Abstract: In an embodiment, the invention provides a theft-monitoring system having one or more cameras, a data store, and a computer processor coupled to the data store and in communication through a network via a web interface with a video reviewer's computing device. The data store includes records that each include collected footage from the cameras and screen or metadata recordings. The processor is programmed, upon receiving an indication of entry of potential purchaser, to track suspicious behavior of the potential purchaser and store data representing screen, video and metadata associated therewith in the data store. The processor determines if the suspicious behavior warrants evaluation, collects relevant data based on the data stored in said data store and, in response to a determination of suspicious activity, transmits the relevant data over a network for review by an operator.