TL;DR

What it is

Tech-enabled stalking is the use of consumer technology — apps, location trackers, smart-home devices, shared accounts, surveillance hardware — by one person to monitor, control, intimidate, or harm another. The technology is rarely exotic. It is mostly off-the-shelf hardware and apps marketed for benign uses.

Five overlapping categories in 2026:

  1. Location tracking. AirTags, Tile, Galaxy SmartTags, GPS trackers from Amazon, app-based real-time sharing (Life360, iCloud Find My, Google Family).
  2. Stalkerware on phones. Apps that hide their icon, log calls and messages, record audio, and report location. Marketed as "parental control" or "fleet management"; used overwhelmingly against intimate partners. Names include mSpy, Cocospy, FlexiSpy, Cerberus, and many others.
  3. Smart-home abuse. The abuser controls the thermostat, the lights, the doorbell camera, the smart lock — sometimes after leaving the relationship.
  4. Shared-account abuse. Email, iCloud, Google, Netflix, banking, Amazon, social media — accounts the abuser still has password access to or that recover to their phone number.
  5. Doxing and online harassment. Personal info posted publicly to invite third-party harassment, or used to file fake reports with police ("swatting"), CPS, immigration, or employer.

In the great majority of documented cases, the abuser is — or was — someone the victim knew well. Strangers using these tools to track unknown targets exist but are rarer.

How to spot it

Signs of physical or location tracking:

Signs of stalkerware on a phone:

Signs of shared-account abuse:

Signs of smart-home abuse (after a relationship ends):

What to do

If you are in an abusive relationship or fear retaliation: PAUSE.

Before changing any technology — before changing a single password — contact a domestic-violence helpline in your country. They can help you sequence the steps in a way that does not tip off the abuser before you are physically safe. Changing the email password first is often the wrong move. The right sequence is country-specific and situation-specific. The helplines listed below exist for exactly this.

General safer sequence (when retaliation risk is low):

  1. Pick a "safe device" — a device the abuser has never had physical access to. A new phone, a friend's laptop, a library computer. Use this for the rest of the steps.
  2. From the safe device, change passwords on email first. Then bank, then iCloud or Google, then social media, then everything else. Email is the master key.
  3. Turn on 2FA everywhere, using an authenticator app, ideally on the safe device.
  4. Review device lists on each account — sign out unknown devices.
  5. Check recovery contacts on each account — change them to your new number or email, not the old ones.
  6. Audit your phone for stalkerware. A factory reset is the most reliable cleanup; if you can't do that, scan with a reputable mobile security app (Bitdefender, Malwarebytes, Sophos). The Coalition Against Stalkerware (stopstalkerware.org) lists resources.
  7. Scan for location trackers. AirTags now alert iPhones automatically. On Android, install Tracker Detect and use the OS's "unknown trackers" scan. Empty your bag onto a table; check the car, your child's bag, the inside of jacket linings, the dog's collar.
  8. Audit smart-home devices. Sign out the abuser from every account: smart locks, doorbells, cameras, thermostats, hubs. Where possible, factory-reset and re-pair.
  9. Save evidence. Screenshots of alerts, photos of trackers found, exported chat logs, app-permission lists, login-attempt notifications. Keep them on the safe device and in cloud storage the abuser cannot access.
  10. Tell one trusted person what you're doing, including where you are. Don't move through this alone.

If you're not in a relationship — strangers, online harassment, doxing:

What NOT to do

Use AI to help you

Audit a phone you suspect is monitored:

"I have a [iPhone / Android] running [version] and I am concerned someone may have installed monitoring or stalkerware on it. Below is what I've noticed and what I know about who had access to the device. Please give me (a) a step-by-step audit I can do tonight without alerting the person, (b) which specific settings or menus to check (battery usage, accessibility services, device-admin apps, profiles, app permissions), (c) what the safest cleanup option is given my situation, and (d) what to keep as evidence and how.

Situation: [paste]"

Draft a safety plan for leaving a tech-controlled environment:

"I'm planning to leave a situation where my partner has had access to my phone, email, smart-home devices, and shared accounts. Please help me build a written safety plan covering (a) the order I should do things in to minimise retaliation risk, (b) what I should NOT touch until I'm physically safe, (c) what to take from the shared home in terms of devices and passwords, (d) what to expect them to try when they notice access is gone, and (e) who I should contact for support specific to my country [country]. I will speak to a domestic-violence helpline as well; this plan is to organise my own thinking."

A reminder: AI cannot assess your physical-safety risk. Speak to a domestic-violence helpline alongside any AI plan. Your safety comes before any optimisation of the technical steps.

Who to call

The order is unusual for this topic: domestic-violence helpline first, then everyone else.

Find the latest contacts for your country with AI:

"I'm in [your country]. List the official services for tech-enabled stalking, intimate-partner abuse, and personal safety — the national domestic-violence helpline (24-hour if available), the specific service in this country for tech-abuse or coercive control, the police's domestic-violence unit, the legal-aid line for restraining orders or protective orders, the data-protection authority if my personal information is being misused, and the national cybercrime unit. For each, give the official website and public phone number, and tell me which to contact first depending on whether (a) I am still living with the person, (b) I have just left, or (c) a stranger is harassing or doxing me. Cite each source. Flag anything that might be outdated."

A short curated list:

When to escalate beyond chat

Sources & further reading