IRL Scan

IRL Scan is a guided counter-surveillance sweep. It walks you through Bluetooth tracker detection, Wi-Fi camera scanning, LAN fingerprinting, magnetometer sweeps, ultrasonic listening, and rear-camera lens checks, then opens a single report with everything it found. All processing stays on the device.

How the Sweep Works

Open IRL Scan from the tools drawer and tap Start IRL Scan. Stealth runs the sub-scans below in order, prompting you with on-screen guidance ("walk a few steps", "stop talking for a moment", "turn off the lights") so a non-technical user can run a thorough sweep without thinking about it.

While each step runs, a live row updates with what it has found so far. Tap a row to expand the live findings list. Long-press any row to re-run just that one sub-scan.

Sub-Scans

Bluetooth trackers~18 second BLE listen for AirTag, SmartTag, Tile, Chipolo, Pebblebee, Find My / Find My Device beacons, and unknown BLE devices. Halfway through the scan you are prompted to walk 5 to 10 steps so the "is this following me?" heuristic has movement to compare against.
Wi-Fi devices~16 second Wi-Fi scan. Flags hidden networks and access points whose SSID or vendor pattern matches consumer IP cameras.
LAN & IP camera fingerprints~24 second probe of the network you are currently on. Listens for mDNS / Bonjour, SSDP / UPnP advertisements, and fingerprints camera-like open TCP ports. It does not open or view any video stream. Optionally merges a Stealth Service neighbor table if available.
Magnetic anomalies~12 second magnetometer sweep. You are prompted to hold the phone close to outlets, vents, smoke detectors, alarm clocks, mirrors, and decorations. A live readout in microtesla is shown while the field is sampled.
Ultrasonic listen~6 second microphone capture analyzed in the ultrasonic band for tones consistent with audio bugs.
IR LED glow~10 second rear camera preview with no flash. Some IR illuminators show a soft glow on the preview depending on your phone's IR filter.
Lens glint~18 second rear camera sweep with the flashlight on. A live overlay draws rings around suspected pinhole-lens reflections.

Lens Hunter Mode

Long-press the Lens row, or open it from the settings menu, to launch Lens Hunter: a full-screen camera with live red rings drawn around suspected lens reflections, plus a screen-flash illuminator. Best for actively searching a room rather than running a timed sweep.

Settings

The settings menu (gear icon) lets you turn individual steps on or off and choose whether to append optional Stealth Service diagnostics to the report:

  • LAN / IP camera fingerprint (mDNS, SSDP, ports)
  • IR LED glow preview (dark room, no flash)
  • Listen for ultrasonic bugs (mic)
  • Lens glint sweep (camera + flash)
  • Append Stealth Service diagnostics (read-only, optional)

Bluetooth, Wi-Fi, and magnetometer steps always run if the hardware is present.

Findings & Report

When the sweep finishes, an overlay shows an overall verdict: Active threat, Suspicious, Mostly clear, or Area clear. Tap View report to see every finding with full details, including:

  • Tracker suspects with RSSI, approximate distance, kind (AirTag, SmartTag, Tile, etc.), and whether the device followed you
  • Cross-location alerts when a Bluetooth device has been seen at multiple coarse Wi-Fi "places"
  • Hidden and camera-like Wi-Fi networks with BSSID, RSSI, channel, and capabilities
  • LAN hosts that fingerprint as IP cameras with discovery sources and open ports
  • Magnetic anomalies with peak and baseline microtesla readings
  • Ultrasonic peak frequency, magnitude, and band energy
  • Lens glint positions and confidence scores
  • Cellular hardening tips (always included)

Tap any Bluetooth tracker finding to open the Tracker Locate screen, which uses live RSSI to help you walk the device down.

Permissions

  • Nearby devices for Bluetooth scanning
  • Location for Wi-Fi scan results (Android requirement)
  • Microphone for ultrasonic listening
  • Camera for IR glow preview and lens glint sweep

Permissions are requested only for the steps you have enabled. A step is skipped (not failed) if its permission is denied.

Why Use IRL Scan

Counter-surveillance sweep. One guided flow that combines tracker, hidden camera, audio bug, and rogue network checks instead of seven separate apps.

Travel safety. Run a quick sweep in hotels, rentals, and rideshares.

On-device. No findings leave your phone.