awareretailgroup.com

What Do Grocery Loss-Prevention Leaders Actually Do When a Repeat Offender Walks In?

Published 2026-09-19 · awareretailgroup.com Editorial · Edited by Tom Walsh

What Do Grocery Loss-Prevention Leaders Actually Do When a Repeat Offender Walks In?

They treat it as a corporate response, not a floor decision. The associate observes, reports through the manager on duty, and steps away. Asset protection identifies the person and either trespasses them in advance or has police meet them at the door. Northeast Grocery applies a no-tolerance policy to threats of violence across both of its companies, and at Meijer violence pushes a case to the top of the queue. A chain with no program yet can start with one person collecting intelligence.

Key terms

Where these answers come from

The quotes in this recap come from ‘What’s working in grocery: LP leaders on tackling ORC,’ a grocery ORC webinar hosted by LP Magazine editorial director Jacque Brittain and published on YouTube in May 2026 (watch it). It was sponsored by Auror, a retail-crime software vendor, and its head of law enforcement partnerships and a retired retail asset-protection executive who moderated also sat on the panel. Only the two grocery practitioners are quoted here, Jim Simpson, Director of Asset Protection at Northeast Grocery, and Ryan Themm, Corporate Investigations Manager at Meijer, and no vendor is endorsed. Treat their remarks as practitioner opinion from a sponsored event, not independent research.

The split that matters for a store manager is who owns which half of the response. The associate on the floor owns observe and report. Corporate asset protection owns identification, trespass, police contact, and prosecution. Every practice below sits on one side of that line, and the training job is making sure nobody on the floor crosses it.

The associate’s half: observe, report, step away

Nothing the two practitioners describe changes the associate’s behavior. A cashier or stocker who recognizes a repeat offender does not confront, chase, or block an exit. Their job is to notice, describe, and hand off. The value of that report is what it feeds: a photo, a time stamp, a description of what was taken and how, all of which asset protection needs to build a case. A clear report is worth more than a confrontation that produces an injury and no case.

Post this as the floor standard and drill it in a huddle:

No tolerance means corporate acts, not the cashier

Simpson’s answer is a policy decision made above the store, and it is written around threats of violence.

“We have a no tolerance policy in both companies now at this point… there’s not any tolerance in our either company for any type of threats of violence. So, we act on those accordingly quickly and we utilize… technologies like picture matching, see them before they come in and we won’t let them become a problem, we’ll address it, have the police show up or we’ll trespass them in advance. That way we can have them charged with the case prior to them walking through the door.”

  • Jim Simpson, Director of Asset Protection, Northeast Grocery, on the May 2026 grocery ORC webinar hosted by LP Magazine

Two things matter. ‘Act quickly’ refers to asset protection and the police, not the front end, so the store’s part ends when the report is filed. And the trigger Simpson describes is a person identified as a threat, not every shoplifter. The goal is to charge the case before the next visit, which makes the associate’s report the evidence corporate builds on.

Identification moves to before the door

The phrase that changes the store’s day is ‘see them before they come in.’ Simpson did not explain how his team does the matching, and this recap does not endorse a tool. In practice, recognizing arriving customers against a list of known offenders means face-matching technology, and that carries legal duties covered in the next section. The decision point moves from the front end, where an associate would otherwise judge whether to say something, to a control room or an investigator’s phone. When a match fires, corporate has already decided what happens: a trespass notice served in advance, or police meeting the person at the entrance. The associate may never know a match occurred.

Stage Who owns it Action
First incident Associate, manager on duty Observe, report, write it up, save video
Identification Corporate asset protection Match the person to prior reports, open a case
Return visit Corporate asset protection, police Trespass in advance or meet at the entrance
Register Nobody on the floor The person should not reach it

What Legal Risks Come With Matching Faces Before Entry?

Matching customers to a watchlist is a biometric practice, and regulators have acted on it. In December 2023 the FTC banned Rite Aid from using facial recognition for surveillance for five years, alleging its system falsely flagged consumers as matching someone previously identified as a shoplifter and disproportionately affected people of color (FTC). Illinois’ Biometric Information Privacy Act requires written notice and a written release before a private entity collects biometric identifiers such as face geometry, and allows liquidated damages of $1,000 for a negligent violation and $5,000 for an intentional or reckless one (Illinois General Assembly).

Two distinctions help. A person recognizing a known offender from an incident file is different from software scanning every shopper who walks in. And a tool that flags a match is a lead for a trained investigator, never a reason for an associate to act. Before anyone deploys face matching, ask counsel about notice, consent, retention, deletion, and the liability for a wrong match.

Rules on trespass and on charging repeat theft also vary by state, and federal law is moving: the House passed the Combating Organized Retail Crime Act 348 to 60 on May 12, 2026, and it now sits in the Senate (House roll call).

Life safety sets the priority order

Themm’s answer to how he ranks cases is blunt.

“Life safety floats to the top on everything… The violence prioritizes it. So I’m probably still going to lean in assets on my team to help out so we can get folks identified and then have a plan for the next time they show up so your team members are safe, your customers are safe.”

  • Ryan Themm, Corporate Investigations Manager, Meijer, on the May 2026 grocery ORC webinar hosted by LP Magazine

This sets the escalation rule. A repeat offender who has threatened an associate moves ahead of one who has only stolen. Report the threat as its own incident, not as a note on the theft, so corporate can ‘lean in assets’ on the right case. NRF’s ORC advocacy page makes the same connection, saying retailers’ top priority is the safety of associates, customers and the shopping environment, even though theft affects margins (NRF). For scale, NRF’s 2026 report with the Loss Prevention Research Council found shoplifting incidents fell 12.4% and merchandise theft incidents fell 8.1% from 2024 to 2025, while noting that repeat offenders and organized retail crime activity show theft remains a major concern (NRF report).

A program can start with one person

Simpson was asked what a grocery chain with no ORC program should do first.

“It doesn’t need to be a very big undertaking… If a company is looking to start a program, I think you just [need] one person to manage the program to start, get the intelligence, put it all together, and then you’re able to see what you can work with and what you have, and it’s probably a lot more than you think once you start putting the cases together and see who’s hitting where and what locations.”

  • Jim Simpson, Director of Asset Protection, Northeast Grocery, on the May 2026 grocery ORC webinar hosted by LP Magazine

He described that person as the point person who organizes all the cases, meets with law enforcement, takes in the intelligence from field asset protection staff, vets the cases, and puts the most important ones at the top. The mechanism is collection before action: one investigator who keeps one file per recognized person will find the repeat offenders quickly, because the same people hit the same stores.

Reactive Intelligence-led (as Simpson describes)
Unit of work One store’s incident One file per offender across stores
Trigger After the loss Before entry, or at the next visit
Owner Store manager Corporate point person plus police

The one person’s first 90 days

Simpson described the role, not a timetable. The table is this site’s suggested sequence built on his description, and store managers own the feed: reports filed the same shift, video clips saved before they roll off, and a photo attached whenever one exists.

Weeks Focus What stores contribute
Weeks 1 to 4 Collect every incident report from every store into one file Same-shift write-ups with a saved clip
Weeks 5 to 8 Sort by person, not by store, and flag anyone seen twice Confirm sightings when asked
Weeks 9 to 12 Build a case package for the top repeat offenders and brief police Manager on duty attends the trespass briefing
After week 12 Pre-entry identification for known people, after legal review Keep reporting, never confront

Training the floor on the policy

The policy only protects associates if they know the corporate half exists. OSHA’s guidance for late-night retail workplace-violence programs recommends a clear policy on threats that every employee knows, and no reprisals for anyone who reports (OSHA 3153). An associate who believes nothing happens after a report will stop reporting or, worse, step in. Close that loop in training: reports are matched, known people are identified off the floor, and trespass and charges are handled off the floor too. Use a huddle for the observe and report standard, a break-room poster for the never-confront rule, a microlearning module for new hires, and a quarterly refresher tied to an anonymized real case. Have the manager on duty sign off each new hire’s module before the first solo shift.

What to do this week

Frequently asked questions

What should a grocery associate do if they recognize a repeat offender at the register?

Finish the transaction normally and treat the person like any other customer. Do not comment, refuse service on their own authority, or signal recognition. After the person leaves, tell the manager on duty what was recognized and which camera covered the lane. Corporate handles the trespass decision from the report.

What is a trespass notice and why does it matter for repeat offenders?

It is the formal step that turns a recognized face into an enforceable ban. Because requirements differ by state, corporate asset protection and counsel own it. Associates should never serve one, threaten one, or announce one at the door. They report what they saw and let corporate decide.

Who should the one person running a new grocery ORC program report to?

Put the role under the head of asset protection or, in a chain without one, under operations rather than store-level management. The person needs authority to request video and reports from every store and a direct line to the police liaison. Reporting into a single district keeps the file blind to offenders who work across districts.

How do you tell a repeat offender from a one-time shoplifter?

Frequency and method. A one-time shoplifter conceals a few items and rarely returns. A repeat offender comes back on a pattern, takes the same resale-friendly categories in quantity, and often shows up at several locations of the same chain. A file sorted by person reveals the pattern that a single store's reports cannot.

Is facial recognition legal in grocery stores?

It depends on the state and on how the tool is used. Illinois requires written notice and a written release before collecting face geometry, and the FTC barred Rite Aid from using facial recognition for surveillance after false matches. Check your state's biometric law and consult counsel before deploying any face-matching tool.

Sources