Skip to main content

Introducing Loss Radar: see which shift cost you money.Learn more

All posts

StationPro playbook

Field-tested workflow
Operator review
11 minute read
Playbooks11 min readPublished

How to document organized retail crime at a c-store so the DA will actually prosecute.

Fifteen states passed new organized retail crime laws in 2025, including California Prop 36 and new aggregation thresholds that let prosecutors stack incidents across stores. Most c-store theft never gets charged because the documentation does not exist. The incident log, the video index, and the inventory link that turn a $200 shoplift into a felony case.

Written by
StationPro Editorial
Reviewed by
StationPro operator team

What organized retail crime is

Organized retail crime (ORC) is theft by groups working together to steal goods for resale. The targets are typically high-value, easily-resold items: cigarettes, cosmetics, OTC medication, baby formula, razor blades, liquor (where sold), and packaged meat.

At a convenience store, ORC looks like:

  • A crew of 3 to 5 people entering at the same time, with one distracting the cashier while others fill bags or jackets
  • The same individuals hitting multiple stores in the same chain or area on the same day
  • A single shoplifter who returns weekly with the same MO
  • A "runner" who grabs cartons of cigarettes and bolts
  • A receipt-fraud crew using fake receipts to demand refunds

Individual incidents are often below the felony threshold (typically $950 to $1,000 depending on state). That has historically meant most prosecutors declined to charge. The 2025 laws change that.

15 states
Passed new organized retail crime laws in 2025
Including California (Prop 36 plus follow-on bills), Maryland (effective October 1, 2025), Tennessee, Texas, Georgia, and others. The pattern is consistent: lower aggregation thresholds, multi-store stacking allowed, longer statute of limitations, and stiffer sentencing for repeat ORC.

The 2025 California Prop 36 framework (as a model)

California is the most-watched ORC law because of its size and because of the dramatic shift from Prop 47 (the 2014 law that raised the felony threshold to $950 and was blamed for prolific shoplifting). Prop 36 passed in November 2024 and took effect December 18, 2024, with related implementation through 2025:

  • Theft can be charged as a felony if the value of a single act is over $950 OR if the defendant has 2+ prior theft convictions.
  • Thefts from multiple victims or multiple incidents within a 90-day window can be aggregated to clear the $950 threshold.
  • Thefts from the same defendant across multiple stores in a chain can be aggregated.
  • Possession with intent to sell stolen goods is a new enhanced charge.

For a c-store, aggregation is the most valuable feature. A $300 cigarette grab below the felony threshold becomes a felony when stacked with 3 other $300 grabs on the same defendant within 90 days. Stacking requires you to document each incident with enough detail that the prosecutor can establish the same defendant or the same coordinated crew.

Step 1: build the incident log

Every theft, every refund fraud, every confrontation gets logged. The form is 2 minutes per incident, not 30. Fields:

  • Date and time of incident
  • Store location (for multi-store)
  • Cashier on shift at time of incident
  • Items taken (specific SKUs if possible)
  • Estimated value at retail
  • Description of suspect: clothing, height, build, distinguishing features
  • Vehicle: make, model, color, partial plate if visible
  • Number of suspects
  • Direction of travel after incident
  • Video file name and approximate timestamp
  • Whether police were called and incident number if yes

A laminated 1-page form taped under the register works for low-tech operators. A 1-minute mobile form in your back office works better because it timestamps automatically, geolocates the store, and links to the video archive.

Step 2: index your video

Most c-stores have 8 to 16 cameras with 7 to 30 days of retention. If the prosecutor calls 14 days after the incident, your video is still there but you cannot find the right clip in 4 hours of footage from 12 cameras.

The fix: when an incident is logged, immediately export the relevant video clip (5 minutes before through 5 minutes after) and save it with the incident ID in the filename. A typical DVR export is 3 minutes. Doing it at the moment of the incident is 100 times easier than searching through 2 weeks of footage when the prosecutor asks.

Step 3: tie the incident to an inventory adjustment

The third leg of the prosecutable case: prove the items actually left the store. An incident log says "they took 3 cartons of Marlboro Red." A video clip shows a grab from the cigarette case. An inventory adjustment in your back office removes 3 cartons of Marlboro Red from inventory at the date of the incident.

The three together (incident log + video + inventory adjustment) prove:

  • An incident happened (incident log)
  • What it looked like (video)
  • That goods of measurable value actually moved (inventory)

Without the inventory adjustment, a defense lawyer can argue the items were never actually taken. With the adjustment, you have shrink documented against a specific incident at a specific time.

Step 4: build the prosecutor packet

When you decide to escalate (police report filed, prosecutor showing interest, defendant arrested at another location), build the packet:

  • Incident log entry, printed
  • Video clip on a USB drive or shared link
  • Inventory adjustment record
  • POS sales report for the day showing the period of the incident
  • Cashier statement if applicable
  • Any prior incidents involving the same suspect or vehicle
  • Photos of any items recovered

Deliver the packet to the police detective assigned to ORC in your district. Many large counties now have dedicated ORC units that work cases across multiple retailers. Your packet plus 3 to 5 similar packets from other retailers can build a case worth filing.

Step 5: connect with the ORC task force in your region

Most major metros have a regional ORC task force that coordinates between retailers, police, and prosecutors. Examples:

  • Los Angeles Regional Crime Information Center (LARCIC)
  • Northern California Regional Intelligence Center (NCRIC)
  • Houston-area ORC Task Force
  • Atlanta-area ORC Task Force
  • Several Florida county-level units

Join the local network. Sharing suspect descriptions and vehicle plates with nearby retailers and the task force is how aggregation actually works. A crew hitting your store on Monday may have hit 3 other operators last week. The task force connects the dots.

$45.2 billion
Annual US retail shrink, of which 36% is attributed to ORC and external theft
NRF 2024 retail security survey. C-store shrink runs 1.5 to 3 percent of inside sales annually. For a $4M store, that is $60K to $120K per year. Even reducing it by a third pays for back-office software many times over.

The 5 mistakes that kill ORC cases

1. Logging only the big incidents

Aggregation requires you to document the small incidents too. The $80 cigarette grab and the $120 razor blade grab matter because they stack. Log everything over $25.

2. Letting video age out

If your DVR has 14-day retention and you do not export the clip at the time of the incident, the clip is gone when the prosecutor calls 20 days later. Export at incident time, no exceptions.

3. Confronting suspects physically

Cashier injury, civil liability, and lost evidence all come from physical confrontation. Train staff: get a good look, get a vehicle plate, let them leave. The case is built from the trail, not from a tackle.

4. Not connecting incidents to inventory

A video of someone grabbing cigarettes does not prove loss unless your inventory shows the loss. Inventory adjustment at the date and time of the incident is the missing piece in most c-store cases.

5. Filing police reports and stopping there

A police report sits in a queue. Following up with the district ORC detective, providing the packet, and checking in monthly is how cases move forward. Operators who file and forget rarely see prosecution.

Frequently asked questions

What is organized retail crime?

Theft by groups working together to steal goods for resale. Often high-value items (cigarettes, cosmetics, baby formula). ORC is distinct from individual shoplifting because of the coordination, the resale intent, and the multi-store pattern.

What changed in 2025?

Fifteen states passed new ORC laws in 2025. California Prop 36 and follow-on bills allow aggregation of thefts across incidents and across stores. Maryland enacted similar aggregation effective October 1, 2025. Most laws lowered thresholds and stiffened penalties for repeat ORC. The change matters only if you can document.

How do I document an ORC incident?

A 2-minute incident form: date, time, store, cashier, items taken, estimated value, suspect description, vehicle, video file name, police incident number if applicable. Log every incident over $25, not just the big ones. Aggregation requires complete documentation.

Should I confront a shoplifter?

No. Cashier injury, civil liability, and lost evidence all come from physical confrontation. Get a good look, get a vehicle plate, let them leave. Prosecutable cases are built from documentation, not from tackles.

What is an ORC task force?

A regional unit coordinating between retailers, police, and prosecutors on ORC cases. Most major metros have one (LARCIC in LA, NCRIC in Northern CA, Houston, Atlanta, several Florida counties). Joining the task force network is how aggregation across retailers actually works.

How long should I keep ORC video evidence?

Standard DVR retention is 7 to 30 days. Once an incident is logged, export the relevant clip immediately (5 minutes before through 5 minutes after) with the incident ID in the filename. Keep exported clips for at least 2 years for statute of limitations.

Will the DA actually prosecute a $200 shoplift?

Probably not on its own. But if it is the 6th $200 hit on the same crew this quarter, with documented video and inventory loss from each incident, it stacks to a $1,200 felony case in most aggregation states. Documentation is what makes prosecution possible.

Sources & methodology

This playbook draws on operator workflows observed in StationPro pilot stations and on anonymized product data from live pilot tenants. Figures are illustrative examples, not promises about your stores. Procedures were reviewed against the workflows of the StationPro operator team before publication. Questions or corrections: talk to the team.

Written by

StationPro Editorial

The operator team behind StationPro. We write the procedures we ship: every playbook comes from real close, reconciliation, and loss-attribution workflows in pilot stations.

See where your station is leaking money.

A 30-minute call. We build the demo around your stations, not a generic deck.