Detecting Electricity Theft and Non-Technical Losses with Multi-Level Metering
- Siroos Rahimi
- Sep 2
- 3 min read
Electricity theft and other non-technical losses (NTLs) represent a significant operational challenge for electric utilities. NTLs can lead to revenue loss, degraded asset utilization, and increased outage risk.
Modern utilities are shifting toward multi-level metering architectures — deploying metering and sensing devices at strategic points across the distribution network to enable real-time, granular energy accounting. This layered measurement approach allows operators to identify where discrepancies occur and to act before losses accumulate.
In this context, LineWatch M (MV feeder monitoring), LineWatch L (distribution transformer monitoring), and Advanced Metering Infrastructure (AMI) form a hierarchical measurement system that supports both operational efficiency and theft detection.

1.Multi-Level Metering Structure
Substation Metering
Measures total feeder energy leaving the substation.
Establishes the baseline energy reference for downstream comparisons.
Typically uses IEC 61850 or DNP3 for integration into SCADA/EMS platforms.
Measurement of MV branches
Installed on medium-voltage feeders and branches.
Measures current, voltage, Active/Reactive Power, and Power Factor.
Enables section-level energy balancing and detection of abnormal load conditions.
Communicates via Ethernet, cellular, … using SCADA protocols (DNP3).
Distribution Transformer Meters
Installed on low-voltage transformer secondaries.
Measures aggregate neighborhood energy and load profiles.
Measures current, voltage, Active/Reactive Power, and Power Factor.
Provides transformer-level visibility for asset health and NTL detection.
AMI Smart Meters
Installed at each customer premise.
Measures individual consumption at high temporal resolution.
Forms an RF mesh, PLC, or cellular network to deliver data to the utility’s Head-End System (HES).

2.Theft and NTL Detection Methodology
The detection framework uses layer-by-layer energy reconciliation:
Step 1 — Feeder-to-Branch Comparison
Compare substation total energy to the sum of all LineWatch M readings.
Loss here → Potential MV feeder theft, upstream tapping, or feeder metering error.
Step 2 — Branch-to-Transformer Comparison
Compare each LineWatch M total to the sum of its connected LineWatch L transformers.
Loss here → Possible theft at MV/LV interface, unmetered transformers, or MV sensor faults.
Step 3 — Transformer-to-Customer Comparison
Compare each LineWatch L transformers to the sum of its connected AMI meters.
Loss here → Likely LV network tapping, bypassed meters, or faulty AMI devices.

3.Advanced Detection Techniques
Modern NTL detection is not limited to simple energy balancing. Advanced analytics enhance accuracy and reduce false positives:
3.1 Time-Series Correlation
Aligns time-stamped data from substation, feeder, transformer, and customer meters.
Detects synchronized deviations indicating theft at a specific network level.
Uses statistical correlation coefficients or synchronized phasor analysis.
3.2 Load Pattern Analytics
Machine Learning (ML) models such as LSTM neural networks, autoencoders, and convolutional models learn typical load curves.
Detects:
Point anomalies (sudden spikes or drops)
Contextual anomalies (deviation at specific times/days)
Collective anomalies (sustained abnormal periods)
Enables proactive alerts before discrepancies become significant.
3.3 Comparative Profiling
Clusters customers with similar usage profiles (e.g., k-means clustering, hierarchical clustering).
Flags under-reporting by identifying outliers that significantly deviate from their peer group’s expected usage.
Useful in dense residential areas with similar socio-economic and appliance profiles.
3.4 Event Triggering
LineWatch M and LineWatch L can detect transient events (e.g., sudden load connection, phase imbalance).
Triggers targeted high-resolution data capture and forensic analysis.
Reduces the need for continuous high-volume monitoring.
3.5 Benefits of the Multi-Level Approach
Precise Loss Localization – Isolates theft location to a specific feeder section, transformer, or customer.
Reduced Field Costs – Narrows inspection zones, lowering operational expenses.
Rapid Intervention – Real-time alerts enable faster theft prevention actions.
Regulatory Compliance – Supports audit trails for reported NTL figures.
Asset Optimization – Improves load management and transformer sizing decisions.
Conclusion
Deploying multi-level metering with LineWatch M, LineWatch L, and AMI enables utilities to combine engineering-grade measurements with advanced analytics for theft and NTL detection. The integration of real-time operational data with machine learning algorithms creates a system that is not only reactive but predictive — improving both grid reliability and financial performance.



