Ie, talk in code, use VPN, use shared communication streams like Tor, and make your behavior look legit and boring. Of course I am not speaking as a professional opsec specialist agent.

As far as you know.