A Guide for Retail Managers

Knowing that customer aggression is a risk isn't the same as knowing what to do about it. This guide gives retail managers a practical framework, built on the same risk process safety law expects for any hazard, covering how to control the risk, de-escalate in real time, and respond properly once an incident is over. Handled well, it's a system your team can rely on under pressure, not something improvised on the day.

Peak trading season sharpens a problem that's already there year-round. A QUT-led study tracking Australian retail and fast-food workers found that in 2023, 76% of those who'd experienced abuse said it happened daily, weekly or monthly.

The Christmas rush makes it worse. The NSW Government specifically flags the likelihood of retail workers being assaulted as rising during the Christmas shopping period, timing its annual reminder campaign to reach shoppers exactly when the risk peaks. Research from Jobcase backs this up directly from workers themselves: a majority, 59%, say customer behaviour gets worse specifically during the holiday shopping season.

For the full picture on why this happens and what drives this kind of behavior, read our article Customer Aggression and Violence in Retail: Why Peak Season Is the Riskiest Time of Year.

Here, we're focusing on what to do about it: a practical framework for managers.

A practical framework for handling customer aggression

1. Start with the same risk framework you'd use for any workplace hazard

Customer aggression is a hazard like any other under work health and safety law, and it gets managed the same way:

1. Identify the hazard. In this case, it's already named: customer violence and aggression, in its physical, verbal and psychological forms.

2. Assess the risk. Work out how the harm could occur, how severe it could be, and how likely it is. Certain contexts raise the risk: late-night trading, understaffed shifts, customers under the influence of alcohol or drugs, or roles that involve refusing service. Staffing is worth watching closely heading into peak season, research found 43% of retailers hadn't prepared for the extra workload at all.

3. Control the risk. This is where understanding your controls comes in handy, from barring repeat offenders altogether to simpler steps like rostering staff so no one is exposed to difficult customers for a full shift. We'll walk through it in detail below.

4. Review the controls. Don't set and forget. Reviews should happen after any incident, when staff raise concerns about what isn't working, when something changes in the store (layout, hours, staffing), and at a regular interval regardless, at least yearly.

This structure gives you a way to manage the risk systematically, on record, rather than case by case, and that consistency is also what protects the business legally.

SafeWork SA frames it plainly: dealing with aggressive or angry customers is confronting at the best of times, and younger, less experienced staff carry more of that weight than most rostering decisions account for.

2. Choose your controls using the hierarchy, not just training

Training is usually the first thing retailers reach for, and it matters, but it sits near the bottom of what's called the Hierarchy of Controls, a system for ranking how reliable different types of protection are.

The controls at the top remove or reduce the risk itself; the ones at the bottom rely on a person reacting well in the moment. A strong store combines several levels rather than leaning on just one:

Elimination: remove the hazard entirely. The clearest example is barring customers with a known history of violence from the store, an approach known as a Workplace Protection Order, now gaining legal backing across Australia. The early results are strong: since introducing WPOs, the ACT has recorded a 23% reduction in violent incidents, and NSW and South Australia are now following its lead.

Substitution: replace the interaction with a lower-risk one. Click-and-collect, no-contact delivery drops, or online order changes reduce face-to-face friction for high-tension transactions like returns.

Engineering controls: physically separate staff from the public. Raised counters, protective barriers, or simply better sightlines across the store.

Administrative controls: change how people work. Rotate staff out of high-exposure roles like returns or self-checkout monitoring, so no one absorbs all the friction in a single shift. Plan ahead for crowd flow during peak trading too, clear entry and exit points and active queue management, so pressure doesn't build unmanaged at the till.

PPE (personal protective equipment): the last line of defence. Personal distress alarms, or face shields where spitting or coughing is a known risk.

If your current plan starts and ends with "we did de-escalation training last year," you're relying entirely on the least reliable control in the hierarchy. Training still has a place, it's just not enough on its own.

3. How to de-escalate an aggressive situation in real time

This is what your team needs to know, and what you need to actively teach them, not just hand over as a policy document.

De-escalation happens in three stages: reading the signs, responding well, and knowing when to disengage.

Reading the signs early

• Verbal: raised voice, threatening language, swearing, insults
• Non-verbal: clenched fists, tense posture, invading personal space, sustained aggressive eye contact
• Environmental: long queues, out-of-stock items, a tense atmosphere building across the store, group dynamics that feed off each other

Spotting these early gives staff time to respond before a situation escalates, rather than reacting once it already has.

Responding well

• Active listening. Let the customer say what's bothering them, acknowledge it, reflect it back so they know they've been heard
• Stay calm and composed. Measured tone, no defensiveness, don't match their energy
• Use positive language. Frame things around what you can do, not what you can't
• Watch your body language. Open posture, no crossed arms, eye contact without staring
• Manage the physical space. Keep a respectful distance, never corner the customer, and make sure there's a clear exit route for both of you

Knowing when to disengage

De-escalation only applies to lower-intensity situations. Set the line clearly in advance so no one has to work it out under pressure:

• Lower risk: the employee should try to bring in a colleague, a security guard, or the manager to the situation
• Immediate danger: staff should contact law enforcement straight away, no need to wait for approval first

Deciding this in the moment, under pressure, is how good people freeze or under-react. That's exactly why it needs to be set as policy beforehand, not improvised on the day.

4. Build the skill over time, don't treat it as a one-off session

De-escalation is a skill, and skills fade without practice. A single induction module isn't enough for staff who might only face a serious incident once every few months. Better approaches:

• Role-play real scenarios, drawn from situations that have happened in your store, rather than generic hypotheticals
• Debrief after real incidents, so the team learns from what occurred on the floor
• Make it an ongoing habit, short refreshers through the year, not one session before peak trading and nothing after

This is especially important heading into the holiday season, when a large share of the floor may be newer staff who haven't had the chance to build this skill through repetition yet.

5. What to do immediately after an incident

The first few minutes after an incident set the tone for how well your team recovers.

• Make sure everyone involved is safe, and provide first aid if needed
• Offer support to the person directly affected and anyone who witnessed it
• Report criminal acts (assault, threats, sexual harassment) to police
• Record what happened while it's fresh: who was involved, what was said and done, what triggered it

It's worth extending this to incidents that don't happen face-to-face, too. Aggression doesn't always stay in the store: staff can be targeted online, on their personal social media, well after a shift has ended. These reports deserve the same follow-up as anything that happens on the floor.

Skipping this step, or doing it inconsistently, is one of the biggest reasons patterns of aggression go unnoticed until they've already gotten worse.

How health and safety software supports this framework

Keeping a framework like this running day to day doesn't have to be another thing on a manager's plate. The right software can carry a lot of that weight for you:

• Hazard identification and risk assessment stay current when they're logged and reviewed in one place, rather than sitting in a document nobody revisits until something goes wrong.
• Control tracking works properly when Workplace Protection Orders, barred customers, and rostering rules are recorded against a schedule, so reviews actually happen on time instead of relying on someone remembering.
• Incident reporting only helps if it's fast enough to use mid-shift. A manager logging an incident from a mobile device on the floor, rather than filling out paperwork hours later, is what actually makes patterns visible before they escalate.
• Training records are easier to keep current when completion, refreshers, and debriefs are tracked against real dates, not assumed.

Want to see what that looks like in practice? ecoPortal brings all of this into one platform, so your team can run this framework as an everyday habit rather than something that only gets dusted off once a year before peak season hits.

Final words

De-escalation isn't a single skill your team either has or doesn't, it's a framework you build over time, one that gets stronger the more your team practises it and the more consistently your store applies it.

Managers who put the structure in place now, before peak trading hits, are the ones whose teams handle the pressure calmly when it counts.

ecoPortal helps retail organisations across Australia, New Zealand and the UK bring incident reporting, safety induction and wellbeing support into one system, so frontline teams are protected before peak season hits, not after.

Want to see how this works in action? Book a chat with our team.

Key Takeaways

• Customer aggression is a workplace hazard like any other. It's best managed through a formal risk process, identify, assess, control, review, rather than reacting case by case.
• Training matters, but it's the least reliable control on its own. Real prevention comes from combining it with structural steps like barring repeat offenders, rostering, and store layout.
• De-escalation is a teachable skill, not an instinct staff either have or don't. It needs regular practice, reading the signs, responding well, and knowing when to disengage, not a one-off induction session.
•  

FAQ

1. Can retail staff legally refuse to serve an aggressive customer? Yes, staff can legally refuse service to a customer who is behaving in an aggressive, threatening or abusive way. Anti-discrimination law limits refusals based on personal attributes, but a genuine safety concern is a separate, valid basis.

2. What should a manager do immediately after a customer aggression incident? Check that everyone involved is safe, provide first aid if needed, and offer support to the employee and any witnesses. Report criminal acts like assault or threats to police, and record what happened while it's still fresh.

3. How do you de-escalate an aggressive customer at the moment? Stay calm, use active listening to acknowledge what's upsetting them, and keep body language open and non-threatening. If the situation doesn't settle, bring in a colleague, security, or a manager, or contact law enforcement if there's immediate danger.