Location: Park Royal, London
Sector: Logistics and Distribution
Reason for Surveillance: Employee Theft Prevention
Background
Our Corporate Investigators were contacted by the operations director of a mid-sized distribution company operating out of a large depot in Park Royal, one of the busiest industrial estates in West London. The company handled fast-moving consumer goods for several well-known retail brands, and over a three-month period, stock reconciliation reports had shown a persistent and unexplained shrinkage in high-value electronics and cosmetics lines — categories that are, frankly, a magnet for opportunistic theft because they are small, valuable, and easy to conceal.
The client had already ruled out administrative error. Their warehouse management system was robust, deliveries were checked in against purchase orders, and outbound pallets were scanned before leaving the yard. That left two possibilities: theft during the picking and packing process, or theft during loading, when goods sat briefly on the dock before being sealed into outbound vehicles. Internal management had their suspicions about a small group of night-shift operatives, but nothing more than a hunch, and they were rightly wary of accusing anyone without solid evidence.
The Brief
The instruction was clear: identify whether theft was occurring, establish how, and — if possible — identify who was responsible, all without alerting staff to the fact that an investigation was underway. The client was particularly concerned about false accusation; two of the suspected individuals were long-serving employees, and a heavy-handed approach risked significant reputational and industrial relations damage if the suspicions proved unfounded.
We proposed a phased approach. First, a covert observation and CCTV audit phase to establish patterns of movement and identify pinch points in the process. Second, if patterns emerged, targeted overt deterrent measures combined with continued covert monitoring to catch any residual activity. This two-stage approach is one we favour in shrinkage cases because it lets the evidence — not assumption — dictate where the investigation goes next.
The Investigation
Working with the client’s IT and facilities teams, we conducted a full audit of the existing CCTV coverage and identified several blind spots around the goods-out bay, particularly a loading dock partially obscured by stacked pallets. With the client’s written authorisation, we installed additional covert camera coverage in these specific areas, positioned to capture the loading process without infringing on areas where staff had a reasonable expectation of privacy, such as the staff canteen and locker rooms.
Alongside the camera work, we spent four night shifts on-site conducting direct covert observation from a discreet vantage point, logging movement patterns, break timings, and vehicle loading sequences. This is often the most valuable — and most tedious — part of an investigation like this. You are looking for the exception to the routine: the pallet that gets re-stacked twice, the operative who lingers near a particular cage after everyone else has moved on, the delivery driver who spends an extra ninety seconds at the rear doors of his vehicle.
By the second week, a pattern was emerging. Two night-shift pickers were regularly diverting individual high-value items from open cages into a personal holdall stored in a maintenance cupboard near the loading bay, before removing the holdall at the end of their shift through a side door that was not covered by the original CCTV layout.
Once this pattern was established, we made a deliberate decision to extend the observation period rather than act immediately, for two reasons. First, a single night’s footage, however clear, is more vulnerable to challenge than a documented pattern repeated over multiple shifts — a point any competent employment solicitor would raise if the matter proceeded to a disciplinary appeal or tribunal. Second, we wanted to establish whether the two individuals were acting alone or whether a third party, potentially a shift supervisor turning a blind eye, was involved. To that end, we cross-referenced the timing of each diversion against the shift supervisor’s own break rota and location, recorded through the site’s existing time and attendance system, and found no correlation suggesting supervisory knowledge or involvement — a negative finding that mattered to the client, who was anxious not to widen the disciplinary net further than the evidence justified.
we also took the precaution of photographing the maintenance cupboard and side door area in daylight, with time and date stamps, to create a clear, unambiguous record of the physical layout that could be referenced alongside the covert footage without needing to rely on grainy night-time images alone to explain the geography of what had happened.
Findings
Over a combined eleven nights of covert observation and camera review, we documented seventeen separate incidents of items being diverted from stock into personal bags. The footage was time-stamped, cross-referenced against the stock discrepancy reports, and matched the missing SKUs almost exactly — a correlation that proved critical when the matter was later put to the individuals concerned.
We also identified a secondary, unrelated issue: a delivery driver from a third-party haulage contractor was found to be under-declaring collection quantities on his manifest, a separate strand that the client’s procurement team took up directly with the haulage firm.
Outcome
Armed with time-stamped footage and a full incident log, the client was able to conduct disciplinary interviews with a clear evidential basis rather than relying on suspicion. Both individuals were dismissed following a fair disciplinary process, and — because the evidence was gathered proportionately and in line with data protection principles — neither dismissal was challenged at tribunal.
Just as importantly, the client used our recommendations to close the physical gap in their process: the side door was fitted with an access-controlled lock tied to the staff time and attendance system, and the additional camera coverage was retained as a permanent fixture. Stock shrinkage in the affected categories fell by over 90% in the following quarter.
Lessons for Other Businesses
This case is a good illustration of a principle we return to again and again: theft is rarely random. It follows the path of least resistance, and that path is usually a genuine operational blind spot rather than a conspiracy. A proportionate, evidence-led surveillance operation not only identifies wrongdoing but shows you exactly where your processes need reinforcing. Businesses handling high-value stock should treat unexplained shrinkage as a process question first and a personnel question second — the two usually turn out to be connected.
Investigator’s Reflection
What stayed with me about this case was how ordinary the two individuals seemed on paper — both with clean disciplinary records, both rated as reliable by their line manager. It is a useful reminder not to let an employee’s general reputation substitute for evidence, in either direction: a good track record does not rule out wrongdoing, just as a poor one does not prove it. We were also struck by how quickly the client’s operational team, once shown the footage, could point to exactly why that side door had never been flagged as a risk — it had been fitted years earlier for a purpose that no longer applied, and had simply been forgotten. Good physical security audits should really be revisited whenever a site’s layout or workflow changes, not left in place indefinitely on the assumption that yesterday’s risk assessment still holds.
