For context, I run a small online casino (100% legal) and I have 3 full-time VA's from the Philippines. One of their responsibilities is to monitor the chat and ban/mute/timeout players that behave inappropriately. Every day, I give them a certain amount of coins (usually \~$100 worth) that they can give away to players at random, or for being the fastest player to answer random trivia questions in chat. Here's where things went wrong... This morning, I logged into the backend admin panel so I could process cashout requests that came in while I was asleep. And I noticed one for $900 that was tagged as **"FRAUD LIKELY"**, so I took a closer look and noticed a few things: * This "player" that wanted to cashout $900 had the SAME IP address as my VA * This "player" NEVER deposited into the site before, all of their coins came from giveaways * This "player" wanted me to send the $900 to the SAME Bitcoin address I use to pay my VA So pretty quickly, I realized that one of my VA's used a 2nd account to cheat/win giveaways for about a month, and thought I wouldn't notice. When I called him out on it, he confessed, apologized like 10x, and when I asked him "Why did you think this was okay?" he jokingly said "People are depositing thousands every day I thought it wouldn't affect you". Like BRO WHAT. Now I'm stuck on what to do next. Do I keep him around? He *did* apologize and say he would never do it again, which I believe tbh. And I can't really afford to let him go because I have nobody to fill his place and that would add \~4 hours per day of additional workload to my other 2 VA's. But at the same time, he did try to take advantage of me. Thoughts?