Updated October 2026 | The Bulldog Law | California White Collar Defense

Embezzlement is the fraudulent taking of property by someone it was entrusted to. California's Penal Code 503 defines it in one sentence, the fraudulent appropriation of property by a person to whom it has been intrusted, and the state punishes it as theft: grand theft, a wobbler carrying up to three years, when the property is worth more than $950, and petty theft, a misdemeanor, when it is worth $950 or less. What separates embezzlement from ordinary theft is that the embezzler had the property lawfully, as an employee, a bookkeeper, a treasurer, an agent, a trustee, or a caretaker, and converted it. An employee who takes $950 or more from one employer over any 12 months is charged with grand theft even if no single taking crossed the line, a pattern of embezzlement over $100,000 adds one to five years under the aggravated white collar crime enhancement, and paying the money back is not a defense, though it is the most important fact in how the case ends.

The Bulldog Law's white collar attorneys defend embezzlement cases that begin, almost always, the same way: an audit, a discrepancy, a confrontation in a conference room, and a signed statement or a repayment agreement that the client thought would make the problem go away and that instead became the prosecution's case. What follows is the definition and the elements, the relationship statutes, the grand and petty theft thresholds, the penalties and enhancements, how the cases arise and are investigated, the defenses, and how they are resolved. Call (888) 928-1609 or message our team.

The definition and the elements

Penal Code 503 supplies the definition, and the jury instruction breaks it into four elements: the owner entrusted the property to the defendant; the owner did so because they trusted the defendant; the defendant fraudulently converted or used the property for their own benefit; and when the defendant did so, they intended to deprive the owner of its use. Three features of those elements shape the cases. Entrustment means the defendant came into possession lawfully, with the owner's consent and for the owner's purposes, which is what distinguishes embezzlement from larceny and from theft by false pretenses, where the possession was obtained by a lie.

Fraudulent conversion means the defendant used the property in a way inconsistent with the trust, for their own purposes, and the word fraudulent imports a bad-faith intent; an honest mistake, a good-faith belief that the use was authorized, or a bona fide dispute over what was owed is not embezzlement. And the intent to deprive need not be permanent: under Penal Code 503 as applied by the courts, an intent to deprive the owner temporarily, as by borrowing funds with every intention of returning them, is enough, which is why Penal Code 512 states that an intent to restore is no defense. Cornell's Legal Information Institute summarizes the general-law offense, and our 2023 discussion of how embezzlement works covers the mechanics in less depth.

The relationship statutes

Penal Code 504 through 508 identify the relationships that satisfy the entrustment element, and prosecutors cite them alongside 503. Penal Code 504 covers public officers and the officers, directors, trustees, clerks, servants, and agents of any association, society, or corporation who fraudulently appropriate property in their control by virtue of the trust; it is the statute for treasurers, nonprofit officers, union officials, and corporate insiders. Penal Code 506 covers trustees, bankers, merchants, brokers, attorneys, agents, collectors, and contractors who fraudulently appropriate property entrusted to them, including a contractor who diverts construction funds. Penal Code 507 covers bailees, tenants, and lodgers who convert property in their possession. Penal Code 508 covers clerks, agents, and servants who fraudulently appropriate property of their employer that came into their control by virtue of the employment, which is the ordinary employee embezzlement statute. None of these changes the penalty; they establish the trust relationship and are the lens through which the prosecution presents the case.

Grand theft, petty theft, and the 12-month rule

Embezzlement is punished as theft, so the amount decides the charge. Under Penal Code 487, theft of money, labor, or property worth more than $950 is grand theft; theft of $950 or less is petty theft under Penal Code 488. Three rules push embezzlement toward grand theft. Penal Code 487(b)(3) provides that when the property is taken by a servant, agent, or employee from their principal or employer and aggregates $950 or more in any 12 consecutive months, the offense is grand theft, so a cashier who took $50 a week for a year, $2,600 in total, is charged with grand theft though no single taking exceeded $950. Penal Code 487(d) makes theft of a vehicle or a firearm grand theft regardless of value.

And the prosecution may aggregate separate takings into a single grand theft count when they were part of one general plan or scheme, which is how a bookkeeper's hundreds of small transfers become one felony count and a large restitution figure. Our page on grand theft under Penal Code 487 covers the classification. The $950 line was set by Proposition 47 in 2014, and Proposition 36 in 2024 added the ability to aggregate thefts across multiple incidents and to charge a felony for a third theft offense regardless of amount, which applies to embezzlement as to other theft.

Enhancements, restitution, and asset freezes

Beyond the base term, two provisions govern larger cases. The aggravated white collar crime enhancement, Penal Code 186.11, applies when a defendant is convicted of two or more related felonies involving fraud or embezzlement, committed as a pattern against two or more victims or against one victim on two or more occasions, with a total loss of more than $100,000. It adds one to five years consecutive, a fine of up to $500,000 or double the loss, and, critically, allows the prosecution to obtain pretrial orders freezing the defendant's assets to preserve them for restitution.

Restitution to the victim of the full loss is mandatory in every case under Penal Code 1202.4, is not dischargeable in bankruptcy, and is enforceable as a civil judgment; the restitution figure is frequently litigated because the employer's accounting of the loss includes amounts the defendant disputes, investigation costs, and sometimes losses with other causes. Penal Code 513 provides that restoring the property before charges are filed is not a defense but may be considered in mitigation, and in practice repayment before charging is the fact most likely to produce a declined filing, a misdemeanor, or probation.

How embezzlement cases arise

The typical case begins inside the business. An audit, a new accountant, a vendor complaint, a bank alert, or a co-worker's report produces a discrepancy; the employer or its forensic accountant reconstructs the transactions; and the employee is called into a meeting, often with a loss-prevention investigator or an outside firm, and presented with the findings. The meeting is where most cases are won by the prosecution.

The employee, hoping to keep the job or avoid police, signs a written admission, a promissory note, or a repayment plan, and that document, together with the statements made in the room, becomes the core of the criminal case when the employer reports it anyway, as most do after the admission is obtained. Our attorneys advise anyone called into such a meeting to say nothing beyond a request to consult a lawyer, to sign nothing, and to call us before responding to any demand; the employer's civil remedies exist either way, and the admission adds only to the criminal exposure. The investigation that follows typically involves bank records obtained by subpoena, the employer's accounting systems, and interviews, and the charging decision turns on the amount, the documentation, the employee's record, and whether restitution has been made.

Defenses

The entrustment and conversion elements leave room for several defenses. A good-faith claim of right, the defendant's honest belief that they were entitled to the property, as unpaid wages, commissions, reimbursements, or a loan the owner had agreed to, negates the fraudulent intent, and the belief need not be reasonable, only actual. Authorization is a defense where the owner, a supervisor, or a partner permitted the use, which is common in small businesses with informal practices, in family businesses, and in partnerships where the parties dispute what was agreed. The absence of fraudulent intent covers accounting errors, commingling without concealment, and uses the defendant openly recorded.

In many cases the dispute is over the amount: the employer's figure includes legitimate expenses, transactions by others with access to the same systems, and losses that predate the defendant's involvement, and a defense forensic accountant can reduce a felony to a misdemeanor or a restitution figure by a large fraction. Identity, in cases where multiple employees had access, is contested through the system logs and the money trail. And a case built on a confrontation-room admission is attacked on voluntariness and on the accuracy of a document the employee signed under pressure without understanding it. Related charges, forgery where documents were altered, and identity theft where another person's credentials were used, are defended alongside.

Resolutions and consequences

A first-offense petty theft embezzlement is routinely resolved through diversion or a civil compromise with dismissal. A grand theft embezzlement with full restitution and no record is frequently reduced to a misdemeanor under Penal Code 17(b), resolved with probation, or, where the amount is modest, charged as a misdemeanor from the start. Larger cases turn on restitution and the 186.11 threshold.

 A conviction is eligible for expungement after probation, though it remains reportable to licensing agencies, and embezzlement is treated as a crime of dishonesty that affects professional licenses, bonding, fiduciary positions, and employment in finance, health care, and education for years afterward. For a non-citizen, theft with a sentence of a year or more is an aggravated felony and embezzlement is a crime involving moral turpitude, so our immigration attorneys structure the plea in every such case. Where the funds belonged to a bank, a pension plan, a federal program, or the federal government, the case is federal, and the sentence is driven by the loss table in the federal guidelines rather than by California's thresholds.

Frequently asked questions

What is embezzlement?

Embezzlement is the fraudulent taking of property by a person to whom it was entrusted. California defines it in Penal Code 503 as the fraudulent appropriation of property by a person to whom it has been intrusted. The difference from ordinary theft is the relationship: a thief takes property they had no right to touch, while an embezzler was lawfully in possession, as an employee, bookkeeper, treasurer, agent, trustee, or caretaker, and converted it to their own use. Embezzlement is punished as theft, grand or petty depending on the amount.

Is embezzlement a felony?

It can be. Embezzlement of property worth more than $950 is grand theft under Penal Code 487, a wobbler punishable by up to one year in county jail as a misdemeanor or 16 months, two, or three years as a felony. Embezzlement of $950 or less is petty theft, a misdemeanor punishable by up to six months. An employee who takes $950 or more in total from the same employer over any 12-month period is charged with grand theft even if each taking was small, under Penal Code 487(b)(3). Embezzlement of a vehicle or a firearm is grand theft regardless of value.

What is the penalty for embezzlement in California?

Petty theft embezzlement: up to six months in county jail and a $1,000 fine. Grand theft embezzlement: up to one year in jail, or 16 months, two, or three years in custody as a felony, plus restitution of the full amount. Where the embezzlement was part of a pattern of related felony fraud or embezzlement totaling more than $100,000, the aggravated white collar crime enhancement under Penal Code 186.11 adds one to five years and allows the court to freeze assets to pay restitution. Federal embezzlement from a bank, a pension plan, or the government carries up to 10 years or more.

Does returning the money make embezzlement go away?

No. Penal Code 512 provides that the intent to restore the property is not a defense, and Penal Code 513 provides that actual restoration before charges are filed is not a defense either, though it may be considered in mitigation of punishment. Repayment is nonetheless the single most important fact in resolving an embezzlement case, because prosecutors and employers care most about restitution, and a client who repays before charging is frequently not charged, or is charged with a misdemeanor, or receives probation.

What is the difference between embezzlement and theft?

Lawful possession. Theft by larceny requires a taking from the owner's possession without consent. Embezzlement requires that the owner entrusted the property to the defendant, who then fraudulently converted it. California consolidated larceny, embezzlement, and theft by false pretenses into the single crime of theft under Penal Code 484 in 1927, so the charge reads as theft and the jury need not agree on which theory applies, but the elements the prosecution proves for embezzlement are the entrustment and the conversion rather than the taking.

Can an employer press charges for embezzlement?

An employer reports suspected embezzlement to the police or the district attorney, who decide whether to charge. Employers also pursue the money civilly, through a lawsuit, a demand, or a deduction from final wages, which is itself restricted by California labor law. A person confronted by an employer about missing money should not sign a confession, a promissory note, or a repayment agreement without a lawyer, because those documents become the prosecution's case; the employer's investigation is not neutral, and what is said in the meeting is admissible.

Related reading from our attorneys

• Grand theft under Penal Code 487
• White collar crime defense in California
• Forgery under Penal Code 470

Accused of embezzlement? Do not sign anything. Call us before the meeting

The Bulldog Law's criminal defense attorneys handle employee theft, embezzlement, and white collar cases across California, from the employer's first accusation through restitution negotiation, charging, and trial. Call (888) 928-1609 or reach us online.