Physical security

AirTag tracker detector: sweep a car, bag or clothing for a hidden tracker

By Helix · Published May 25, 2026 · ~2,700 words

A coin-sized tracker costs less than lunch, slips into a wheel well or a coat lining, and quietly reports your location to whoever planted it. Helix turns the phone you already carry into a warmer-colder locator that walks you straight to it. Here's how the threat works, how the sweep works, and — just as important — what it can and cannot find.

1. What a hidden tracker actually is 2. How Helix's warmer-colder sweep works 3. The threat it stops 4. How to sweep a car, bag and clothing 5. Why this matters — and who it's for 6. How Helix does it 7. Honest limits 8. Where to start

1. What a hidden tracker actually is

The trackers you need to worry about are tiny Bluetooth beacons. An Apple AirTag, a Tile, a Samsung Galaxy SmartTag and the dozens of generic clones all work the same way: they hold no GPS chip of their own and they have no cellular modem. They are dumb little radios. Every few seconds they shout a short Bluetooth Low Energy advertisement into the air — a small packet that says, in effect, "I am here." That's all the tracker does on its own.

The magic — and the menace — is the crowdsourced network behind them. When any nearby phone in the tracker's ecosystem hears that advertisement, it quietly relays the tracker's location up to a cloud account. AirTags ride on the hundreds of millions of iPhones in Apple's Find My network. SmartTags ride on Galaxy phones. Tiles ride on the Tile app community. So a tracker that costs ten or twenty dollars and has no positioning hardware of its own can still pin your location to within a few meters, anywhere there are other people's phones — which is everywhere.

This is what makes them so dangerous for stalking. They are cheap, silent, battery-lasts-a-year devices that turn the entire population's phones into an unwitting tracking grid. A jealous ex, a stalker, a corporate rival or a hostile party in a dispute can slip one into your car's wheel arch, your handbag, the lining of a jacket, or the bottom of a stroller, and then follow your every move from a comfortable distance, reading your home, your office, your kids' school and your routines off a map.

The platforms have added anti-stalking warnings — your iPhone may eventually tell you an unknown AirTag is "traveling with you," and an AirTag separated from its owner will eventually chirp. But "eventually" can mean hours, the alerts are inconsistent across phone makes and operating-system versions, the audible chirp is faint and easily muffled, and clones often have no such protections at all. If you have a concrete reason to believe you're being followed, you do not want to wait for an algorithm to maybe notice. You want to sweep, now, and find the thing.

2. How Helix's warmer-colder sweep works

Every Bluetooth radio reports a number called RSSI — Received Signal Strength Indicator. In plain terms: how loud the signal is when it arrives at your phone. A radio that's close sounds loud; a radio that's far away or behind metal sounds faint. RSSI is noisy and it bounces around, but the trend is reliable: as you physically move closer to a beacon, its signal gets stronger.

Helix's tracker sweep listens for all the Bluetooth Low Energy advertisements around you, picks out the ones that look like trackers, and turns that raw, jittery signal strength into something a human can actually use: a warmer-colder locator. You select a suspicious device from the list, and Helix smooths the signal and shows you a simple, growing-or-shrinking strength reading as you walk. Move toward the tracker and it climbs and the meter says "warmer." Move away and it falls — "colder." You don't have to read decibels; you just follow the heat, the way you'd play the children's game, until you're standing on top of the thing.

Crucially, Helix tries to recognize the kinds of devices that are commonly used for covert tracking — AirTags, Tiles, SmartTags and the generic tags built on the same chips — and surface them, rather than burying them in a flat list of every wireless gadget in range. It will also flag a device that keeps appearing as you move from place to place, because a beacon that follows you across multiple locations is exactly the signature of a tracker that's hitching a ride on you, as opposed to a stationary speaker or someone else's earbuds you happened to pass.

The sweep runs entirely on your own device. Helix is listening to radio that's already in the air around you — it doesn't phone anything home, doesn't need an account on the tracker's network, and doesn't transmit your sweep anywhere. The hunt for a tracker shouldn't itself become a privacy leak.

3. The threat it stops

The specific threat is covert physical location tracking — being followed without your knowledge by someone who planted a beacon on you or your vehicle. This sits at the dangerous intersection of the digital and the physical, and it's the part of personal security that pure encryption can do nothing about. You can have the most private phone on earth and still be followed home by a twenty-dollar disc stuck under your bumper.

Concretely, a working sweep lets you neutralize:

The point is that location is the foundation of physical harm. Once an attacker knows where you sleep, when you leave, and the route you take, every other risk — confrontation, burglary timed to your absence, ambush, or worse — becomes dramatically easier to plan. Finding and removing the tracker cuts that off at the root.

It's worth understanding why a tracker is so much more dangerous than casual surveillance. A person tailing you can lose you in traffic, has to expose themselves to do it, and can only be in one place at a time. A planted beacon has none of those weaknesses. It never loses you, it's never seen, it costs almost nothing, and it builds a perfect, timestamped history of your movements that the attacker can study at leisure — learning not just where you go but the patterns: which days you're predictable, where you're alone, when your routine creates a window. Patterns are what turn a location into an opportunity. The most chilling thing about a cheap tracker isn't any single position it reports; it's the dossier of habits it assembles over weeks, handing a motivated adversary exactly the planning data a professional surveillance team would have had to work for. Finding the device early doesn't just stop tonight's tracking — it denies them the pattern.

4. How to sweep a car, bag and clothing

A good sweep is methodical, not frantic. The goal is to cover every zone once, slowly, and let the warmer-colder reading do the work.

Before you start

Move away from obvious decoys first. Your own earbuds, smartwatch, fitness band, car infotainment system and smart-home gadgets all advertise over Bluetooth and will show up. Where possible, turn off or set aside your own trackable devices so they don't muddy the list. Then open Helix's tracker sweep and let it populate. Note anything that's already flagged as a likely tracker or as a device that has been following you.

Sweeping a vehicle

Cars are the most common target because there's so much hidden space and an attacker can get a few seconds alone with a parked car. Work the exterior first: walk slowly around the car with the phone low, pausing at each wheel arch, the front and rear bumpers, the fuel-filler door, and the underside as far as you can reach. Watch the meter at each station. When a candidate device gets warmer near one corner, slow down and home in. Then do the interior: glovebox, center console, under each seat, seat-back pockets, the trunk and its spare-wheel well, and the headliner edges. A tag is small and flat — once the meter is screaming "warm," feel along the surfaces in that zone.

Sweeping a bag

Empty the bag onto a table away from your other electronics. Run the phone slowly over the empty bag — every pocket, the base, the seams, and any padded panel where something flat could be tucked. Then pass it over the contents you removed. A handbag or laptop bag has more hiding spots than people expect: false bottoms, zip-pocket linings, and the gap behind a padded laptop sleeve.

Sweeping clothing and gear

Lay the garment flat. Move the phone along the lining, the inside of the hem, shoulder pads, and every pocket — including the small "coin" pocket and any internal zip pocket. For bags carried by children, strollers and gear, check the base, the underside, and any pouch a hand could reach without being seen. Go slowly; the difference between "in this jacket" and "in the next one on the rack" is a few centimeters of signal.

Once you've located a device, photograph it in place before you remove it, and note the date, time and where it was. If you believe you're being stalked, that record matters: a found tracker is evidence, and the right next step is often a call to the police and a protective-order process — not a confrontation. Helix helps you find it; what you do next is a safety decision, ideally made with people who can help.

5. Why this matters — and who it's for

For the people Helix is built for, location is the crown-jewel secret. A principal at a family office, a fund manager, a public-facing executive, a founder in a contested deal — the value of knowing exactly where they are, and where they'll be, is enormous to a rival, a litigant, or anyone with a grudge and a budget. And the entry cost for the attacker has collapsed: covert tracking used to require a private investigator and a stakeout. Now it's a disc you buy at a hardware store and stick to a car in three seconds.

It matters acutely for:

A tracker sweep is the most tangible piece of operational security there is. You can run it before you drive somewhere sensitive, after your car was valet-parked or left with a stranger, when you get home from a trip, or any time your instinct says someone knows too much about where you've been. It converts a vague, frightening suspicion into a definite answer: there's nothing here, or here it is.

6. How Helix does it

The sweep is one capability inside Helix's device-security pillar — the shield that defends the physical and digital perimeter around you, sitting alongside the spyware detection, microphone-and-camera monitor and network checks described in the full feature list. Helix's design philosophy is the same everywhere: do the work on your own device, keep nothing in a cloud, and tell you the truth about what a tool can and cannot do.

For the tracker sweep, that means:

The principle that runs through all of it: an adversary needs to know where you are. Deny them that, and a whole category of physical harm becomes much harder to plan.

7. Honest limits

No serious security tool should oversell itself, and a tracker sweep has real boundaries you must understand for it to be useful rather than falsely reassuring.

It's heuristic, not magic. Helix detects Bluetooth trackers by listening for their radio advertisements and reading signal strength. That works beautifully for the dominant threat — AirTags, Tiles, SmartTags and their clones — but it depends on the device actually broadcasting.

In short: Helix dramatically raises your odds against the cheap, common, Bluetooth-based trackers that account for the overwhelming majority of covert-tracking incidents — and it's honest that a powered-off device or a cellular/GPS-only unit is outside what radio listening can catch. Used with a careful physical search, it's a powerful first line. Treated as a guarantee, it would mislead you, which is exactly the kind of false comfort we refuse to sell.

8. Where to start

If you have a concrete reason to believe you're being followed, the sweep is something you can run today on the device in your hand. And it's one capability among the full operational-security suite — the spyware shield, the closed encrypted network, the panic SOS and the border mode — that makes Helix a posture rather than a single trick. Pick the tier that fits how exposed you are.

Get Helix — from $199See all features

Personal $199 · Pro $499 · Enterprise $999 (USD). One purchase, no surveillance, no cloud.