I am not an expert in loss prevention. I have only been in the video world for the last three years. Despite my limited experience, however, I have picked up a fair bit about how our customers use exception reporting and video to help aid their loss prevention efforts. The other day I was having a discussion with a partner of ours about whether real-time alerts generated by an exception reporting system and tied to video would be valuable for loss prevention.
The partner’s hypothesis was that if a customer (or in this case a partner on the customer’s behalf) could get a real-time alert of a specific exception transaction that was likely a theft, the customer/partner could immediately look at video, respond and get the offending cashier off the register, thereby immediately addressing the problem and stopping further losses. Sounds like a good thing.
The impetus for the conversation was that the partner wanted us to develop real-time alerts, where our current process is analyze business rules for any violations on a regularly scheduled basis, not in real-time. My initial response to the partner was that if they wanted real-time alerts, we could provide real-time alerts - such is the magic of a SaaS-based business in that we can make changes to our service like this on the fly. After thinking about it awhile though, I started to question whether this was truly something that would provide the benefit that our partner was expecting to provide.
I started to think about how you would actually use a real-time alert based on POS data. The first thing I would question as valuable is a real-time alert that is based solely on the occurence of a specific individual type of transaction, such as a line-item cancel. First, there are likely to be dozens or more instances of any specific transaction type in any given day at every single store, most of which are valid transactions. An operator or someone monitoring the service would not be able to keep up with all of the line item cancel transactions that happened in a single day if they got a real-time alert every time someone rang up a transaction and canceled an item out. They’d be overwhelmed and start ignoring all of the alerts, which defeats the purpose. Second, if there was a transaction type that was such a red flag and happened so infrequently that it demanded an immediate response, do you think anyone who was trying to defraud the system would actually use that type of transaction to steal? Why would the company even let that transaction type be used in that case?
Exception reporting systems themselves work more with summary data than they do with individual transactions. At the highest level, they crunch data over some period of time and look for anomolies or violations of specific business rules. They then enable the user to drill down into specific transactions to investigate. A mundane example of a business rule might be to look for any cashier that has more than 15 line item cancels in a day. A loss prevention team might investigate every time this happens.
So could a real-time alert be useful when one of these business rules is violated? Again, I’m not sure how much. Assume someone is really stealing from the register by misusing the line item cancel (voiding an item that was paid for in cash by the customer so that they can later take said cash out of register without having a cash discrepancy). Maybe every third or fourth void they do is bogus, so they are stealing multiple times a day, but not every time they use that transaction type. The business rule wouldn’t be triggered until the 15th void though. At that point someone would get a real-time alert and could pull up video of that person and see… nothing related to the offending transaction. The customer would have left, the employee would be standing behind the register. The reviewer would then have to go through all 15 transactions (the last one that triggered the alert is no more likely than any of the others to be good or bad) to evaluate whether the employee’s actions were legitimate or whether some portion of them were inappropriate. The reviewer would then have to make the determination of whether that employee should immediately be confronted or whether further investigation is required. All of this takes some time and a real-time view of the store is not that relevant. If you react as quickly as possible to the incident and intervene with the employee, you keep the employee from entering any more fraudulent transactions during that day - although it is likely near the end of their shift anyway unless they went crazy and entered a bunch of bogus transactions early in their shift and you were able to review them all very very quickly.
The question I have is how much value is there in getting that alert in real-time vs checking for those business rule violations multiple times a day or even nightly? Faster response is better - no question. If the backdoor opens after hours or there is movement in the office when there shouldn’t be - I get the need for a real-time alert as you may prevent a crime in progress. In the case I just described though, responding in real-time doesn’t buy you that much over a regularly and frequently scheduled review. In most retail cases responding in an hour or 30 minutes versus instantaneously would be virtually the same. To me, the bulk of value in exception reporting is identifying and eliminating theft that occurs in small amounts over long periods of time. If you can stop someone from stealing from you after a single day rather than taking weeks or months to catch them you have saved a tremendous amount. Given the investigative process required however, I don’t know that real-time alerts (versus just frequent alerts) is a huge value creator in this pursuit.
Having said all of this, I return to my first sentence - I am not an expert in loss prevention. I could be completely missing the boat. The good news is that I know people that are experts and that if there is value, it is definitely something we can (and will) provide.