An employee has come to you, or to HR, with a report of misconduct, fraud, or corruption inside the company. What you do in the next two days matters more than most employers realise, both for handling the underlying issue properly and for staying on the right side of the law yourself. Here is the sequence that actually protects the company.
Protect the reporter first
The Employment Act 2007 prohibits an employer from harassing or discriminating against an employee over matters arising from their employment, and dismissing or disadvantaging someone because they raised a genuine concern is exactly the kind of exposure that produces a strong unfair dismissal claim later. Separately, the 2021 Guidelines issued under the Bribery Act 2016 expect private entities to have a whistle-blowing system that keeps the identity of a person raising a concern confidential while the matter is investigated. Before anything else, limit who knows the report exists, and do not let word of who raised it spread through the office.
Preserve the record before you do anything else
Write down what was reported, by whom, and when, while it is fresh, and secure any documents, emails, or system access logs connected to the allegation before the person implicated has a chance to alter or delete them. If the misconduct touches financial records or IT systems, restricting access is often more urgent than beginning formal interviews. Evidence lost in the first 48 hours is rarely recoverable later.
Do not act against the accused before they have been heard
It is tempting to suspend or dismiss immediately once an allegation lands, particularly a serious one. Kenyan employment law expects fair process before disciplinary action, and a decision made before the accused employee has had any opportunity to respond is one of the most common ways an otherwise legitimate dismissal gets successfully challenged. Interim measures, such as moving someone away from the system or records in question while the investigation proceeds, are usually safer than an outright suspension announced before any investigation has actually started.
Decide early who is actually investigating
Whoever looks into the report should not be someone implicated by it, and for a smaller company that often means bringing in someone external rather than asking a colleague of the accused to investigate a colleague. Set out, in writing, what the investigation will cover and roughly how long it should take. An investigation with no defined scope tends to drift, and a drifting investigation is where confidentiality breaks down and rumour fills the gap.
Know when it stops being an internal matter
Not every internal report needs to go to the Ethics and Anti-Corruption Commission or the police immediately. But if the conduct reported looks like it may amount to a criminal offence, corruption, fraud, or theft above a level your internal process can credibly resolve, get legal advice on reporting obligations early rather than after the company has already tried to handle it quietly for weeks. Waiting too long to escalate is a common way an internal misconduct issue turns into a much bigger problem for the company itself.
