What constitutes suspicious behavior? And what do you do about it?