Types of workplace crimes are outlined, including industrial sabotage, employee theft, falsification of time cards, vandalism, substances abuse and abuse of sick leave. The contribution of employee drug and alcohol abuse to workplace misconduct is emphasized. Prior to going undercover, the investigator should meet with the client to discuss the perceived problem and priorities, fees, time frame, and cover identity. In going undercover, the investigator should be the earliest to arrive and the last to depart the workplace, be convincing in the employee role, and be attentive to employee lifestyles and behaviors suggestive of misconduct. Investigation reports should include assessments of employee morale, possible sources of liability, efficiency of operations, effectiveness of supervision, and recommendations for improvements, as well as information on suspected or identified wrongdoing. Observation, testimony, and exhibits are among types of evidence that can be collected. Evidence should be kept in a secure area, and the chain of evidence should be well documented. The investigator's identity should not be revealed at the close of an investigation. Should a court appearance be needed, the investigator should prepare carefully. 9 references.