Cash Skimming at the Till: The Signals in the Reconciliation

Short answer: Cash skimming shows up in the reconciliation as small, regular shortages on the same shifts, usually twenty to fifty dollars, with a matching pattern in voids or no-sale opens. Internal theft accounts for about 42 percent of theft-related inventory losses in convenience retail, and the till is where most of it starts.

The till is the last place anyone looks

Everyone watches the stockroom and the loading dock. The till gets counted at close, the count matches often enough, and nobody asks why it is short twenty dollars on Tuesdays. Skimming works because the amounts are boring. A thief who takes two hundred dollars once gets caught. A thief who takes twenty dollars a shift for six months retires the loss into the noise.

The money leaves before it is recorded. That is the whole trick. A cashier pockets a bill and never rings the sale, or rings it and voids it after the customer leaves, or opens the drawer on a no-sale and takes the change. The register tape looks clean because the theft happened before the tape.

Void after change, and the other classics

The void after change is the most common version. The customer pays with a large bill, the cashier makes change, the customer leaves, and the cashier voids the transaction. The drawer is short the sale amount, but the void explains it, and the customer never comes back to complain because they got their goods. Done once, it looks like a mistake. Done every shift, it is a pattern.

The no-sale open is the same idea without a customer. The drawer opens, a bill disappears, and the log shows an open with no transaction attached. A few of those a week are normal, a drawer sticks, someone checks a price. A dozen of them on the same shifts, always when the same person is on the till, is not a sticky drawer.

The reconciliation pattern that actually catches it

Stop looking at the daily total and start looking at the shift. Skimming is regular, so it shows up as a shortage that repeats on the same shifts and disappears on others. A store that is short twenty to fifty dollars every time one cashier closes, and never short when anyone else closes, has its answer. The total for the month might be a thousand dollars, but the pattern is one name on a roster.

Pair the shortage with the void and no-sale counts by cashier. A cashier with three times the voids of their peers, and shortages on the same shifts, is not unlucky. That cross check is the whole detection method: the shortage alone can be a counting error, the voids alone can be training, and the two together on the same shifts are the signal.

What a clean till count looks like

A clean count has a procedure, not just a number. Two people count, the count is recorded before the drawer is opened for the next shift, and the variance is logged against the cashier, not the day. When the log exists, the pattern is visible in a week. When it does not, the store finds out months later from an audit, if it finds out at all.

The other half is tips. The Association of Certified Fraud Examiners has said for years that tips are the most common way internal fraud gets detected, ahead of audits and reconciliations. A cashier who brags about the take, or a coworker who notices the drawer routine, is worth more than any report. Make it easy and safe to report, and the pattern surfaces while it is still small.

Keep reading: Gift receipt fraud: the return that was planned at the till, Refund to gift card laundering: turning a stolen return into clean store credit, What Happens After a Card Testing Attack: The Bill Nobody Budgets For.

Frequently asked questions

How much cash do skimmers usually take?

The amounts are small on purpose, usually twenty to fifty dollars a shift. The thief wants the shortage to look like a counting error or a miscounted change, not a theft. Over months the total is large, but each individual shortage is small enough to be written off.

What is a void after change?

It is a till fraud where the cashier completes a cash sale, gives the customer change, and then voids the transaction after the customer leaves. The register tape shows a voided sale, the drawer is short the sale amount, and the cashier keeps the cash. Repeated voids by the same cashier on the same shifts are the classic signal.

How do you catch cash skimming in the reconciliation?

Look at shortages by shift and by cashier, not by day. Skimming repeats on the same shifts, so a shortage that follows one cashier and never appears on others is the pattern. Cross check it against voids and no-sale drawer opens for the same cashier, and the two together are much stronger evidence than either alone.

Are cameras enough to stop till theft?

Cameras help after the fact, but they do not catch skimming on their own. The theft is a hand movement that lasts a second, and nobody watches every hour of till footage. The reconciliation pattern is what flags the shifts to review, and the camera then confirms what the numbers already said.

Get a free bot-traffic audit