Internal loss: controls that work better than suspicion
Most internal loss is not dramatic. It is refunds with no goods, voids after cash, and discounts to friends. Controls that make each difficult protect the honest staff as much as the business.
4 min read
This is an uncomfortable subject and it is better handled with systems than with suspicion. Good controls protect honest staff too: in a shop with no controls, everyone is under suspicion when something goes missing.
The five patterns
1. The refund with no goods
A credit note is issued, cash leaves the drawer, and no product comes back. The cash total balances because the system thinks a refund happened.
Control: refunds require a manager approval and a reference to the original invoice. The returned item must be scanned back in, so a refund with no stock movement is visible in a report.
2. The void after payment
The customer pays cash, the sale is voided, and the cash stays out. The drawer balances because the sale no longer exists.
Control: voids after a payment method has been selected require approval. All voids are logged with the time and staff member. Look at voids in the last thirty minutes of each shift — that is where the pattern shows.
3. The unrecorded discount
A friend receives a discount that is never entered; the difference is pocketed. Or a manual price override is used to reduce the price and keep the difference.
Control: discount limits per role, price-override permission restricted, and a weekly report of discounts by staff member. A cashier whose discounts are consistently at their maximum allowance deserves a conversation.
4. The no-sale drawer open
The drawer opens without a transaction.
Control: the no-sale function requires a reason and is logged. A count of no-sales per shift, per cashier, is one of the most informative small numbers in retail.
5. Sweethearting
Items passed to a friend without scanning, or scanned as something cheaper.
Control: this is the hardest to catch from the POS alone. What helps is a customer display showing the customer what is being rung up, and a weekly check of shrink by product against the categories a specific cashier handles.
The permission set that prevents most of it
Not a complex matrix. Five rules:
- Cashiers cannot issue refunds or credit notes without approval
- Cashiers cannot void after payment selection without approval
- Discounts have a per-role ceiling — 10% for a cashier, more for a supervisor
- Price overrides are a separate permission, not bundled with discounts
- Stock adjustments are approved by someone other than the counter
That is the whole thing. It prevents the large majority of internal loss and it costs nothing.
Approval without sharing passwords
A manager who types their password at the till in front of a cashier has given away their access, and within a month every cashier on the floor knows it.
Acceptable methods: a manager PIN distinct from the login password, a badge or card, or approval from the manager's own device.
What to look at weekly
Five minutes:
- Refunds and credit notes by staff member
- Voids by staff member and time of day
- Discounts by staff member and value
- No-sale drawer opens per shift
- Cash variance by cashier over the last month
You are looking forconsistent patterns, not single events. Everyone has a bad night; nobody is short every Thursday by chance.
When you find something
Three rules:
Rule out error first. Most of what looks like theft is a process problem or a data problem. Seeshrinkage.
Follow your own process. Employment matters have legal consequences. Talk to someone qualified before you act, and do not accuse anyone based on a single report.
Fix the control, not just the person. If one cashier could do it, the control was missing. Replacing the person without fixing the control means it happens again with the next one.
The culture part
Shops with the lowest internal loss tend to share three traits: every staff member has their own login, the manager reads the shift report in front of the team, and the controls are explained as routine rather than as accusation.
"We check these numbers every night" is a sentence that prevents more loss than any camera.
Wameed provides per-user accounts, granular permissions, manager PIN approval and anomaly detection; seeroles and permissions andWameed AI.
- #loss prevention
- #منع الخسائر
- #controls
- #ضوابط
Ask about your own shop
Thirty minutes on your products, your tax setup and your hardware — not a slide deck.
Keep reading
4 min read
Closing the shift: four numbers that catch problems in week one
Expected cash, counted cash, the difference, and the list of discounts and voids. Read those four every evening and you find problems while they are still small.
4 min read
Roles and permissions: give less, and give it to individuals
A shared login makes every future question unanswerable. Individual accounts with the narrowest workable permissions cost nothing and change what you can find out.
4 min read
The seven reports worth reading, and the ones that only look useful
Most POS dashboards show you revenue, which you already knew. Here are the seven reports that change a decision, on a daily, weekly and monthly rhythm.