I. Introduction

Employee fraud is a serious legal and business problem in the Philippines. It becomes especially damaging when an employee misuses the employer’s name, position, access, client relationships, company records, or apparent authority to solicit money from clients for personal benefit.

This situation may arise when an employee asks clients to pay money directly to the employee, invest in a supposed company project, advance payment outside official channels, pay “processing fees,” participate in a side business, or settle invoices through unauthorized accounts. It may also occur when an employee uses company data, invoices, official receipts, emails, social media pages, messaging apps, or client trust to deceive customers.

The employer may have several remedies: internal disciplinary action, termination for just cause, civil recovery, criminal complaint, regulatory reporting, protective notices to clients, data privacy response, labor law compliance, and preventive policy reform. Clients who were defrauded may also have claims against the employee and, in some cases, may attempt to hold the employer liable depending on the facts.

The legal response must therefore be careful. The employer should act quickly to preserve evidence and protect clients, but must also observe due process, avoid premature defamatory statements, and ensure that any dismissal complies with Philippine labor law.

II. Common Forms of Employee Fraud Involving Clients

Employee fraud involving solicitation of money from clients may take many forms, including:

Unauthorized collection of payments The employee collects money from clients but does not remit it to the employer.
Use of personal bank or e-wallet accounts The employee instructs clients to send payments to a personal bank account, GCash, Maya, remittance account, or cryptocurrency wallet.
Fake company fees The employee asks clients to pay processing fees, facilitation fees, taxes, documentation charges, reservation fees, or “expedite” payments not authorized by the company.
False investment solicitation The employee tells clients that the company has an investment opportunity, expansion plan, special project, lending pool, real estate venture, trading account, or financing arrangement.
Side transactions using company relationships The employee offers products or services privately to company clients, sometimes competing with the employer or diverting business.
Forgery of receipts and documents The employee issues fake receipts, altered invoices, fabricated contracts, or unauthorized acknowledgments.
Misrepresentation of authority The employee claims to have authority to collect, approve, discount, waive, release, or process transactions when no such authority exists.
Kickbacks and commissions The employee solicits money from clients or suppliers in exchange for preferential treatment.
Client data misuse The employee uses customer lists, contact details, transaction history, or confidential information to solicit money.
Online impersonation The employee creates or uses fake company pages, email addresses, social media accounts, or messaging profiles to deceive clients.
Post-employment fraud A former employee continues contacting clients and pretending to represent the company.
Collusion with outsiders The employee works with third parties to defraud clients or divert company funds.

These acts may give rise to employment, civil, criminal, corporate, tax, data privacy, and reputational consequences.

III. Initial Legal Assessment

When fraud is discovered, the employer should identify the legal nature of the conduct. The following questions are important:

Was the employee acting within assigned duties or outside authority?
Did the employee use company name, documents, email, logo, client database, or official position?
Did the client pay the employee personally or pay an official company account?
Was the money intended for the company, the employee, or a fake opportunity?
Was there deceit, misrepresentation, falsification, or abuse of confidence?
Did the employee receive and misappropriate funds?
Were company records altered?
Were official receipts issued?
Did other employees participate?
How many clients were affected?
Was the conduct done online or through electronic means?
Did the employee access or misuse personal data?
Did the employee continue after being warned?
Did the company suffer financial loss, reputational harm, or legal exposure?

The answers determine the appropriate remedies.

IV. Immediate Steps for the Employer

The employer should act promptly but carefully.

1. Preserve evidence

The company should secure:

emails;
chat messages;
client complaints;
payment receipts;
bank or e-wallet transaction records;
invoices;
official receipts;
CCTV footage;
call recordings, if lawfully obtained;
CRM records;
access logs;
company-issued device contents, subject to policy and law;
social media posts;
screenshots;
client statements;
internal approvals;
audit trails;
accounting records;
payroll and commission records;
employment documents;
company policies signed by the employee.

Evidence should be preserved in original form where possible. Screenshots are useful, but the company should also preserve native files, metadata, system logs, and original communications.

2. Restrict access

If there is reasonable basis, the company may consider temporarily restricting access to:

client databases;
email accounts;
payment systems;
accounting software;
CRM platforms;
company devices;
official social media pages;
confidential documents;
premises or sensitive areas.

The restriction should be proportionate and documented.

3. Conduct an internal investigation

The company should appoint an investigator or committee, ideally involving HR, legal, finance, compliance, IT, and the business unit concerned.

The investigation should establish:

what happened;
who was involved;
how much was collected;
from whom;
through what channels;
when it occurred;
whether company records were altered;
whether clients were misled;
whether there was a pattern;
whether the company has exposure;
what remedial steps are needed.

4. Interview witnesses

The company may interview clients, co-employees, supervisors, accounting personnel, and other relevant persons. Written statements should be obtained where possible.

5. Avoid premature public accusations

The company should not immediately publish accusations unless necessary and carefully worded. Public statements should be factual, restrained, and preferably reviewed by counsel.

6. Consider preventive suspension

If the employee’s continued presence poses a serious and imminent threat to company property, operations, evidence, witnesses, or clients, preventive suspension may be considered subject to labor law limits.

V. Employment Law Remedies

Employee fraud may justify disciplinary action, including dismissal, if the facts support it and due process is observed.

A. Just Causes for Dismissal

Under Philippine labor law, an employee may be dismissed for just causes, including:

Serious misconduct
Willful disobedience of lawful orders
Gross and habitual neglect of duties
Fraud or willful breach of trust
Commission of a crime or offense against the employer or the employer’s representative
Other analogous causes

In cases involving solicitation of money from clients, the most relevant grounds are usually serious misconduct, fraud, willful breach of trust, and commission of an offense.

B. Fraud or Willful Breach of Trust

Fraud or willful breach of trust is often the strongest employment ground where the employee holds a position of confidence or handles clients, money, documents, accounts, sales, collections, or company property.

An employee may commit breach of trust by:

collecting money without authority;
diverting company funds;
using personal accounts for client payments;
hiding transactions;
falsifying records;
misusing client relationships;
soliciting personal loans or investments from clients using company influence;
misrepresenting company policy;
concealing complaints;
failing to remit collections.

For managerial employees and employees occupying positions of trust, loss of confidence may justify dismissal if based on a willful breach and supported by substantial evidence.

C. Serious Misconduct

Serious misconduct may exist where the employee’s acts are grave, improper, wrongful, and connected to work. Soliciting money from clients under false pretenses may be considered serious misconduct because it damages the employer’s trust, reputation, and client relationships.

D. Willful Disobedience

If the company has clear rules prohibiting unauthorized collections, personal dealings with clients, use of personal accounts, side transactions, or solicitation of money, violation of those rules may constitute willful disobedience.

To support this ground, the employer should show:

the order or policy was lawful;
the policy was known to the employee;
the policy was reasonable and related to business;
the employee intentionally violated it.

E. Analogous Causes

Even if the act does not neatly fall into a listed just cause, it may be treated as analogous where it is similar in gravity and effect to recognized grounds. Fraudulent solicitation from clients may be analogous to fraud, breach of trust, or serious misconduct.

VI. Procedural Due Process in Employee Discipline

Even if the evidence of fraud appears strong, the employer must observe procedural due process. Failure to do so may expose the employer to liability for nominal damages, and in some cases may weaken the dismissal.

The usual process for dismissal based on just cause is the twin-notice and hearing requirement.

A. First Notice: Notice to Explain

The first written notice should state:

the specific acts or omissions complained of;
the company rules or legal grounds allegedly violated;
the relevant dates, transactions, clients, and amounts, if known;
the possible penalty, including dismissal if applicable;
a reasonable period for the employee to submit a written explanation.

The notice should be specific enough to allow the employee to respond meaningfully. Vague accusations such as “fraud” or “dishonesty” without details may be insufficient.

B. Opportunity to Be Heard

The employee must be given a real opportunity to explain. This may be through:

a written explanation;
an administrative conference;
a hearing;
submission of documents;
presentation of witnesses.

A formal trial-type hearing is not always required, but if requested or if facts are contested, an administrative conference is often advisable.

C. Second Notice: Notice of Decision

After considering the evidence and the employee’s explanation, the employer should issue a written decision stating:

the facts established;
the company policies or legal grounds violated;
the reasons for the penalty;
the effective date of dismissal or lesser sanction.

The decision should be based on substantial evidence.

VII. Preventive Suspension

Preventive suspension is not a penalty. It is a temporary measure to protect the company while investigation is pending.

It may be justified where the employee’s continued presence poses a serious and imminent threat to:

company property;
client accounts;
witnesses;
evidence;
confidential information;
business operations;
workplace safety.

In fraud cases, preventive suspension may be appropriate where the employee can still contact clients, alter records, pressure witnesses, destroy documents, or access funds.

However, preventive suspension should not be abused. It must be reasonable and consistent with Philippine labor standards.

VIII. Standard of Proof in Administrative Discipline

In employee discipline, the standard is generally substantial evidence, not proof beyond reasonable doubt. Substantial evidence means such relevant evidence as a reasonable mind might accept as adequate to support a conclusion.

This means the employer does not need to prove the fraud with the same strictness required in criminal prosecution. However, the evidence must still be real, documented, and logically connected to the charge.

Useful evidence includes:

client affidavits;
transaction receipts;
chat messages;
bank deposit slips;
screenshots;
internal audit findings;
accounting discrepancies;
admission by the employee;
unauthorized use of company materials;
records showing personal receipt of funds;
failure to remit collections.

IX. Criminal Remedies

Employee fraud and solicitation of money from clients may constitute criminal offenses. The exact charge depends on the facts.

A. Estafa

Estafa is one of the most common criminal charges in fraud cases.

Estafa may arise where an employee defrauds a client or employer through deceit, abuse of confidence, or misappropriation.

1. Estafa by deceit

This may occur where the employee falsely represents that:

the company authorized the payment;
the employee is authorized to collect;
the money is required for processing;
the client will receive a product, service, approval, refund, loan, discount, release, or investment return;
the payment will go to the company;
the employee is acting officially.

If the client relies on the false representation and parts with money, estafa by deceit may be considered.

2. Estafa with abuse of confidence or misappropriation

This may occur where the employee receives money in trust, on commission, for administration, or with an obligation to deliver or return it, but misappropriates or converts it.

Examples:

collector receives client payments but keeps them;
sales agent accepts down payment but does not remit it;
employee receives company funds for a client transaction but uses them personally;
employee takes client money supposedly for documentation but diverts it.

3. Estafa against the employer or client

Depending on the facts, the offended party may be:

the client who was deceived into paying;
the employer whose funds or reputation were damaged;
both the client and employer.

If the client paid the employee believing the payment was for the company, both client and employer may have interests in the case.

B. Qualified Theft

Qualified theft may apply where the employee unlawfully takes property belonging to the employer, with grave abuse of confidence.

This may be relevant when:

the employee takes company money;
the employee steals company property;
the employee receives payments that are company property and appropriates them;
the employee has access to funds because of employment.

The distinction between estafa and qualified theft can be fact-sensitive. Generally, if juridical possession was entrusted to the employee and then misappropriated, estafa may be considered. If the employee had only material possession or access and unlawfully took the property, qualified theft may be considered.

The classification affects the complaint, evidence, and penalties.

C. Falsification of Documents

Falsification may be involved if the employee:

creates fake receipts;
alters invoices;
forges signatures;
fabricates contracts;
changes payment instructions;
issues false acknowledgments;
tampers with official records;
alters bank details in documents;
uses fake company letterhead;
falsifies liquidation reports;
fabricates client approvals.

Falsification may be charged separately or together with estafa, depending on how the documents were used.

D. Other Deceits

Some fraudulent conduct may fall under other forms of deceit, depending on the value, method, and facts. Where the fraud does not meet all elements of estafa, other offenses under the Revised Penal Code may be considered.

E. Cybercrime

If the fraud was committed through information and communications technology, cybercrime implications may arise.

Examples include:

solicitation through email;
fraudulent Facebook or LinkedIn messages;
fake company website;
use of online payment links;
use of messaging apps;
forged digital documents;
fake e-receipts;
online impersonation of the company;
unauthorized access to systems;
deletion or alteration of digital records.

Where estafa is committed using ICT, cybercrime provisions may increase legal exposure. Separate offenses may also arise from illegal access, computer-related fraud, identity misuse, or data interference, depending on the facts.

F. Unauthorized Use of Access Devices or Payment Methods

If the employee used credit cards, account credentials, payment gateways, electronic wallets, or access devices without authority, additional offenses may be considered under applicable laws.

Examples include:

unauthorized use of company payment accounts;
diversion of payment links;
use of client card details;
fraudulent online transactions;
manipulation of payment instructions.

G. Data Privacy Violations

If the employee misused client personal data, there may be consequences under data privacy law.

Examples:

extracting client lists for personal solicitation;
using client phone numbers to solicit money;
selling client data;
disclosing confidential client records;
accessing personal data without authority;
using personal data for fraudulent purposes;
retaining client information after employment.

The employer may need to investigate whether a personal data breach occurred and whether notification duties are triggered.

H. Anti-Money Laundering Concerns

Large-scale employee fraud may involve laundering of proceeds through personal bank accounts, e-wallets, nominees, shell businesses, crypto wallets, or remittance channels.

The employer and victims may need to preserve transaction records and coordinate with financial institutions and law enforcement. In appropriate cases, suspicious transaction reporting and asset preservation may become relevant.

X. Civil Remedies

The employer and affected clients may pursue civil remedies to recover losses and damages.

A. Collection or Recovery of Money

The employer may demand return of:

unremitted collections;
stolen funds;
unauthorized commissions;
diverted payments;
company property;
damages arising from client claims.

Clients may demand return of amounts paid to the employee, especially where the payment was induced by fraud.

B. Damages

Depending on the facts, recoverable damages may include:

actual damages;
moral damages, in proper cases;
exemplary damages, in proper cases;
attorney’s fees;
litigation expenses;
interest;
reputational or business losses, if proven.

Actual damages must be proved with reasonable certainty.

C. Breach of Employment Contract

If the employee signed an employment agreement, confidentiality agreement, code of conduct, non-solicitation clause, conflict-of-interest policy, or accountability undertaking, the employer may invoke breach of contract.

The company may seek damages or other remedies based on contractual obligations.

D. Breach of Fiduciary Duty

Employees who occupy positions of trust may owe duties of loyalty, honesty, confidentiality, and faithful service. Misusing client relationships for personal gain may be treated as a breach of these duties.

E. Unjust Enrichment

If the employee unjustly benefited from money, opportunities, commissions, or client payments at the expense of the employer or client, unjust enrichment principles may support recovery.

F. Injunction

An employer may seek injunctive relief to stop a current or former employee from:

contacting clients using company data;
using company name or logo;
collecting payments;
representing himself as connected with the company;
disclosing confidential information;
operating fake pages or accounts;
continuing fraudulent solicitations.

Injunction requires proper court action and proof of legal grounds.

G. Attachment

Where there is risk that the employee will dispose of assets to avoid recovery, provisional remedies such as attachment may be considered in proper cases. This requires court approval and compliance with procedural rules.

XI. Employer Liability to Clients

A major concern is whether the employer may be held liable for the employee’s fraudulent acts.

The answer depends on the facts.

A. General Rule

An employer is not automatically liable for every wrongful personal act of an employee. If the employee acted purely for personal benefit and outside the scope of employment, the employer may argue that the fraud was unauthorized and personal.

B. Possible Employer Exposure

However, clients may attempt to hold the employer liable where:

the employee appeared authorized to collect money;
the employee used official company documents;
the company allowed the employee to handle payments;
the company failed to supervise the employee;
the payment was related to company business;
the company accepted benefits from the transaction;
the client reasonably believed the employee had authority;
the company’s internal controls were weak;
similar complaints were ignored;
the fraud occurred through official company channels.

C. Apparent Authority

If the employee appeared to have authority because of the employer’s conduct, the client may argue that the company should bear responsibility.

For example, risk increases if:

the employee was the assigned account manager;
the employee used official email;
the employee was previously authorized to collect;
clients were not informed of official payment channels;
company invoices did not clearly identify authorized accounts;
the company tolerated informal payment arrangements.

D. Employer Defenses

The employer may defend by showing:

the employee had no authority;
clients were informed of official payment procedures;
company policies prohibited personal collections;
the client paid a personal account despite warnings;
the employee acted outside the scope of employment;
the company did not benefit;
the company acted promptly upon discovery;
the fraud was concealed despite reasonable controls.

E. Practical Approach

Even where the employer has legal defenses, reputational and commercial considerations may require careful client handling. The company may need to issue notices, assist with complaints, strengthen controls, and evaluate whether settlement is commercially advisable.

XII. Notice to Clients

When employee fraud affects clients, the company may need to notify them.

A client notice should be factual and careful. It may state:

official payment channels;
warning not to send money to personal accounts;
that certain persons are not authorized to collect;
request for clients to report suspicious solicitations;
contact details for verification;
that the company is investigating irregularities.

The notice should avoid unnecessary defamatory statements unless facts are already established and disclosure is legally necessary.

A sample neutral notice:

“Please be advised that payments to the company should be made only through the official channels listed below. No employee, agent, or representative is authorized to request payment to personal bank accounts, e-wallets, or private accounts. If you receive any request for payment outside official channels, please verify directly with our office before making any transfer.”

If the employee has already been dismissed or is no longer connected:

“Please be informed that [Name] is no longer connected with the company and is not authorized to transact, collect, or receive payments on our behalf. For your protection, please direct all transactions only to our official contact channels.”

Care must be taken when naming individuals publicly. The safer route is to consult counsel before wide publication.

XIII. Demand Letter to the Employee

Before or alongside legal action, the employer may send a demand letter.

The demand letter may include:

identity of the employee;
summary of employment position;
description of fraudulent acts;
list of clients and transactions involved;
amount demanded;
demand to return money and company property;
demand to cease contacting clients;
demand to stop using company name, logo, documents, or data;
deadline for compliance;
reservation of rights to pursue civil, criminal, administrative, and labor remedies.

A demand letter can support later claims, but it should be carefully drafted to avoid admissions or inconsistencies.

XIV. Complaint-Affidavit and Criminal Filing

A criminal complaint usually requires a complaint-affidavit and supporting evidence.

The complaint-affidavit should include:

complainant’s identity and authority to represent the company;
employee’s position and duties;
how the fraud was discovered;
detailed transaction timeline;
names of affected clients;
amounts solicited or collected;
misrepresentations made;
proof of payment;
proof of non-remittance or misappropriation;
company policies violated;
client statements;
employee’s explanations or admissions, if any;
damages suffered;
specific offenses alleged.

If clients are direct victims, their affidavits are important. A company representative may complain for company losses, but client testimony may be necessary to prove deceit used against clients.

XV. Evidence Checklist

The following evidence should be gathered:

Employment documents

employment contract;
job description;
code of conduct;
confidentiality agreement;
conflict-of-interest policy;
collection policy;
cash handling policy;
IT policy;
data privacy acknowledgments;
prior disciplinary records;
performance records;
authorization matrix.

Transaction documents

invoices;
official receipts;
acknowledgment receipts;
delivery receipts;
statements of account;
payment instructions;
deposit slips;
bank statements;
e-wallet transaction records;
remittance records;
reconciliation reports.

Digital evidence

emails;
screenshots;
chat logs;
CRM notes;
call logs;
website posts;
social media messages;
online forms;
payment links;
metadata;
access logs;
audit trails.

Witness evidence

client affidavits;
co-employee statements;
supervisor reports;
finance team findings;
IT reports;
audit reports.

Company evidence

proof of official payment channels;
proof that personal collections were prohibited;
prior announcements to clients;
internal control procedures;
proof of non-remittance;
accounting discrepancy reports.

XVI. Handling Digital Evidence

Digital evidence must be preserved properly.

The company should:

export emails in native format where possible;
preserve chat histories;
take screenshots showing timestamps and sender identity;
record URLs and account handles;
preserve device images or logs if legally and technically appropriate;
document who collected the evidence;
maintain chain of custody;
avoid altering original files;
make working copies for review;
obtain affidavits from persons who captured screenshots.

Poorly preserved digital evidence may be challenged later.

XVII. Internal Audit and Accounting Controls

After discovery, the company should conduct an internal audit to determine:

total amount lost;
total number of affected clients;
period covered;
accounts used;
whether official records were manipulated;
whether there were accomplices;
whether supervisors failed to detect red flags;
whether internal controls were inadequate;
whether tax records are affected;
whether financial statements need correction.

The audit report may support disciplinary action, criminal complaint, insurance claim, and civil recovery.

XVIII. Data Privacy Response

If the employee used client personal information without authorization, the company should assess whether a personal data breach occurred.

The response should include:

identifying the personal data involved;
determining whether data was accessed, copied, disclosed, or misused;
assessing risk of harm to clients;
containing further access;
documenting the incident;
notifying affected clients where appropriate;
notifying the National Privacy Commission if legally required;
strengthening access controls;
disciplining responsible persons;
reviewing data retention and access policies.

Even if the employee acted unlawfully, the company may still need to show that it had reasonable organizational, technical, and physical security measures.

XIX. Labor Case Risks for the Employer

An employee dismissed for fraud may file a complaint for illegal dismissal. The employer must be prepared to prove both substantive and procedural validity.

A. Substantive validity

The employer must show that there was a valid just cause, supported by substantial evidence.

B. Procedural validity

The employer must show compliance with due process:

first notice;
opportunity to explain;
second notice.

C. Possible consequences of defective dismissal

If dismissal is not properly supported, the employer may face:

reinstatement;
backwages;
separation pay in lieu of reinstatement in proper cases;
damages;
attorney’s fees.

If there was just cause but procedural due process was defective, the employer may still be liable for nominal damages.

XX. Resignation During Investigation

Employees accused of fraud sometimes resign to avoid discipline.

The employer should not automatically treat resignation as resolving the matter. It may still:

continue investigation;
accept or reject resignation depending on timing and policy;
document pending accountabilities;
demand return of money and property;
pursue civil remedies;
file criminal complaints;
notify clients that the employee is no longer connected;
revoke access immediately;
conduct final pay clearance subject to legal limits.

Final pay should be handled carefully. Employers should avoid unlawful withholding, but may document claims and pursue proper remedies for recovery.

XXI. Final Pay, Offsetting, and Accountability

The employer may be tempted to deduct losses from final pay. This must be handled cautiously.

Deductions from wages are regulated. Unauthorized deductions can create labor exposure. The company should evaluate:

whether the employee gave written authorization;
whether the amount is admitted or established;
whether deduction is allowed by law or contract;
whether due process was observed;
whether the company should instead file a claim.

Where the amount is disputed or substantial, it is usually safer to pursue recovery through proper legal channels rather than unilateral deductions.

XXII. Employee Loans, Commissions, and Incentives

If the employee earned commissions from fraudulent transactions, the employer may consider forfeiture or recovery if supported by contract or policy.

Questions include:

Were commissions already earned under the compensation plan?
Were they based on fraudulent transactions?
Did the employee breach conditions for entitlement?
Does the commission policy allow clawback?
Were clients refunded?
Were sales reversed?
Was the employee unjustly enriched?

Clear written commission policies are important.

XXIII. Non-Solicitation and Conflict of Interest

Soliciting money from clients may violate conflict-of-interest and non-solicitation rules.

A strong company policy should prohibit employees from:

borrowing money from clients;
lending money to clients in connection with company transactions;
soliciting investments from clients;
offering side deals to clients;
accepting gifts or commissions beyond allowed limits;
using client data for personal gain;
directing clients to personal accounts;
representing private ventures as company-approved;
competing with the company;
transacting with clients after resignation using company data.

Violations should carry disciplinary consequences up to dismissal.

XXIV. Solicitation of Loans or Personal Financial Help from Clients

Not all solicitations are framed as business transactions. An employee may ask a client for a personal loan, emergency help, donation, or “temporary advance.”

This can still be a serious workplace offense, especially if:

the request exploits the employee’s position;
the client feels pressured;
the employee implies company involvement;
the client’s pending transaction may be affected;
the employee promises preferential treatment;
the employee uses confidential client information;
the employee repeats the conduct with many clients.

Even without classic estafa, the conduct may justify discipline for misconduct, conflict of interest, abuse of position, or breach of trust.

XXV. Solicitation in Regulated Industries

The legal risk is higher in regulated industries such as:

banking;
insurance;
lending;
securities;
real estate;
healthcare;
education;
recruitment;
immigration services;
government contracting;
utilities;
payment services;
telecommunications.

In these industries, employee misconduct involving clients may trigger regulatory reporting, license issues, consumer protection concerns, or administrative penalties.

For example, an employee who solicits money for fake insurance premiums, investment products, loan approvals, employment placements, visas, permits, medical benefits, or real estate reservations may expose both the employee and company to additional legal scrutiny.

XXVI. Special Issue: Employee Represents That the Company Authorized the Solicitation

If the employee tells clients that the company authorized the money solicitation, the company must quickly establish the truth.

The company should verify:

Was there any board approval?
Was there management approval?
Was there an authorized product or service?
Were payment channels official?
Were receipts issued?
Did any supervisor know?
Did the company benefit?
Were similar solicitations tolerated?
Were clients previously instructed to deal with the employee?
Were company documents used?

If the solicitation was unauthorized, the company should promptly communicate official payment procedures and revoke any apparent authority.

XXVII. Special Issue: Employee Used Company Receipts

If an employee issued official receipts or apparently official receipts, the legal analysis becomes more complex.

Questions include:

Were the receipts genuine or fake?
If genuine, how did the employee access them?
Were they recorded in the books?
Were taxes reported?
Did the company receive the money?
Did the client reasonably rely on the receipt?
Was there supervisory negligence?
Were blank receipts properly controlled?

If genuine receipts were issued, the company may face stronger client claims, even if the employee later misappropriated the money. Internal control over receipts is therefore critical.

XXVIII. Special Issue: Employee Used Personal Account for Company Payments

Payments to personal accounts are a major red flag. However, in some businesses, informal practices may have been tolerated historically.

The company’s position is stronger if it can show that:

personal collections were prohibited;
clients were informed of official accounts;
invoices displayed official payment details;
employees were trained on payment policies;
violations were disciplined;
personal account use was not tolerated.

If management knew that employees commonly accepted client payments through personal accounts, the company may face greater risk.

XXIX. Special Issue: Employee Solicited “Investments” from Clients

If an employee solicits investment money from clients, additional legal issues arise.

The employee may claim it was a private transaction unrelated to the employer. The employer should determine whether:

the employee used the company name;
the employee claimed the investment was company-backed;
the employee targeted company clients;
the employee used client data;
the employee solicited during work hours;
company premises or email were used;
other employees joined;
the employer benefited;
the activity competed with or damaged the employer;
the investment involved securities law violations.

If clients were induced to invest because of the company relationship, reputational and legal risks are significant.

XXX. Special Issue: Employee Collected “Facilitation Fees”

Facilitation fees may be disguised bribes or fraudulent charges.

Examples include:

“approval fee”;
“release fee”;
“processing fee”;
“priority fee”;
“documentation fee”;
“clearance fee”;
“under-the-table fee”;
“expedite fee.”

Such conduct may violate company policy, anti-corruption principles, criminal law, and industry regulations. If public officers are involved, anti-graft concerns may also arise.

XXXI. Remedies Against Former Employees

If the person is no longer employed, the company may still pursue remedies.

Possible actions include:

demand letter;
cease-and-desist letter;
criminal complaint;
civil case for damages;
injunction;
notice to clients;
data privacy complaint or response;
recovery of company property;
enforcement of confidentiality and non-solicitation agreements.

The company should immediately revoke access to all systems and notify clients that the person is no longer authorized.

XXXII. Remedies Against Co-Conspirators

Fraud may involve other employees, agents, relatives, suppliers, clients, or outsiders.

The company should investigate:

who received the money;
who provided account details;
who created fake documents;
who recruited clients;
who approved transactions;
who concealed complaints;
who benefited from the scheme;
who had access to records;
who deleted evidence.

Civil and criminal complaints may include all persons who participated, benefited, conspired, or aided the fraud, if supported by evidence.

XXXIII. Role of Client Affidavits

Client affidavits are often crucial.

A good client affidavit should state:

how the client knows the employee;
what the employee represented;
whether the employee used company name or position;
what amount was requested;
when and how payment was made;
account or wallet used;
what documents or receipts were issued;
what the client expected in return;
whether the company was believed to be involved;
what happened after payment;
whether refund was demanded;
attachments proving the transaction.

Without client testimony, it may be harder to prove deceit, reliance, and damage.

XXXIV. Settlement Considerations

Settlement may arise between:

employer and employee;
client and employee;
employer and client;
all parties together.

Settlement may include:

return of money;
payment schedule;
acknowledgment of debt;
quitclaim;
confidentiality clause;
non-disparagement clause;
turnover of documents;
undertaking to stop contacting clients;
cooperation in investigation.

However, settlement of civil liability does not always automatically extinguish criminal liability. The effect depends on the offense, timing, and applicable law.

The employer should be careful not to use settlement discussions in a way that appears coercive or inconsistent with labor rights.

XXXV. Insurance and Bond Claims

Some companies maintain fidelity bonds, employee dishonesty insurance, crime insurance, cyber insurance, or professional liability coverage.

The company should check whether the policy covers:

employee theft;
forgery;
computer fraud;
social engineering fraud;
funds transfer fraud;
client claims;
investigation costs;
legal defense;
notification costs;
reputational mitigation.

Insurance policies often have strict notice requirements. Late reporting may affect coverage.

XXXVI. Board and Management Responsibilities

Management should treat employee fraud as a governance issue.

The company should document:

discovery of the incident;
investigation steps;
immediate controls;
client protection measures;
legal remedies pursued;
financial exposure;
regulatory issues;
disciplinary action;
corrective policies.

For corporations, directors and officers should ensure that the company responds in good faith, protects assets, complies with law, and avoids cover-ups.

XXXVII. Reputational Management

Fraud involving clients can damage trust. The company should balance transparency and legal caution.

Recommended measures include:

designate one official spokesperson;
give clients verified payment channels;
avoid speculative statements;
provide a secure reporting channel;
coordinate with counsel before public statements;
avoid naming suspects prematurely unless necessary;
provide updates to affected clients when appropriate;
document all communications.

A poorly handled public response may worsen liability.

XXXVIII. Preventive Policies

Prevention is the best remedy. Companies should adopt clear written policies covering:

official payment channels;
prohibition on personal collections;
prohibition on borrowing from clients;
prohibition on soliciting investments from clients;
conflict of interest;
gifts and entertainment;
anti-bribery;
confidentiality;
data privacy;
use of company name and logo;
use of social media;
client communications;
document control;
receipt issuance;
disciplinary consequences.

Employees should acknowledge these policies in writing.

XXXIX. Internal Controls to Prevent Client Solicitation Fraud

Companies should implement controls such as:

published official bank accounts;
invoice templates with official payment instructions;
automated receipts;
segregation of duties;
dual approval for discounts and refunds;
periodic client confirmations;
random audits;
restrictions on editing payment details;
monitoring of receivables aging;
client hotline for verification;
prohibition on cash collections unless controlled;
receipt inventory controls;
system logs;
access limits by role;
mandatory leave or rotation for sensitive roles;
whistleblower channels;
exit procedures for departing employees.

The company should make it easy for clients to verify whether a payment request is legitimate.

XL. Training and Communication

Policies are not enough if employees and clients do not know them.

Training should cover:

what counts as unauthorized solicitation;
examples of prohibited conduct;
official payment procedures;
consequences of fraud;
conflict-of-interest scenarios;
client data protection;
reporting channels;
disciplinary process.

Clients should also be informed through invoices, contracts, emails, websites, and official pages that payments should only be made through designated channels.

XLI. Whistleblowing and Internal Reporting

Employee fraud is often discovered through tips. A company should have a reporting system that allows employees and clients to report suspicious behavior.

The system should:

allow confidential reporting;
prohibit retaliation;
document complaints;
provide escalation channels;
ensure prompt investigation;
protect evidence;
involve legal or compliance where necessary.

Whistleblowers should be treated carefully, and allegations should be verified before action is taken.

XLII. Exit Controls for Resigned or Terminated Employees

Post-employment fraud is common where former employees retain client contacts or access.

Exit controls should include:

immediate disabling of email and system access;
return of company devices;
retrieval of IDs, documents, and materials;
reminder of confidentiality obligations;
notice to key clients, if appropriate;
audit of recent transactions;
review of downloads or unusual access;
deletion or transfer of company-managed accounts;
final clearance procedure;
monitoring for unauthorized use of company name.

XLIII. Drafting Strong Employment and Client Documents

Employment documents should include:

confidentiality obligations;
data privacy obligations;
conflict-of-interest rules;
prohibition on personal dealings with clients;
prohibition on unauthorized collections;
non-solicitation provisions, where appropriate;
return of property clause;
disciplinary clause;
consent to reasonable monitoring of company systems;
accountability for losses caused by fraud, subject to law.

Client contracts and invoices should include:

official payment channels;
warning against personal accounts;
verification procedure;
statement that unauthorized payments are not recognized unless confirmed by the company;
official contact information.

XLIV. Distinction Between Employee Fraud and Poor Performance

Not every loss, error, or client complaint is fraud.

Fraud involves dishonesty, deceit, bad faith, misappropriation, or intentional wrongdoing. Poor performance may involve negligence, mistake, lack of skill, or failure to meet standards.

The distinction matters because fraud may justify dismissal and criminal action, while poor performance may require coaching, performance management, or dismissal under different grounds and procedures.

Evidence of fraud includes:

concealment;
personal benefit;
false statements;
fake documents;
unauthorized accounts;
repeated similar acts;
deletion of records;
admission;
inconsistent explanations;
client payments not reported;
secret communications.

XLV. Handling Cases Where the Employee Claims the Money Was a Loan

Employees often defend by saying the client voluntarily lent money to them personally.

The employer should examine:

Did the employee use company position to obtain the loan?
Was the request made during a company transaction?
Did the client feel pressured?
Was repayment promised from company-related proceeds?
Was company approval implied?
Was the client vulnerable or dependent on the employee’s processing of a matter?
Did the company have a policy against borrowing from clients?
Was the loan repeated with several clients?

Even if the transaction was technically a personal loan, it may still be a serious employment offense if it exploited the client relationship or violated company policy.

XLVI. Handling Cases Where the Employee Claims the Money Was an Investment

An employee may claim that the client voluntarily invested in a private venture unrelated to the employer.

The employer should examine:

Was the client solicited because of the employee’s company role?
Was the company name used?
Were company premises or channels used?
Did the employee promise returns?
Did the employee use confidential client data?
Did the employee conduct the activity during work hours?
Did the venture compete with the employer?
Was the investment itself unlawful or fraudulent?
Did other employees participate?
Were clients misled into believing company backing existed?

A private investment solicitation may still justify termination if it violates trust, creates conflict of interest, or damages the employer.

XLVII. Handling Cases Where the Employee Claims the Client Voluntarily Paid

Consent is not always a defense. If consent was obtained through deceit, pressure, abuse of position, or misrepresentation, the transaction may still be fraudulent.

The key question is whether the client made an informed and voluntary decision based on truthful information.

XLVIII. Tax and Accounting Issues

Employee fraud may create tax and accounting problems.

The company should check:

whether fake receipts were issued;
whether official receipts were misused;
whether sales were recorded;
whether VAT or percentage tax reporting was affected;
whether income was understated;
whether receivables were misstated;
whether refunds or write-offs are needed;
whether financial statements require adjustment.

The company should coordinate with accountants and tax counsel where necessary.

XLIX. Practical Case Scenarios

Scenario 1: Sales employee collected client payments through personal GCash

A sales employee tells clients to pay reservation fees through personal GCash. The employee issues unofficial acknowledgments and does not remit the money.

Possible remedies:

preventive suspension;
notice to explain;
dismissal for fraud or breach of trust;
estafa or qualified theft complaint;
demand for return of money;
client notice on official payment channels;
audit of all accounts handled by employee.

Scenario 2: Account manager solicited “investment” from clients

An account manager tells clients that the company is raising funds for a special project with guaranteed returns. The company never approved such project.

Possible remedies:

internal investigation;
cease-and-desist instruction;
dismissal for serious misconduct and breach of trust;
criminal complaint for estafa if deceit is shown;
securities-related concerns if investment contracts were offered;
client advisory;
data privacy review if client information was misused.

Scenario 3: Employee asked clients for processing fees

A processing officer asks clients to pay cash to “speed up” applications. The company does not authorize such fees.

Possible remedies:

disciplinary action;
criminal complaint depending on facts;
refund assistance;
audit of processed accounts;
policy reinforcement;
client reporting channel.

Scenario 4: Former employee continues collecting from clients

A resigned employee contacts clients and claims to still represent the company.

Possible remedies:

cease-and-desist letter;
client notice that person is no longer connected;
criminal complaint for fraud if money was collected;
civil action for injunction and damages;
report fake pages or accounts;
data privacy investigation.

L. Practical Checklist for Employers

When employee fraud involving clients is discovered, the employer should:

secure evidence;
restrict employee access;
identify affected clients;
conduct internal audit;
issue notice to explain;
consider preventive suspension if justified;
interview witnesses;
obtain client affidavits;
preserve digital evidence;
evaluate data privacy implications;
assess client liability exposure;
issue careful client advisory;
decide on disciplinary action;
send demand letter if appropriate;
file criminal complaint if warranted;
consider civil recovery;
notify insurer if applicable;
improve controls;
train employees;
document all actions.

LI. Practical Checklist for Clients

A client who was solicited by an employee should:

preserve all communications;
keep receipts and transfer records;
identify the account paid;
screenshot messages and profiles;
verify with the company through official channels;
demand written clarification;
request refund where appropriate;
file a complaint with the company;
consider a criminal complaint against the employee;
coordinate with other victims if any;
notify bank or e-wallet provider quickly;
avoid paying additional fees;
consult counsel for recovery.

LII. Sample Company Policy Clause

A company policy may provide:

Employees are strictly prohibited from soliciting, requesting, borrowing, accepting, collecting, or receiving money, gifts, investments, loans, commissions, fees, or any financial accommodation from clients, customers, suppliers, applicants, or business partners, except as expressly authorized in writing by the company and through official company channels. Employees are likewise prohibited from directing any client or customer to deposit or transfer funds to personal accounts, e-wallets, remittance accounts, or unauthorized payment channels. Violation of this policy constitutes serious misconduct, conflict of interest, dishonesty, and breach of trust, and may result in disciplinary action up to dismissal, without prejudice to civil and criminal remedies.

LIII. Sample Client Payment Warning

A company may include this warning in invoices and client communications:

For your protection, please make payments only to the official company accounts stated in this invoice. No employee, agent, or representative is authorized to receive payments through personal bank accounts, e-wallets, remittance accounts, or private payment links. Any request for payment outside official channels should be reported immediately to [official contact details].

LIV. Sample Notice to Explain Framework

A notice to explain may include:

statement that the company received reports of unauthorized solicitation;
specific client names or transaction references, if disclosure is appropriate;
dates and amounts involved;
payment accounts used;
company policies allegedly violated;
instruction to submit written explanation within the required period;
invitation to attend administrative conference, if applicable;
statement that dismissal may be imposed if allegations are proven.

The notice should not be a pre-judgment. It should allow the employee to respond.

LV. Sample Disciplinary Findings

A disciplinary decision may state:

the employee was assigned to handle client accounts;
clients submitted statements and proof of payment;
payments were directed to the employee’s personal account;
the employee had no authority to collect through personal accounts;
company policy prohibited such conduct;
funds were not remitted;
the employee’s explanation was unsupported or inconsistent;
the conduct constituted fraud, serious misconduct, and breach of trust;
dismissal is imposed effective on a stated date.

The findings should be supported by attached evidence.

LVI. Avoiding Retaliatory or Coercive Conduct

Employers should avoid:

threatening employees without basis;
forcing confessions;
detaining employees;
confiscating personal devices without legal basis;
public shaming;
unlawful wage deductions;
denying due process;
making defamatory announcements;
concealing client losses;
destroying evidence.

A lawful response is stronger than an emotional response.

LVII. When to Involve Counsel

Counsel should be involved early where:

large amounts are involved;
many clients are affected;
criminal charges are likely;
the employee is managerial;
the employee threatens a labor case;
media or social media attention is expected;
data privacy breach may exist;
regulatory reporting may be required;
settlement is being discussed;
injunction or attachment is considered.

Early legal guidance helps align labor, civil, criminal, and reputational strategy.

LVIII. Key Legal Principles

Several principles summarize the topic:

Employee fraud may justify dismissal, but due process is still required.
Soliciting money from clients can constitute serious misconduct, fraud, conflict of interest, or breach of trust.
Unauthorized collection may give rise to estafa, qualified theft, falsification, or cybercrime liability.
Employer liability to clients depends on authority, apparent authority, supervision, benefit, and internal controls.
Client affidavits and payment records are crucial.
Digital evidence must be preserved carefully.
Data privacy issues may arise when client information is misused.
Employers should act quickly but avoid defamatory or procedurally defective responses.
Recovery of money may require civil, criminal, and practical asset-tracing efforts.
Prevention requires clear payment channels, strong controls, client warnings, and employee training.

LIX. Conclusion

Employee fraud and solicitation of money from clients create overlapping legal problems in the Philippines. The employer must protect clients, preserve evidence, discipline the employee if warranted, recover losses, and reduce exposure to labor, civil, criminal, data privacy, and reputational claims.

The most effective response is organized and evidence-based: secure records, restrict access, investigate, observe due process, obtain client statements, assess criminal and civil remedies, notify affected parties carefully, and strengthen controls.

For clients, the safest rule is to transact only through official company channels and immediately verify any request for payment to a personal account. For employers, the safest rule is to make unauthorized solicitation impossible to confuse with legitimate business by using clear policies, official payment systems, client education, and consistent enforcement.

This article is for general legal information in the Philippine context and is not a substitute for advice from a qualified lawyer based on specific facts.