Alabama Embezzlement Charges: Employee Theft and Evidence
Updated: Oct 21
Alabama generally prosecutes conduct commonly called “embezzlement” under its consolidated theft laws. An employee, bookkeeper, manager, officer, or fiduciary may be investigated for theft when the State alleges that the person knowingly exercised unauthorized control over money or property with intent to deprive the owner.
These cases often turn on records, authority, intent, value, and timing—not the label used in an accusation. This guide explains the main issues without predicting an outcome.
Reviewed by Elliott Owen Lipinsky • October 6, 2026
Is embezzlement a separate Alabama offense?
Alabama’s theft definitions combine conduct historically described as larceny, embezzlement, false pretenses, and related forms of unlawful control. A prosecutor normally charges a degree of theft under the current code rather than a separate offense titled “embezzlement.” See Alabama Code § 13A-8-1 and § 13A-8-2.
The State must still prove every element of the particular charge. Employment access, possession of a company card, or responsibility for bookkeeping does not by itself establish criminal intent.
What must the State prove?
The exact theory can vary. A theft prosecution commonly requires proof that the accused knowingly obtained or exerted control over another person’s property, that the control was unauthorized or obtained by deception, and that the accused intended to deprive the owner. A disagreement, accounting error, unfulfilled promise, or disputed reimbursement is not automatically a crime.
Intent is often inferred from circumstances. Repeated transfers, altered entries, concealed accounts, false explanations, personal purchases, deleted records, or forged approvals may be offered as evidence. The defense may examine whether the records are complete, whether authority existed, whether another person had access, and whether lawful explanations were ignored.
Records that matter in an employee-theft investigation
The useful records often include:
bank statements, check images, deposit records, and electronic transfers;
payroll files, time records, expense reports, and reimbursement policies;
point-of-sale data, refunds, voids, discounts, and inventory logs;
accounting ledgers, audit trails, user credentials, and access logs;
emails, text messages, approval chains, contracts, and written policies;
vendor records, invoices, purchase orders, and delivery confirmations;
evidence of ownership, authorization, business purpose, or a good-faith claim of right; and
the method used to calculate the alleged loss.
Preserve records in their original form. Do not alter, delete, conceal, or fabricate material. Do not contact coworkers to coordinate accounts. A person who is unsure how to preserve or lawfully collect business records should get advice before acting.
How value affects the degree of theft
Alabama divides theft into degrees based in part on value and, for some property, the nature of the item or how it was taken. The current provisions include first-degree theft, second-degree theft, third-degree theft, and fourth-degree theft.
Older websites may display obsolete dollar thresholds. The current statute and the incident dates should be checked directly. The loss alleged by an employer is not automatically the value the State can prove.
Can multiple transactions be combined?
Prosecutors may try to aggregate related transactions under rules that depend on the charged theory, time period, and evidence. Aggregation can affect the degree of the offense, but it should not be accepted without reviewing each transaction and the legal basis for treating them as a course of conduct.
A defensible loss analysis separates authorized payments, legitimate expenses, returned funds, credits, duplicate entries, valuation disputes, and transactions attributable to another user. In a document-heavy case, an independent accounting review may be appropriate.
Restitution and criminal liability are different questions
Alabama’s restitution law is designed to compensate victims for proven pecuniary loss caused by criminal conduct. The amount may be disputed and is separate from whether the State proves guilt. See Alabama Code § 15-18-65.
Repayment does not automatically dismiss a charge. Direct contact with an accuser can create new problems. Any proposed repayment, preservation agreement, or communication should be handled carefully and lawfully.
When can an employee-theft investigation become federal?
Most Alabama employee-theft cases remain in state court. Federal exposure may arise when the alleged conduct implicates a federally insured financial institution, federal program money, an employee-benefit plan, interstate wire or mail communications, federal taxes, or another federal statute. The fact that a transaction used the internet does not answer jurisdiction by itself.
The firm’s guide to federal and state white-collar charges explains the jurisdictional divide. If a federal agency, grand jury, or prosecutor becomes involved, preserve every notice and obtain advice promptly. A subpoena or target letter raises its own timing and response questions; see the firm’s Alabama grand-jury subpoena and target-letter guide.
Possible defense issues
Depending on the charge and evidence, the issues may include:
lack of intent to deprive;
actual or apparent authority to use or transfer the property;
a good-faith claim of right, reimbursement, compensation, or ownership dispute;
mistaken identity, shared credentials, or another person’s access;
incomplete, altered, or unreliable accounting records;
an inflated loss calculation or improper aggregation;
unlawful search, interrogation, or seizure issues; and
failure to prove venue, timing, ownership, value, or another required element.
A defense is built from the actual records and current law. No single issue guarantees dismissal or a particular result. The firm’s Alabama white-collar defense page provides a broader overview of document-intensive criminal investigations.
Frequently asked questions
Does an internal audit prove theft?
No. An audit can identify irregularities, but a criminal conviction requires admissible evidence proving every element beyond a reasonable doubt. The audit method, source data, assumptions, and access controls may all require review.
Should I explain everything to the employer or investigator?
Do not lie, destroy evidence, or disobey a lawful order. You may obtain legal advice before deciding whether and how to provide a statement or records. An unprepared explanation can be incomplete, inaccurate, or misunderstood.
Will repayment make the case disappear?
Not automatically. The State controls a criminal prosecution. Repayment may affect restitution or negotiations in some cases, but it should not be assumed to end the matter.
Can a theft allegation affect employment licenses?
It can. Employment, bonding, immigration, professional licensing, and other collateral consequences depend on the charge, disposition, and governing rules. Those issues should be identified before a plea.
Talk with an Alabama theft-defense lawyer
If you are under investigation for employee theft, embezzlement, or another white-collar offense in Selma, Dallas County, Montgomery, or West Alabama, call (334) 230-7986 or request a private case review.
This article provides general information, not legal advice. Reading it or contacting the Law Offices of Elliott Owen Lipinsky does not create an attorney-client relationship. Representation begins only after the firm accepts a matter in writing. Results depend on the facts and law, and no outcome is guaranteed. Do not send financial records, confidential details, passwords, highly sensitive information, or time-critical information through the initial website form.
