Oilfield Theft Is No Longer a Petty Crime
Oil theft is as old as the Texas oil patch. What has changed is the scale and the organization behind it.
The size of the target. The Permian accounted for almost half of all U.S. crude production in 2025, about 6.6 million barrels a day, according to U.S. Energy Information Administration figures reported by TPR. The basin spans more than 86,000 square miles of West Texas and southeastern New Mexico. Every pad, battery and flowline in it is a potential target.
How many operators are hit.
- In the Dallas Fed Energy Survey for the third quarter of 2025, 41% of exploration and production executives said theft had impacted their operations in the past year.
- Among those affected, 61% reported crude oil theft.
- Most rated the impact as low. That rating is per company, however. Across a field of several hundred unattended locations, the exposure still adds up.
The local numbers.
- Sheriff Parker estimates that his county alone sees 1,000 to 1,500 barrels reported stolen every month.
- State officials, citing an FBI-led task force, have put Permian operators' losses at up to $300,000 a month in stolen tools, pipe and valves.
Enforcement is catching up.
It has also turned dangerous. In March 2025, in what investigators described as an attempted theft, someone in Reeves County tried to tap directly into a pipeline. It ignited, and the line burned for several days.
Oilfield theft in Texas is now a safety risk to workers and nearby communities, not just a property loss.
What Texas Changed in 2025: HB 48, SB 494 and SB 1806
Governor Abbott signed the oilfield theft package in June 2025 at the Permian Basin Petroleum Museum in Midland. For anyone running security in the oil patch, the three bills change what a good record is worth.
| Law What it does What it means for your patrol records | | |
|---|
| HB 48 | Creates the DPS Organized Oilfield Theft Prevention Unit. It is headquartered in DPS Region 4, which covers 36 West Texas counties. The unit keeps a centralized crime database and trains local law enforcement. | Your theft reports now reach a specialized unit with a statewide database. The better the data you hand over, the better the case. |
| SB 494 | Creates the State Task Force on Petroleum Theft (STOPTheft) under the Railroad Commission, with industry and law enforcement members. | Theft patterns and economic impact are being studied. Operators who document incidents consistently are the ones whose losses get counted. |
| SB 1806 | Lets trained officers inspect and sample cargo tanks. Makes theft of petroleum products or oil and gas equipment a felony, with the degree set by value. | The value stolen decides the charge: under $10,000 is a third-degree felony, $10,000 to under $100,000 is second-degree, and $100,000 or more is first-degree. Accurate loss documentation matters. |
The Senate Research Center's analysis of SB 1806 makes another point operators should note. It identifies saltwater disposal companies as the primary channel for laundering stolen oil in the Permian Basin. SWD sites therefore belong on the patrol route and in the gate log, not outside them.
This is operational guidance, not legal advice. Check the enrolled bill text on Texas Legislature Online.
Under SB 1806, the value of what was stolen sets the felony level, so the quality of your loss documentation directly shapes the case.
What the Industry Already Recommends: The PBPA Playbook
The Permian Basin Petroleum Association, working with Vista One, published Recommended Oilfield Security Measures for Upstream Operations. Several of its recommendations bear directly on patrol work.
- Security guard deployment. High-visibility roving patrols to deter theft across an area, and low-visibility stationary posts that "observe and report."
- Locks and valve protection. Keep gate locks locked, replace cut locks immediately, and fit lock guards or plugs on exposed valves.
- Documentation protocols. Give responding officers GPS coordinates, time, loss data and witness information. Photograph the scene and the evidence, and record the officer's name and incident number.
- Schedule management. Where possible, schedule liquids pickup from remote facilities in daylight only, and share that schedule with local law enforcement.
- Digital run tickets. Paper tickets have become a counterfeiting target.
- Lone worker safety, insider-threat controls, and vendor vetting and audits.
The PBPA also notes that security guards are a visible deterrent but may not be sustainable long term. That is exactly why proof matters: when an operator pays for patrols, it needs to see what it is getting.
Every one of these recommendations assumes the patrol actually happened. None of them explains how to prove it.
The Real Gap: "Who's Supposed to Be Out Here?"
Legitimate presence is hard to judge on a lease, for three reasons.
Trucks prove nothing on their own. Railroad Commission Chairman Jim Wright has described thieves disguising tanker trucks to look like legitimate oilfield service vehicles. A truck at a battery with a company name on the door is not evidence of anything.
Some theft comes from inside. The PBPA explicitly calls for insider-threat controls: inventory audits, cameras at critical points and purchasing-card oversight. A theft ring that knows the pumper's route and the haul schedule does not need to scout.
Nobody sees the whole field. Pumpers work their routes by day, haulers run on schedule, and contractors come and go. No single person sees every location, and nobody sees them all at 3 a.m.
A verified patrol record gives you the baseline: which officer, which pad, what time, and what condition. Pair that with a daylight-pickup policy, and a tanker at a battery after dark stops being "maybe" and becomes a documented exception. Security managers can then cross-check the gate log against the run ticket. A load that left the gate at 2:14 a.m. on a ticket stamped 10:30 a.m. is a question worth asking.
The same verification gap exists inside the security company. A patrol can be logged without being driven, and on remote leases nobody is there to notice. That pattern is covered in detail in Ghost Patrols: How Security Patrol Fraud Works.
A patrol that cannot be proven gives an investigator nothing to work with.
Lease Patrol vs. Pipeline Patrol: Not the Same Job
Midstream and upstream security get lumped together, but the routes behave differently. If your contract covers a right-of-way, start with Pipeline Patrol Reporting. If it covers producing leases, the picture looks like this:
| Pipeline patrol (midstream) Lease patrol (upstream) | | |
|---|
| Route shape | Linear: miles of right-of-way | Hub-and-spoke: dozens of scattered locations off caliche lease roads |
| Typical assets | Valve sites, river crossings, meter stations | Well pads, tank batteries, SWD sites, compressor stations, pipe yards, generators |
| Main risk | Coverage gaps, excavation, hot taps | Crude theft, diesel theft, copper and equipment theft, tampering |
| What the record must prove | Which segments were covered | Which locations were checked, when, and in what condition |
| Access | Access roads and right-of-way gates | Locked lease gates, cattle guards, shared roads with other operators |
A typical lease patrol starts from a yard or field office, runs a loop of pads and batteries, and returns. That shape is what the route design below is built around. Larger operators often want the same route data to live on their own infrastructure rather than a shared cloud, which is why a self-hosted deployment is a realistic requirement out here, not an edge case.
How to Design a Verifiable Lease Patrol Route
Make the location the checkpoint
Most lease locations have no power, no building and nothing worth screwing a tag to. There is also plenty of weather to destroy one. So make each location itself the checkpoint: set a GPS-verified point at the pad entrance, the tank battery, the SWD site and the compressor station, and let the officer's phone confirm arrival. The GPS Patrol System guide explains how GPS verification works outdoors.
On an oil lease, the checkpoint is usually the location itself. There is nothing to scan.
Use QR only where there is signal and a structure
Field offices, pipe yards and gatehouses can carry a fixed QR checkpoint. In Trinity Guard®, QR scans are verified in real time on the server, which means they need connectivity. Put them where there is signal, and use GPS everywhere else. See Why Checkpoints Matter for how the two methods divide the work.
Give every stop a job
An arrival timestamp alone tells you little. Assign each location a short task list the officer completes on site:
- Gate locked, chain intact, no fresh cut marks
- Lock guards and valve plugs in place
- Load-line valves and seals look undisturbed (visual check only)
- Thief hatches closed, checked from the ground
- Fuel tanks on pumpjack engines and generators: no hoses, no fresh spills
- Fence line and cattle guard intact
- Fresh tire tracks, especially from off-lease approaches
- Area lighting working
A note on the name: the thief hatch was not named for the people who now target it. According to the SLB Oilfield Glossary, it gives access to a "thief," a sampling device. Diesel is often the easiest thing to steal on location, and the pattern is familiar from construction-site diesel theft.
Don't be predictable
Theft crews scout. The PBPA recommends lighting partly because it interferes with scouts using night-vision equipment. If your patrol hits the same battery at 1:00 a.m. every night, you have published a schedule. Build two or three route variants, and vary the start times and the order of locations.
Plan for dead zones
Coverage out past the county road is often spotty. After a patrol has been started while connected, Trinity Guard captures outdoor GPS checkpoint activity locally and syncs it when the signal returns. The officer keeps working instead of stopping at every dead spot. QR validation and closing the patrol still need a connection. The Offline Guard Tour System article covers the details.
Log the gate, too
At pipe yards, SWD facilities and staffed lease gates, the officer can log each vehicle and its driver in and out. The log records timestamps, the recording officer, and photos of the vehicle and its load at entry and exit. The approach is the same one described in Waste Truck Gate Logs: no paper, no guesswork about who came through.
Put the route to work
Test a Verifiable Oilfield Patrol on One Lease
Start with one lease, set GPS checkpoints and task lists, and see exactly which locations were reached, when they were checked and what the officer documented.
From "Something Looks Wrong" to a Report Law Enforcement Can Use
I served 26 years in law enforcement and trained as a criminal investigator. Reading a theft file from an investigator's chair, the first question is always the same: when was this location last seen intact? A cut lock found at 4 a.m. means one thing if the site was verified at 1 a.m., and something very different if nobody had been there in three days.
That "last known good" timestamp is often the most valuable fact in the whole report, and it comes straight out of a verified route history.
Observe and report. Do not intervene. If a theft is in progress, call 911 and keep your distance. The PBPA guidance describes stationary observers staying on the subject only until law enforcement can take over. The guard's job is to be a reliable witness, not a responder.
When the officer finds something, the incident report should line up with what the PBPA tells operators to hand the responding deputy:
| PBPA asks for What a verified patrol record supplies | |
|---|
| GPS coordinates | Location context of the checkpoint and the incident |
| Time | Timestamps for arrival, completed tasks and the incident itself |
| Photos of the scene and evidence | Incident photos taken on site, tied to the patrol |
| What was stolen or damaged | The officer's description: cut lock, missing valve, open hatch, hose marks. The pumper supplies the barrel count. |
| Witness information | The officer's identity, plus vehicles observed: description, door markings, direction of travel |
| Reporting officer and incident number | Added to the incident report so the file stays connected |
| When the site was last intact | The route history for that location |
The PBPA document also asks operators to send the incident number to the DPS task force by email after filing the local report. The address is listed in the PBPA recommendations, so check it there for the current version. For suspicious activity that is not yet a theft, DPS runs iWATCH Texas.
A record that just says "patrol completed," with no stops, no times and no photos, is all hat and no cattle. Investigators, operators and insurers all need the detail. See Why Incident Reports Without Verification Fail Security Audits, Security Patrol Audit Trail and Insurance Claim Denied: When Missing Patrol Logs Turn One Break-In Into Two Losses.
The most valuable fact in an oilfield theft report is often the last time someone verified the site was intact.
The Guard Is a Lone Worker, Too
Oilfield security officers work alone, at night, on remote roads, around hydrocarbon vapors and, in summer, in serious heat.
The federal record on tank hazards is sobering. NIOSH and OSHA identified nine worker deaths between 2010 and 2014 during manual tank gauging and sampling at oil and gas sites. The victims were typically working alone or unobserved. A security officer's job does not include gauging tanks, and the patrol policy should say so in writing: check hatches and seals from the ground, do not climb tanks, and do not open anything. Where the operator requires H2S awareness or other site safety training, make it part of onboarding.
Route structure doubles as a practical lone-worker control. When each location has an expected position in the patrol, a supervisor monitoring the active patrol can see when an officer has not reached the next point, and can call. Pair that with whatever lone-worker device policy the operator already uses; the PBPA recommends wearable alert devices. For July and August in West Texas, see Summer Patrol Safety: What a Guard Tour System Should Do When It's 100°F Outside.
For Texas Security Companies: Win Oilfield Work With Proof
Licensing comes first. Private security in Texas is regulated by the DPS Private Security Program under Occupations Code Chapter 1702. Unarmed officers work under a Level II non-commissioned registration. Armed officers need a Level III commission. Operators can check a company's and an officer's license status through the TOPS licensee search, and serious ones will. If you are still setting up, start with How to Start a Security Company in the United States.
Expect to be audited. The PBPA tells operators to vet and audit their vendors, and a security contractor is a vendor. The companies that win and keep oilfield contracts can answer an audit on the spot, with:
- route history by location
- incident records with photos
- a read-only client portal the operator can open any time
- patrol logs exported to Excel (XLS) for the operator's own reporting
See Route History Reports.
Cameras and patrols do different jobs. Solar-powered camera units are increasingly marketed to Permian operators, and they are useful. But a camera cannot check whether a lock guard was cut, a hatch was left open or a fuel tank was drained. Verified patrols cover what cameras cannot. Sell the combination, not a competition.
Bilingual crews are normal here. The Trinity Guard app runs in U.S. English and Spanish, so the same route works for the whole team.
Price it right. Remote leases mean long drive times, fuel and vehicle wear. The Security Guard Cost Calculator shows what a guard really costs by state before you bid. For how verification fits your service overall, see the Guard Tour Patrol System.
For Operators: Patrol Data That Stays In-House
Location coordinates, patrol times and gaps in coverage are exactly the information a theft crew would like to have. Some E&P companies prefer not to keep that data in a vendor's shared cloud. Trinity Guard is also available for self-hosted deployment on the operator's own servers. Data Residency and Data Sovereignty in Guard Tour Systems explains why patrol data location matters. If you contract security out, Security Guard Services: How to Verify Guards Are Actually Patrolling shows what to ask your provider.
Oilfield Lease Patrol Checklist
Copy this into your post orders. In Trinity Guard®, each line becomes a checkpoint task. Findings go into incident reports with photos, and the patrol history exports to Excel (XLS).
Per location
- Lease / pad / battery name
- GPS point reached (time)
- Gate locked, chain intact
- Lock guards and valve plugs in place
- Load-line valves and seals undisturbed (visual)
- Thief hatches closed (from the ground)
- ESP alarm or strobe status, where installed
- Engine and generator fuel tanks: no hoses, no fresh spills
- Fence and cattle guard intact
- Fresh tire tracks: yes / no
- Lighting working: yes / no
Vehicles observed
- Description, color, door markings or company name
- Direction of travel
- Photo taken: yes / no
- After-hours pickup activity: yes / no
If something is wrong
- Incident report filed, with photos
- Location not accessible: reason recorded (flooded road, locked out, unsafe)
- 911 or sheriff's office called: incident number
- Operator contact notified: name and time
- DPS task force notified per PBPA guidance: yes / no
Start With One Lease
You do not need to cover the whole field to find out whether this works. Pick one lease with six to ten locations. Set GPS points and task lists, run a variety of routes for two weeks, then compare the patrol record with what the pumpers see and what the run tickets say. Here is how to run a 14-day pilot, and the Setup Guides walk through sites, checkpoints and tasks step by step.
Run a 14-Day Guard Tour Pilot
Frequently Asked Questions
What is an oilfield security patrol?
A scheduled or randomized security route across upstream locations such as well pads, tank batteries, SWD sites, compressor stations and pipe yards. A licensed officer checks site condition, observes and reports suspicious activity, and documents each stop with a time, a location and the tasks completed.
How do you prove a guard reached a remote well pad with no cell signal?
Use GPS-verified checkpoints with offline capture. Once the patrol has been started while connected, the officer's phone records outdoor GPS checkpoint activity locally and syncs it when the signal returns. QR checkpoint validation and closing the patrol still require a connection.
What did Texas HB 48 and SB 1806 change?
HB 48 created an Organized Oilfield Theft Prevention Unit within DPS, headquartered in the Permian Basin region. SB 1806 authorized trained officers to inspect and sample cargo tanks, and set felony levels for petroleum and oil and gas equipment theft based on the value stolen.
What should a guard document after finding a theft at a tank battery?
GPS location, time, photos of the scene and evidence (cut locks, tools, tire tracks), a description of what appears to be missing or damaged, any vehicles observed, the responding officer's name and the incident number. The route history should also show when the location was last verified intact.
Should oilfield security guards intervene in a theft in progress?
No. Guards should observe, keep a safe distance, call 911 and report. Industry guidance describes observers staying on the subject only until law enforcement can take over.
Do oilfield security guards need a Texas license?
Yes. Private security in Texas is regulated by the DPS Private Security Program under Occupations Code Chapter 1702. Unarmed officers need at least a Level II non-commissioned registration, and armed officers need a Level III commission.
Cameras or patrols: which does an oil lease need?
Usually both. Cameras record what happens in their field of view. Verified patrols confirm the physical condition of locks, hatches, valves and fuel tanks, and they document the last time the site was seen intact.
Sources
About the author
Gyula Györfi is the founder of Trinity Guard®. He is a former police commander trained as a criminal investigator, with 18 years of command experience. He built Trinity Guard® around one idea: every security task should be provable. Why Trinity Guard® exists →
