The majority of retail losses are not due to random, one-off theft. Instead, retailers are losing to a small, identifiable group of repeat offenders who hit multiple stores and jurisdictions. These offenders stay invisible and active in stores because no single system can connect their offenses.
That’s the problem to solve: more so than just reducing financial losses, retailers need to dig below the surface of a case to expose the root of the issue and stop the repeat people and networks behind the majority of it. According to data from the Auror network, the top 10% of offenders in North America account for 60% of total stolen value.
The actionable loss prevention strategies below reflect that. The most effective retailers layer a few key strategies into a program where offenders cannot operate undetected and where the intelligence generated in one store protects every store connected to the same network.
1. Focus investigative resources on the 10% driving the majority of retail shrinkage
The single biggest shift in effective retail loss prevention (LP) is strategic: stop spreading resources evenly across all incidents and start targeting the small cohort responsible for most of the damage.
In North America, the average event value for the top 10% of offenders is $882.81 per incident, nearly 4X the network-wide average of $220.69 and almost 18X the median event value of $47.82. These are not opportunistic shoplifters grabbing an item of opportunity. They are repeat persons of interest with documented patterns, often operating across multiple stores and retailers simultaneously.
.png)
The retailers making the biggest dents in retail shrinkage, in-store violence, and retail security have restructured their programs. At Ulta Beauty, repeat offenders drive 62% of total loss across their 1,400-plus stores. Nearly two-thirds of those repeat individuals visit multiple Ulta locations. Without connected intelligence, incidents at Store 101 and Store 450 look like two separate cases. They are often the same person.
Focusing on the 10% responsible for 60%+ of total value across retail stores worldwide is the most direct path to making stores safer.
2. Connect intelligence across every store in your network
The top 10% stays invisible because most loss prevention data is siloed. Incidents are captured store by store, and without a way to link them across locations, the repeat offender hitting five stores in a week looks like five unrelated events, each too minor to prioritize.
When incidents, persons of interest, and vehicles are linked across stores and jurisdictions, patterns that no single store could detect become visible: a regional organized retail crime (ORC) network hitting your stores in coordinated waves, a single high-value offender operating under an alias, or a vehicle appearing at three locations in the same week. None of those patterns exists in a single store's data, but they all appear in a connected network.
This is what happened when law enforcement connected 112 organized events across six major retailers using shared Retail Crime Intelligence. They surfaced a person of interest operating under an alias and revealed the full scope of their offending. The impact extended well beyond the case itself: the DA's office noted a reduction in repeat offenders cycling back through the courts, and judges are now referencing connected offender histories when making detention decisions. Retailers in the region adopted a streamlined trespass workflow where notices are issued, scanned, and stored in a shared system so any officer can retrieve them instantly.
3. Build reporting quality from the first incident
Every loss prevention strategy depends on the quality of data at the source, and even the most sophisticated intelligence platform cannot connect dots that were never captured.
Underreporting is the silent failure of most LP programs. When store teams do not see the outcomes of their reports, they stop reporting thoroughly, and reports without detail, clear photos, or structured evidence cannot be linked across incidents.
The fix starts with how reporting is designed. Intuitive reporting tools increase capture rates significantly. For instance, Auror Intel, within Core, drives an average 300% increase in reported events, in 80% less time than legacy systems. But volume alone doesn't give you meaningful data, particularly if data isn't clean or consistent. Structured, evidence-rich records with consistent fields for people, behaviors, vehicles, and linked video footage are what turn individual reports into intelligence.
.png)
H&M's approach to theft prevention is that a store associate's job is not to physically intervene. It’s to document accurately, completely, and quickly, so the intelligence layer can connect the dots and law enforcement can act on a pattern rather than a single incident. That reframe changes how frontline teams see their role as the first step to stop repeat offenders.
4. Provide loss prevention training programs for teams to report, not intervene
H&M's guiding principle hinges on the belief that nothing the company sells is worth the safety of anyone in its stores. Store teams are trained to recognize known high-risk persons of interest early and respond proportionately. When an associate can see that the individual walking in has a documented pattern of threatening behavior across multiple locations, they can respond by alerting the team and calling law enforcement if needed, rather than reacting without context.
.png)
That kind of informed response only works if reporting is thorough and consistent. The two strategies reinforce each other: teams trained to document well feed better intelligence into the system, which produces better context for the next store the person of interest visits. Every accurate report makes the network better able to prevent the next incident.
Employee training for loss prevention in retail should cover how to report suspicious activity through the organization's reporting system, what a complete and useful event record looks like, how to recognize suspicious behavioral indicators without profiling, and when to involve law enforcement versus when to document and report. Ongoing training programs and reinforcement can help with maintaining reporting quality.
5. Prioritize deterrence over intervention
The best loss prevention efforts result in no incident. Prolific offenders make decisions based on perceived risk. When they know a store has connected intelligence, structured relationships with local law enforcement, and a track record of follow-through, that deters theft.
For example, Anchorage Police Department’s Deputy Chief Brian Wilson described their decision to go public with their top-offender lists as a deliberate deterrence strategy:
"The message to the criminal community was deliberate. We take all organized crime, including organized retail crime, seriously. And we have a strategy in place to take action." That visibility alone changed behavior."
Deterrence also shows up at the store level. Real-time alerts when known high-risk persons of interest approach or enter a location with full context on prior incidents, known behaviors, and risk indicators allow store teams to respond before a situation develops. This requires intelligence that is current, connected, and actionable.
6. Connect your existing technology into one intelligence layer
Many retailers already have the building blocks of a strong loss prevention technology stack with security cameras at entrances, electronic article surveillance triggering alarms for unpaid items, RFID tags on high-value merchandise, and POS systems that log every transaction. But those tools rarely talk to each other.
Visible security technology helps deter theft. EAS systems create friction at the door, and RFID gives teams real-time inventory accuracy, surfacing discrepancies that indicate theft before they compound. POS integration links transaction data to camera feeds, making it possible to connect a suspicious return, a voided transaction, or a pattern of scan avoidance to a specific person across multiple visits.
The real value comes when all of it feeds into a single intelligence layer: camera footage linked directly to an incident report and Vehicle Recognition connecting the same offender showing up across locations.
7. Build intelligence that law enforcement can act on immediately
A common failure in retailer and law enforcement collaboration is a lack of structure. Law enforcement agencies receive individual incident reports, such as a shoplifting event at one store, that do not give them enough to justify prioritization or prosecution. Cases pile up, and offenders keep cycling through retail stores.
Deputy Chief Wilson described that before using Retail Crime Intelligence, retailers filed a report online, and it went to the bottom of the triage pile. No one in immediate danger meant no immediate priority. "Crying into an echo chamber" is how he characterized the experience retailers had before structured intelligence was in place.
What law enforcement needs is a documented pattern of offending across stores and time, with structured evidence that meets investigative standards.
When Anchorage built a dedicated three-person retail crime unit and began working directly with Retail Crime Intelligence through the Retail Crime Hub, they investigated 194 cases, made 181 arrests and warrants, and recovered or prosecuted $114,000 in loss in roughly 10 weeks. Alaska's aggregate theft law means connected incidents across retailers can elevate charges to a felony, which was impossible when the data was siloed. For instance, one offender alone, identified across multiple retailers through the platform, accumulated $28,000 in retail theft and received the maximum sentence possible under a misdemeanor charge.
.png)
8. Coordinate intelligence across retailers
Organized retail crime extends beyond store walls or brand boundaries. An ORC group might steal health and beauty products from a grocery chain on Monday, a pharmacy on Tuesday, and a general merchandise store on Wednesday.
When retailers share intelligence on identified persons of interest, patterns that no single retailer could detect alone become clear. Retailers that collaborate on investigations can build cases that span jurisdictions.
The Schenectady case makes the point. Law enforcement connected 112 organized events across six retailers, surfaced a person of interest operating under an alias, and built a case strong enough to change how judges in the region make detention decisions.
AI-powered Connect the Dots within Auror Core links persons and vehicles of interest across stores and retailers, to surface organized networks and prolific repeat persons of interest responsible for the majority of loss. Retailers who join the Auror Network inherit over a decade of accumulated intelligence on offenders already in their area while staying in control of their data.
9. Address internal theft with the same rigor as external theft
External theft gets the headlines, but employee theft, digital fraud, and administrative errors quietly compound across locations. They are harder to detect without cross-store visibility, connected transaction data, and structured investigation workflows.
According to the National Retail Federation, internal theft remains one of the leading contributors to retail shrinkage. Employees know the store's routines, security gaps, and blind spots. Without a secure, confidential workflow separate from standard incident reporting, investigations are difficult to progress and easy to compromise.
Intelligence also plays a role. Auror Insights gives retailers visibility into which stores offenders are hitting, on which days and at which times, what merchandise is being targeted most, and by whom. Store teams can use that to recognize a known threat, and merchandising teams can rearrange product placement based on trending targets and exit tactics. The same intelligence that closes cases also helps prevent the next one.
Effective loss prevention plans address every source of loss. Accurate inventory management is often the first signal that something is wrong: unexplained discrepancies between what was received, what was sold, and what is on the shelf can point to administrative error or theft that never generated a report. Closing those gaps means confidential internal investigations with restricted access and exception-based reporting linked to employee IDs to surface anomalies and return patterns.
ORC groups frequently recruit store employees or exploit employees who are already stealing to assist with disabling security systems or providing inside information. The intelligence layer that identifies external repeat persons of interest can also surface internal-external collusion.
10. Stop the loss and the safety problem at the same source
The retail loss prevention procedures with the biggest impact recognize that loss and safety are the same problem. Repeat persons of interest responsible for the majority of stolen value are the same individuals most likely to be violent. Events involving repeat persons of interest are 2.5x more likely to involve a weapon, and repeat persons of interest are up to 4x more likely to be violent than non-repeat individuals.
Stopping the 10% is also the most direct way to reduce violence against frontline teams. That is the mission Auror was built around: reducing violent crime in stores by 50% in five years. The Auror Network connects 85,000 stores and 3,500+ law enforcement agencies into the largest network of its kind. Retailers get access to a decade of accumulated intelligence on the repeat persons of interest and organized retail crime networks already active in their area.
When intelligence compounds across stores, retailers, and law enforcement, the offenders causing the most harm become visible. And when they become visible, they can be stopped.
Request a demo to see how Retail Crime Intelligence can help your team target the 10% causing the majority of your loss and harm.
Frequently asked questions about modern loss prevention strategies
What is the most effective retail loss prevention strategy in 2026?
The most effective loss prevention strategy in retail is identifying and focusing on your top offenders and organized crime groups. In North America, the top 10% of offenders account for 60% of total stolen value. Programs should make those individuals visible across every store in their network and coordinate with law enforcement to hold them accountable.
How do retailers measure the success of their loss prevention programs?
The most meaningful metrics are outcome-based: cases closed with a law enforcement outcome, percentage of repeat persons of interest who do not return after intervention, value recovered or prosecuted through connected cases, and reduction in serious incidents at targeted locations. Shrink rate is a lagging indicator. The leading indicators are reporting quality, investigation close rate, and the share of loss attributable to the top offenders. Retailers with the strongest programs track it all together, giving them a full picture of what is working and where resources should go next.









