I would notify the manager immediately and keep an eye on the customer. I would not directly confront the customer. (express discourages employees from confronting a potential thief, they believe it is like calling someone out and are afraid of accusing a loyal customer and offending them)