RF_SENTINEL

rf_sentinel / guides / tracker-detector

AirTag & tracker detection

Bluetooth trackers away from their owner change what they broadcast. RF Sentinel catches that frame, follows the tag through its address rotations, and tells you when it has been travelling with you.

What a separated tracker looks like

TrackerSeparated frameScore
Apple AirTag / Find My accessoriesManufacturer data, company 0x004C, type 0x12, length 0x1970
Google Find Hub tagsService data 0xFEAA, frame 0x41 (0x40 = near owner, ignored)70
Samsung SmartTagService data 0xFD5A55
TileService data 0xFEED55

Follow detection

Trackers rotate their Bluetooth address to stay anonymous. RF Sentinel links the new address to the old one by an advert fingerprint (payload sizes, UUIDs, TX power, connectable flag; new address within 1.5-30 s of the old one going silent, exactly one candidate) and carries the time-with-you and GPS path across. A FOLLOWING alert fires once a tracker or flagged device has stayed with you for at least 10 minutes while you moved at least 800 m. Both are adjustable (2-240 minutes).

Finding the tag

  1. Tap the device → Locate. The beep rate rises with signal strength.
  2. Walk around the car or bag; RSSI changes fast within the last metre.
  3. Check the signal graph and history on the detail screen to see when it first appeared.

Your own tags

Long-press your own AirTag or SmartTag and ignore it. The ignore follows it through address changes, so it stays quiet.

Questions

Android already has unknown tracker alerts. Why use this?

Android's alerts are good but run on Google's schedule and thresholds and show little detail. RF Sentinel shows trackers live, with raw evidence, signal history, the path they followed and adjustable thresholds, alongside everything else around you.

Why don't I see AirTags that are with their owners?

Near its owner an AirTag broadcasts a different, shorter frame and isn't a threat to you. RF Sentinel only flags the separated frame, so people's own keys in a café don't alert.

What about LTE GPS trackers?

They report over the cellular network and broadcast no Bluetooth a phone can identify. Inspect the vehicle physically.

Join the DiscordHelp, ideas, new signatures, field captures and ESP32 builds. CIS-C0/RFSentinel on GitHubSource code, releases, issues. A star helps others find it.