Definition
Exception-Based Reporting (EBR) is a loss prevention approach that uses POS data to automatically identify transactions that deviate from normal patterns — including voids, refunds, no-sale drawer opens, price overrides, high-value discounts, and abnormal transaction sequences — and flags them for human review and investigation.
How Exception-Based Reporting Works
Every POS system records thousands of transactions daily. The vast majority are legitimate: a customer buys a product, pays, and leaves. EBR doesn't look at those normal transactions. Instead, it applies rules and thresholds to surface the small percentage of transactions that look unusual — the "exceptions."
Common Exception Types
- Voids: Transactions cancelled after being rung up. A void rate above the store average may indicate void abuse (ringing up a sale, collecting cash, voiding the transaction).
- Refunds: Cash returned to a customer. High refund volume or cash refunds on credit card purchases are theft indicators.
- No-sale drawer opens: Opening the cash drawer without processing a transaction. Frequency above threshold suggests unauthorized cash access.
- Price overrides: Changing an item's price during a transaction. Unauthorized overrides may indicate sweethearting (giving friends discounts).
- High-value discounts: Applying discounts that exceed normal authority levels.
- After-hours transactions: Transactions processed when the store should be closed.
- Repeat transactions: The same item scanned multiple times and then partially voided — a technique used to conceal skimming.
The EBR Process
- Data collection: POS system records all transactions with timestamps, employee IDs, and transaction details
- Rule application: EBR software applies rules: "Flag any employee with more than 5 voids per shift" or "Flag any refund over $50 without manager authorization"
- Exception generation: Transactions that trigger rules are compiled into an exception report
- Human review: A loss prevention professional reviews the flagged exceptions, investigates patterns, and determines which warrant further action
- Investigation: Confirmed suspicious activity is investigated further — ideally by correlating POS data with video footage for the same timestamp
Why Traditional EBR Misses Things
EBR is a powerful tool, but it has significant limitations when used in isolation:
Reports Without Video Are Inconclusive
An EBR report showing 12 voids on a cashier's shift is a red flag — but it's not proof of theft. Maybe 12 customers genuinely changed their minds. Without correlating those voids with video footage (does the video show a customer present during each void?), the exception is a suspicion, not evidence.
Software Fatigue
EBR systems generate dozens or hundreds of exceptions daily. Without dedicated reviewers, exception reports pile up unread. A study of loss prevention programs found that most DIY exception monitoring programs are abandoned within 60 days because operators don't have time to review the reports.
Pattern Blindness
Individual exceptions look innocent. It's the patterns — the same cashier, the same time of day, the same void-to-cash sequence — that reveal theft. Pattern analysis requires consistent daily review over weeks, not occasional spot-checks.
EBR + Video Audit: The Complete Solution
The most effective loss prevention programs combine EBR data with daily video audit. This is the approach DohShield uses:
- EBR rules flag the day's exceptions from POS data
- Trained reviewers pull the video footage for each flagged exception timestamp
- The reviewer determines: is this a legitimate transaction or a suspicious event?
- Suspicious events are documented as findings with timestamped video + POS data
- Findings are compiled into a daily report for the operator
- Pattern analysis across days and weeks identifies systematic theft
This combination transforms EBR from a data dump into an actionable intelligence system. The POS data tells you what happened. The video shows you who did it and how.
EBR for Small Operators
Traditional EBR platforms (DTiQ, Envysion, March Networks) are designed for enterprise retailers and can cost $200–$500+/month with significant setup requirements. For convenience store operators with 1–20 locations, a managed daily audit service like DohShield provides the same investigative outcome without requiring the operator to learn, configure, and monitor an EBR platform themselves.
The key difference: with a software platform, you get the tool and must do the work. With a managed service, you get the results.
Key Statistics
- Employee theft accounts for 42% of all theft-related business losses (Safe and Sound Security)
- The average employee theft incident is $1,890 (Embroker)
- QSR register monitoring produced $14,000/store/year in savings (QSR Magazine case study)
- 125,000+ incidents documented through DohShield's EBR + video audit process