Security Flaw in POS Permissions Allowing Cash Theft

[PChairs]

I am writing to urgently raise a critical issue we have discovered within our POS system that is compromising the integrity of our operations.

We have configured our team permissions to allow checkout access only, without granting staff the ability to view transactions. However, we have now discovered that team members are still able to:

• View their own completed transactions
• Reprint previous receipts
• Use these receipts to resell items and collect cash without recording the sale in the system

This has unfortunately led to cases of staff bypassing the POS and stealing cash.

Upon reviewing the “Transactions” permission settings, we noticed the following description:

“Grant access to view completed sales transactions. If disabled, team members can still view their own transactions.”

This setting defeats the purpose of our operational controls. It is unacceptable for attendants to view or access their own past transactions without managerial approval, as this loophole creates significant risk for theft and fraud.

We urgently request that:

1. Square reviews this permissions issue immediately.
2. You provide a way to completely restrict all team members from accessing their own transactions, unless granted explicit access by a Manager or Senior Manager.

We would appreciate a direct response from your technical support team to ensure this is addressed as soon as possible.

[Sam_400º]

Hey @PChairs, welcome to the community! 

From your discretion there I can see that this is all expected behaviour within the system. 

Without getting into all the nitty gritty, as a fellow seller can I just say if this is an issue for you then you need to be able to trust your staff a lot better.

Feeling the need to prevent a member of your team from being able to reprint a receipt (that will say that's it's a reprint on it) brings an entirely different set of issues to the forefront. 

[doc_choc]

To be honest, if its in their nature and they want to take money they will always find another route, loophole or not. As @Sam_400º said there may be bigger HR issues at play for you here, not nice when you feel you can't trust your team though. If you haven't already get the security camera point right at the POS and monitor for refunded cash transactions and correlate with the camera times. Pinpoint the culprit(s) and show no mercy.

We have a zero tolerance policy for theft, once the persons integrity has gone there in no coming back.

Out of interest do you do a lot of refunds my be just our business we do very few so they stand out like a sore thumb.