In selected embodiments, a computer-implemented method for analyzing customer movement in a retail environment includes capturing an image of an individual at multiple locations within a retail environment and tracking the elapsed time between the individual's appearance at the various locations. For areas of the store at increased risk for shoplifting, the elapsed times may be compared to predetermined upper and/or lower elapsed time thresholds or windows to determine whether an individual is likely to commit a crime in the retail environment. The thresholds or window may be empirically determined based on analysis of historical security video footage and security incident records.