The Shoplifter Who Never Officially Stole $950
Picture a small boutique owner in Sacramento who watched the same woman walk out with an armful of jewelry three separate times over six weeks. Each haul was worth around $400 — comfortably under California's old $950 felony threshold, and comfortably below the bar for anything more than a shrug from local police. For years, that was the whole story: three misdemeanors, no consequences, and a shop owner quietly eating the loss.
That story doesn't end the same way anymore. Under a new wave of state "theft-aggregation" laws, those three $400 incidents can now be added together into a single $1,200 felony charge — even if prosecutors can't prove the thefts were part of one coordinated plan. More than 30 states have passed organized retail crime legislation since 2022, and 2026 is the year most of it is finally showing up in police reports, insurance claims, and small retailers' bottom lines.
If you run a shop, boutique, pharmacy, hardware store, or any business that holds physical inventory, these law changes affect how you should document theft, work with police, and handle the resulting numbers in your books. Here's what changed, and what to actually do about it.
What "Organized Retail Crime" Means (and Why It's Different From Shoplifting)
The National Retail Federation defines organized retail crime (ORC) as large-scale theft of merchandise carried out with the intent to resell it for profit — not a single person impulsively pocketing a candy bar, but coordinated crews (sometimes tied to broader criminal or even transnational networks) systematically hitting stores, fencing goods online, and moving on.
The scale is real. Retailers reported a 93% increase in larceny incidents in 2023 compared to 2019, alongside a 90% jump in average dollar loss per incident. In NRF's most recent industry survey, 52% of retailers reported an increase in shoplifting, 55% reported more digital fraud, and a striking 70% reported an increase in phone-based scams targeting their business. Two-thirds of retailers say they've seen transnational ORC involvement since 2024.
The part that should worry small business owners specifically: 83% of retailers say aggression and violence toward staff during theft incidents is the same or worse than a year ago. This isn't just a shrinkage-line-item problem anymore — it's a staff safety problem, which changes how you should think about prevention spending, not just recovery accounting.
The Big Legal Shift: Aggregation
Historically, prosecutors had to prove that a series of small thefts were part of one coordinated scheme before they could add up the dollar values to reach felony territory. That was a high bar, and it's why so much retail theft stayed misdemeanor-level regardless of how often it happened.
Aggregation laws remove that requirement. States are now letting prosecutors combine the value of multiple thefts — sometimes across different store locations, different counties, or even different states — within a defined window (commonly 90 days) to reach felony thresholds, regardless of whether the incidents were formally connected.
A few concrete examples from the current wave of legislation:
- California (Proposition 36, effective December 2024): Penal Code 490.3 allows theft values across incidents to be aggregated to hit the $950 felony threshold. Courts weigh factors like the same suspect, similar method, and a roughly 90-day window — but no longer require proof of one master plan. Modern law enforcement data-sharing also lets prosecutors aggregate thefts across city and county lines.
- South Carolina: Defines organized retail crime as theft exceeding $2,000 aggregated over a 90-day period.
- Wisconsin (AB 89): Explicitly allows retail theft aggregation and raises penalties for repeat offenders.
- Oregon (HB 4041): Raised both the per-incident theft threshold and the aggregate threshold used to set offense severity.
- Wyoming (SF 7): Lowered the felony threshold for repeat theft offenders and raised maximum penalties for sub-$1,000 theft.
This is a state-by-state patchwork, not a uniform national standard — which matters if you operate in more than one state, because your documentation obligations and felony thresholds will differ by location.
Why Small Retailers Should Care About Legislation They Didn't Ask For
It's tempting to read "felony threshold" and assume this is a law-enforcement issue, not a bookkeeping one. Three reasons it isn't:
1. Prosecution now depends on your documentation, not just police effort. Aggregation only works if incidents can be tied to the same suspect or pattern across time and location. That means your internal records — dated incident logs, POS transaction timestamps, security footage retention, police report numbers — are now part of the evidence chain that determines whether a repeat offender ever faces a felony charge instead of walking away from their fourth misdemeanor. Sloppy or missing incident records don't just cost you the tax deduction (more on that below); they can be the reason a case never gets prosecuted at all.
2. Federal legislation is still catching up, so state rules are what apply today. The Combating Organized Retail Crime Act (CORCA) has been introduced in Congress (H.R. 2853 / S. 1404) and 80% of retailers surveyed by NRF say federal action is necessary. But it hasn't passed as of mid-2026. Until it does, your obligations and protections come entirely from the state(s) you operate in — worth a five-minute check with your state retail association if you haven't looked since 2023.
3. Prevention costs are rising, and that's a budgeting decision, not just a security one. Locked cases, additional cameras, staff training, and third-party loss-prevention services all show up in your books as real operating expenses. NRF notes these measures "drive up costs for retailers and degrade the shopping experience" — which is exactly the kind of tradeoff that should be modeled against your actual shrinkage numbers, not decided on gut feel.
How to Record and Recover Theft Losses Correctly
Whether or not a prosecutor ever aggregates a case, you still need clean records for two separate reasons: insurance claims and tax treatment.
File a police report every time — even for small amounts. A report is often required for insurance claims, and under aggregation laws it's also what allows separate incidents to be linked to the same offender later. Log the date, approximate value, and a police report number for every theft incident, no matter how minor it seems in isolation. Small businesses that only report the "worth it" incidents are inadvertently making aggregation-based prosecution harder for everyone, including themselves next time.
Know the difference between shrinkage and a deductible theft loss. Ordinary, hard-to-pin-down inventory shrinkage (the diffuse "some stuff went missing somewhere") is typically absorbed through your cost of goods sold via inventory adjustments. A discrete, documented theft — an identified incident, a police report, a dollar estimate — can instead be claimed as a business theft loss under IRC §165, reported on Form 4684, Section B, then carried to Schedule C. Business theft losses aren't subject to the $100/$500 per-event floor or the 10%-of-AGI threshold that apply to personal casualty losses, which makes proper documentation worth the extra ten minutes per incident.
Calculate the loss correctly. The deductible amount is generally the lesser of the property's adjusted basis or its decline in fair market value, minus any insurance reimbursement. If your insurer pays out on a claim, that reimbursement reduces the deductible loss accordingly — don't double-count it.
Keep the paper trail together. Police report number, date, itemized value, security footage retention confirmation, and insurance correspondence should all live in one place, tagged to the same incident. If your books are just a single "shrinkage" adjustment at month-end with no supporting detail, you've lost the ability to substantiate a theft-loss deduction and made it that much harder for a prosecutor to ever connect your case to a pattern.
This is exactly the kind of record-keeping that benefits from a system where every entry is auditable and traceable back to its source. Beancount.io's plain-text accounting lets you tag each transaction with metadata like a police report number or incident date directly in the ledger entry, so a theft loss isn't just a lump-sum adjustment — it's a fully documented, version-controlled record you can hand to your accountant or an insurance adjuster without reconstructing anything from memory. Get started for free and see why more small businesses are moving their books to a format they can actually query and audit.