TL;DR
- Tech-enabled stalking — by an ex-partner, an abusive family member, or someone who got close enough to your phone for a minute — is one of the fastest-growing harms in this category. The tools are cheap, legal to buy, and often disguised as "family-safety" or "fleet-tracking" software.
- The most common threats today: AirTags and other small trackers placed in a bag, car, or jacket; stalkerware apps installed silently on a phone; shared-account abuse where the abuser still has access to email, iCloud, banking, or social; smart-home devices in the home (cameras, thermostats, locks) that one person controls.
- The defence is not technical genius. It is a careful, deliberate sequence — don't tip off the abuser before you're safe, then change accounts and devices in the right order, then secure your physical environment.
- If you are in an abusive relationship, contact a domestic-violence helpline before touching the technology. They know the safer sequence; doing the wrong thing first can escalate the danger.
- Save evidence as you go. Photos, recordings (where legal), screenshots. The technology will be evidence in court if it gets that far.
What it is
Tech-enabled stalking is the use of consumer technology — apps, location trackers, smart-home devices, shared accounts, surveillance hardware — by one person to monitor, control, intimidate, or harm another. The technology is rarely exotic. It is mostly off-the-shelf hardware and apps marketed for benign uses.
Five overlapping categories in 2026:
- Location tracking. AirTags, Tile, Galaxy SmartTags, GPS trackers from Amazon, app-based real-time sharing (Life360, iCloud Find My, Google Family).
- Stalkerware on phones. Apps that hide their icon, log calls and messages, record audio, and report location. Marketed as "parental control" or "fleet management"; used overwhelmingly against intimate partners. Names include mSpy, Cocospy, FlexiSpy, Cerberus, and many others.
- Smart-home abuse. The abuser controls the thermostat, the lights, the doorbell camera, the smart lock — sometimes after leaving the relationship.
- Shared-account abuse. Email, iCloud, Google, Netflix, banking, Amazon, social media — accounts the abuser still has password access to or that recover to their phone number.
- Doxing and online harassment. Personal info posted publicly to invite third-party harassment, or used to file fake reports with police ("swatting"), CPS, immigration, or employer.
In the great majority of documented cases, the abuser is — or was — someone the victim knew well. Strangers using these tools to track unknown targets exist but are rarer.
How to spot it
Signs of physical or location tracking:
- Someone keeps "happening" to be where you are, or knows things they shouldn't.
- Your phone shows a tracker alert ("AirTag travelling with you," "Unknown Bluetooth tracker detected"). On iPhone, alerts appear automatically. On Android, install Tracker Detect (Apple's official Android app for AirTag detection) and use the OS Find My Device scan.
- Battery drain on your phone when you haven't used it.
- The car's OBD-II port has an unfamiliar device plugged in. Some GPS trackers connect there.
- A small unfamiliar object turns up in a backpack, jacket lining, child's school bag, pram, or stuck to the underside of a car.
Signs of stalkerware on a phone:
- The phone is unusually warm or short on battery — suddenly.
- Higher mobile-data usage than your apps account for.
- Settings → Apps shows entries with no icon or generic names ("System Service").
- The accessibility settings include services you didn't enable. Stalkerware often requires accessibility permissions.
- The phone reboots more slowly than it used to.
- An "MDM profile" or "Device admin" app you didn't add (iPhone: Settings → General → VPN & Device Management; Android: Settings → Security → Device admin apps).
- Sound from the microphone activates when you're not in a call.
Signs of shared-account abuse:
- Login alerts to your email from a city you've never been.
- "Recovery" emails sent that you didn't request.
- Your photos disappearing from iCloud or Google.
- Two-factor codes arriving that you didn't trigger.
- Banking transactions you didn't make from familiar merchants.
Signs of smart-home abuse (after a relationship ends):
- Lights, thermostat, cameras, locks behaving in ways you didn't trigger.
- "Eavesdropping" — voice assistants responding to commands you didn't give.
- Doorbell camera footage of you and visitors being viewed remotely.
What to do
If you are in an abusive relationship or fear retaliation: PAUSE.
Before changing any technology — before changing a single password — contact a domestic-violence helpline in your country. They can help you sequence the steps in a way that does not tip off the abuser before you are physically safe. Changing the email password first is often the wrong move. The right sequence is country-specific and situation-specific. The helplines listed below exist for exactly this.
General safer sequence (when retaliation risk is low):
- Pick a "safe device" — a device the abuser has never had physical access to. A new phone, a friend's laptop, a library computer. Use this for the rest of the steps.
- From the safe device, change passwords on email first. Then bank, then iCloud or Google, then social media, then everything else. Email is the master key.
- Turn on 2FA everywhere, using an authenticator app, ideally on the safe device.
- Review device lists on each account — sign out unknown devices.
- Check recovery contacts on each account — change them to your new number or email, not the old ones.
- Audit your phone for stalkerware. A factory reset is the most reliable cleanup; if you can't do that, scan with a reputable mobile security app (Bitdefender, Malwarebytes, Sophos). The Coalition Against Stalkerware (stopstalkerware.org) lists resources.
- Scan for location trackers. AirTags now alert iPhones automatically. On Android, install Tracker Detect and use the OS's "unknown trackers" scan. Empty your bag onto a table; check the car, your child's bag, the inside of jacket linings, the dog's collar.
- Audit smart-home devices. Sign out the abuser from every account: smart locks, doorbells, cameras, thermostats, hubs. Where possible, factory-reset and re-pair.
- Save evidence. Screenshots of alerts, photos of trackers found, exported chat logs, app-permission lists, login-attempt notifications. Keep them on the safe device and in cloud storage the abuser cannot access.
- Tell one trusted person what you're doing, including where you are. Don't move through this alone.
If you're not in a relationship — strangers, online harassment, doxing:
- Save evidence. Block. Report to the platform.
- File a police report; explicit threats of violence are a crime in most countries.
- For doxing: contact the platforms hosting your personal info; many will remove it on request. Data-broker opt-outs exist but are slow.
- For "swatting" risk (fake police calls to your address): tell local police in advance that you've been doxed and may be targeted with a false report. Some jurisdictions maintain a watch list.
What NOT to do
- Don't confront the abuser with what you've found. Confrontation often escalates, and it tips them off to remove evidence.
- Don't change passwords from a device the abuser may have compromised. That gives them the new passwords too.
- Don't trust a "couples therapist" with a tech-abuse history. Couples counselling for ongoing abuse is widely understood to be dangerous; specialised domestic-violence services exist for a reason.
- Don't post your safety plan publicly — including which helpline you're calling. Stalkers watch.
- Don't post live locations on social media. "Just landed!" is also "currently far from your secured home."
- Don't share family-tracking apps with people you're afraid of. Most are designed without coercive-control protections.
- Don't try to "out-detective" the abuser. Document and escalate; don't engage.
Use AI to help you
Audit a phone you suspect is monitored:
"I have a [iPhone / Android] running [version] and I am concerned someone may have installed monitoring or stalkerware on it. Below is what I've noticed and what I know about who had access to the device. Please give me (a) a step-by-step audit I can do tonight without alerting the person, (b) which specific settings or menus to check (battery usage, accessibility services, device-admin apps, profiles, app permissions), (c) what the safest cleanup option is given my situation, and (d) what to keep as evidence and how.
Situation: [paste]"
Draft a safety plan for leaving a tech-controlled environment:
"I'm planning to leave a situation where my partner has had access to my phone, email, smart-home devices, and shared accounts. Please help me build a written safety plan covering (a) the order I should do things in to minimise retaliation risk, (b) what I should NOT touch until I'm physically safe, (c) what to take from the shared home in terms of devices and passwords, (d) what to expect them to try when they notice access is gone, and (e) who I should contact for support specific to my country [country]. I will speak to a domestic-violence helpline as well; this plan is to organise my own thinking."
A reminder: AI cannot assess your physical-safety risk. Speak to a domestic-violence helpline alongside any AI plan. Your safety comes before any optimisation of the technical steps.
Who to call
The order is unusual for this topic: domestic-violence helpline first, then everyone else.
Find the latest contacts for your country with AI:
"I'm in [your country]. List the official services for tech-enabled stalking, intimate-partner abuse, and personal safety — the national domestic-violence helpline (24-hour if available), the specific service in this country for tech-abuse or coercive control, the police's domestic-violence unit, the legal-aid line for restraining orders or protective orders, the data-protection authority if my personal information is being misused, and the national cybercrime unit. For each, give the official website and public phone number, and tell me which to contact first depending on whether (a) I am still living with the person, (b) I have just left, or (c) a stranger is harassing or doxing me. Cite each source. Flag anything that might be outdated."
A short curated list:
- Global / multi-country specialised resources:
- Coalition Against Stalkerware (stopstalkerware.org) — international; includes scanning resources and victim-support links.
- WESNET Tech Safety (techsafety.org) — guides for survivors and advocates.
- English:
- UK — Refuge National DV Helpline (0808 2000 247, 24h); Suzy Lamplugh Trust National Stalking Helpline.
- US — National Domestic Violence Hotline (1-800-799-7233); Safety Net (NNEDV).
- Canada — Canadian Resource Centre for Victims of Crime; provincial helplines.
- Australia — 1800RESPECT (1800 737 732); WESNET.
- German:
- Germany — Hilfetelefon Gewalt gegen Frauen (08000 116 016).
- Austria — Frauenhelpline (0800 222 555).
- Switzerland — Opferhilfe / victim support (142, opferhilfe-schweiz.ch).
- French:
- France — Violences Femmes Info (3919); arretonslesviolences.gouv.fr.
- Belgium — Écoute Violences Conjugales (0800 30 030).
- Switzerland (FR) — aide-aux-victimes.ch.
- Italian:
- Italy — 1522 anti-violenza e stalking, 24h.
- Switzerland (IT) — assistenza-vittime.ch.
- Spanish:
- Spain — 016 (anti-violence helpline, 24h).
- Mexico — Línea Mujeres 800-122-3737.
- Portuguese:
- Portugal — Linha 800 202 148; APAV (apav.pt).
- Brazil — Ligue 180.
- Polish:
- Poland — Niebieska Linia (800 120 002); Centrum Praw Kobiet.
When to escalate beyond chat
- You believe you are in immediate physical danger. Local emergency number first. 112 in the EU, 911 in North America, 000 in Australia, 999 in the UK, 110 or 119 in many of the rest. Now, not after one more search.
- A restraining order or protective order may be appropriate. Most countries allow same-day or next-day applications in emergencies, often without legal fees. Helplines above can connect you.
- Custody or family-court matters intersect — evidence of tech-stalking is increasingly admissible and matters in many jurisdictions; speak to a family lawyer experienced in tech-abuse.
- You are being doxed or swatted — local police's non-emergency line proactively, plus your platform's safety team, plus a lawyer.
- A minor in your household is being monitored or targeted — also call the national child-protection helpline. The pattern is sometimes part of the abuse cycle.
- You are in psychological distress — crisis lines exist precisely for this. Most countries have them; your domestic-violence helpline above can refer you.
Sources & further reading
- Coalition Against Stalkerware — published research and victim resources
- WESNET / NNEDV Safety Net — Tech Safety project, longstanding research
- EU Agency for Fundamental Rights — gender-based violence and digital dimensions reports
- Council of Europe Istanbul Convention — relevant articles on stalking and digital abuse
- Refuge, WomensLaw, Apple Personal Safety User Guide — public, regularly updated practical guides