1. The serial returner playing a long game
Your team might remember a face from yesterday. The analytics remembers every return across every store across the past year, tied to receipt data:
- A patron who's returned dozens of items in six months, all worn or used.
- Returns paid out with original payment methods that later showed up on the chargeback list.
- The same item type returned repeatedly across multiple locations (wardrobing on apparel, the "buy, wear once, return" play).
- Returns processed disproportionately by the same cashier (fraud ring, friend pricing, always worth a review).
The value isn't catching one return. It's seeing the pattern across stores before the loss compounds.
2. The POS sweetheart and the void pattern
Even your most trusted cashiers have bad days, and some have bad intentions. POS analytics watches every transaction in real time and flags:
- Voids clustered at the end of shifts.
- Sequential discounts at non-discount times.
- Sweethearting: scanning low and ringing friends through at a fraction of ticket.
- Cash-drawer opens without an associated transaction.
- Refunds processed by the same cashier-and-customer combination repeatedly.
The LP manager can't stand behind every register. The system can, and it ties transaction data to the camera clip so the investigation goes from days to minutes.
3. The casual grab in the high-traffic moment
When the store is slammed, theft spikes. The new piece is a system that sharpens up when things get busy:
- Rapid concealment motions (item-into-bag, item-into-clothing, item-into-stroller).
- Loitering near high-value SKUs past a threshold.
- Shelf-sweeping patterns (multiple items grabbed without selection behavior).
- Basket switches and hand-offs between people who entered separately.
Your LP team can't watch every patron during a holiday rush. The system pages the LP phone with a clip so the team can move.
4. The back-door exit nobody watches
Most retailers obsess over front-door theft, but the serious losses live at the loading dock:
- Employees in stockrooms outside scheduled hours.
- Unusual merchandise volumes moving toward employee exits.
- Propped emergency exits.
- Delivery personnel staying past expected dwell time.
- Repeat compactor or dumpster trips with merchandise.
This catches the "throw-and-retrieve" play (an employee bags merchandise into the compactor to grab later) that no LP video review catches, because nobody's watching the dock at 4 PM on a Tuesday.
5. The return-desk receipt swap
The classic plays at the returns counter:
- Receipt from a higher-priced purchase used for a cheaper item return.
- Returned item is a swap (the higher-value version goes home).
- Receipt digitally altered or duplicated.
- Item returned without a matching purchase in the system at all.
The analytics cross-references every return against purchase records, SKUs, and serial numbers where applicable, and flagged returns get a human review before the refund posts.
6. The organized retail crime ring operating in plain sight
ORC groups look like regular patrons until the moment they hit. The NRF's National Retail Security Survey consistently flags ORC as a top driver of retail shrink. Patterns that surface across stores and shifts:
- Multiple people entering together, splitting in store, regrouping at exit.
- Coordinated movements that pull LP attention to one corner while the hit happens elsewhere.
- The same vehicle showing up across multiple store locations (LPR catches this one).
- Repeat visits by different faces to the same high-theft category at the same store.
The chain-level view is what flags this. A single store sees one bad afternoon. The chain view sees the same plate at four stores in two days.
7. The pattern your spreadsheet can't show you
Sometimes the biggest loss isn't a single incident. It's a pattern no manual review surfaces. Analytics reveals shrink by:
- Time of day, day of week.
- SKU category and price band.
- Cashier and shift.
- Store and region.
- Weather correlation (a well-documented effect on retail theft volume).
- Foot traffic level.
The analytics sweeps years of data in seconds and surfaces the correlations: the store that bleeds on rainy Saturdays after 4 PM at the registers run by a specific shift. That's the report you act on. The system isn't a replacement for LP. It's the layer underneath that turns the team from "stare at a wall of monitors" to "run flagged events."