From One Menu Item to an $80,000 Loss: Investigators Trace a Refund Scheme at Chick-fil-A

Unusual refund patterns inside a North Texas restaurant set off a fraud investigation that police say uncovered a methodical scheme tied to a single menu item and a former employee’s access to the register.

As reported by NBC DFW, authorities say Keyshun Jones, a former Chick-fil-A employee in Grapevine, is accused of using the store’s point-of-sale system to process hundreds of unauthorized transactions after his employment ended.

Investigators said the activity began in November 2025, when the restaurant’s owner flagged a series of refunds that did not correspond with legitimate purchases. Surveillance footage later showed Jones behind the counter, operating the register despite no longer being employed at the location.

According to police, the alleged scheme involved ringing up approximately 800 orders of macaroni and cheese trays and then issuing refunds tied to personal credit cards. Authorities estimate the total loss exceeded $80,000.

The volume and repetition of the transactions distinguished the activity from routine discrepancies, prompting a closer review of register logs and internal controls. Investigators said the pattern indicated deliberate manipulation rather than isolated error.

Jones had been terminated from the restaurant about a month before the activity was first reported, raising questions about how he was able to access the workspace and carry out repeated transactions without immediate detection.

Law enforcement officials said efforts to locate Jones extended over several months before he was taken into custody on April 17 with assistance from the Texas Attorney General’s Fugitive Task Force and Fort Worth police.

He now faces multiple charges, including property theft, money laundering and evading arrest, according to authorities. The case remains active as investigators continue reviewing evidence and determining whether additional factors contributed to the alleged scheme.

The incident highlights vulnerabilities in point-of-sale systems when access controls are not tightly managed. In environments where transactions can be processed quickly and repeatedly, irregular activity may go unnoticed until losses accumulate.

Chick-fil-A has not issued a detailed public response regarding the specific case. The broader implications extend beyond a single location, emphasizing the importance of monitoring employee access and maintaining oversight of refund activity.

As the investigation continues, attention remains on how internal systems are secured and how similar incidents can be prevented. The case underscores how routine operations, when left unchecked, can create openings for sustained financial loss.