Real time bypass detection in scanner

A method, comprising:

• monitoring, by a scanner, items passing in a current field-of-view of the scanner during a transaction at a terminal, wherein monitoring further includes determining that a reference image changes because of presences of the items detected in the reference image, wherein the reference image before being changed by the presences of the items comprised a field-of-view for the scanner when there are not any of the items present, and wherein the reference image for the current field-of-view of the scanner when changed comprises the items;
• determining, by the scanner, that a particular item has left the current field-of-view and lacks an item identifier recorded for the transaction, and wherein the scanner captures item codes as item identifiers on transaction items and also captures item images during the transaction;
• inspecting, by the scanner, whether the item identifier was otherwise accounted for during the transaction, wherein inspecting further includes inspecting one or more handheld scanner events received from a handheld scanner indicating whether the handheld scanner recorded the item identifier for the transaction;
• issuing, by the scanner, an alert to intervene during the transaction:
• when a next item identifier for a next item in the transaction is identified and the item identifier failed to be detected before the next item identifier is recorded for the transaction or when the transaction concludes without the item identifier being detected;
• and
• correlating an event raised by the scanner when the alert is issued with a security video stream captured from a camera that captures the security video stream during the transaction, wherein correlating further include correlating the event with the security video stream based on time of day, a transaction identifier for the transaction, and a terminal identifier for the terminal.

A terminal, comprising:

• a scanner comprising a processor and a non-transitory computer-readable storage medium comprising executable instructions for a bypass item detecting manager;
• the bypass item detecting manager executed by the processor from the non-transitory computer-readable storage medium causing the processor to perform processing comprising:
• detecting when an item passes in front of a current field-of-view of the scanner without having an item identifier recorded for a transaction at the terminal, wherein detecting further includes detecting the item by determining that a reference image has changed for the scanner because of a presence of the item detected in the reference image, wherein the reference image before being changed by the presence of the item comprised a field-of-view for the scanner when there are not any items present, and wherein the reference image for the current field-of-view of the scanner when changed comprises the item;
• ensuring that the item identifier was not otherwise accounted for in the transaction by inspecting one or more handheld scanner events received from a handheld scanner indicating whether the handheld scanner recorded the item identifier for the transaction;
• issuing an alert in real time during the transaction when the item identifier was not otherwise accounted for during the transaction;
• and
• correlating an event raised by the scanner when the alert is issued with a security video stream captured from a camera that captures the security video stream during the transaction, wherein correlating further include correlating the event with the security video stream based on time of day, a transaction identifier for the transaction, and a terminal identifier for the terminal, and wherein the scanner captures item codes as item identifiers on transaction items and also captures item images during the transaction.