Duh, most cd stores have security cameras or alarms .
But if you're talking p2p, then sharing files is what gets you in trouble. The RIAA downloads a file you have for share, gets your ip, contacts your isp, and you get a letter. Sometimes your isp monitors stuff like this as well and might contact you before the RIAA would get involved. They are also probably developing new ways to catch user sharing music.