I'm pretty sure this breaks AP rules at a minimum, and that AP account is subject to closure. And I'd imagine that if this is happening regularly, the employee's AP account would get audited. This offence also probably breaks Esso employee policy, and I'd imagine that any employee caught doing this, particuarly one doing this on a regular basis is subject to termination with Esso. As for who to report it to, I'm not sure.