How to Control Order Voids, Discounts, and Prevent Counter Theft

To control bill voids, discounts, and prevent counter shrinkage, business owners need to implement three coordinated actions: set up clear role-based permissions on the POS software, lock down manual open discounting, and review exception reports at the end of every shift. Rather than micromanaging employees through suspicion or spending all day watching security cameras, a tight checkout workflow eliminates operational loopholes from the start, protecting your profit margins.

In the F&B and retail sectors, many business owners invest heavily in ingredient costing, inventory audits, and end-of-shift cash reconciliations, yet actual profits still fall short of projections. The culprit is often "hidden shrinkage" right on the POS screen—where transactions are quietly altered after customers have walked away.

Where Does Counter Revenue Leakage Usually Occur?#

Before diving into technical solutions, we need to clearly define operational terms at the register to distinguish between honest mistakes and intentional fraud.

Post-payment Void is the cancellation of an order that has already been paid for in the POS system. This reduces the recorded revenue on the software even though the cash has already been collected from the guest.

Pre-payment Cancel is the removal of one or more items from the ordering screen before closing the bill. This typically happens when a customer changes their mind or a staff member makes an input error.

Manual Discount is a feature allowing cashiers to enter arbitrary discount percentages or flat dollar amounts directly onto an invoice outside of pre-configured promotional rules.

When a venue operates without standard controls, shrinkage typically follows four common scenarios:

1. Pocketing cash and voiding the bill later: A customer places a 150,000 VND order, pays with cash, and declines the receipt. As soon as the customer departs, the cashier opens the order history and hits "Void Order" citing "Customer changed mind." By day's end, POS revenue drops by 150,000 VND, matching the remaining cash in the drawer after the employee has pocketed the difference.
2. Printing a pre-bill to collect cash, then deleting items: In dine-in service models (restaurants, table-service cafes), staff print a 5-item pre-bill to collect payment from the guest. Once the full amount is collected, the server returns to the POS terminal, removes 2 items, and only then settles the bill.
3. Applying unauthorized discounts or dummy loyalty points: A regular customer pays full price, but the cashier later applies a 15% VIP discount or manually types in a 10% markdown, pocketing the cash delta.
4. Bypassing the POS on pre-made items: Fast-grab inventory such as bottled drinks, display pastries, or batch-brewed coffee is handed directly to customers, and the cash is pocketed without ever being punched into the POS.

A concrete example: Consider a small bubble tea shop selling an average of 150 cups per day at 35,000 VND per cup. If just 2 orders per shift (equivalent to 4 cups a day) are lost through voided bills or off-register sales, the business loses 140,000 VND daily. Over a month, that totals 4,200,000 VND—roughly equal to a part-time employee's monthly wage or the entire net profit of several peak trading days.

Comparison: Loose vs. Controlled Register Operations#

5 Steps to Lock Down Counter Loopholes#

You don't need an expensive enterprise ERP to solve this problem. Most modern POS software (such as the POS platform within the GoMetap ecosystem or standard point-of-sale systems on the market) includes built-in role-based permissions. The issue is that business owners often skip this initial configuration.

Step 1: Enforce Role-Based Access Control (RBAC) on the POS#

The fundamental principle of internal governance is: "Every action in the system must be tied to a specific individual."

• Disable Admin access on the counter POS: The Owner/Admin account should only be logged in on your personal smartphone or laptop. The counter register terminal should run exclusively on Staff/Cashier permissions.
• Enforce 3 distinct permission tiers:
  • Cashier: Can only place orders, accept payments, and print primary receipts.
  • Shift Leader: Authorized to approve kitchen voids for prep mistakes and process customer item exchanges.
  • Owner: Full control to view P&L statements, modify menu pricing, configure promotions, and delete/void invoices.

Step 2: Standardize the Void and Item Modification Workflow#

Divide item cancellations into two phases: before and after sending orders to the bar/kitchen (or final settlement).

• Before sending to the bar/kitchen: Cashiers may remove items if the customer changes their mind immediately at the register.
• After firing to the kitchen/bar or settling payment: Strictly revoke the cashier's ability to void orders independently.

Practical workflow for small venues when the owner is off-site: If a staff member makes a genuine mistake on a paid ticket (e.g., entered cash instead of a bank transfer, or punched the wrong size), require this exact procedure:

1. The staff member immediately rings up a replacement ticket with the correct order details for the customer.
2. Retain the erroneous physical receipt, handwrite the exact reason on it (e.g., "Customer switched from Size L to Size M"), take a photo, and post it to the internal operations chat group.
3. At the end of the shift or during downtime, the owner cross-checks the photo with transaction logs and remotely executes the void order command via the management mobile app.

Step 3: Eliminate Manual Discounts and Digitize Member Loyalty#

Never leave an open "Discount ... %" field editable on the front-end sales screen.

• Package every promotion into predefined buttons: If your store offers "10% Student Discount", a "5,000 VND Breakfast Combo", or a "Refer-a-Friend 20% Off", configure these directly into the system with explicit eligibility criteria (valid hours, applicable items).
• Control points accrual and loyalty vouchers: To stop cashiers from inputting their own or friends' phone numbers to harvest rewards from walk-in guests, switch to digital identity validation. For example, using digital passes stored in Apple Wallet or Google Wallet (such as GoMetap Loyalty solutions), the customer must present their personal pass QR code on their phone screen to the register scanner before points are earned or vouchers applied. Cashiers cannot manually type arbitrary phone numbers to exploit discounts.

Step 4: Synchronize Receipts, Dynamic QR Codes, and the Cash Drawer#

Loopholes frequently emerge at the cash handoff. Clean up this touchpoint with a strict "No Bill — No Drink" policy.

• Display customer-facing notices: A polite, visible notice such as "Please collect your receipt upon payment. If you are not provided a receipt, your order is free" transforms your customers into real-time auditors of cashier compliance.
• Integrate automated QR payments: For bank transfers, generating a dynamic QR code that displays the exact invoice balance on a customer-facing screen locks in the required payable amount. The POS only finalizes the transaction upon receiving a verified payment webhook, entirely preventing staff from manually editing amounts after scanning.
• Lock down manual cash drawer keys: Remove and store the manual drawer keys off-site. Configure the cash drawer to trigger open exclusively upon an electronic "Cash" tender command. Every unlinked opening ("No-Sale Open") must be tracked and counted in the audit logs.

Step 5: Review Exception Reports for 5 Minutes Daily#

Owners do not need to comb through all 200 receipts every evening. Simply open your POS Exception Report (or activity audit log) and inspect four metrics:

1. Voided Orders Ratio / Total Orders: If a particular employee consistently registers an unusually high void or item-delete rate compared to colleagues on other shifts, cross-reference the camera footage at those exact timestamps.
2. Receipt Reprint Count / Pre-bill Prints: A single table should only generate one pre-bill. If a table registers 2-3 pre-bills and the final settled value is lower than the initial print, items were likely deleted after collecting the customer's cash.
3. Total Daily Discounts: Confirm that transactions with applied discounts fall within authorized promotional time windows.
4. Cost-to-Sales Inventory Variances: If the POS records 80 bubble teas sold, but your custom-branded cup stock drops by 90 units, you have a discrepancy. Auditing 1-2 high-visibility consumable packaging items (such as plastic cups or branded lids) at the close of every shift is the fastest way to expose unrecorded off-register sales.

Action Checklist for Store Owners Today#

You can implement this operational checklist over the next 30 minutes to secure your checkout station without disrupting active trading:

• POS Accounts: Create isolated user accounts for each cashier, change the master Admin password, and sign out of Admin accounts on all register terminals.
• Permission Settings: Navigate to Employee Permissions in your POS back-office; disable "Delete/Void Settled Orders" and "Manual Price Override/Open Discount" for the Cashier role.
• Void Reasons: Toggle on "Require cancellation reason when voiding items" in the POS settings.
• Promotions: Audit and archive expired promo codes; pre-configure distinct buttons for all active store promotions.
• Cash Drawer: Remove the mechanical key from the drawer lock; verify the drawer triggers open only on cash checkout.
• Internal Operating Procedure: Announce the updated policy in the staff group chat: Any mispunched, printed order must be retained physically with written justification, photographed, and posted to the group for manager end-of-shift voiding.
• Cross-Checking: Select two easily countable packaging items (e.g., 500ml cups and pre-packaged pastries) for shift-to-shift handovers, reconciling inventory counts directly against POS sales volumes.