I highly doubt that such a law exists is in the criminal code of Canada...there are safeguards built within Esso and all other companies that offer loyalty programs that will scan the transactions for anomalies. They will be caught. They will likely be fired and the points will be taken out of their account.
It amazes me that people will risk their jobs for a few points...