Organized retail crime: connecting incidents across stores

Organized retail crime: connecting incidents across stores

Spot AI helps loss prevention teams see organized retail crime as what it is: one pattern running across many stores, not a string of unrelated losses. Spot AI's video AI platform runs on the cameras a chain already owns to detect, deter, investigate, and resolve incidents, then lets an investigator line up the same crew, vehicle, or method across every location in one case. The need is growing. In NRF's 2026 survey, 40% of retailers reported a higher rate of ORC-related incidents and 50% a higher rate of repeat offenders, even though shoplifting incidents fell 12.4% in 2025 (Source: National Retail Federation).

This guide covers the three links that tie incidents together, how linked incidents reach the thresholds investigators work to, the case file an organized retail crime association (ORCA) or a detective can use, and who does what in the moment and afterwards.

Why organized retail crime looks like separate incidents from inside one store

Spot AI starts from the chain's view because that is the only place an organized pattern shows up. Inside one store, a crew looks like an ordinary loss: a cleared shelf on Tuesday, a pushout through a side exit on Friday, a refund without a receipt the next week. Each is filed locally, often below the value anyone escalates.

A recent federal and state case shows the shape. Prosecutors allege that between October 2025 and April 2026, a ring stole more than $48,000 in merchandise from one national retailer's stores in three Maryland locations, Newark in Delaware, and King of Prussia in Pennsylvania, then offered it for sale on Instagram and other sites (Source: U.S. Department of Justice). The state counts were charged in value bands of $1,500 to $25,000. No single store held a $48,000 loss. The chain did.

Retailers name the same obstacle: 49% say cross-jurisdictional thefts hurt their ability to investigate and prosecute ORC, and the same share cite a lack of information sharing and investigative coordination between agencies (Source: National Retail Federation). Three gaps inside a chain feed the problem:

1. Incident data sits by store, so nobody notices the same crew at the fourth location.
2. Manual review does not scale. Scrubbing footage store by store tests one hunch a day, not twenty.
3. Reports log the loss, not the clothing, vehicle, or route out, so there is nothing to match against.

The three links that turn separate incidents into a pattern

Spot AI connects incidents through three kinds of link: the people involved, the vehicle they use, and the method they repeat. The strongest cases rest on at least two.

Link	What ties incidents together	What each store should capture	How Spot AI finds it across stores
Crew	Same clothing, bags, group size, and route in and out	Clothing colors, carried items, exit used, timestamps	Spot AI's attribute search finds people by clothing color and carried items across every camera and location
Vehicle	Same vehicle in the lot or fire lane before and after each hit	Plate, vehicle type, color, where it waited	Spot AI alerts when a plate of interest is read again and searches vehicles by type and color
Method	Same fixture, merchandise, time window, or return pattern	Fixture, items and value, time of day, related POS exceptions	Spot AI ties POS exceptions to video and reports detections by agent, camera, and location

People: describe clothing and behavior, not identity

Spot AI searches by what a camera can see, such as "two people, black hoodies, large tote bags, power tools aisle", rather than by who someone is. That keeps the work on observable facts, which is what an investigator has to write in a report anyway. One query covers every camera in every store, so Tuesday's description becomes a 30-day district search instead of a call to each manager. See how investigators phrase those queries in our guide to natural-language and attribute search in retail.

Vehicles: the link crews find hardest to change

Spot AI reads license plates at lot entrances and alerts the right team when a plate of interest returns. Crews change clothes between stores far more easily than cars, and a driver waiting near the entrance can be the first visible sign of a run. Once a vehicle is tied to a confirmed incident, listing it turns every store with plate coverage into a place where the pattern can be confirmed. Approval, retention, and alert routing for that list are covered in our guide to running a vehicle watch list across a chain.

Method: the repeat that shows up in the data

Spot AI's reporting breaks detections down by agent, camera, and location over days, weeks, and months, which is where a method surfaces: loitering at the same fixture type in four stores, or a refund without a receipt at a store other than the one where the item disappeared. Exception-based reporting links each flagged transaction, such as clustered voids, to the video of that moment. Timing counts too: three stores in one district hit inside a single afternoon reads as a booster run, not a coincidence.

How linked incidents reach the thresholds investigators work to

Spot AI makes every incident findable, valued, and timestamped, which is what aggregation depends on; whether the thefts add up to a felony is for counsel and prosecutors to decide. What the chain controls is whether incidents can be added up at all. In NRF's 2026 survey, 63% of retailers report fewer than half of store theft incidents to police, and 60% cite low-dollar losses or not meeting felony thresholds as a reason (Source: National Retail Federation).

Thresholds and aggregation rules are set state by state, and roughly 30 states have created or amended ORC laws in recent years. Maryland's organized crime unit chief says his state's statute "allows us to aggregate thefts across multiple jurisdictions when it's just part of a scheme or a continuing course of conduct" (Source: National Retail Federation). Federal law adds a route when goods cross state lines: interstate transportation of stolen property is charged at $5,000 or more, and smaller transactions can be combined into one count when they are part of a single plan or conspiracy (Source: U.S. Department of Justice).

Because the rules differ, use an operating standard that holds up in any state:

1. Log every incident, including those below any threshold you know of. A $300 loss that is never logged can never be added to anything.
2. Record value the same way at every store, on the valuation basis your legal team confirms.
3. Attach the clip when the incident is logged, before routine overwrite removes it.
4. Capture clothing, vehicle, method, and time in the same fields every time, so records compare side by side.
5. Keep a running total and date window per suspected crew, so loss prevention sees when a pattern nears the figure a prosecutor has said it needs.

None of this is legal advice. Confirm thresholds, aggregation windows, and valuation rules with counsel and with your prosecutor and ORCA contacts in each state.

The store team in the moment, loss prevention afterwards

Spot AI splits organized retail crime work into two jobs for different people. In the moment, the store team's priority is safety, and confrontation is the riskiest option: retailers reported a 17% rise in "threats or acts of violence" during shoplifting and theft events in 2024 against 2023 (Source: National Retail Federation). Afterwards, loss prevention has hours or days to link, value, and build the case.

Who	When	Their job	What Spot AI does
Store associates	During the incident	Stay safe, follow the no-confrontation policy, note what can be seen from a safe place	Spot AI detects the behavior, triggers strobes, horns, or talkdown, and alerts the right person
Store manager	Same shift	Log the incident with its value and clip	Spot AI marks the moment, so the clip is found by time and camera
Loss prevention	Hours to days later	Search other stores, link incidents, total the value, build the case	Spot AI searches every location, holds clips and documents in Cases, and shares them securely
ORCA contact or detective	After referral	Decide whether and how to act	Spot AI lets them open the shared case with original timestamps intact

Route each alert to the person who can act on it: loitering at a high-value fixture to the manager on shift, a plate-of-interest read at the lot entrance to the store and the district loss prevention lead. Our guide to associate safety during retail incidents covers the store-side protocol.

Detect, deter, investigate, resolve across every store

Spot AI runs the same four-step workflow at every location, so a pattern found in one district can be checked against all of them:

1. Detect. Spot AI's agents flag loitering near high-value fixtures, crowding at a display, after-hours entry at a stockroom or back door, a plate of interest in the lot, and car break-ins. Detections read context such as location, time of day, and dwell, not any movement in frame.
2. Deter. Spot AI can trigger strobes and horns and play a natural-conversation talkdown that escalates from an informational message to a direct one. Deterrence lowers the chance an incident carries on; it does not guarantee it ends, so the alert still goes to a person.
3. Investigate. Spot AI searches every camera at every store by description, time, or plate, so a hunch is tested chain-wide in one pass. Matching clips go into a case with notes and documents, as our guide to resolving incidents with Cases shows.
4. Resolve. Spot AI tracks each case's status, notes, and comments until it is closed or referred. Recurring detections by camera and location show when a pattern reaches a new store, and they feed the district view in our guide to executive dashboards for loss prevention.

Investigation is where the hours go, and where the evidence for this workflow is clearest. All Star Elite, an 80-location sports apparel retailer, centralized its investigations in Spot AI's Cases feature, attaching clips, annotations, and documents and sharing them with law enforcement. The retailer reports investigations running 50% more efficiently, loss incidents resolved in minutes instead of hours, and law enforcement case timelines down from two to three months to one month (All Star Elite customer story).

"Spot AI makes it very quick and easy to find video footage at any of our assets across the country... It has also simplified the footage sharing process, making it a lot easier and faster to share footage with 3rd parties including law enforcement, insurance investigators, and tenants."

Tom G., Property Administrator (Small-Business)

What goes in an organized retail crime case file

Spot AI keeps the pieces of a case together, but the file itself is the investigator's work, and it should lead with the pattern rather than the footage. ORCAs are where many of these files land first: NRF counted 48 states with one in early 2025, each bringing retailers and law enforcement together to share information (Source: National Retail Federation). State attorneys general increasingly sit in the same rooms. In Pennsylvania, retailers pitch problem cases at regional meetings with police and the attorney general's office, and NRF reports that this involvement helps connect scattered incidents into statewide, prosecutable patterns "especially when retailers can provide solid documentation and evidence" (Source: National Retail Federation). A file an ORCA analyst or detective can act on carries these seven elements:

Element	Why the investigator needs it	Where it comes from
Pattern summary	How many incidents, which stores, which dates, the total value	Loss prevention's analysis of the linked incidents
Incident table	One row per incident: date, time, store, merchandise, value, method	Store incident records, ideally from one incident report template
Shared identifiers	Clothing, carried items, vehicle and plate, route in and out	Spot AI search results and plate reads, cited by incident
Clips and stills	Proof for each row, with store, camera, and timestamps	Spot AI Cases, with original timestamps
POS records	Refunds, voids, or returns that belong to the pattern	Exception reports linked to video
Total value and window	The figure and the period it covers	Loss prevention, on the valuation basis counsel confirmed
Custody and contact	Who handled the evidence, and who answers questions	A custody log kept under your retention and chain-of-custody policy, plus a named contact

Packaging the file for each recipient, including formats, redaction, and why packages get rejected, is covered in our guide to video evidence packages for police, insurers, and attorneys. Where these files go may also change: the Combating Organized Retail Crime Act passed the House on May 12, 2026 but has not yet become law, and it would create a coordination center to improve information sharing across local, state, federal, and private-sector partners (Source: National Retail Federation).

Limits to plan for

Spot AI works within the coverage, retention, and policies a chain already has, and four limits shape what any cross-store program can deliver:

1. Coverage follows the cameras. Search and detection reach only what existing cameras see, so a crew working a blind corner leaves a gap.
2. Retention has to match. If one store keeps 30 days of video and another keeps 14, a 30-day pattern cannot be rebuilt, so preserve incident clips in the case when they are logged.
3. People make the calls. Deciding that two incidents involve the same crew, and that a total meets a threshold, stays with trained staff and counsel.
4. Partnerships take time. An ORCA or a prosecutor responds faster to a retailer they already know, so join the regional association before the next pattern needs a partner.

From store-level losses to a chain-level case

Spot AI gives a chain one place to see organized retail crime as the pattern it is: detection and deterrence at each store in the moment, then search, cases, and reporting that let loss prevention link the same crew, vehicle, or method across locations afterwards. The next step is small. Pick one district, pull the last 60 days of logged incidents, and count how many carry a value, a clip, and the linking facts. That gap is the work.

For a wider view of what loss prevention teams see once AI agents run on the cameras they already own, from talkdown that escalates on its own to the first agents retailers deploy, read Spot AI's white paper, Turning Cameras Into Coworkers.

Frequently asked questions

What is organized retail crime, and how is it different from shoplifting?

Spot AI treats organized retail crime as coordinated theft by a group that steals merchandise to resell it, usually across several stores and with set roles such as boosters, lookouts, and drivers. Opportunistic shoplifting is one person taking something during a single visit. The difference that matters to a retailer is repetition: an organized crew comes back, to the same store or the next one, with the same method.

How do retailers connect theft incidents across multiple stores?

Spot AI lets an investigator search every camera at every location for the same description, vehicle, or method, and ties register exceptions to the video of each transaction. Start with the strongest link you hold, usually a vehicle or a distinctive method, then widen the date range and the store list until matches stop appearing.

Can thefts at different stores be added together to reach a felony threshold?

Spot AI keeps each incident findable, valued, and timestamped so the question can be asked, but the answer comes from each state's law and from the prosecutor. A growing number of states allow related thefts across jurisdictions to be combined, and federal interstate stolen property cases can combine related transactions under $5,000 into one count. The date window often matters as much as the total.

What should store employees do during an organized theft?

Spot AI is set up so employees do not have to intervene: it can deter with strobes, horns, and talkdown and alert the right person while staff keep their distance. Employees should follow the no-confrontation policy, note the time, the exit used, and any vehicle from a safe place, and log the incident once the group has left. Chasing or blocking a group raises the risk to everyone in the store.

How do organized retail crime associations work with retailers?

Spot AI cases can be shared securely with an ORCA contact or a detective, which is how much retail video evidence reaches these groups. An ORCA is a regional network where retail investigators and law enforcement share information on active crews and help each other build cases. Ask peers or the local police department which association covers your stores, and join before you have a case to bring.

About the author

Sud Bhatija is a co-founder of Spot AI, where he scales operations and GTM strategy to deliver video AI that helps operations, safety, and security teams boost productivity and reduce incidents across industries.