Geoforce | Rugged GPS Asset Tracking logo

Theft Recovery Mode (AT3 Repo Mode): Incident Playbook and Law‑Enforcement Packet

Why a defined response wins back stolen assets

Stolen equipment is most often recovered when teams act within minutes, share precise GPS data with law enforcement, and increase tracker reporting frequency. This playbook documents Geoforce’s theft recovery mode—an alias for the AT3 “repo mode”—and operationalizes it into a repeatable incident workflow with a printable law‑enforcement packet.

What “theft recovery mode” (AT3 repo mode) does

Theft recovery mode is a temporary, high‑frequency reporting profile you apply to an AT3 tracker to accelerate location updates during an active theft or recovery. Key facts:

Safety note: Do not pursue suspects. Hand live GPS to authorities and follow their instructions. See also Loss & Theft Prevention.

Rapid‑response checklist

Time is measured from the first alert (geofence exit, after‑hours motion, etc.).

0–5 minutes

  • Confirm alert and asset identity (asset name, serial/VIN, last operator). Geofencing

  • Call local law enforcement; report a theft in progress and provide a single contact (24/7 number).

  • Activate theft recovery mode (AT3 repo mode) on the device; set in‑motion reporting to ~5 minutes and stationary to ≤60 minutes. How to activate | AT3

  • Create or update the incident ticket; assign an Incident Commander (IC) and a comms channel (phone/SMS/Teams/Slack).

5–30 minutes

  • Generate and share a live data packet with law enforcement: current location, heading, speed, last 10–20 breadcrumbs, geofence exit timestamp. What police need

  • Enable push/text/email alerts to IC and officers for each new report. Geofencing

  • If the asset may enter low‑cell areas, add a nearby hybrid/satellite‑equipped escort asset (e.g., GT2h/GT1 on a support vehicle) to maintain visibility. GT2h | GT1s

  • Notify insurer/risk manager per policy.

30–120 minutes

  • Maintain a rolling situational picture: update map tiles, verify breadcrumb continuity, and record officer instructions in the incident log. Enhanced Analytics

  • If location stabilizes (asset parked), verify property type (public road, residence, storage lot) and await law enforcement direction.

  • Preserve evidence: do not remotely power devices down; avoid on‑scene contact.

After recovery

How to activate theft recovery mode (AT3)

  • Who: Users with device admin permissions.

  • Where: Geoforce web app or mobile app → Asset or Device detail → Reporting/Configuration.

  • What to change: Select the high‑frequency profile ("Theft Recovery" / “Repo mode”) for the AT3. Recommended settings (common case):

  • In motion: ~5 minutes per report (shorter intervals increase battery load).

  • Stationary: 30–60 minutes per report.

  • Alerts: enable geofence exit/entry and after‑hours motion notifications to IC and law enforcement liaison.

  • Share data: Provide officers a live map view or scheduled exports; you can also use customer/partner visibility features or APIs for secure access. Developer APIs | Service Verification | Rental visibility options

Evidence management and chain of custody

  • Export and archive: breadcrumbs with timestamps/coordinates, geofence exit timestamp, device ID/IMEI/serial, asset identifiers (VIN/serial), and operator notes. Enhanced Analytics | Track & Trace

  • Document continuity: keep a timeline with who viewed/handled data, when theft mode was enabled, and when law enforcement received updates.

  • Claims support: combine GPS evidence with invoices/work orders via Service Verification to resolve disputes and speed insurer reimbursement. Service Verification

Printable law‑enforcement packet template

Print and complete this table, or export the equivalent fields from Track & Trace and attach. See also: 3 must‑know details for recovery.

Field Value / Notes
Agency case number
Agency contact (name, title, phone/email)
Company incident commander (24/7 phone)
Asset description (type/make/model/color)
Asset identifiers (VIN/serial, internal ID)
Geoforce asset name/ID
Tracker model and ID (e.g., AT3, IMEI)
First theft indicator (date/time/event)
Geofence exit location (lat/long, address)
Current live location (lat/long, map link)
Direction/speed (last 3 points)
Last stationary time window
Photos/docs attached (Y/N; list)
Known risks (hazmat, load contents, operator notes)
Property/owner of current location (if known)
Insurance carrier/claim number
Data sharing method (live view/API/export)
Evidence contacts (IT/Legal)

Hardening before the next incident (do these today)

  • Geofence every storage yard, jobsite, and transit corridor; enable after‑hours motion alerts. Geofencing | Construction anti‑theft

  • Store serial/VIN, photos, and distinguishing marks in the asset record; verify accuracy quarterly. FAQs

  • Use hardened mounting (e.g., stainless steel bezel/weldable plates) and covert placement for non‑powered assets. Hardware options | Loss & Theft Prevention

  • Pre‑authorize who can enable theft recovery mode and who serves as law‑enforcement liaison; test your phone/SMS escalation tree.

  • For remote routes, deploy hybrid/satellite devices (GT2h/GT1s/GT2s) alongside cellular trackers to avoid coverage gaps. GT2h | GT1s | GT2s

Scenario notes and tips

  • AT3 customer example: when repo mode was set to 5‑minute motion updates, a stolen $20,000 trailer was quickly located and recovered by police using live breadcrumbs. Recovery example

  • Law‑enforcement essentials: precise live location, solid asset identification (serials, photos), and immediate geofence alerts drastically increase recovery odds. What police need

  • Rentals and revenue: GPS‑verified “days on site” helps recover uncaptured rental revenue and close disputes after theft‑related delays. Rental Manager | Service Verification

Device profiles to consider for recovery‑readiness

  • AT3 (cellular): ultra‑low power, covert, IP69 enclosure, 10‑year battery potential depending on interval; supports repo mode. AT3

  • GT1s (satellite): Zone 0 rated, global coverage for extreme/remote locations. GT1s

  • GT2h (hybrid): automatic cellular↔satellite failover for assets that move in/out of coverage. GT2h

Related resources