California Embezzlement vs. Theft: What's the Difference?

Under California law, the difference between embezzlement and theft is how the property got into your hands in the first place. Theft is taking something that was never yours to hold. Embezzlement is being handed something to look after and then treating it as your own. The prosecution has to prove both halves: that someone entrusted you with the property, and that you then took it for yourself dishonestly.

From the outside the two can look identical, which is why the charge often turns on what you were allowed to do with the property before the day anyone started counting.

Embezzlement requires more than just missing property. An accounting discrepancy at work doesn’t, by itself, establish it. A cash shortage, duplicate payment, inventory variance, or disputed expense may lead an employer to investigate, but the accusation and the proof are separate questions.

That distinction matters before you try to explain any of it from memory. The scope of your access, the authority that existed at the time, and the original records may tell a different story from a shortage or an audit conclusion viewed alone.

How does entrusted access separate embezzlement from other theft theories?

California Penal Code section 503 (opens in a new window) defines embezzlement as “the fraudulent appropriation of property by a person to whom it has been entrusted.” California's general theft statute, Penal Code section 484 (opens in a new window), includes several forms of theft and expressly addresses the fraudulent appropriation of entrusted property.

The difference isn't that money or property went missing. An embezzlement allegation begins with the claim that the owner entrusted the property to you because you were trusted. Other theft theories may begin with an allegation that the person took property without receiving it in that way.

What a police report or an internal audit calls it doesn't decide the case. Your actual relationship to the property, the scope of the authority that existed, and the evidence of intent matter more than the employer's description alone.

Access opens the inquiry; it does not prove the accusation.

A title, password, key, company card, or system permission may show opportunity. It does not necessarily show what property was entrusted, what you were permitted to do with it, who completed the disputed transaction, or whether the use was fraudulent.

Authority at work may also be shared or divided. One person may prepare a payment while another approves or releases it. Several employees may use the same register or the same credential. A written policy may differ from the way your supervisors actually handled advances, reimbursements, inventory, or vendor payments. None of that decides the case automatically, but it's what keeps your access from standing in for proof.

What must prosecutors prove in a California embezzlement case?

CALCRIM No. 1806 (opens in a new window), California's jury instruction for embezzlement, identifies the central points the prosecution generally must prove beyond a reasonable doubt:

• an owner or the owner's agent entrusted property to the accused;
• the owner or agent did so because that person trusted the accused;
• the accused fraudulently converted or used the property for the accused's own benefit; and
• when doing so, the accused intended to deprive the owner of the property or its use.

Each point requires proof. Suspicion, access, a policy violation, or a missing amount may be part of the evidence, but none of it replaces the prosecution's burden on the required elements. The fourth point is broader than it sounds: the owner does not have to lose the property permanently, and an intent to deprive the owner temporarily may be sufficient under the instruction.

An honest mistake can still get you charged. By itself it does not establish fraudulent intent.

An employer may accuse you, investigators may open a case, or prosecutors may file a charge even when you believe the problem was an accounting error or an authorized transaction. None of that turns the accusation into proof. Bookkeeping mistakes, duplicate entries, negligence, poor record-keeping, and workplace-policy violations do not by themselves establish fraudulent intent.

The comparison that matters is between the accusation and what you understood at the time. Approval messages, prior transactions, written limits, how the workplace actually operated, where the property went, and anything you said about it at the time may support or challenge an inference of intent. CALCRIM No. 1806 recognizes that a good-faith belief in authorization may negate fraudulent intent even if the belief was mistaken or unreasonable. The known circumstances may still bear on whether the belief was genuinely held.

If your instinct is to write a check and make the whole thing go away, read the statute before you decide. Penal Code section 512 (opens in a new window) states that an intent to restore property is not a defense or a reason to reduce the offense under the circumstances described in the statute. Repayment is part of the chronology, not a shortcut to either conclusion. The timing, amount, purpose, and documentation of a repayment may still be evidence, but they don't decide what the original transaction meant by themselves.

Value affects classification, but the total does not decide it.

California generally punishes embezzlement according to the type and value of the property involved. Under Penal Code section 487 (opens in a new window), the ordinary grand-theft value language applies when the property exceeds $950, while a separate employee or agent rule addresses amounts aggregating $950 or more within 12 consecutive months. The statute also contains a separate rule for distinct but related acts. Sections 490.2 (opens in a new window) and 666.1 (opens in a new window) add other classification and prior-conviction rules.

The practical point for you is that one disputed transaction and the employer's combined total do not present the same statutory question. The exact charge, property, transaction set, aggregation theory, and any alleged prior convictions must be reviewed before anyone predicts whether the case fits a misdemeanor or felony framework.

Which of your records answer the accusation instead of repeating it?

A record earns its place by answering a question the accusation does not. Policies and your job description may describe the formal authority. Emails, messages, meeting notes, and prior approvals may show how that authority was actually communicated to you. Transaction histories, audit logs, bank records, receipts, and inventory records may show who initiated or approved an action, where the property went, and whether a later summary left out a reversal or a correction.

The original source matters more than any explanation assembled after the accusation, including a careful one. Preserve the native transaction history, messages, approvals, and system records without editing, tidying, or replacing them. The guide to intent, records, and common evidence issues in a California embezzlement case explains how to build that transaction-level record without turning an audit total into the whole case.

What should you do after an embezzlement accusation?

Start with the exact accusation, the transactions being questioned, and the records as they existed when each event happened. Do not delete files, backfill notes, ask anyone to line their account up with yours, or send the long explanation you want to send before the source record has been preserved and reviewed.

A subpoena or a records demand is a different problem from a request to sit down and talk, and the two get different answers. The business-records response guide explains the first safe distinctions for a document demand, and the police-questioning guide covers what happens when someone asks you for a statement.

A lawyer can put the accusation next to the authority, the transaction history, and the original sources before you decide how to respond. That review is the first job in Boyadzhyan Legal Shield's white-collar crime defense practice. Or simply request a confidential consultation. It goes further once you've gathered the records you already have.