How to Prevent Cash Theft and Skimming in Your Business

Every business that takes cash or cards is a target, even when nothing has gone wrong yet. Money tends to leak out quietly: a few notes missing from the till, a cloned card at the terminal, and a slow drain that only surfaces when the numbers stop matching. Most of it is preventable with a handful of steady habits. Here is how to protect both your drawer and your customers.

The two ways money quietly disappears

Cash loss usually comes from one of two directions. The first is internal or opportunistic theft: an employee skimming from the register, a customer reaching into an open drawer, or sloppy counting that hides real shortages. It happens more than most owners want to believe, and because the amounts usually start small, this kind of loss can run for months before the books ever reveal it. That slow burn is exactly how minor leaks turn into serious shortfalls.

The second threat is card skimming, where criminals attach hidden devices to card readers to copy payment details. It has been climbing fast. FICO's most recent review of US card-alert data found compromised debit cards rose to more than 243,000 in 2025, up from roughly 231,000 the year before, with over 3,500 financial institutions affected. The defenses for each threat are different, so it helps to tackle them separately.

Build cash-handling habits that leave no gaps

Most internal cash loss is stopped not by catching a thief, but by removing the opportunity in the first place. A few routines do the heavy lifting:

• Separate duties so the person taking payments is not the same person counting the drawer or preparing the deposit.
• Reconcile each register at the end of every shift, and record who counted it.
• Keep the list of people who can open the till or enter the back office short, and review it often.
• Run surprise counts at random points in the day, not only at closing.
• Count anything bound for the safe or bank with two people present.
• Lock deposits in a drop safe and vary your banking times so the routine is hard to predict.

Counterfeit notes deserve their own mention, since a fake bill is a direct, unrecoverable loss the moment it reaches your drawer. Swiping a marker pen across a note, the old standby, misses most modern fakes. A growing number of retailers now rely on dedicated hardware such as Kolibri Counterfeit Detectors to flag a suspect bill in under a second, which also removes the guesswork for staff in the middle of a busy shift. This helps staff make faster decisions when queues are long.

These steps work because they make a discrepancy show up fast, while it is still small enough to explain. The ACFE has repeatedly found that tips are the single most common way fraud gets caught, which means the culture around speaking up matters as much as the controls on paper. The same thinking behind strong business security protocols applies to cash: staff need to feel safe flagging something odd without fear of being blamed for it.

Spot and stop card skimmers at the point of sale

Skimming has moved well beyond gas pumps and ATMs. According to the FBI, criminals install devices on ATMs, point-of-sale terminals, and fuel pumps to capture card data or record PINs, frequently using parts built to look like the genuine reader. Your own counter terminals and any unattended payment points are fair targets.

A short inspection routine catches most attempts:

• Check each reader at the start of a shift for anything loose, crooked, scratched, or bulkier than it was yesterday.
• Tug gently at the card slot and keypad, since overlays often shift or pop off.
• Apply tamper-evident stickers to terminals so staff can tell at a glance if one has been opened.
• Remind customers and staff to cover the keypad when entering a PIN, because a hidden camera is a common companion to a skimmer.

Chip and contactless payments are far harder to skim than magnetic-stripe swipes, so steering transactions toward them lowers your exposure. If you ever do find a suspicious device, leave it in place, stop using that terminal, and contact both your payment processor and local police rather than pulling it off and carrying on.

Training staff to run these checks is what turns advice into protection, because a skimmer left sitting for a week does far more damage than one caught the same morning. It is worth remembering how much good controls actually do: the ACFE's Report to the Nations found that more than half of occupational fraud traces back to missing or overridden internal controls, and the same logic applies here - a simple check that staff actually run beats a strict policy that nobody follows.

Don't overlook digital and card-not-present fraud

If you sell online as well as in person, the risk shifts from physical devices to stolen card details being used at checkout. The most effective approach is to block bad transactions before they are approved, rather than chasing chargebacks afterward. There is a useful breakdown of catching payment fraud early using behavioral and device signals, worth a read if e-commerce makes up a meaningful slice of your revenue. Pair that with the basics, including address verification, clear refund records, and alerts for unusual order patterns, and your online channel will not become the weak spot once your in-store controls are tight.

Turn these habits into a standing routine

Isolated fixes fade. What protects a business over time is writing the procedures down, training every new hire on them, and reviewing the numbers on a regular schedule so a small gap never gets the chance to grow. Layer the defenses through tight cash handling, terminal inspections, counterfeit checks, and basic online safeguards, and no single weak point is enough to sink you.

Theft and skimming are not problems you solve once and forget. They are risks you manage quietly and consistently, the same way you manage stock or staffing. Put the routines in place now, and on the day someone tries something, your business will already be a step ahead.