Responding to Suspected Employee Fraud
Discovering potential fraud by an employee triggers one of the most high-stakes processes in Dutch employment law. The temptation to act immediately — confronting the employee, locking them out of systems, or terminating on the spot — is understandable but legally dangerous. Dutch law requires careful, documented investigation before any disciplinary action.
The key tension: you need to act quickly enough to prevent further damage, but methodically enough to build a case that survives legal scrutiny. Getting this balance wrong can make criminal prosecution impossible, invalidate your dismissal, and expose you to wrongful termination claims.
The Investigation Framework
Follow these steps to conduct a legally defensible fraud investigation:
- Secure evidence immediately: Preserve digital evidence (emails, system logs, financial records) before the suspect realizes they're under investigation. Your IT team should create forensic copies — not original files that could be challenged as tampered
- Suspend, don't dismiss: Suspend the employee with full pay pending investigation. This is legally safe and gives you time to investigate properly. A hasty dismissal that fails in court is far more costly than a few weeks of paid suspension
- Privacy compliance (AVG/GDPR): Your investigation must comply with Dutch privacy law. You can review company systems and communications (if your policy permits), but personal devices and communications have stronger protections. Document your legal basis for each investigative step
- Consider external investigators: For significant fraud, engage a forensic accounting firm or corporate investigation agency. Their findings carry more weight in court than internal conclusions
Legal Considerations During Investigation
Dutch employment law and criminal law intersect in fraud cases:
- Criminal reporting: You have no legal obligation to report fraud to police, but failure to do so may complicate insurance claims and could be raised in employment proceedings
- Self-incrimination: Unlike criminal proceedings, there's no right against self-incrimination in internal investigations. However, evidence obtained under duress (threats, intimidation) will be excluded
- Proportionality: Your investigative measures must be proportionate to the suspected fraud. covert surveillance or monitoring requires a very strong justification and proper privacy impact assessment
- Employee rights: The suspected employee has the right to know the allegations against them and respond. This doesn't mean you reveal everything immediately — but before any final decision, they must have the opportunity to explain
Taking Action After Investigation
Once your investigation is complete, your options include:
- Summary dismissal (ontslag op staande voet): Appropriate for clear, proven fraud cases. Remember all three requirements: urgent reason, immediacy, and immediate communication
- Settlement agreement: Often preferred for cases where evidence is strong but not airtight. Allows a clean exit without the risk of a failed court challenge
- Formal warning and monitoring: For minor or unintentional transgressions, a formal warning with enhanced oversight may be proportionate
- Recovery of damages: The employer can pursue civil recovery of stolen or embezzled funds, either through court or as part of a settlement
