Warned or Vulnerable? Reliability of Anti-Stalking Alerts for Commercial BLE Trackers
Bluetooth Low Energy (BLE) trackers are cheap and ubiquitous, making them highly effective tools for unwanted tracking. While Apple and Google have introduced native anti-stalking frameworks, their real-world reliability varies significantly. This talk presents the findings of an empirical field study evaluating nine commercial and white-label trackers against native iOS, Android, and GrapheneOS platforms. The results reveal distinct detection asymmetries between operating systems, delayed alerts due to cohabitation, and security gaps introduced by proprietary ecosystems like Samsung and Tile. The role of the open-source application AirGuard as a crucial fallbackis also discussed. Practical guidance on how users can protect themselves against stealthy tracking is also provided.
Bluetooth Low Energy (BLE) trackers offer immense convenience for finding lost items, but they also present significant opportunities for unwanted tracking and stalking. While major operating systems have introduced native anti-stalking frameworks, their effectiveness under real-world conditions remains inconsistent.
This presentation shares the findings of an empirical field study evaluating how native iOS, Android, and GrapheneOS detect nine different commercial and white-label BLE trackers. The results reveal a notable cross-platform asymmetry: while iOS consistently flagged unauthorized devices, native Android frequently failed to detect licensed third-party trackers. Furthermore, a "cohabitation suppression effect" was analyzed where proximity to the owner's phone delays alerts, and highlight how proprietary ecosystems like Samsung and Tile bypass universal alerting systems. For users of de-googled devices, these gaps are even more pronounced, leaving third-party tools like the open-source application AirGuard as the primary defense.
Attendees will gain a realistic understanding of current anti-stalking capabilities, an analysis of manufacturer-provided safeguards, and actionable advice on how to improve personal detection setups.
I work as a Cyber Strategy & Architecture Consultant and originally moved to Munich to complete my Master’s degree in IT Security. Then I decided to stay because of the beautiful city and its surroundings. Professionally, I am passionate about cybersecurity, with a particular interest in privacy topics. In my free time, I enjoy taking advantage of the nearby nature through climbing, cycling, and hiking.