Global Retail Chain · Retail
The retailer was analyzing approximately 20% of POS transaction events in their loss prevention analytics system. Organized retail crime operated in patterns specifically designed to avoid rule-based detection — distributing activity across locations, time windows, and product categories to stay below individual store thresholds. The network-level signatures of organized activity required full transaction coverage across all 2,800 locations simultaneously.
Full transaction event coverage across all 2,800 locations with LLM reasoning configured to identify network-level behavioral patterns. The model analyzed transaction sequences, refund patterns, and product movement across the full store network simultaneously.
"Organized retail crime is a network problem. Our previous system looked at individual stores. You can't see a network-level pattern from a store-level view — or from 20% of the data."
VP of Asset Protection
The 67 organized crime networks identified in the first 90 days ranged from 3-person teams operating across a regional cluster of stores to a 180-person operation spanning 14 states. The largest network had been operating for 31 months, accumulating $8.4M in shrinkage from no individual store bearing enough loss to trigger an investigation.