Key Takeaways
- • A 23-year-old former Chick-fil-A employee in Grapevine, Texas, allegedly orchestrated a fraudulent refund scheme totaling over $80,000 by returning to the restaurant after termination and processing roughly 800 macaroni and cheese orders followed by refunds to personal credit cards.
- • Keyshun Jones was arrested and charged with multiple felonies including property theft, money laundering, and evading arrest, with cumulative bail set at $111,500 across charges carrying individual bail amounts of $50,000, $5,000, and $1,500.
- • Surveillance footage captured Jones operating the register without authorization in November 2025, approximately one month after his October 2025 termination, with the franchise owner alerting authorities on November 29 and providing CCTV evidence identifying the perpetrator.
- • The fraud exploited Jones's retained access to the point-of-sale system and his direct deposit account with Navy Federal Credit Union, raising operational security concerns regarding post-termination access controls at the franchise location.
- • Chick-fil-A corporate confirmed cooperation with law enforcement, though authorities have not disclosed how the terminated employee regained register access or the reason for his original dismissal.
Summary
A significant internal fraud case has emerged at a Chick-fil-A franchise in Grapevine, Texas, involving a terminated employee who allegedly returned to the location and executed a coordinated refund scheme totaling over $80,000. Keyshun Jones, 23, was initially fired in October 2025 but reportedly gained unauthorized access to the restaurant's register in November 2025, where he processed approximately 800 orders of macaroni and cheese trays before issuing refunds to personal credit cards.
The scheme was uncovered when the franchise owner reviewed surveillance footage and contacted Grapevine Police detectives on November 29, 2025. CCTV footage allegedly captured Jones operating the point-of-sale system without authorization and executing the fraudulent transaction sequence. Authorities have not disclosed the mechanism by which Jones retained or regained access to the register following his termination, nor have they provided official explanation for his initial firing.
Jones was formally charged with property theft, money laundering, and evading arrest. According to court records, he is being held on combined bail totaling $111,500: $50,000 each for money laundering and property theft charges, $5,000 for evading arrest, $5,000 for fraud, and an additional $1,500 for property theft. An arrest warrant was issued on April 6. The investigation revealed that Jones maintained direct deposit access through Navy Federal Credit Union prior to his termination, which may have facilitated the refund routing.
Chick-fil-A corporate stated to media outlets that it is cooperating with law enforcement authorities in the ongoing investigation. The case underscores operational security gaps at franchise locations, particularly regarding post-termination access controls to point-of-sale systems and payment processing infrastructure.
The scheme was uncovered when the franchise owner reviewed surveillance footage and contacted Grapevine Police detectives on November 29, 2025. CCTV footage allegedly captured Jones operating the point-of-sale system without authorization and executing the fraudulent transaction sequence. Authorities have not disclosed the mechanism by which Jones retained or regained access to the register following his termination, nor have they provided official explanation for his initial firing.
Jones was formally charged with property theft, money laundering, and evading arrest. According to court records, he is being held on combined bail totaling $111,500: $50,000 each for money laundering and property theft charges, $5,000 for evading arrest, $5,000 for fraud, and an additional $1,500 for property theft. An arrest warrant was issued on April 6. The investigation revealed that Jones maintained direct deposit access through Navy Federal Credit Union prior to his termination, which may have facilitated the refund routing.
Chick-fil-A corporate stated to media outlets that it is cooperating with law enforcement authorities in the ongoing investigation. The case underscores operational security gaps at franchise locations, particularly regarding post-termination access controls to point-of-sale systems and payment processing infrastructure.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.