Discovering that a former cashier may have taken company money can feel urgent, but a missing cash balance alone is not enough to establish qualified theft. Before filing, the employer must build a clear evidence trail showing what money was taken, how the former cashier was connected to the taking, and why the employee’s access involved a special level of trust. This guide explains how qualified theft applies to cashiers, what evidence prosecutors expect, where to file the complaint, and what normally happens after filing.

When a Cashier’s Misappropriation Becomes Qualified Theft

Theft is defined under Article 308 of the Revised Penal Code. It generally happens when a person:

Takes personal property;
The property belongs to another person or entity;
Acts with intent to gain;
Takes the property without the owner’s consent; and
Uses no violence, intimidation, or force upon things.

Under Article 310, theft becomes qualified theft when certain circumstances make the offense more serious. In cases involving a cashier, the circumstance usually alleged is grave abuse of confidence.

The prosecution must therefore establish six elements:

There was a taking of personal property, such as company cash;
The property belonged to the employer or another person;
The taking was done with intent to gain;
The owner did not consent;
No violence, intimidation, or force upon things was used; and
The taking was committed with grave abuse of confidence.

The Supreme Court restated these elements in Balagtas v. People, G.R. No. 257483, October 30, 2024. (Supreme Court E-Library)

The fact that the respondent has already resigned, abandoned the job, or been dismissed does not prevent the filing of a criminal complaint. What matters is whether the alleged taking occurred while the respondent had access to the money or property.

Being a Cashier Does Not Automatically Prove Grave Abuse of Confidence

One of the most important recent Supreme Court doctrines is that a cashier’s job title, by itself, does not automatically convert ordinary theft into qualified theft.

In Batislaon v. People, G.R. No. 256624, July 26, 2023, the Supreme Court ruled that a grocery cashier was not automatically guilty of qualified theft merely because she handled store merchandise. The Court noted that an ordinary grocery cashier may be subject to supervisors, security guards, baggers, point-of-sale controls, and CCTV monitoring. These controls may show that the cashier did not have exclusive management or discretion over the employer’s property. (Supreme Court E-Library)

In Balagtas v. People, the Court again explained that grave abuse of confidence requires a relationship involving special trust or a higher degree of confidence, not merely the ordinary confidence found in every employer-employee relationship. (Supreme Court E-Library)

Evidence of special trust may include proof that the cashier:

Had exclusive or unusually broad access to cash, vaults, receipts, or deposit records;
Was authorized to receive collections and independently account for them;
Could approve refunds, void transactions, alter sales entries, or reconcile shortages without immediate supervision;
Was entrusted with passwords, keys, blank checks, or banking access unavailable to ordinary staff;
Was responsible for both receiving and depositing company money;
Was allowed to retain collections for a period before remittance;
Personally reported to the owner because of a long-standing relationship of trust; or
Used that special access as the means of carrying out the taking.

The complaint should describe these facts in detail. Statements such as “she was our trusted cashier” or “we trusted her with money” are usually too general.

Qualified Theft, Simple Theft, or Estafa?

Employers often use the words “theft” and “estafa” interchangeably, but the distinction can determine whether the complaint succeeds.

Qualified theft or simple theft

Theft is generally the proper classification when the employee had only material or physical possession of the money. Material possession means the employee physically handled the cash, but ownership and legal control remained with the employer.

An ordinary cashier who receives customer payments for immediate turnover normally has only material possession. If the cashier secretly takes part of the money, the offense may be theft. It becomes qualified theft only if grave abuse of special confidence is separately established.

Estafa through misappropriation

Estafa under Article 315(1)(b) may apply when money or property was received in trust, on commission, for administration, or under another arrangement that transferred juridical possession.

Juridical possession means the recipient acquired a legally recognized right to possess the property that could be asserted even against the owner until the recipient’s obligation to return or account for it became due.

The Supreme Court has repeatedly distinguished the two situations: conversion by an employee who has only material possession generally constitutes theft, while conversion by a person with juridical possession may constitute estafa. See Reside v. People, G.R. No. 210318, July 28, 2020. (Lawphil)

Do not force the label “qualified theft” when the evidence points elsewhere. Present the complete facts and records. The investigating prosecutor may determine that the proper charge is simple theft, qualified theft, estafa, falsification, or a combination of offenses.

Evidence You Should Secure Before Filing

A strong case usually begins with a reconstruction of the transactions, not with a demand letter or accusation.

1. Preserve the original records immediately

Secure the following before accounts, devices, or files are altered:

Point-of-sale transaction logs;
Cash register readings and end-of-day reports;
Official receipts, sales invoices, and collection receipts;
Refund, cancellation, discount, and void records;
Cash count sheets and turnover reports;
Bank deposit slips and validated deposit records;
Bank statements;
General ledger and subsidiary ledger entries;
CCTV footage;
Login histories, user IDs, access logs, and device records;
Emails, text messages, and workplace chat messages;
Inventory reports, if merchandise was involved;
Attendance records and duty schedules; and
Employment contracts, job descriptions, memoranda, and access-control policies.

Preserve electronic files in their original format. A printed screenshot may help explain a transaction, but the original file, source device, metadata, export history, and testimony of the person who extracted the data make the evidence much stronger.

2. Conduct a transaction-level reconciliation

A general statement that “₱300,000 is missing” is vulnerable to attack. Prepare a schedule showing how the figure was calculated.

Information to show	Example
Date or shift	12 March 2026, morning shift
Expected cash	₱85,420
Cash actually turned over	₱72,420
Shortage	₱13,000
Basis	POS report, receipt series, cash count
Respondent’s connection	Sole cashier assigned to register
Irregular act	Unauthorized void and deleted sale
Supporting witness	Shift supervisor and accounting clerk

For repeated incidents, prepare a separate line for each date. Do not simply combine all shortages into one unexplained total.

The Supreme Court has recognized that circumstantial evidence may prove a taking when several established facts form an unbroken chain pointing to the accused. In Balagtas, payroll summaries, handwriting, custody of records, receipt of excess cash, and discrepancies between source documents collectively established the taking even without an eyewitness. (Supreme Court E-Library)

3. Exclude innocent accounting explanations

Before accusing the former cashier, determine whether the shortage may have resulted from:

Delayed posting;
Duplicate entries;
Incorrect opening balances;
Undocumented petty-cash withdrawals;
Refunds approved by another employee;
Shared cash registers or passwords;
Cash advances;
Bank deposit timing differences;
System errors;
Supervisor overrides;
Inventory shrinkage unrelated to the cashier; or
Poor segregation of accounting duties.

A prosecutor will look for evidence connecting the respondent to the taking—not merely evidence that the business suffered a loss.

4. Document the special trust

For qualified theft, gather proof explaining why the employee had more than ordinary cashier access. Useful records include:

A written job description;
Proof of exclusive passwords or keys;
Authority to receive and deposit collections;
Bank endorsement or deposit authority;
Evidence that the cashier performed reconciliation without supervision;
Testimony from the owner, finance manager, or supervisor;
Internal policies showing that the cashier was the designated custodian; and
Records showing that the irregular transaction could not have been completed without the respondent’s entrusted access.

Documents Commonly Needed for the Complaint

Document	Purpose
Complaint-affidavit	Gives the complete sworn narrative and identifies the offense
Witness affidavits	Establish the audit, access, taking, discovery, and ownership
Audit or reconciliation report	Explains how the amount was computed
Transaction schedules	Identifies each alleged incident
POS, receipt, bank, and accounting records	Proves the expected and actual amounts
CCTV or electronic records	Connects the respondent to relevant acts
Employment and access documents	Shows duties, custody, and special trust
Demand or explanation letters	Shows the respondent was asked to account, when relevant
Proof of service or receipt	Establishes that the respondent received the communication
Corporate documents	Shows the complainant’s legal existence and representative’s authority
Government-issued IDs	Required for oath administration or notarization
Respondent’s complete address	Needed for service of subpoena

When the complainant is a corporation, it is prudent to attach:

The SEC certificate of registration;
Current company information or general information sheet;
A board resolution, secretary’s certificate, or written authority naming the representative;
Proof of the representative’s position; and
An affidavit from a person with personal knowledge of the transactions.

A corporate representative should not merely repeat conclusions supplied by an auditor. The complaint is stronger when the affiant can explain how the records are created, who had custody, how the irregularity was discovered, and how the respondent’s acts were identified.

How to File the Qualified Theft Complaint

1. Determine the proper place of filing

File with the Office of the City Prosecutor or Office of the Provincial Prosecutor covering the place where the offense, or an essential part of it, occurred.

Possible locations include:

The store where cash was taken;
The office where collections should have been turned over;
The place where false cash reports were prepared;
The place where funds were withdrawn or diverted; or
The location where the respondent acquired control over the money.

Criminal venue is jurisdictional. Under Rule 110, Section 15, a criminal action must generally be instituted and tried where the offense or any essential ingredient occurred. (Lawphil)

For transactions spanning several cities, identify the location of each essential act before choosing the prosecution office.

2. Prepare a detailed complaint-affidavit

The affidavit should state:

The identity and authority of the complainant;
The respondent’s full name and known addresses;
The employment relationship and exact duties;
How the respondent obtained access to the property;
The specific transactions involved;
How the shortage or diversion was discovered;
How the loss was calculated;
Why the taking was unauthorized;
Facts showing intent to gain;
Facts showing grave abuse of special confidence;
The witnesses who can authenticate the records; and
A numbered list of supporting annexes.

Organize the annexes chronologically and label them consistently. A prosecutor should be able to follow the case without reconstructing a disordered box of receipts.

3. Have the affidavits properly sworn

Affidavits filed in the Philippines are commonly sworn before:

A prosecutor authorized to administer oaths;
Another authorized government officer; or
A notary public.

Bring the original government-issued ID used for notarization or oath administration.

For a complainant or witness signing abroad, the document may need to be notarized and apostilled in the country where it was executed, if that country participates in the Apostille Convention. Documents from non-participating countries may require authentication through the applicable Philippine diplomatic or consular process.

4. File directly or through law enforcement assistance

A complainant may generally file directly with the proper prosecution office. A prior police report is not always a legal prerequisite.

However, assistance from the Philippine National Police, Criminal Investigation and Detection Group, or National Bureau of Investigation may be useful when the case requires:

Digital forensic examination;
Recovery of CCTV or device data;
Identification of bank-account holders;
Interviews of multiple witnesses;
Preservation of evidence held by third parties; or
Investigation of a larger internal fraud scheme.

Law enforcement investigators do not make the final charging decision. The prosecutor evaluates whether the evidence supports filing an Information in court.

5. Pay the required filing fee

The DOJ’s published schedule of fees lists a ₱200 fee for a qualified theft complaint. Confirm the current amount and accepted payment method with the receiving prosecution office because local administrative charges, photocopying requirements, and payment procedures may vary. (Department of Justice Philippines)

Bring sufficient copies for the prosecution office and each respondent. The docket section may require additional copies or electronic files depending on local practice.

What Happens During Preliminary Investigation?

The prosecution process is now governed principally by the 2024 DOJ-National Prosecution Service rules under Department Circular No. 015. Those rules apply to offenses carrying a prescribed penalty of at least six years and one day. Lower-penalty cases may be handled under DOJ Department Circular No. 028 on summary investigation or expedited preliminary investigation.

The Supreme Court upheld Department Circular No. 015 in Meking v. Remulla, G.R. No. 280455, November 11, 2025. The required evidentiary standard is now prima facie evidence with reasonable certainty of conviction. This means the prosecutor considers whether the available evidence is admissible, credible, capable of preservation, and sufficient to establish the elements if left uncontradicted. (Supreme Court E-Library)

The usual sequence is:

Initial assessment. The prosecution office checks the complaint’s form, supporting evidence, venue, and completeness.
Assignment to an investigating prosecutor. The prosecutor may recommend outright dismissal if the evidence does not justify continuing.
Issuance of subpoena. The respondent receives the complaint and is directed to submit a counter-affidavit and supporting evidence.
Counter-affidavit stage. The respondent may deny the taking, dispute the audit, challenge the amount, identify shared access, or provide another explanation.
Clarificatory proceedings. The prosecutor may ask questions, require additional records, or direct the parties to submit reply and rejoinder affidavits when necessary.
Resolution. The prosecutor either dismisses the complaint or finds sufficient basis to file an Information in court.
Review or reconsideration. A party may pursue the remedy allowed under the applicable DOJ rules within the prescribed period.

The rules provide target periods, but actual preliminary investigations often take several months because of difficulty serving subpoenas, extension requests, voluminous accounting records, clarificatory hearings, motions for reconsideration, and docket congestion.

What Happens If the Prosecutor Finds Sufficient Evidence?

When the prosecutor approves the filing of an Information:

The Information is filed in the court with jurisdiction over the offense;
The judge independently evaluates probable cause;
The judge may dismiss the case, require additional evidence, or issue a warrant of arrest;
The accused may apply for bail when legally available;
Arraignment is conducted;
Criminal pre-trial follows;
The prosecution presents its witnesses and authenticates the records; and
The court decides criminal liability and civil liability.

Filing a complaint with the prosecutor does not by itself result in immediate arrest. A warrant generally comes only after an Information is filed and the judge personally determines that probable cause exists.

The amount allegedly taken affects the penalty under Articles 309 and 310. Republic Act No. 10951, approved in 2017, increased the monetary thresholds used in computing theft penalties. Qualified theft is punished two degrees higher than the corresponding penalty for simple theft. (Lawphil)

Separate takings on separate dates may also be charged as separate offenses rather than one continuous crime. Employers should therefore preserve the date and amount of every transaction instead of presenting only an aggregate shortage. The Supreme Court applied this principle to multiple diversions in People v. Santos, G.R. No. 237982, October 14, 2020. (Supreme Court E-Library)

Is Barangay Conciliation Required?

Barangay conciliation is normally not a prerequisite for a qualified theft complaint.

Under Section 408 of the Local Government Code, offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000 fall outside the lupon’s authority. Qualified theft carries a substantially higher prescribed penalty because Article 310 raises the simple-theft penalty by two degrees.

A barangay blotter may still document an incident, but it does not replace a complaint-affidavit filed with the prosecutor.

Can the Employer Recover the Missing Money?

The criminal case may include the civil liability arising from the offense. If the accused is convicted, the court may order restitution or payment of the proven amount, with applicable interest when proper.

The employer may also consider a separate civil action in situations involving:

Additional contractual damages;
Several responsible persons;
Property tracing;
Provisional remedies;
A disputed employment bond or accountability agreement; or
Claims not fully covered by the criminal case.

Avoid deducting alleged losses from wages, final pay, or benefits without examining Article 113 of the Labor Code and applicable wage-deduction rules. A criminal accusation does not automatically authorize the employer to retain every amount due to the former employee.

Common Mistakes That Weaken Qualified Theft Cases

Treating every shortage as proof of stealing

A shortage proves that accounts do not balance. It does not automatically prove who took the money or that the taking was intentional.

Relying only on an internal audit conclusion

The auditor must explain the source records, method, assumptions, and calculations. Attach the underlying records, not only the final report.

Alleging trust without proving special trust

An ordinary employer-employee relationship or cashier position may establish some confidence, but not necessarily the grave abuse required by Article 310.

Using shared-account records without identifying the user

If several employees used the same register, password, drawer, or cash box, explain how the disputed transaction was specifically linked to the respondent.

Altering or re-saving electronic records

Editing spreadsheets, converting original footage, or exporting incomplete reports may remove metadata and create authentication problems. Preserve the source file and document every transfer.

Combining unrelated transactions into one amount

Different takings may involve different witnesses, defenses, venues, or criminal counts. Prepare a transaction-by-transaction schedule.

Pressuring the respondent to confess or pay

Threats, public shaming, unlawful detention, forced searches, and coercive demands can create separate legal problems. Preserve evidence and use the formal investigation process.

Assuming restitution automatically ends the case

Qualified theft is a public offense prosecuted in the name of the People of the Philippines. Repayment, settlement, or an affidavit of desistance does not automatically require dismissal when independent evidence supports prosecution.

Frequently Asked Questions

Can I file qualified theft if the cashier already resigned?

Yes. Resignation or termination does not erase possible criminal liability for acts committed during employment. File promptly while records, witnesses, and electronic evidence remain available.

Is an unexplained cash shortage enough to file?

It may justify an audit or investigation, but a viable complaint should connect the shortage to a specific taking, transaction, act, or access attributable to the respondent.

Do I need CCTV footage?

No. Direct video evidence is helpful but not mandatory. Documents and circumstantial evidence may be sufficient when they form a consistent and complete chain pointing to the respondent.

What if several employees shared the cash register?

Identify who was assigned during each transaction, who knew the password, who approved voids or refunds, and who performed the cash turnover. Shared access is a common source of reasonable doubt.

Is a demand letter required before filing qualified theft?

A demand letter is not an element of theft. It can still be useful when requesting an accounting, return of company property, or explanation, but it cannot substitute for proof of an unlawful taking.

Should the complaint allege estafa instead?

That depends on whether the cashier had only physical custody or acquired juridical possession of the money. State the complete facts and allow the prosecutor to determine the proper classification.

How much does filing cost?

The DOJ’s published schedule lists ₱200 for a qualified theft complaint. Additional expenses may include notarization, certified records, printing, forensic work, and professional audit services. (Department of Justice Philippines)

How long does the case take?

Evidence preparation may take several days to several weeks. Preliminary investigation commonly takes several months in actual practice. Once filed in court, arraignment and trial may take considerably longer, especially when there are many transactions, witnesses, or electronic records.

Can a foreign owner file the complaint?

Yes. A foreign individual or foreign-owned company may complain about property taken in the Philippines. The Philippine entity or owner should identify an authorized local representative and properly authenticate corporate documents and affidavits executed abroad.

Will the former cashier be arrested immediately?

Not merely because a complaint was filed with the prosecutor. Arrest normally requires the filing of an Information and a judge’s independent determination of probable cause, followed by the issuance of a warrant.

Key Takeaways

A cashier’s job title alone does not establish qualified theft.
The employer must prove the taking, ownership, lack of consent, intent to gain, and the respondent’s connection to the money.
Grave abuse of confidence requires special or unusually high trust—not merely an ordinary employment relationship.
Preserve original POS records, accounting files, bank records, CCTV footage, access logs, and witness testimony.
Prepare a transaction-by-transaction reconciliation instead of relying on a general shortage figure.
File with the prosecutor covering the place where the offense or an essential part of it occurred.
The prosecutor may classify the acts as qualified theft, simple theft, estafa, or another offense based on the evidence.
Filing does not cause immediate arrest; a judge must independently determine probable cause after an Information is filed.