Organized Retail Crime Incident Report Form
An Organized Retail Crime Incident Report Form for documenting ORC events with suspect, vehicle, transaction, tender, and evidence details in one place. Use it to create a clear report for law enforcement, internal review, and suspicious activity tracking.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Retail · Grocery · Pharmacy · Apparel · Consumer Electronics
Overview
This Organized Retail Crime Incident Report Form captures the facts teams need when a theft, fraud, or coordinated retail crime event appears connected to a broader pattern. It is built around the details investigators actually use: incident date and time, store location, reporter contact, suspect count and description, vehicle information, transaction and tender data, evidence references, and follow-up status.
Use this template when you need a consistent report for loss prevention, store leadership, law enforcement, or suspicious activity tracking. It is especially useful when the incident involves multiple suspects, a getaway vehicle, repeated visits, refund abuse, stolen payment methods, or other signs of organized activity. The form also supports anonymous submission when the reporter should not be identified.
Do not use this template as a generic employee incident log or a broad security report for unrelated workplace issues. If the event does not involve retail crime indicators, a simpler incident form may be a better fit. The template is also not meant to collect unnecessary personal data; keep entries focused on what is needed to document the event, preserve evidence, and support next steps. For best results, complete it soon after the incident and attach or reference the exact video and transaction records tied to the case.
Standards & compliance context
- The form supports data minimization by collecting only the incident facts needed for investigation, follow-up, and reporting.
- If reporter contact information is collected, include a clear disclosure about how it will be used and who may see it.
- Anonymous submission helps reduce unnecessary personal data collection when a named reporter is not required.
- Use accessible field labels, validation, and keyboard-friendly controls so the form aligns with WCAG 2.1 AA expectations for public-facing or employee-facing reporting tools.
- Keep the workflow focused on documented facts and evidence to support an audit trail without collecting unrelated personal information.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Report Overview
This section establishes the who, what, when, and where so the incident can be routed, searched, and compared against other cases.
-
Date of incident
Select the date the ORC incident occurred.
-
Approximate time of incident
Enter the approximate time the activity was observed.
-
Store or location
Enter the store name, site code, or location identifier.
-
Reporter name
Optional. Provide your name if follow-up is needed.
-
Reporter contact email or phone
Optional. Only include contact details if you want investigators to follow up.
-
Internal case or incident reference
Optional. Use your internal case number if one has already been created.
-
Brief incident summary
Summarize what happened in 2-5 sentences, including the suspected ORC behavior and the immediate outcome.
Suspect Information
This section captures the number of suspects, appearance, behavior, and any known affiliation so investigators can identify patterns across incidents.
-
Number of suspects observed
Enter the number of individuals involved.
-
Suspect description
Describe clothing, approximate age range, height, build, distinguishing features, and any observed behavior.
-
Observed suspect actions
Select all actions that apply.
-
Known or suspected group affiliation
Optional. Only include if there is a documented basis for the affiliation.
-
Submit anonymously
Check this if you do not want your identity included in the report.
Vehicle Information
This section matters when a vehicle is part of the crime pattern, because even partial plate or direction details can connect separate reports.
- Was a vehicle involved?
-
Vehicle description
Provide make, model, color, body style, visible damage, and any distinguishing marks.
-
License plate or partial plate
Enter the plate number if observed. Partial plates are acceptable.
-
Direction of travel
Optional. Enter the direction the vehicle left or was last seen traveling.
Transaction and Tender Details
This section documents the purchase, return, or payment activity tied to the incident so fraud patterns are visible alongside the theft facts.
- Was a transaction involved?
- Transaction type
- Transaction date
-
Transaction amount
Enter the amount involved, if known.
- Tender type used or attempted
- Receipt, order, or reference number
Laws, Evidence, and Follow-up
This section records the evidence trail, law enforcement contact, and next steps so the report can move from observation to action.
-
Laws, statutes, or policies believed to be violated
List any known statutes, local ordinances, or company policies. Do not guess; include only what is supported by the facts.
- Evidence available
-
Video reference or camera ID
Enter the camera number, clip name, or file reference for any relevant footage.
-
Additional evidence notes
Include file names, timestamps, or storage location for supporting evidence.
- Was law enforcement contacted?
-
Follow-up requested
Check this if an investigator or manager should contact you for more information.
How to use this template
- Enter the incident date, time, store location, reporter details, and case reference first so the report can be traced and routed correctly.
- Describe the incident summary in factual terms, then record the number of suspects, their appearance, actions, and any known affiliation or group indicators.
- Add vehicle information only if a vehicle was involved, using separate fields for description, license plate, and direction of travel.
- Capture transaction and tender details when the incident includes a purchase, return, refund, or payment-related fraud, and use the correct field type for dates, amounts, and receipt numbers.
- List the evidence types, video reference, law enforcement contact status, and any follow-up requested so the case owner knows what happens next.
Best practices
- Record the incident while details are fresh, because suspect clothing, vehicle direction, and transaction context are easy to forget later.
- Use objective language in the incident summary and suspect description, and avoid assumptions about motive or identity unless confirmed.
- Mark required versus optional fields clearly so reporters do not abandon the form when a detail is unknown or not applicable.
- Use conditional logic to hide vehicle and transaction sections when they do not apply, which keeps the form shorter and easier to complete.
- Reference the exact video clip, camera, or timestamp instead of writing a vague note like 'footage available.'
- Capture only the PII needed for follow-up, and include an anonymous submission option when the reporter should not be identified.
- Review the report for consistency between the narrative, evidence list, and transaction details before sending it to law enforcement or internal review.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What incidents should this ORC report form be used for?
Use it for suspected organized retail crime events such as coordinated theft, refund fraud, ticket switching, booster activity, or repeated theft tied to the same people or vehicle. It is designed to capture the facts that help loss prevention, store leadership, and law enforcement connect one incident to a larger pattern. If the event is a simple one-off shoplifting case with no ORC indicators, a shorter incident report may be enough.
How often should this form be completed?
Complete it as soon as practical after the incident, while details are still fresh and video can still be located. For repeat offenders or ongoing investigations, use a new form for each event so the case history stays searchable and the audit trail remains clear. If your team sees the same suspect or vehicle across multiple stores, each location should file its own report and reference the shared case pattern.
Who should fill out the form?
A store manager, loss prevention associate, asset protection lead, or another trained employee who witnessed the event or reviewed the evidence should complete it. The form works best when the reporter can enter objective facts rather than guesses, especially for suspect descriptions, vehicle details, and transaction data. If the reporter is not certain about a field, the template should allow partial completion and later follow-up.
Does this form support anonymous submission?
Yes, the template includes an anonymous submission field for cases where the reporter should not be identified. That can be useful for internal tip lines or sensitive investigations, but the form should still collect enough incident detail to be actionable. If anonymity is used, make sure the workflow explains how follow-up questions will be handled without exposing the reporter's identity.
What evidence should be attached or referenced?
Include the evidence types that support the report, such as CCTV footage, still images, receipt records, order records, transaction logs, or written witness notes. The video reference field should point to the exact clip, camera, or timestamp so investigators do not have to search manually. Avoid vague entries like 'video attached' without a location or reference, because that slows review and weakens the report.
How does this template help with compliance and reporting?
The form supports a structured audit trail by capturing who reported the incident, when it happened, what was observed, and what evidence exists. That structure helps with internal case management and with sharing a consistent summary to law enforcement or a suspicious activity reporting process. It also supports data minimization by focusing on incident facts rather than collecting unrelated personal data.
What are the most common mistakes when using this form?
Common mistakes include leaving out the incident time, using vague suspect descriptions, skipping vehicle direction, and failing to record the transaction or tender details when fraud is involved. Another frequent issue is not linking the report to the correct video clip or case reference, which makes follow-up harder. The best submissions are specific, factual, and complete enough that another reviewer can understand the event without asking for a second explanation.
Can this template be customized for different store formats or regions?
Yes, you can tailor the fields to match your store layout, local reporting process, and regional legal requirements. For example, some teams may add fields for self-checkout activity, return fraud indicators, or multi-store case linkage. Keep the core structure intact so reports remain consistent across locations and can be compared over time.
How does this compare with ad-hoc email or chat reports?
Ad-hoc messages are easy to send but hard to search, standardize, and audit later. This template gives every reporter the same fields, which improves consistency, reduces missing details, and makes it easier to hand off a case. It also creates a cleaner record for review, escalation, and evidence retrieval than scattered emails or chat threads.
Related templates
Go deeper on the topic
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
Job hazard analysis (JHA) — also called job safety analysis (JSA) — is the structured exercise of breaking a work task into sequential steps, identifying the...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
AI governance is the framework a company uses to decide what AI tools are allowed to do, who's accountable for their outputs, what data they're allowed to...
-
See how MangoApps employee dashboards unify communications, tasks, and company updates in one personalized workspace — no developer required.
-
Generative AI boosts workplace productivity, upskilling, and knowledge sharing—helping enterprises work smarter and unlock measurable gains.
-
Digital project spaces help financial firms streamline collaboration, improve compliance, and strengthen client relationships with faster responses.
-
Discover 4 proven keys to successful project management and team collaboration — from transparent goal-setting to real-time communication and workflow...
Ready to use this template?
Get started with MangoApps and use Organized Retail Crime Incident Report Form with your team — pricing built for small business.