Retail Security Is Broken
Five lessons on retail risk, employee safety, customer friction, and making security investments actually work.
By Alexander Ray | After Action Security Group
Commentary inspired by Retail Insider's August 2026 Loss Prevention & Security Report, which argues that retail risk now extends well beyond merchandise theft into employee safety, customer experience, operations, fraud, data integrity, and business continuity.
Are we actually making the store safer, or are we just making the merchandise harder to steal?
Look, we've all been there.
You walk into a liquor store and an entire wall of bottles is sitting behind a half-inch-thick piece of plexiglass that is ten feet tall and twenty-five feet long.
On one hand, absolutely, it protects high-value merchandise while keeping it in relatively plain view. That part makes sense.
But what problem did we actually solve—and what new problem did we create?
If an incident stays at the level of simple shoplifting, the barrier may do exactly what it was intended to do.
If the incident escalates and a suspect produces a weapon or forces access into that secured space, the risk changes immediately. Now the employee may be sharing a confined area with the offender, with limited options to disengage or move to safety.
Retail Insider's August 2026 report is worth reading for exactly this reason.
Citing Retail Council of Canada-led enforcement initiatives, the report states that 121 weapons were seized in 2024 and that 81% of retailers said organized retail crime offenders had become more violent.
Those are Canadian figures, not Nevada figures, and the threat environment is not identical.
The lesson still travels.
Theft cannot be treated solely as a merchandise problem when the people dealing with it are increasingly part of the exposure.
The loss of several thousand dollars in inventory at one time is a horrifying prospect, especially for an owner already working against tight margins.
But compare that with the consequences of a serious employee injury or death: the human cost first, followed by potential workers' compensation claims, litigation, staffing disruption, higher insurance costs, and long-term damage to the operation.
At that point, the bottle behind the plexiglass is no longer the largest loss on the table.
The Question That Should Drive Every Security Decision
What risk are we actually reducing?
Does the control protect people as well as property?
What new operational or customer problems could the control create?
Those questions should come before the purchase order.
1. Retail Security Has Moved Beyond Theft
Theft is not going away.
Retailers have dealt with it for as long as retail has existed, and they will continue dealing with it for the foreseeable future.
But modern retail security has to look well beyond simply stopping someone from walking out with merchandise.
Retail Insider's central point is that loss prevention now reaches employee safety, customer data, digital infrastructure, payment systems, inventory accuracy, operational continuity, and even the viability of individual locations.
That is a much more useful way to think about risk because it forces us to ask what can actually damage the business rather than simply what can disappear from a shelf.
The goal should be balance: a store that is friendly and easy for legitimate customers to navigate while maintaining a security posture that protects employees, property, and the operation itself.
Sometimes the security measures we install can even create vulnerabilities of their own.
Take something as simple as a visible surveillance monitor near the front of a store.
Years ago, having that monitor visible may have been viewed purely as deterrence—a very obvious way of saying:
"We're watching you."
Today, it can also give anyone walking through the door information about camera placement, coverage priorities, and obvious gaps.
The system may still deter some people, but deterrence is not the only effect we should be evaluating.
The same applies to routine behavior.
We should not assume every offender walks into a store, commits a crime, and disappears forever.
Repeat offenders can observe employee routines, access points, product placement, response times, and visible security measures over multiple visits.
Someone can walk through your store several times before becoming a problem—and may even become familiar to your staff in the process.
That does not mean treating every customer like a criminal.
Quite the opposite.
It means designing security so the business can remain welcoming while still being difficult to exploit.
The best security program is one employees can actually use, customers barely notice, and bad actors have difficulty exploiting.
2. More Security Does Not Automatically Mean Better Security
One of the easiest responses to a security problem is to add something.
Another camera.
Another locked case.
Another barrier.
Another guard.
Another procedure.
Sometimes that is exactly the right answer.
Sometimes it simply means we spent money without improving the underlying risk.
Large-format retailers such as Total Wine & More provide a useful contrast because scale creates options.
In the Las Vegas Valley, Total Wine currently operates stores around Summerlin/Boca Park, Centennial, Henderson's Stephanie Street corridor, and the South Strip.
These are deliberate retail trade areas with significant customer traffic and spending power—not simply locations selected because theft risk is low.
The demographic contrast is especially interesting.
Boca Park leasing materials report a 2024 average household income of approximately $112,600 within three miles.
Centennial Center reports a 2025 three-mile median household income of $105,409 and an average household income of $134,253.
For comparison, the U.S. Census Bureau reports Las Vegas city's 2020–2024 median household income at $73,877.
In other words, strong household demographics do not eliminate the need for loss prevention.
Crime does not check the median household income before walking through the door.
Scale also gives a retailer more flexibility in staffing and store design.
A large operator can spread labor, technology, and process costs across a much larger business.
The independent liquor store, smoke shop, convenience store, or specialty retailer may have three people working—not three people plus a dedicated loss-prevention team.
For some independent retailers, targeting a more curated customer base through premium whiskey, tequila, cognac, allocated releases, tastings, local events, and enthusiast communities can be a smart business strategy.
But that is not realistic—or even desirable—for every store.
Many successful operators depend heavily on beer, wine, shooters, mixers, and commodity spirits.
Their customers value convenience, price, and speed.
That is where intelligent design matters more than simply adding security.
A smaller retailer may not have the budget for a massive security operation, but it can still layer cameras, alarm systems, exterior lighting, clear sightlines, merchandise placement, door control, and employee procedures so that each piece supports the others.
Even a store operating twenty-four hours a day can benefit from an alarm strategy for offices, storage rooms, safes, receiving areas, and other spaces that should not be freely accessible.
The key is understanding the tradeoff.
Locked merchandise can reduce shrink while also creating customer friction.
Retail Insider cites research finding that 38% of shoppers had abandoned a purchase because of security measures or in-store friction.
The lesson is not "never lock anything up."
The lesson is that every control has a cost beyond the invoice.
Security should make the business harder to exploit without making legitimate customers feel like suspects.
More locks are not automatically better security.
More cameras are not automatically better security.
More plexiglass is not automatically better security.
Security should support the operation. It should not become the operation.
3. Security Equipment Should Be Judged by Effectiveness, Not Existence
One of the easiest mistakes for a business to make is assuming that owning security equipment automatically means it has a functioning security program.
"We have 20 cameras."
Okay.
What are those 20 cameras actually doing for you?
Can they capture a usable image of someone entering the store, or are they mounted so high that they provide a beautiful view of the top of everyone's head?
Can you clearly identify someone at the register?
Does the camera covering the front door still produce usable images when afternoon sunlight hits the glass?
Can the parking-lot cameras tell you what happened before and after an incident?
And when something does happen, can anyone in the building retrieve the footage without calling the installer and waiting two days?
Those questions matter considerably more than the number of cameras hanging from the ceiling.
The same principle applies to almost every other security system.
You can have a panic button, but if the employee cannot safely reach it during a robbery, what did we accomplish?
You can have an alarm system with every available option, but if employees do not understand which areas are armed, what happens when it activates, or who is expected to respond, the technology is doing less than the owner probably believes.
You can have access control on every important door in the building, but if employees routinely prop those doors open because the system is inconvenient, you now have an expensive access-control system protecting absolutely nothing.
From my experience working within a large school-district environment, this remains one of the most common day-to-day failures I see:
The technology works exactly as intended, but the human workaround defeats the entire purpose of having it.
Even something as simple as video retention matters.
There is a major difference between saying:
"We have cameras."
and being able to say:
"We have usable footage, we know how long it is retained, we know how to retrieve it, and we can provide it quickly when an incident occurs."
That second business has a security capability.
The first business owns cameras.
Those are not necessarily the same thing.
Technology does not fix poor planning.
If the camera is looking in the wrong direction, the resolution does not matter.
If the panic button is inaccessible, the brand does not matter.
If nobody knows how to export video, the price tag on the recorder does not matter.
Every piece of equipment should have a purpose that can be explained in plain language:
What are we trying to accomplish with this camera?
What threat is this alarm addressing?
Who is supposed to use this duress device?
Who should have access to this door?
How quickly can we get useful information out of the system after something goes wrong?
Buying technology is easy. Building a security program around that technology is the hard part.
4. Employee Safety Should Be Treated as a Core Loss-Prevention Issue
At some point, every conversation about theft has to come back to the people standing behind the counter.
A bottle can be replaced.
Inventory can be written off.
A damaged door can be repaired.
An employee who is seriously injured during a robbery, assaulted while confronting a shoplifter, or followed to a vehicle after closing is an entirely different kind of loss.
And yet, in too many businesses, employees are still left trying to determine the company's expectations in real time.
Do I confront them?
Do I follow them outside?
Do I try to recover the merchandise?
Do I call police immediately?
Do I use the panic button?
What happens if they show a weapon?
What happens if they come back tomorrow?
Those are not questions an employee should be answering for the first time while an incident is actively unfolding.
Every retailer should have a clear policy explaining what employees are expected to do—and, just as importantly, what they are not expected to do.
If the policy is to observe, document, disengage, and contact management or law enforcement, employees need to know that before they are ever put in the position of making the decision under stress.
Ambiguity creates risk.
An employee may chase someone into a parking lot because they believe they are protecting the business.
Another may attempt to physically recover merchandise because they are afraid of being blamed for the loss.
Someone else may freeze because nobody ever explained the process.
None of those outcomes should be left to chance.
Employee safety also goes far beyond shoplifting.
What does the closing employee do if someone is waiting outside?
Are people leaving alone at 2:00 a.m. or carrying deposits through a poorly lit parking lot?
Is there a procedure for opening when a suspicious vehicle is already on the property?
Can duress alarms be reached without placing someone in greater danger?
Is there somewhere to retreat if an incident escalates?
Does management have a plan for repeat offenders who have threatened employees and continue returning?
These are loss-prevention issues because the purpose of loss prevention is not simply to prevent merchandise from leaving the store.
It is to prevent losses that can damage the organization.
A serious employee injury can produce consequences far beyond the immediate incident: workers' compensation exposure, lost productivity, staffing shortages, potential litigation, increased insurance costs, employee turnover, and a lasting effect on everyone who works at that location.
Employees do not need to become security officers.
They need to know what suspicious or escalating behavior looks like, when to disengage, who to contact, where to go, and what the business expects from them when something goes wrong.
Opening and closing procedures should be simple.
Robbery procedures should be understood.
Emergency contacts should be current.
Duress systems should be tested.
Most importantly, no employee should believe that protecting a fifty-dollar bottle is worth risking their life.
If a business creates an aggressive security policy without giving employees the training, staffing, or tools to carry it out safely, it has not reduced risk.
It has transferred that risk directly onto the staff.
Protecting merchandise should never come at the expense of protecting people.
5. Small and Mid-Sized Retailers Need Enterprise-Level Thinking Without Enterprise-Level Overhead
One of the biggest advantages a large retailer has is not necessarily better cameras, better alarms, or better locks.
It is access to people whose entire job is to think about risk.
Large organizations may have dedicated loss-prevention teams, corporate security, investigations, operations, compliance, asset protection, and risk management all working together.
A local liquor store, smoke shop, specialty retailer, or small chain usually does not have that structure.
The owner is often handling staffing, inventory, payroll, vendors, customer complaints, maintenance, marketing, and whatever else happened to catch fire that day.
Security becomes one more responsibility added to an already full plate.
That does not make the risks smaller.
A small retailer can still deal with robbery, organized theft, employee misconduct, vandalism, burglary, internal shrink, workplace violence, poor camera coverage, weak access control, and emergency-response failures.
The difference is that there may not be a corporate department available to identify those problems before something goes wrong.
This is also where smaller operators can get pushed toward the wrong solution.
One vendor recommends more cameras.
Another recommends a new alarm.
Someone else wants to sell access control.
Another company recommends guards.
Individually, every one of those products may have value.
But who is looking at the entire operation and asking whether any of them address the highest-priority risk?
A business may not need another ten cameras.
It may need two existing cameras repositioned.
It may not need a new access-control platform.
It may need employees to stop propping open the back door.
It may not need a guard at the entrance.
It may need better lighting, improved sightlines, clearer employee procedures, and a better process for documenting repeat offenders.
It may not need to spend $25,000.
It may need to spend $2,500 in the right places.
That is the difference between buying security products and actually managing risk.
Enterprise-level thinking does not mean enterprise-level spending.
It means looking at the operation as a whole:
Where are the vulnerabilities?
Which ones are most likely to cause harm?
Which have the greatest potential impact?
What can be corrected immediately?
What requires investment?
And what expensive "solution" is doing little more than making everyone feel better?
When margins are tight, every security dollar has to accomplish something.
There is no reason to spend heavily on security theater simply because it looks impressive or because someone convinced you that more equipment automatically means less risk.
The goal should be prioritization.
Fix the vulnerabilities that can hurt your people first.
Address exposures that can seriously disrupt the business.
Protect the assets that actually matter.
Then build outward as the budget allows.
Most small and mid-sized retailers are never going to have a corporate command center or a team of full-time loss-prevention professionals.
They should not need one.
What they do need is the same mindset those teams use:
Identify the risk.
Understand the consequence.
Prioritize the response.
Spend money where it actually matters.
Periodically reassess whether the controls are still accomplishing what they were intended to accomplish.
Enterprise-level thinking does not require enterprise-level overhead. It requires knowing where the real risks are before you start writing checks.
The Bottom Line
Retail security is not about adding the most cameras, the most locks, or the most barriers.
It is about understanding the risks specific to the operation and building a posture that protects people, property, and the ability to keep doing business.
That means asking harder questions before buying another piece of equipment.
It means considering customer friction before locking another case.
It means making sure employees understand the plan before they are asked to use it under stress.
And it means recognizing that a control that protects a bottle while putting a person in greater danger is not automatically a successful control.
The best security program is not always the one customers notice most. It is the one that works when something actually goes wrong.
Sources & Notes
This article is commentary. Statistics and location data are sourced below so readers can distinguish the author's analysis from the underlying source material. Retail-center demographics are commercial trade-area estimates and should not be treated as official Census estimates.
[1] Retail Insider — "Loss Prevention & Security Report: Retail Risk Moves Beyond Theft."
Retail Insider, August 5, 2026. Used for the broader industry themes and cited figures concerning weapons, offender violence, and customer friction.
[2] Total Wine & More — Nevada Store Finder.
Used to verify Las Vegas Valley store locations.
[3] Fashion Village at Boca Park — Trade Area Demographics.
HUK Investments / property leasing materials, 2024. Reports 2024 average household income of $112,600 within three miles.
[4] Centennial Center — Trade Area Demographics.
Kite Realty, 2025. Reports three-mile median household income of $105,409 and average household income of $134,253.
[5] U.S. Census Bureau — QuickFacts: Las Vegas city, Nevada.
Reports 2020–2024 median household income of $73,877 in 2024 dollars.
About the Author
Alexander Ray writes about practical physical security, surveillance, investigations, and risk reduction through After Action Security Group, with an emphasis on controls that protect people without unnecessarily disrupting the business they are intended to support.