To report embezzlement, file a report with your local police department for most workplace and private cases, and submit a complaint through the FBI’s Internet Crime Complaint Center at ic3.gov when the theft involves federal funds, electronic transfers, or a cyber-enabled scheme. What you do in the hours before you file matters as much as the filing itself. Cutting off the suspect’s access, preserving records, and organizing a clear money trail is what separates cases that get investigated from cases that stall.
What to Do Before You File
The instinct after spotting stolen funds is to confront the person or start pulling records apart. Resist both. Your first job is to stop further losses and lock down evidence before the suspect knows anyone is looking.
Restrict the person’s access to every financial account, payment system, and accounting platform right away. Change passwords, revoke check-signing authority, and cancel any corporate cards in their name. If you are an employer, coordinate with IT so access is cut off across every system at the same moment. A piecemeal lockout gives the person time to move money or delete files.
Do not confront the suspect. Tipping someone off before law enforcement is involved gives them room to destroy records, move funds, or invent explanations, and this is where many cases go sideways. Have IT create forensic images of relevant computers and servers before anything is touched. If there is no in-house capability, a digital forensics firm can produce bit-for-bit copies that will hold up in court.
Evidence to Gather Before You Walk In
Detectives and prosecutors need you to show them the theft, not just tell them about it. Strong documentation is what gets a report converted into an open investigation.
Financial Records
Pull bank statements, canceled checks, wire transfer confirmations, and general ledger entries covering the entire period you suspect theft occurred. Look for checks written to cash, payments to vendors you don’t recognize, recurring payments at odd intervals, and any transaction that doesn’t match normal operations. Put everything in chronological order so an investigator can see the pattern at a glance. Converting statements to a spreadsheet with one worksheet per account makes the analysis far easier for whoever inherits the case.
Calculate the total loss as precisely as you can. Judges rely on that figure when ordering restitution, and prosecutors use it to decide which charges to bring. An estimate is fine for the first report, but a number that turns out to be badly wrong causes problems later.
Digital Evidence
Modern embezzlement leaves digital fingerprints almost every time. Server logs, login timestamps, IP addresses, and metadata from accounting software can show who touched financial systems and when. Emails authorizing suspicious transactions or coordinating with outside accomplices are especially valuable. Preserve audit trails from any cloud-based accounting platform. Keep a chain-of-custody log noting who handled each piece of evidence and when, because courts can exclude evidence that wasn’t properly preserved.
Forensic Accountants
For complex cases with layered transactions or large sums, hiring a forensic accountant is worth the cost. These professionals trace diverted funds, identify hidden assets, and produce reports prosecutors can put in front of a jury. Expect around $250 per hour, with fees rising if the accountant testifies as an expert witness. The same report strengthens any civil suit you pursue in parallel.
Where to File the Report
Where you file depends on who took the money and where it went. Most cases start with local police. Federal agencies take over when specific triggers are met.
Local Police
Go to your local precinct or use the department’s online portal, and bring your organized documentation. The officer taking the report assigns a case number. That number is your reference for every future inquiry, so ask for a copy of the filed report before you leave.
After intake, the department assigns a detective or financial crimes investigator who reviews your evidence and decides whether to open a formal investigation. That investigator may conduct interviews, subpoena additional bank records, and order forensic analysis of devices. Keep a full copy of everything you submitted so you can answer follow-up questions quickly. Responsiveness matters more than people realize. Cases where the victim goes quiet lose momentum.
Federal Agencies
Federal jurisdiction attaches in specific situations. Embezzlement of public money or government property is a federal crime carrying up to ten years in prison, or up to one year if the amount does not exceed $1,000.1Office of the Law Revision Counsel. 18 USC 641 – Public Money, Property or Records Theft by an officer or employee from a federally insured institution is treated more severely, with penalties reaching 30 years in prison and a $1,000,000 fine.2Office of the Law Revision Counsel. 18 USC 656 – Theft, Embezzlement, or Misapplication by Bank Officer or Employee
For crimes involving electronic transfers, online fraud, or any cyber-enabled scheme, file at ic3.gov. The IC3 analyzes submissions and refers them to the appropriate federal, state, or local agency.3Internet Crime Complaint Center (IC3). IC3 Home Page For white-collar cases that don’t fit the IC3 mold, you can report directly to the FBI at tips.fbi.gov.4FBI. White-Collar Crime If the theft involved unreported income or tax fraud, IRS Criminal Investigation may become involved; the IRS opens cases from public information and from referrals by other agencies already working the matter.5Internal Revenue Service. How Criminal Investigations Are Initiated
What Happens After You File
Once the investigator has enough evidence, the case moves to the prosecutor’s office. A district attorney handles state charges; a U.S. Attorney handles federal ones. The prosecutor reviews the evidence and decides whether to bring formal charges, which can take weeks or months depending on how complicated the money trail is and how heavy the office’s caseload is. Your case number is your lifeline for tracking progress. Use it every time you follow up.
How Long You Have to Report
Prosecutors work against firm deadlines, so filing promptly matters. The general federal statute of limitations for non-capital crimes is five years from the date of the offense.6Office of the Law Revision Counsel. 18 USC 3282 – Offenses Not Capital Congress carved out a longer window for financial institution crimes: embezzlement under 18 U.S.C. § 656 gets a ten-year limitations period.7Office of the Law Revision Counsel. 18 USC 3293 – Financial Institution Offenses
State periods vary widely, and many states use a “discovery rule” that starts the clock when the victim finds the theft rather than when it happened. Don’t rely on extra time. Evidence degrades, witnesses forget, and bank records become harder to retrieve the longer you wait. Report as soon as you have reasonable documentation, even if your internal review isn’t finished.
Reporting Inside Your Company
If the theft happened at work, the internal reporting process runs alongside the police report. Neither replaces the other.
Report to your compliance officer, general counsel, or both. Larger organizations usually have a confidential whistleblower hotline for financial misconduct. If you suspect the compliance officer is involved, go directly to the board, the audit committee, or outside counsel. HR generally coordinates the administrative response: internal audit to verify the losses, suspension of the suspect’s system access and property, and preservation of relevant records. Most organizations follow a strict timeline for these steps, often written into company policy or employment contracts.
Many businesses carry fidelity bonds or commercial crime insurance covering employee theft. Filing under those policies almost always requires a formal police report, so external filing is not optional even if you would prefer to handle things quietly. Carriers impose tight notification deadlines, and late claims can be denied outright. Notify your carrier as soon as possible after discovery. The police report, your internal audit findings, and the forensic accountant’s report form the backbone of the claim.
Protection Against Retaliation
Reporting a colleague or supervisor takes nerve, and federal law protects people who do it.
If you work for a publicly traded company or one of its subsidiaries, the Sarbanes-Oxley Act bars your employer from firing, demoting, suspending, threatening, or harassing you for reporting conduct you reasonably believe is fraud. The protection covers reports made to federal regulators, law enforcement, Congress, or a supervisor inside the company.8Office of the Law Revision Counsel. 18 USC 1514A – Civil Action to Protect Against Retaliation in Fraud Cases If your employer retaliates, you can file a complaint with the Department of Labor within 180 days. Successful claims produce reinstatement, back pay with interest, and compensation for attorney fees and litigation costs.9U.S. Department of Labor – OSHA. Sarbanes Oxley Act (SOX) Employers cannot force you to waive these rights through a predispute arbitration agreement.
The Dodd-Frank Act provides separate protections for anyone who reports possible securities law violations to the SEC. Retaliation lets you sue in federal court and recover double back pay with interest, reinstatement, and reasonable attorney fees.10SEC. Whistleblower Protections This applies when the embezzlement also constitutes securities fraud, such as an executive misappropriating investor funds.
One boundary worth naming. Federal law does not impose a general duty to report every crime you learn about, but it does punish active concealment. Under 18 U.S.C. § 4, anyone who knows about a federal felony and both conceals it and fails to report can face up to three years in prison.11Office of the Law Revision Counsel. 18 USC 4 – Misprision of Felony Simply staying silent is not enough for a conviction. Helping destroy evidence or misleading investigators is.
Getting the Money Back
A conviction is satisfying; recovery is the point. You have two separate paths, and pursuing one does not block the other.
Criminal Restitution
Federal courts must order restitution when a defendant is convicted of an offense against property committed by fraud or deceit, provided the victim suffered an identifiable financial loss.12Office of the Law Revision Counsel. 18 USC 3663A – Mandatory Restitution to Victims of Certain Crimes The judge calculates the amount from the evidence and orders payment. The limit is practical: a restitution order is only as strong as the defendant’s ability to pay. If the money has been spent, collection can take years and may never make you whole.
Civil Lawsuit
A civil suit gives you more control. The burden of proof is lower, since you only need to show your claim is more likely true than not, rather than the criminal “beyond a reasonable doubt” standard. Cases that fall short of a criminal conviction can still succeed civilly. You can pursue compensatory damages covering the full amount stolen, plus interest, attorney fees, and in some cases punitive damages. A civil judgment also unlocks collection tools like asset liens and wage garnishment that aren’t available through restitution alone.
You don’t have to choose. A criminal conviction does not bar a civil suit, and a civil settlement does not stop prosecutors from bringing charges. A criminal conviction makes the civil case much easier, since the defendant has already been found guilty under a higher standard. Many attorneys recommend filing the civil case while criminal proceedings are underway to preserve your rights within the applicable statute of limitations.