Loading...
operations

Organized Retail Crime Incident Log

Log organized retail crime incidents in one place with suspect details, loss estimates, evidence references, and law enforcement follow-up fields. Use it to standardize reports across stores and preserve the facts needed for review.

Trusted by frontline teams 15 years of frontline software AI customization in seconds

Built for: Retail · Grocery · Pharmacy · Convenience Stores · Apparel

Overview

The Organized Retail Crime Incident Log is a workplace form for recording the facts of a theft event that appears planned, coordinated, or repeated. It captures the incident date and time, store location, incident type, a short summary, suspect details, merchandise taken or attempted, estimated dollar loss, recovery information, video references, witness details, and the law enforcement report number.

Use this template when a store needs a consistent record for loss prevention, internal review, insurance follow-up, or police reporting. It works well for incidents involving multiple suspects, a vehicle, repeated behavior, or a clear attempt to conceal merchandise or bypass checkout. The structure helps teams document what was seen, what was recovered, and what evidence exists without relying on scattered emails or handwritten notes.

Do not use this form as a catch-all for every minor customer issue. If there was no theft attempt, no loss, and no need to preserve evidence, a simpler store incident note may be enough. The form also should not be used to guess at identity, motive, or criminal history. Keep the record to observable facts, source references, and follow-up actions so it stays useful for operations and law enforcement review.

Standards & compliance context

  • If witness or submitter details include PII, collect only the minimum necessary information and state how it will be used and retained.
  • For public-facing or shared forms, make required fields clear and ensure the layout is accessible under WCAG 2.1 AA with labels, validation, and keyboard-friendly controls.
  • If the log is used in a workplace investigation, keep the record factual and role-based so it supports an audit trail without over-collecting personal data.
  • When law enforcement information is entered, store only the report number and relevant contact details needed for case follow-up.

General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.

What's inside this template

Submission Notice

This section records who submitted the log and what happens after submission so the incident has a clear owner and follow-up path.

  • What happens after I submit?
  • Your name

    Optional. Include only if the team needs a follow-up contact.

  • Your role

    Optional. Helps route the incident to the right reviewer.

Incident Overview

This section captures the core facts of the event: when it happened, where it happened, and what kind of incident it was.

  • Date of incident (required)
  • Approximate time of incident (required)
  • Store or location (required)
  • Incident type (required)
  • Brief incident summary (required)

    Describe what happened in observable terms. Avoid assumptions or conclusions.

Suspect Description

This section preserves the observable suspect details needed for review, comparison, and potential identification.

  • Number of suspects (required)
  • Primary suspect description (required)

    Include observable details such as approximate age range, height, build, clothing, distinguishing features, and direction of travel.

  • Additional suspect details

    Use this field if there were multiple suspects or coordinated actions.

  • Was a vehicle involved? (required)
  • Vehicle description

    Include make, model, color, license plate if observed, and direction of departure.

Merchandise and Loss Details

This section documents what was taken or attempted, how much was lost, and whether any merchandise was recovered.

  • Merchandise categories involved (required)
  • Items taken or attempted (required)

    List item names, quantities, SKU or UPC if known, and whether items were recovered.

  • Estimated dollar loss (required)

    Enter the estimated retail value of unrecovered merchandise only.

  • Was any merchandise recovered? (required)
  • Recovery details

    Describe what was recovered, where it was found, and by whom.

Evidence, Witnesses, and Law Enforcement

This section links the incident to supporting evidence, witness information, and any police report or contact record.

  • Is video documentation available? (required)
  • Video documentation reference

    Provide camera ID, file name, case link, or storage reference.

  • Were witnesses present? (required)
  • Witness details

    Include witness name and contact information only if needed for follow-up and permitted by policy.

  • Was law enforcement contacted? (required)
  • Law enforcement report number

    Enter the police report, case, or incident number if available.

How to use this template

  1. 1. Enter the submitter name and role, then state what happens after submit so the reviewer knows who receives the log and how it will be handled.
  2. 2. Record the incident date, time, store location, incident type, and a factual summary of what occurred without adding assumptions.
  3. 3. Describe the suspect count, visible characteristics, vehicle involvement, and any details that were directly observed or confirmed by video.
  4. 4. List the merchandise categories, items taken or attempted, estimated dollar loss, and any recovered merchandise with recovery details.
  5. 5. Attach or reference video, note witnesses and their details, and record whether law enforcement was contacted along with the report number if available.

Best practices

  • Capture the log as soon as the incident is safe to document so details are still fresh and the audit trail is stronger.
  • Use conditional logic to show recovery or vehicle fields only when they apply, so the form stays short enough for store staff to finish quickly.
  • Separate observed facts from conclusions; write what the suspect did, not what you think they intended.
  • Reference video by camera name, time range, or file link so another reviewer can find the footage without searching through notes.
  • Estimate loss from the actual items involved and mark whether merchandise was recovered, because partial recovery changes the final record.
  • Keep witness details limited to what is needed for follow-up and avoid collecting unnecessary PII.
  • If the incident involved multiple locations or repeat suspects, use the same field labels across stores so reports can be compared cleanly.

What this template typically catches

Issues teams running this template most often surface in practice:

The suspect description is too vague to be useful for later review or comparison.
The form lists a dollar loss but does not identify the items that drove the estimate.
Video exists, but the reference field is left blank or too generic to locate the footage.
Witnesses were present, but their details were not captured while the event was still fresh.
Law enforcement was contacted, but the report number was never added to the record.
Recovery details are missing, so the final loss picture is incomplete.
The summary includes guesses about intent or identity instead of observable facts.

Common use cases

Store Manager, Urban Apparel Location
A manager documents a coordinated grab-and-run event involving multiple suspects, a vehicle, and several high-value items. The log preserves the timeline, camera reference, and police report number for follow-up.
Loss Prevention Lead, Regional Grocery Chain
A loss prevention lead uses the template to compare repeated incidents across stores and identify patterns in merchandise selection and suspect behavior. Standard fields make it easier to spot repeat activity.
Pharmacy Operations Supervisor
A supervisor records an incident where controlled-access merchandise was targeted and some items were recovered. The form helps separate recovered inventory from unrecovered loss and keeps the evidence trail organized.
Convenience Store Shift Lead
A shift lead completes the log after a late-night theft involving a single suspect and a getaway vehicle. The structured fields make it easier to hand off the case to management and law enforcement.

Frequently asked questions

When should this incident log be used?

Use it any time a theft or coordinated retail crime event involves planning, multiple suspects, repeat behavior, or a clear attempt to evade detection. It is also useful when the store needs a consistent record for internal review, insurance, or law enforcement follow-up. For a simple shoplifting note, a lighter incident form may be enough. If the event includes evidence, losses, or a police report number, this log is the better fit.

Who should complete the log?

A store manager, loss prevention associate, shift lead, or another designated incident owner should complete it as soon as practical after the event. The person filling it out should record only what they observed or can verify from video, witnesses, or reports. If multiple people saw different parts of the incident, one person can compile the final entry while preserving source details. That helps keep the audit trail clear.

How often should stores use this template?

Use it for each qualifying incident, not as a weekly summary. A per-incident log makes it easier to compare patterns across locations, identify repeat suspects, and attach the right evidence. If your organization also tracks trends, you can roll these entries into a separate monthly review. The template is designed for event-level documentation first.

What should be included in the incident summary?

Keep the summary factual and short: what happened, where it happened, what was taken or attempted, and whether anyone was detained, recovered, or reported to police. Avoid speculation about motive or identity unless it is directly supported by evidence. The goal is to create a clean record that another reviewer can understand without needing the full narrative. Specificity matters more than length.

How does this template help with evidence and law enforcement follow-up?

It creates a single place to capture video documentation references, witness details, and the law enforcement report number. That makes it easier to hand off the case, revisit the facts later, and connect the incident to store footage or external reports. If your team uses a case management system, the log can serve as the intake record that points to the source files. A clear reference field is better than burying evidence in free text.

What are the most common mistakes when filling this out?

Common mistakes include leaving the suspect description too vague, estimating loss without listing the items involved, and forgetting to note whether video exists. Another frequent issue is mixing confirmed facts with assumptions, which makes the record harder to trust. Stores also sometimes omit the police report number or witness names when they are available. This template is designed to reduce those gaps.

Can this be customized for different store formats or regions?

Yes. You can add fields for department, register lane, camera ID, security guard name, or local case number if those are useful in your workflow. Some retailers may also add conditional logic for recovery details, vehicle involvement, or whether a suspect was identified. Keep the form lean enough that associates can complete it quickly after the incident. Only collect fields you will actually use.

How does this compare with an ad hoc email or chat message?

An ad hoc message is easy to send, but it is hard to search, compare, and audit later. This template standardizes the same facts every time, which improves consistency across stores and shifts. It also reduces the chance that key details like video references or report numbers get lost in a thread. For repeat incidents, structured logging is much easier to review than scattered notes.

Go deeper on the topic

Related concepts
  • A standard operating procedure (SOP) is a documented, step-by-step procedure for a repeatable task — the written version of "how we do this here." Good SOPs...
  • Workforce management (WFM) is the operational discipline of getting the right employees, with the right skills, in the right place, at the right time — and...
  • A daily huddle is a brief (10–15 minute) standing meeting held at the start of a shift or workday to align the team on priorities, surface issues, and...
  • A deskless worker is any employee whose job happens without a desk, a company laptop, or a fixed workstation. They're roughly 80% of the global workforce —...
Related guides

Ready to use this template?

Get started with MangoApps and use Organized Retail Crime Incident Log with your team — pricing built for small business.

Ask AI Product Advisor

Hi! I'm the MangoApps Product Advisor. I can help you with:

  • Understanding our 40+ workplace apps
  • Finding the right solution for your needs
  • Answering questions about pricing and features
  • Pointing you to free tools you can try right now

What would you like to know?