and without the violence, intimidation, or force that would characterize robbery.

If contractor’s workers steal property, the first and most direct consequence is possible criminal prosecution against the individual perpetrators. The workplace arrangement does not erase criminal responsibility.

A. Who may be criminally liable?

The following may be criminally liable, depending on the evidence:

the worker who directly took the property;
co-workers who cooperated in the taking;
conspirators who planned or facilitated the act;
receivers or fences, where applicable under separate law and circumstances.

B. Against whom may the offense be committed?

The theft may be committed against:

the principal company;
another employee;
another contractor’s worker;
a customer or visitor;
a tenant or concessionaire within the premises;
in some cases, the contractor itself.

C. Criminal case independent of labor case

An important rule in Philippine practice is that a criminal complaint and an employment investigation are separate matters. A worker may be:

criminally charged and later acquitted, yet still administratively dismissed if substantial evidence supports loss of trust or misconduct; or
criminally uncharged, yet still dismissed for proven policy violations; or
criminally accused, but later exonerated and entitled to labor relief if dismissal lacked factual basis.

Criminal proof demands a high standard, while labor cases are usually evaluated on substantial evidence.

III. The First Major Question: Who Is the Employer of the Suspected Workers?

The answer determines who may impose discipline and who bears employment-related obligations.

A. If the contractor is a legitimate independent contractor

As a rule, the contractor is the employer of its workers. This means:

it pays wages;
it hires and fires;
it maintains employment records;
it imposes discipline;
it is primarily responsible for observing due process in dismissal.

The principal may report misconduct and demand action, but ordinarily the principal is not the direct disciplinary employer.

B. If the arrangement is labor-only contracting

If the contractor is only a labor-only contractor, Philippine labor law may treat the principal as the employer of the deployed workers for labor law purposes. In that event, the principal may bear deeper responsibility, including possible direct employer obligations.

This distinction is crucial. Many disputes labeled as “theft by contractor’s workers” become, in part, disputes over whether the workers are truly contractor employees or are legally deemed employees of the principal.

IV. Legitimate Job Contracting vs. Labor-Only Contracting

Philippine labor law recognizes legitimate job contracting, but prohibits labor-only contracting.

A. Legitimate job contracting

A contractor is more likely to be legitimate where it has:

substantial capital or investment;
independent business operations;
control over the means and methods of the work;
its own tools, equipment, supervision, and management;
responsibility for the service as an independent enterprise.

If legitimate, the contractor remains the employer of its deployed workers.

B. Labor-only contracting

Labor-only contracting exists when the contractor merely recruits or supplies workers to the principal, without sufficient capital or investment, and the workers perform activities directly related to the principal’s business while the principal effectively controls them.

If labor-only contracting is found:

the contractor may be treated as a mere agent;
the principal may be treated as the employer.

C. Why this matters in theft cases

This distinction affects:

who may validly dismiss the suspected workers;
who is answerable in illegal dismissal claims if the workers are removed;
whether the principal may directly impose sanctions;
how liabilities are allocated after the incident.

V. Theft by Contractor’s Workers as a Just Cause for Dismissal

Theft is ordinarily serious enough to justify termination, provided due process is observed and the offense is established by substantial evidence.

Relevant labor-law grounds may include:

serious misconduct;
fraud;
willful breach of trust;
commission of a crime or offense against the employer, a member of the employer’s family, or a duly authorized representative;
analogous causes under applicable rules and company policy.

A. Serious misconduct

Stealing company property, customer property, or co-worker property in relation to work is ordinarily serious misconduct.

B. Fraud or willful breach of trust

Where the worker occupies a position involving access, custody, inventory handling, money handling, or premises integrity, theft or dishonest taking may constitute fraud or willful breach of trust.

C. Crime against the employer or representative

If the theft is committed against the employer or its authorized representative, it may also directly fit a statutory just cause.

D. The employer must still observe due process

Even when theft appears obvious, dismissal cannot lawfully rest on bare suspicion alone.

VI. Who May Investigate the Theft?

A. The principal may investigate for property protection and workplace security

Even if the workers are employed by the contractor, the principal may conduct its own fact-finding to determine:

what property was lost;
where the breach occurred;
who had access;
whether the workers should be excluded from the premises;
whether the service contract was violated;
whether police referral is warranted.

This is part of property protection and operational control over the premises.

B. The contractor must investigate for employment discipline

Because the contractor is ordinarily the employer, it should conduct the employment-side investigation if disciplinary action or dismissal is contemplated.

C. Parallel investigations may occur

It is common and legally sensible for:

the principal to conduct a site or incident investigation;
the contractor to conduct an administrative investigation;
law enforcement to conduct a criminal investigation.

These tracks may overlap but are not identical.

VII. The Principal’s Power to Remove Workers from the Premises

A principal may generally protect its premises and may deny access to workers deployed by a contractor when there is a security concern, especially pending investigation.

This power is distinct from dismissal.

A. Exclusion from premises is not the same as termination

The principal may say:

“Do not deploy these workers here pending investigation,” or
“These workers are no longer acceptable in our site.”

This does not automatically terminate the workers’ employment with the contractor. The contractor must then decide whether to:

reassign them elsewhere;
investigate and discipline them;
suspend them in accordance with law and policy;
terminate them after due process if justified.

B. Risks to the principal

If the principal effectively dictates termination without due process, and the arrangement later proves to be labor-only contracting or principal-employer relationship, the principal may face labor liability.

Even where the contractor is legitimate, a principal that acts arbitrarily may trigger contractual and labor complications.

VIII. The Contractor’s Duty of Due Process

Where theft is alleged, the contractor as employer must observe procedural due process before dismissal.

This ordinarily includes:

a first written notice specifying the acts complained of;
reasonable opportunity for the worker to explain;
hearing or conference, where appropriate;
evaluation of evidence;
a second written notice communicating the decision.

A. Suspension pending investigation

If the worker’s continued presence poses a serious and imminent threat to life, property, or operations, preventive suspension may be considered, subject to labor rules and limits.

B. No automatic guilt from accusation alone

Missing property, CCTV presence near the scene, or association with a suspect may justify investigation, but not automatic dismissal without evidence.

C. Standard of proof in labor cases

The employer does not need proof beyond reasonable doubt, but must have substantial evidence. This means relevant evidence that a reasonable mind might accept as adequate to support a conclusion.

IX. The Standard of Evidence in Theft-Related Dismissal

Because theft is a serious accusation with severe consequences, employers should rely on concrete evidence such as:

CCTV footage;
inventory records;
access logs;
written statements;
recovery of property;
admissions or confessions, if voluntary;
chain-of-custody proof;
witness accounts;
audit discrepancies tied to actual access and opportunity;
electronic records;
security incident reports.

A. Mere suspicion is insufficient

Philippine labor law does not permit dismissal based on rumor, speculation, or collective blame.

B. Circumstantial evidence may suffice

Direct eyewitness testimony is not always necessary. A chain of credible circumstantial evidence may be enough in a labor case.

C. Criminal acquittal does not always negate labor dismissal

Because labor and criminal standards differ, an acquittal does not automatically invalidate dismissal if the employer had substantial evidence of dishonesty.

X. Civil Liability of the Actual Offenders

The worker who steals may incur civil liability arising from the wrongful act, including:

return of the property;
restitution of value;
actual damages;
in proper cases, consequential damages if legally proved.

This civil liability may be pursued:

in the criminal case;
in a separate civil action, depending on procedural posture and strategy;
through settlement, if lawful and voluntary.

XI. Civil Liability of the Contractor

The next major issue is whether the contractor may be held liable when its workers commit theft.

A. Contractual liability to the principal

Most service contracts impose obligations on the contractor such as:

ensuring honesty and discipline of personnel;
screening deployed workers;
replacing problematic staff;
safeguarding property in the course of service;
indemnifying the principal for losses caused by contractor personnel;
maintaining fidelity or surety coverage.

If the contract contains indemnity clauses, the contractor may be contractually liable for theft losses caused by its workers, subject to interpretation and proof.

B. Liability based on negligence

Even apart from contract language, the contractor may incur liability if it was negligent in:

hiring;
screening;
supervising;
assigning access controls;
responding to prior incidents;
training employees on security procedures.

C. Vicarious or employer-based liability

Under civil law principles, employers may in some circumstances be liable for damages caused by employees acting within the scope of assigned tasks or in connection with their functions, especially where negligence in supervision is shown.

D. Contractor liability is easier to argue when:

the contractor hired the workers;
the contractor failed background checks;
the contractor ignored prior theft indicators;
the service involved custodial access to property;
the contract expressly shifts responsibility.

XII. Civil Liability of the Principal

Whether the principal is liable depends on to whom the theft-caused damage was done and on the nature of the principal’s relationship to the offenders.

A. If property of the principal was stolen

The principal is ordinarily the victim, not the liable party.

B. If a customer or third party’s property was stolen on the principal’s premises

Liability may become more complicated. The principal may face claims if:

it was itself negligent in premises security;
it failed to exercise proper care over invited customers or entrusted property;
it negligently retained a contractor despite known risks;
it represented that security or custody was assured.

C. If labor-only contracting exists

If the law treats the principal as the employer, the principal may bear more direct responsibility for the acts and employment consequences of the workers.

D. No automatic principal liability

The mere fact that theft occurred within the principal’s premises does not automatically make the principal liable for every resulting loss. Fault, contractual undertaking, degree of control, and the victim’s status all matter.

XIII. Solidary Liability: Is the Principal Solidarily Liable with the Contractor?

In Philippine labor law, solidary liability between principal and contractor commonly arises in relation to labor standards obligations. But theft losses are not automatically governed by the same rule.

A. Labor standards solidary liability is not the same as tort or theft liability

The rule that principal and contractor may be solidarily liable for wages and labor standards claims does not mean the principal is always solidarily liable for theft committed by contractor’s workers.

B. Solidary liability may arise by:

contract;
direct participation or negligence;
labor-only contracting consequences;
specific civil-law principles applicable to the facts.

C. Care is needed in analysis

It is a mistake to assume that because there is principal-contractor solidarity in some labor contexts, every theft-related loss may automatically be charged against both.

XIV. Deductions from Wages, Deposits, and Final Pay

A frequent mistake of employers is to try to recover theft losses by automatically deducting the value of missing property from the wages or final pay of suspected workers.

This is legally dangerous.

A. Wages are protected

As a rule, deductions from wages are tightly regulated. Unilateral deductions for alleged theft are generally impermissible unless clearly authorized by law or validly consented to under lawful conditions.

B. Deposits and cash bonds

Even if workers posted deposits or bonds, these cannot be used arbitrarily without legal and contractual basis.

C. Final pay withholding

Withholding final pay because of unresolved accusations may trigger labor claims if done without lawful basis.

D. Safer route

The proper route is usually:

investigation;
due process;
criminal complaint or civil claim where warranted;
recovery under contract from the contractor if applicable.

Employers should not convert payroll administration into self-help punishment.

XV. Service Contracts, Indemnity Clauses, and Risk Allocation

A major part of the legal analysis is contractual. Service agreements often contain provisions dealing with:

employee screening;
site rules;
losses due to dishonesty;
replacement of personnel;
hold-harmless and indemnity obligations;
insurance and bond requirements;
audit rights;
termination for cause;
liquidated damages.

A. Indemnity clauses

If the contractor agreed to indemnify the principal for losses caused by contractor personnel, the principal may recover under the contract, subject to proof of the loss and causal connection.

B. Fidelity bonds and insurance

Some contracts require the contractor to maintain fidelity bonds or employee dishonesty insurance. These may provide a source of recovery.

C. Contract termination

Repeated theft incidents, concealment, or failure to discipline workers may justify termination of the service contract.

D. Limits

Indemnity clauses are construed according to their terms. They do not eliminate the need to prove the incident and the amount of loss.

XVI. Negligent Hiring and Negligent Supervision

A theft case may expose the contractor or even the principal to claims of negligent hiring or supervision.

A. Negligent hiring by the contractor

Examples include:

no background checks for high-access positions;
hiring despite known prior theft history where inquiry was reasonably required;
falsified credentials ignored;
poor identity verification.

B. Negligent supervision

Examples include:

no access controls;
no inventory checks;
no dual custody system;
no incident reporting protocols;
no response to prior suspicious acts.

C. Principal’s own negligence

If the principal itself failed to implement reasonable controls despite obvious risks, it may not shift all blame to the contractor.

XVII. Theft from Co-Workers, Not the Principal

Sometimes the stolen property belongs not to the principal but to:

another contractor’s worker;
a direct employee of the principal;
a visitor;
a customer.

This changes the legal landscape.

A. Employment discipline still possible

The contractor may still discipline or dismiss the worker for theft committed within the workplace.

B. Civil claims may be brought by the actual owner

The injured co-worker or third party may sue the offender and potentially pursue the contractor or others depending on negligence and contractual setting.

C. The principal’s interest remains valid

Even if it did not own the stolen property, the principal may still act to protect the workplace, preserve order, and exclude the suspects.

XVIII. Theft, Loss of Trust and Confidence, and Access-Sensitive Work

In many contractor deployments, workers have access to:

inventory;
stock rooms;
offices after hours;
keys;
customer data;
confidential areas;
equipment rooms;
delivery cargo;
cash handling points.

In such roles, theft allegations often lead to dismissal on the ground of loss of trust and confidence.

A. Positions of trust

Loss of trust is especially compelling where the worker’s duties involve custody or access.

B. Honest basis required

Even then, employers must have a genuine and clearly established basis. The doctrine cannot be used casually to mask arbitrary termination.

C. Rank-and-file employees

Even rank-and-file workers may be dismissed for theft-related breach of trust if their functions involve property exposure.

XIX. The Rights of the Accused Contractor’s Workers

A legal discussion of this topic is incomplete without emphasizing that accused workers retain rights.

They have the right to:

be informed of the accusation;
answer the charge;
see or be apprised of the evidence used against them, subject to reasonable limits;
due process before dismissal;
protection against illegal wage deductions;
challenge unlawful preventive suspension;
contest illegal dismissal before labor tribunals;
defend themselves in any criminal action;
be free from coerced confessions or forced waivers.

A theft accusation is serious, but it does not suspend labor rights.

XX. False Accusations and Their Consequences

A false or reckless accusation can expose the accuser or employer to legal consequences.

A. Illegal dismissal

If workers are dismissed without substantial evidence, they may recover:

reinstatement or separation in lieu thereof;
backwages;
damages where justified;
attorney’s fees.

B. Defamation-related exposure

Publicly branding a worker a thief without basis may create additional civil or criminal exposure depending on the mode and circumstances of publication.

C. Contractual disputes

If the principal blames the contractor without sufficient proof and imposes backcharges or contract termination improperly, the contractor may bring contractual claims.

D. Workplace morale and labor relations

Beyond strict liability, false accusations damage trust and can trigger union disputes, grievances, and reputational harm.

XXI. The Role of Police Reports and Criminal Complaints

When theft is suspected, the principal or contractor may refer the matter to law enforcement.

A. Police report

A police report documents the incident but does not itself prove guilt.

B. Criminal complaint

A complaint may be filed against identified suspects where the evidence warrants it.

C. Internal investigation should still proceed

An employer need not await final criminal conviction before taking labor action, but should not rely solely on the existence of a complaint without its own evidentiary basis.

D. Care in employee statements

Statements obtained during investigation should be voluntary and properly documented. Coercive or irregular methods weaken both labor and criminal cases.

XXII. Evidence Preservation and Chain of Custody

In theft cases, especially where contractor personnel are involved, evidence discipline is vital.

Important steps include:

preserving CCTV footage promptly;
sealing relevant logs and records;
documenting recovered property;
inventory reconciliation;
securing witness statements while fresh;
preserving digital access records;
photographing scenes and recovered items;
identifying all persons with access.

Poor evidence handling can destroy both criminal and labor cases.

XXIII. Group Accusations and Collective Punishment

One recurring abuse in workplace theft incidents is the attempt to punish an entire deployment group because the actual culprit cannot be identified.

This is legally unsound.

A. No dismissal by association alone

A worker cannot lawfully be dismissed merely because he belonged to the shift, team, or contractor batch on duty, absent evidence of participation, conspiracy, concealment, or culpable omission where policy clearly applies.

B. No collective wage deduction

Charging a missing amount equally against a team of workers without individual proof is highly vulnerable to challenge.

C. Contractor replacement of all deployed workers

The principal may request a total redeployment for security reasons, but employment sanctions still require individualized due process.

XXIV. Interaction with Data Privacy and Workplace Searches

Investigation of theft may involve:

bag inspections;
locker checks;
review of CCTV;
access to logs or devices.

These must be handled lawfully and proportionately.

A. Reasonable workplace inspections

Reasonable searches pursuant to policy, security protocols, and legitimate workplace interests are generally easier to justify.

B. Overreach risks

Humiliating, discriminatory, or excessively intrusive searches may create separate liability.

C. Documentation and policy basis

Searches are strongest when grounded in clear written security rules known to workers.

XXV. Principal’s Remedies Against the Contractor

Where theft by contractor’s workers is established or strongly supported, the principal may have remedies such as:

demanding immediate replacement of personnel;
requiring contractor investigation results;
invoking indemnity provisions;
offsetting claims if contractually and legally permissible;
terminating the service agreement for cause;
calling on surety or bond coverage;
suing for damages;
blacklisting the contractor from future engagement, subject to fairness and legal prudence.

The principal should act consistently with the contract and avoid unilateral measures that exceed its rights.

XXVI. Contractor’s Remedies Against Its Workers

A contractor may pursue:

administrative discipline;
dismissal for just cause;
criminal complaint;
civil action for damages or restitution;
enforcement of lawful company policy where applicable.

But again, it may not simply help itself to unauthorized deductions from wages.

XXVII. When the Principal Directly Orders Dismissal

Sometimes the principal tells the contractor: “Terminate these workers immediately.” This creates legal risk.

A. If the contractor obeys blindly

The contractor may be held liable for illegal dismissal if due process was skipped or evidence was insufficient.

B. If the principal is the true employer

If labor-only contracting is found, the principal itself may share or bear the dismissal liability.

C. Better approach

The principal should:

report the facts;
demand investigation;
reserve the right to deny site access;
invoke contractual remedies;
avoid dictating dismissal without proper process.

XXVIII. Effect of Resignation or Absconding by Suspects

If suspected workers disappear, stop reporting for work, or resign after the incident, this affects proof but does not automatically establish guilt.

A. Absence may be suspicious but not conclusive

It may support inference when combined with other evidence.

B. Contractor must still document employment status properly

If abandonment is claimed, the employer must still satisfy the legal elements of abandonment and proper process.

C. Criminal and civil recovery may continue

Resignation does not extinguish criminal or civil liability.

XXIX. Theft of Confidential Information or Digital Assets

Although “theft” often suggests physical property, modern workplace losses may include:

confidential files;
customer data;
trade information;
source code;
electronic credentials;
digital records.

Whether the conduct fits traditional theft, another criminal offense, or contractual/data breach theories may vary. But on the employment side, such conduct may still amount to serious misconduct, fraud, breach of trust, or analogous cause for dismissal.

Where contractor workers have system access, the principal and contractor should address:

confidentiality covenants;
access restrictions;
incident response;
digital forensics;
turnover and deactivation procedures.

XXX. Theft by Security, Janitorial, Logistics, and High-Access Personnel

Certain contractor deployments attract special scrutiny because the workers are entrusted with proximity and access.

A. Security-related personnel

Theft by personnel assigned to protect premises is especially serious because it destroys the very trust that justifies deployment.

B. Janitorial and maintenance crews

These workers often access offices after hours and multiple rooms, making screening and supervision essential.

C. Warehouse and logistics staff

Inventory shrinkage, cargo loss, and pallet diversion are common contexts. Audit trails are critical.

D. Delivery and merchandising personnel

Theft may involve stock, samples, fuel, devices, or customer remittances.

In all these settings, the same legal structure applies, but the degree of trust and access affects the gravity of the offense and the evidentiary expectations.

XXXI. Preventive Compliance Measures

A complete legal treatment includes prevention. Both principal and contractor should adopt:

clear service contracts with loss-allocation clauses;
careful contractor vetting;
background checks appropriate to the position;
documented site security policies;
CCTV and access controls;
dual custody for sensitive assets;
inventory reconciliation systems;
incident response protocols;
due process templates for administrative investigations;
lawful search policies;
training on ethics and honesty;
fidelity bonds where appropriate.

Prevention is not only operationally sound; it strengthens legal positions when litigation arises.

XXXII. Practical Legal Characterization of Common Scenarios

Scenario 1: Janitorial workers deployed by a legitimate contractor steal office laptops

The workers may face criminal complaint and just-cause dismissal by the contractor after due process. The principal may exclude them from the site and seek indemnity from the contractor under the service agreement.

Scenario 2: Warehouse helpers supplied by a thinly capitalized “agency” divert inventory

If the “agency” is later found to be a labor-only contractor, the principal may be treated as the employer for labor purposes, including consequences of dismissal and related claims.

Scenario 3: Cash goes missing and all deployed workers are forced to sign salary deduction forms

This is legally vulnerable. Collective deduction without proper basis is highly challengeable.

Scenario 4: Principal orders contractor to fire suspects immediately without hearing

The dismissal may later be struck down for lack of due process, with liability depending on the true employment relationship.

Scenario 5: Customer property is stolen by contractor’s staff in a hotel, mall, clinic, or office setting

The actual offender is liable, but the contractor and sometimes the principal may face civil claims depending on negligence, contractual undertaking, and the exact nature of the relationship with the customer.

XXXIII. The Governing Legal Principles Summarized

The topic of employee theft by contractor’s workers in Philippine context can be distilled into these core rules:

First, the actual offenders may incur criminal, civil, and employment liability.

Second, the contractor is ordinarily the employer of its workers if it is a legitimate independent contractor, and therefore it ordinarily bears the duty to discipline and dismiss with due process.

Third, the principal may investigate, protect its property, and bar suspect workers from the premises, but site exclusion is not the same as lawful dismissal.

Fourth, if the contractor arrangement is labor-only contracting, the principal may be treated as the employer, with major consequences for liability.

Fifth, theft is generally a valid just cause for dismissal, but only upon substantial evidence and compliance with procedural due process.

Sixth, the contractor may be contractually and civilly liable to the principal for losses caused by its workers, especially where indemnity clauses, negligence, or failure of supervision are shown.

Seventh, wage deductions and payroll self-help recovery for alleged theft are heavily restricted and often unlawful if done unilaterally.

Eighth, false accusations expose employers and principals to illegal dismissal, damages, and other claims.

Ninth, each layer of liability—criminal, labor, contractual, and civil—must be analyzed separately rather than collapsed into one conclusion.

Conclusion

In Philippine law, employee theft by contractor’s workers is never a simple matter of “their employee, their problem.” Nor is it always correct to say that the principal may directly punish workers found on its premises. The proper legal analysis begins by identifying the true employer, the nature of the contracting arrangement, the available evidence, the service contract provisions, and the type of harm suffered.

Where the contractor is legitimate, the contractor ordinarily remains the disciplinary employer, while the principal retains the right to protect its property, investigate incidents, exclude workers from the site, and enforce contractual remedies. Where labor-only contracting exists, the principal may face deeper and more direct liability. In all cases, the actual wrongdoer may be criminally prosecuted, but employment sanctions still require substantial evidence and due process. Theft may justify dismissal, but suspicion alone does not. Likewise, losses may be recoverable, but wages cannot be raided as a shortcut to restitution.

The Philippine approach therefore insists on two things at once: firm protection of property and workplace integrity, and strict respect for labor rights and lawful process. Any complete treatment of the subject must hold both principles together.

I can also convert this into a more formal law review article with footnote-style structure, or into a practical employer-side compliance guide or employee-side litigation guide.