After substantial evidence of suspicion was found, the employee was arrested and transferred for investigation.