Written by Kevin Metcalf, JD | VP, Law Enforcement Division at Whooster/OWL Intelligence Platform | Founder, National Child Protection Task Force
Organized retail crime isn’t shoplifting anymore. Regulators and retailers are describing scenarios where there are boosters who steal to order, fences who move goods through online marketplaces, and crews that cross state lines the same week they hit three different stores. The individual charge might be a misdemeanor. The network behind it rarely is. Whooster’s investigative data platform is built to solve this problem, connecting incidents that look unrelated until someone puts the data side by side.
The National Retail Federation has tracked this shift for years, and its most recent data confirms that in-store shoplifting is finally leveling off, but the organized crime funding it hasn’t slowed down. It’s just moved.
What Is Organized Retail Crime?
Organized retail crime, or ORC, is theft and fraud carried out by coordinated groups rather than individuals acting alone. Instead of one person stealing for personal use, ORC involves crews or networks who steal, or fraudulently obtain, merchandise specifically to resell it for profit. State organized retail crime statutes generally look for three markers that separate ORC from ordinary theft, including coordination between multiple people, intent to resell rather than consume, and movement of goods across store, city, or state lines.
That last marker is why ORC is a law enforcement problem, not just a retail one. A booster caught with $150 in stolen cosmetics looks like a minor case on paper. If that same booster has hit six stores in three counties for a fencing operation that resells through an online marketplace, the case is a felony-level criminal enterprise, and no single store’s incident report shows that on its own.
What Is Retail Fraud 3rd Degree?
States classify retail theft differently, but Michigan’s tiered system is a clear example of how the charge level tracks dollar value rather than intent. Under MCL 750.356d, retail fraud in the third degree is a misdemeanor covering theft or price-tag misrepresentation involving property worth less than $200. It’s punishable by up to 93 days in jail and a fine of up to $500, or three times the value of the property, whichever is greater.
Compare that to first-degree retail fraud under MCL 750.356c, a felony that applies once the value hits $1,000, or when a defendant with a prior retail fraud conviction is caught stealing $200 or more. First-degree carries up to five years in prison and fines up to $10,000 or three times the property value.
The gap between those two charges is the whole problem investigators run into. A crew running ten boosters through ten different stores, each one stealing $180 worth of merchandise, generates ten third-degree misdemeanors when viewed in isolation.
But Michigan’s Organized Retail Crime Act (MCL 752.1081–1090) doesn’t care about the dollar amount of any single theft. Organizing, financing, or conspiring with others to run that kind of operation is a felony on its own, up to five years and a $5,000 fine, regardless of how small each individual hit looks.
Whether a case gets charged as a string of misdemeanors or a coordinated felony often comes down to whether anyone connected the incidents in the first place. Other states run similar tiered systems, splitting retail theft into misdemeanor and felony charges based on dollar thresholds, but Michigan’s is just a clear, well-documented example of how the math works.
Types of Retail Fraud
ORC groups don’t rely on one method. The NRF’s 2025 Impact of Retail Theft & Violence survey found retailers reporting increases across nearly every channel ORC touches, not just the sales floor. The most common types include:
- Boosting: Crews steal high-resale merchandise, often cosmetics, over-the-counter medication, designer apparel, or electronics, to sell through fences or online marketplaces.
- Refund and return fraud: Stolen or counterfeit receipts are used to return merchandise for cash or store credit, effectively laundering stolen goods back into currency.
- Gift card fraud: Cards are tampered with, cloned, or drained before a legitimate customer purchases them, or purchased with stolen payment credentials and resold.
- Digital and ecommerce fraud: Stolen payment information, fraudulent chargebacks, and fake seller accounts on online marketplaces let ORC groups move goods and money without ever entering a physical store. It’s the category where fraud and identity management tools matter most, since the person behind the fake account is rarely who the account claims. NRF found a 55% increase here.
- Phone-based scams: Impersonation and social engineering schemes, often targeting elderly victims, that ORC groups use to extract payment information or gift card codes directly. This was the fastest-growing category NRF tracked, up 70%.
Organized Retail Crime Statistics
The numbers back up what investigators are seeing on the ground. NRF’s most recent Impact of Theft & Violence report, produced with the Loss Prevention Research Council, found that shoplifting incidents fell 12.4% and retail merchandise theft dropped 8.1% in 2025 compared to the year before, largely credited to retailer investment in store-level security technology.
But that decline doesn’t mean ORC is retreating. It means it’s adapting. The same reporting period saw sharp increases in fraud schemes, scams, and organized theft operating outside the four walls of a store. NRF’s prior-year survey put hard numbers on that shift, finding that 70% of retailers reported increases in phone scams tied to ORC groups, 55% reported increases in digital and ecommerce fraud, and 50% reported increases in cargo or supply chain theft.
The scope is bigger than most people assume. NRF has found that 66% to 67% of retailers reported that a transnational ORC group was involved in thefts against their company in the past year. This is a big enough problem that the Combating Organized Retail Crime Act passed the House 348–60 in May 2026 and is now pending in the Senate. It would create a federal Organized Retail and Supply Chain Crime Coordination Center to improve information-sharing between local, state, and federal agencies, the same kind of coordination risk management and compliance teams already rely on data fusion to handle at the institutional level.
Where ORC Investigations Break Down
Most ORC cases don’t fail because investigators lack effort. They fail because the evidence lives in ten different systems that don’t talk to each other. A retail loss prevention report sits in one database. A booking record from a different jurisdiction sits in another. A resale listing on an online marketplace sits somewhere else entirely, tied to a username instead of a name.
Without a way to connect those pieces, every incident stays a low-dollar misdemeanor with no visible connection to anything else. It gets harder still once a fence or crew leader realizes they’re being watched and goes quiet, which is where skip tracing tools pick up where a cold trail leaves off. Intelligence-led policing exists specifically to solve this kind of problem, and ORC is one of the clearest cases for it. The individual data points aren’t the case. The relationships between them are.
How Whooster Supports ORC Investigations
Whooster wasn’t built for retail loss prevention teams alone. It was built for the investigators who take a loss prevention referral and have to figure out who the booster actually is, who they’re connected to, and whether the same name, phone number, or vehicle shows up in a report from a different agency three counties over. That’s the core problem Whooster’s law enforcement investigation software is designed to close, and it’s the same reason retail and ecommerce fraud prevention teams increasingly work off the same data investigators do.
Powered by the OWL Intelligence Platform, Whooster pulls together billions of public and private records, including criminal history, court records, known associates, vehicle data, and digital identifiers, into a single searchable layer. For an ORC case, that means an investigator can take one third-degree retail fraud report and surface whether the subject has hit other stores, uses aliases, or connects to a known fencing operation, all in the time it used to take to request one records check.
ORC networks count on their incidents looking unrelated. Whooster exists to make sure they don’t stay that way.
Sign up for a trial and see what the OWL Intelligence Platform surfaces on your next case.
About the Author
Kevin Metcalf, JD, is Vice President of the Law Enforcement Division at Whooster Data Solutions and OWL Intelligence Platform, where he leads national and international engagement with agencies modernizing investigations through intelligence-led policing and advanced analytics. He holds a Juris Doctor from the University of Arkansas School of Law and completed executive education at Harvard Business School. Metcalf brings three decades of law enforcement and investigative experience, including 13 years as a Deputy Prosecuting Attorney in Arkansas, service as a Federal Air Marshal, and time as a police officer and Border Patrol agent. He is the founder of the National Child Protection Task Force (NCPTF), which built global coalitions of investigators, technologists, and legal professionals to recover missing children and dismantle human trafficking networks. Metcalf is an internationally recognized expert in intelligence-led investigations, OSINT, and counter-human trafficking strategy.
