A terminated worker retained the ability to enter and operate its payment systems.
In Grapevine, Texas, a young man's termination from a fast-food job did not sever his access to the systems that governed it — and in that gap between dismissal and digital revocation, an $80,000 scheme allegedly took shape. Keyshun Jones, 23, is accused of returning to the Chick-fil-A where he once worked, stepping behind the counter as though nothing had changed, and processing hundreds of phantom refunds directly into his own accounts. The case is less a story about one man's choices than about the quiet vulnerabilities that exist wherever trust is extended and then forgotten to be withdrawn.
- A fired employee walked back into his former workplace a month after termination — and the door, both physical and digital, was still open to him.
- Over 800 fraudulent transactions totaling $80,000 were allegedly processed through a register he should no longer have been able to touch, all routed to his personal credit cards.
- Surveillance footage captured him moving through the restaurant with the ease of someone who belonged there, turning familiarity into evidence against him.
- Police pursued Jones through multiple failed arrest attempts before finally taking him into custody on April 17, by which point the charges had grown to include theft, money laundering, and evading arrest.
- The case now sits in the courts, but the deeper reckoning falls on the restaurant industry's systemic lag between firing an employee and actually cutting off their access to sensitive payment systems.
A month after being let go from a Chick-fil-A in Grapevine, Texas, 23-year-old Keyshun Jones allegedly walked back in, stepped behind the counter, and got to work. Not serving customers — processing refunds. According to police, he used the restaurant's point-of-sale system to ring up 800 catering-sized mac-and-cheese trays and immediately reverse the charges, funneling roughly $80,000 directly into his personal credit cards. The math was simple. The access, apparently, was still his.
What made the scheme possible was a failure that had nothing to do with the register itself. Jones had been terminated, but no one had revoked his ability to log in and operate the payment system. Surveillance footage later showed him moving through the space with the ease of a current employee — accessing the terminal, issuing the refunds, converting a menu item into a cash stream. That footage became the cornerstone of the case against him.
Police moved to arrest him but found the pursuit more complicated than expected. Jones evaded them more than once before finally being taken into custody on April 17. By then, the charges had accumulated: property theft, money laundering, evading arrest. He is now held at a Fort Worth facility awaiting proceedings, and his attorney has declined to comment.
The mac-and-cheese at the center of it all is a catering staple — a rich, three-cheese baked pasta meant for gatherings and occasions. Jones allegedly ordered it only to erase it, to transform its listed value into money that would flow to him. What lingers beyond the specifics of the case is the question it surfaces: how often does the window between termination and access revocation go unexamined — and who else might be standing in it?
A former Chick-fil-A employee in Grapevine, Texas walked back into the restaurant where he'd been fired a month earlier, slipped behind the counter, and began ringing up orders. Not for customers. For himself. Over the course of what police say was a calculated scheme, he allegedly processed refunds for 800 trays of the chain's catering-sized mac-and-cheese—each one worth roughly $100—funneling the entire $80,000 haul directly into his personal credit cards.
The employee, identified as 23-year-old Keyshun Jones, had access to something most people don't: the restaurant's point-of-sale system. Once behind that register, he could authorize transactions and reverse them at will. The math was straightforward and devastating. Eight hundred trays. Eighty thousand dollars. All of it routed to accounts in his name.
What made the scheme possible was a basic security failure. A terminated worker retained the ability to enter the store and operate its payment systems. Surveillance footage from the restaurant would later show him doing exactly that—moving through the space with the casual familiarity of someone who'd worked there, accessing the register, processing the phantom refunds. The footage became evidence.
Police in Grapevine moved to arrest him, but Jones evaded them multiple times before they finally took him into custody on April 17. By then, the charges had stacked up: property theft, money laundering, and evading arrest. He is now held at Green Bay prison in Fort Worth, awaiting proceedings. His lawyer has declined to comment on the case.
The mac-and-cheese at the center of the scheme is a signature item on Chick-fil-A's catering menu—a baked pasta dish layered with three types of cheese, rich enough that a single large tray contains nearly 10,000 calories. It's the kind of dish people order for events, for crowds, for occasions that matter. Jones didn't order it for any of those reasons. He ordered it to disappear it, to convert its value into cash that would flow to him.
The incident raises uncomfortable questions about how a fired employee retained access to systems designed to handle thousands of dollars in transactions. It also illustrates a particular vulnerability in the restaurant industry: the gap between when someone is terminated and when their digital credentials are actually revoked. A month had passed since Jones was let go. In that month, apparently, no one had disabled his ability to log in, to process orders, to issue refunds.
The case is still moving through the system. What remains unclear is why Jones was fired in the first place, and whether there were warning signs before he returned to execute the scheme. What is clear is that he allegedly saw an opening and took it—methodically, systematically, for a sum large enough to constitute a serious federal crime.
Citas Notables
Jones's lawyer declined to comment on the case— Legal representation for Keyshun Jones
La Conversación del Hearth Otra perspectiva de la historia
How does someone walk back into a restaurant where they've been fired and just start processing refunds?
Because nobody had locked him out of the system. A month had passed since his termination. The digital access was still there.
So he knew the layout, knew the register, knew how the system worked.
Exactly. He had worked there. He understood the point-of-sale system intimately. He knew what he could do with it.
Eight hundred trays is a lot. That's not a spur-of-the-moment thing.
No. That's deliberate. That's someone who calculated what he could get away with and executed it methodically.
Why mac-and-cheese specifically?
It's on the catering menu. Large trays, high value per unit. It's the kind of order that wouldn't immediately raise flags—restaurants process catering orders constantly.
And the surveillance caught him doing it.
Yes. The footage showed him behind the counter, using the register. That's what made the case straightforward for police.
What happens to him now?
He's in custody facing theft, money laundering, and evading arrest charges. The case will move through the courts. But the real question is how many other restaurants have the same vulnerability.