The Combating Organized Retail Crime Act: The 2026 Standards-Compliance Briefing on H.R. 2853, the Federal Aggregation Offense, the Coordination Center, and the Detection Record Beneath an ORC Prosecution

For more than a decade, organized retail crime existed in a strange federal blind spot. Everyone who worked in loss prevention knew the boosting crews, the fencing operations, and the transnational networks were real and growing, but there was no federal statute that named the conduct, no federal data series that counted it, and no prosecutor who could aggregate a season of coordinated thefts into a single case. A crew could hit a dozen stores across three states, net six figures, and face nothing worse than a string of disconnected misdemeanors. That is the gap the Combating Organized Retail Crime Act was written to close, and on May 12, 2026, the House of Representatives passed it 348-60 under suspension of the rules, sending H.R. 2853 to the Senate.

This briefing is for security directors, loss-prevention leaders, risk officers, and the operations executives at retailers, distribution centers, and logistics operators who will live with the consequences of a federal ORC regime. The short version is that the bill creates a new aggregation offense, stands up a federal coordination center, and adds money-laundering and forfeiture tools to the prosecutor's kit. The longer and more operationally useful version is that a federal ORC case is only as strong as the evidentiary record behind it, and that record is built at the camera, the dock, and the perimeter long before a U.S. Attorney ever sees the file. Where the detection layer sits in that chain is the part most retailers have not yet thought through.

LIVE CAM-04 · REAR LOT

The federal blind spot CORCA is trying to close

The central problem with organized retail crime is not that the law was silent on theft. It is that the law had no way to see the pattern. Under the FBI's National Incident-Based Reporting System, larceny and theft offenses are broken into categories such as shoplifting, theft from a building, theft from a motor vehicle, and theft of motor-vehicle parts. None of those categories isolates organized retail crime as a distinct phenomenon. As the Congressional Research Service put it in its 2024 report on the subject, NIBRS "does not collect data on theft in a manner that allows for an understanding of ORC separate from other types of theft." A coordinated boosting operation and a single desperate shoplifter are recorded as the same offense type. There is no federal series that counts ORC, because at the federal level there has been no law prohibiting organized retail crime that could generate the count in the first place.

That data gap has real consequences for how the conduct gets charged. A crew that steals $800 of merchandise from one store, drives to the next county, and steals $800 more is not committing one $1,600 crime in the eyes of most state codes. It is committing two separate offenses, each below the felony threshold in many jurisdictions, each handled by a different local prosecutor who may never learn the other case exists. The economic reality, a single enterprise extracting tens of thousands of dollars across a planned route, never assembles into a single charging document. CORCA's core innovation is to let federal prosecutors do what no single local prosecutor can: aggregate the thefts.

The scale of what is going uncounted is visible in the survey data that does exist. The National Retail Federation's 2025 study on the impact of retail theft and violence, drawn from senior loss-prevention executives representing 168 brands and roughly a quarter of total U.S. retail sales, found that 67% of retailers reported a transnational organized-retail-crime group was involved in thefts against their company over the prior year. More than half reported increases over the prior twelve months in phone scams, e-commerce fraud, and physical shoplifting tied to ORC groups, and threats or acts of violence during theft events rose 17% year over year. The FBI's own 2024 Uniform Crime Reporting summary recorded an 8.9% increase in reported shoplifting, even as overall larceny-theft fell, and the bureau took the unusual step of publishing a dedicated special report on reported flash-mob shoplifting incidents from 2020 through 2024. The phenomenon is large enough to warrant its own FBI report but small enough, in the official data architecture, to be invisible as a category.

The four mechanisms inside H.R. 2853

The Combating Organized Retail Crime Act is not a single rule but a coordinated set of four mechanisms, each addressing a different failure point in the current system. Read together, they move ORC from a fragmented local-enforcement problem toward a federal enterprise-crime model resembling how the government already prosecutes trafficking and racketeering networks. The pipeline below traces the conduct from the theft itself to the courtroom and shows where each statutory mechanism attaches.

The aggregation offense is the mechanism with the widest reach. By allowing the government to combine the value of stolen or counterfeit goods that total $5,000 or more across any twelve-month period, the bill converts what is today a scatter of sub-felony incidents into a single prosecutable federal enterprise. The coordination center, established within federal law enforcement, addresses the information-sharing failure that lets crews exploit jurisdictional seams: when a network operates across state lines, no single local agency holds the full picture, and the center is meant to assemble it. The money-laundering and forfeiture provisions go after the economics, targeting the resale and fencing layer that turns stolen merchandise back into cash and stripping the proceeds through mandatory forfeiture. The Congressional Budget Office estimates implementing the act would cost roughly $114 million over the 2026 through 2031 period, a modest federal investment relative to the loss figures retailers report.

Why the federal layer matters on top of the state patchwork

States have not been idle on organized retail crime, and a reasonable question is why a federal statute is needed when most states already have ORC or theft-aggregation laws on the books. The answer is that state laws stop at the state line, and ORC networks are explicitly built to cross it. A crew that structures its route to keep each individual theft below a given state's felony threshold, then moves the merchandise across two or three states to a fencing operation in a fourth, is exploiting precisely the coordination gap that no state statute can reach. The federal aggregation offense and the coordination center are designed for the interstate and transnational dimension that the NRF data shows now dominates the threat.

The shift in the unit of proof is the line in that table that matters most for anyone running a security or loss-prevention program. Under the state model, the evidentiary burden is satisfied by documenting one incident well. Under the federal model, the burden is satisfied by documenting a pattern, which means linking incidents that may be separated by hundreds of miles and several months and showing they belong to the same enterprise. That is a fundamentally different recordkeeping problem, and it is where the detection layer stops being a deterrent and starts being an evidentiary asset.

The detection record beneath a federal ORC prosecution

A federal aggregation case is assembled from contemporaneous records, and the quality of those records is decided at the moment of the event, not in the months afterward when an investigator tries to reconstruct it. This is the part of CORCA that turns from a legal story into an operational one. The conduct ORC crews engage in, staging in back lots before a smash-and-grab, loitering at a loading dock before a cargo theft, entering a restricted yard after hours, repeating the same approach pattern across multiple sites, is exactly the conduct that a proactive detection layer is built to flag in real time and time-stamp as it happens.

Traditional security camera systems record everything and surface nothing until someone goes looking. The footage exists, but it is undifferentiated and unindexed, and pulling a usable clip months later from a multi-store network is a forensic project in itself. A proactive system inverts that: it generates a discrete, time-stamped detection event at the moment an unauthorized person enters a restricted zone, a person loiters past a threshold, or a vehicle appears in a no-park lane. That event is a structured record with a timestamp, a camera location, a confidence score, and an object classification, the connective tissue a prosecutor needs to tie an incident at one site to an incident at another. The companion analysis of how AI video analytics differ from traditional CCTV walks through that architectural shift from recording to real-time detection in detail.

The distinction that keeps this defensible is the same one that runs through every IntelliSee deployment: the system detects objects and events, not identities. It classifies that a person is present in a restricted zone, not who that person is. It does not perform facial recognition, does not store video, and does not build profiles of individuals. For a loss-prevention program that may one day feed a federal case, that architecture is an advantage rather than a limitation, because it produces clean, narrowly scoped event evidence without the privacy and biometric-compliance exposure that identity-based systems carry. The broader treatment of that privacy posture appears in the biometric privacy compliance briefing.

Where detection fits across the ORC threat surface

Organized retail crime is not one tactic; it is a portfolio. The NRF data shows crews diversifying across in-store theft, cargo and supply-chain theft, and e-commerce fraud, which means the detection layer has to cover several distinct scenes. The grid below maps the most common physical ORC tactics against the detection capability that addresses each, and against the kind of record each generates for a potential federal case.

What a retailer or logistics operator should do now

CORCA has passed the House but not yet the Senate, so the operational window is the time to prepare rather than react. The practical preparation is not legal; it is evidentiary. A security and loss-prevention program that wants its records to be usable in a future federal aggregation case should treat detection events as evidence from the moment they are generated, which means a handful of concrete steps.

First, ensure the detection layer produces time-stamped, location-tagged event records, not just raw footage, so that incidents can be indexed and linked rather than searched for after the fact. Second, establish a retention practice for those event records that matches the federal aggregation window, since a twelve-month aggregation period means evidence older than a single quarter may still matter. Third, document the human-verification step for each alert, because a verified detection carries more evidentiary weight than an unverified one and reinforces the human-in-the-loop posture. Fourth, align loss-prevention intake with the coordination-center model, so that when a federal investigator does come asking, the records are already organized around the pattern rather than the single incident. The economic case for that investment, framed as loss-cost reduction, is laid out in the four-variable ROI framework, and the broader sector context appears in the AI retail security sector playbook.

Frequently asked questions about CORCA and AI physical security

Continue the research

This briefing covers the federal CORCA legislation and the detection record beneath an organized-retail-crime prosecution. For deeper reading on the surrounding threat surface, the privacy architecture, and the economic case:

• The Retail Shrink Measurement Gap: A 2026 ROI Framework: how the NRF survey data and the FBI's two conflicting crime-reporting systems create a measurement problem, and how to build an ROI case on AI-verified detection data instead of a contested national statistic.
• Cargo Theft and Distribution Center Yard Security — the logistics-facility threat surface, strategic theft patterns, and phantom-carrier fraud that CORCA's cargo provisions target.
• AI Retail Security: The 2026 Sector Playbook — the loss-prevention, workplace-violence, and privacy-by-design framework for retail environments.
• AI Video Analytics vs. Traditional CCTV — the architectural shift from recording everything to generating real-time, indexed detection events.
• Biometric Privacy Compliance for AI Physical Security — why object-level detection avoids the biometric-privacy exposure that identity systems carry.
• The Four-Variable ROI Framework for AI Physical Security — the loss-cost model for justifying a proactive detection investment.
• How IntelliSee works — the object-and-event detection architecture, human-in-the-loop response, and privacy-by-design posture referenced throughout this briefing.