Theft and fraud committed by retailers’ own employees is second only to shoplifting in the damage it inflicts. Joanne Ellul reports