Prevention: I have a video camera behind the counter to view the lobby. In the forground happens to be the till. Whenever any of the help comes up to my office, they see the monitor on right next to my computer on the desk. The VCR is very consipcous, too. (At this time, the employees i have are the best ever and the monitor just comes on with the computer -- so i don't suspect them in any form. hear that, kids . . . ?)
Where you are now: Collect as much "evidence" as you can (Deposits vs. take, what you've seen, differences in grosses on this person's day off, other reasons you suspect him/her). Then, with a 3rd party who will remain silent (not another emplyee of the same level), lay this out for him/her and ask what they would think. Never get upset, never interupt them when they speak, the 3rd party is there to confirm how you handled it. If the preson gets upset, don't answer thier questions. Example: "Do you think i am some kind of theif?", "We're not here to dicuss what I think or don't think, we're here to discuss why the till was $50 short." If they become emotional, tell them you'll have this dissucsion when they have it together and until then, they are off-duty. This is your business. NO ONE ever has the right to pay themselves more than what you agreed. The more direct you are, the less they have to twist around if they feel the need to try to take it farther.
I have never had it go farther. Every time the gross started dropping on someone's shift, i moved them around and if the lower numbers followed them, i gave them days off. I finally started using a 3rd person when a young emplyee's mom showed up pissed at me after i told the kid money was missing. the kid told her mom i accused her of stealing -- i hadn't. a 3rd person makes the "interview" a little more intimidating, but it comes under the heading of C.Y.A.