Three Quarters of What a Shop Loses Is Lost Before a Thief Arrives

Where does a shop’s money actually go missing? For decades the answer was assumed to be the shop door, and the spending followed: guards, tags and cameras. In October 2026 the research firm IHL Group and the security company Sensormatic Solutions published Beyond Shrink, a study of 915 retail decision-makers worldwide. It found that theft by outsiders accounts for 25 per cent of retail losses. Supplier fraud, warehouse losses and goods received short account for 33 per cent. Administrative errors, return fraud and online fulfilment mistakes account for the rest.

The mechanism is ordinary. A delivery note says 100 units. Ninety arrive. Nobody counts at the back door, so the shop records ten units it never had. Months later the shelf is empty, and the loss is blamed on shoplifting. The study’s sharpest finding is that an administrative error costs $103.40 on average and an act of employee theft costs $107. Nearly the same, and the errors happen far more often. Sixty-eight per cent of retailers reported more return fraud, yet ranked preventing it fifth of seven loss priorities.

What does theft look like now?

Different from the picture in most people’s heads. In the United Kingdom, data from more than 1,000 stores on the SAI One Platform found shoplifting rose 163 per cent year on year on Halloween 2026. Sixty-two per cent of it was partial payment: part of the basket paid for at the till, the rest deliberately left unpaid. London was the hotspot, and SAI forecast a 66 per cent rise for the Saturday before Christmas. Organised retail crime, groups stealing in bulk to resell, falls hardest on the largest operators: 26 per cent of losses for retailers turning over more than $1 billion, against 17 per cent for those under $250 million. In the same study, 80 per cent of Australian, 71 per cent of American and 67 per cent of Spanish retailers reported an increase.

What happens when the fridge is the target?

On the night of 11 to 12 October 2026, attackers reached the refrigeration controllers of hundreds of French supermarkets, including 150 to 200 Intermarché stores, about 80 Coopérative U stores, 80 Carrefour stores and some 30 Monoprix stores. They forced cold rooms and freezers into defrost for hours, with temperatures as high as 50°C. Meat, dairy and frozen food spoiled overnight, small fires broke out at some sites, and Spain’s national cybersecurity agency put the losses at tens of millions of euros. On 2 November the BBC reported the same method in seven more countries: about 40 Delhaize stores in Belgium and Luxembourg were hit, and one branch lost €100,000 of produce. The entry point was ordinary: controllers running old software, weak passwords, and remote access left open for maintenance. IBM puts the average cost of a retail cyber incident at $3.8 million. Marks & Spencer forecast a £300 million hit to profit from its 2025 incident. And 63 per cent of a breach’s cost is customers who leave.

What does the shopper do when the shelf is empty?

They leave too. Euromonitor International’s Top Global Consumer Trends 2027 report, published on 4 November 2026 from a survey of more than 40,000 people, found that 54 per cent of shoppers now buy only from brands they trust completely, and 72 per cent worry about the rising price of everyday items. Euromonitor’s name for this is “Shelf Assured”: after years of shortages and quietly shrunken packs, reliability has become what people pay for. Once a brand fails them, they switch rather than wait, because the work of finding an alternative has already been done. Retail World, drawing on Euromonitor’s product tracking, reports that 38 per cent of new chocolate products and 27 per cent of new sweet biscuits disappear from online shelves within a year, against 9 per cent for baby care, where makers protect supply at any cost. Retailers step into the gap with their own-label ranges, and the switch is often permanent. Makers have answered by bringing production closer: PepsiCo put $467 million into its plant in Celaya, Mexico, and sources 90 per cent of inputs in the country.

The thief at the door is the loss a shop can see; the rest is the loss it has to go looking for.

What are the questions for a South African shop?

The global data describes systems most South African shops do not run. That is the point.

A shop without a loading dock still receives stock. The question is whether anyone counts it against the invoice before the loss is blamed on the street. A shop with one fridge has the same exposure as Delhaize’s forty, if that fridge is connected to a supplier’s remote maintenance. The fix in Europe was passwords and updates, which cost nothing. A shop whose shelf runs out of a trusted brand loses the customer to whoever has it. So the question is which five products this shop must never run out of, and whether the supplier knows. And South Africa’s specialised food and drink shops shrank 1.9 per cent in real terms in October 2025 while the wider sector grew 2.9 per cent, which is a reason to ask where the margin went before assuming it was taken.

About 170,000 spaza shops and traders in Flash’s network now also take cash for Mukuru money transfers, after the two companies’ November 2026 agreement. That makes them part of the financial system’s resilience as well as retail’s. The protection they receive should match the role they carry, and that is a question for the platforms as much as for the shops.