Is someone checking your browsing?
This website will appear in your browser history. If you're concerned someone may be monitoring your internet use, consider using a trusted friend's device, a library computer, or your browser's private/incognito mode. You can press Quick Exit or hit Escape at any time to leave this site quickly.
Learn more about staying safe online
Spy software that reads your screen — even encrypted messages
Some monitoring apps use a special Android feature called 'Accessibility Services' to read everything displayed on your screen — including messages in Signal, WhatsApp, and other encrypted apps. Encryption doesn't help because the app reads what's on screen, not what's sent over the network.
What You Might Notice
They know the content of your Signal or WhatsApp messages
If someone knows what you wrote in an encrypted app, screen-reading software is a likely explanation.
What You Can Do
Check Accessibility Services on Android
Settings > Accessibility. If an unfamiliar app has accessibility access, it may be reading your screen.
Get specialist advice before disabling — the monitoring person may be alerted.
Important: This resource provides general information, not personal advice. Every situation is different. The actions suggested here may not be safe in your specific circumstances — particularly if the person causing harm could notice changes to your devices or accounts. Always consider your physical safety first.
If you need personalised support, contact 1800RESPECT (1800 737 732) or your local specialist domestic violence service. If you are in immediate danger, call 000.
Android stalkerware that uses the Accessibility Service API to read screen content from any app, including encrypted messengers like Signal and WhatsApp. This technique defeats end-to-end encryption because it reads the screen after decryption. The stalkerware reads what's displayed, not the network traffic.
Mitigations for this technique are under development. If you have suggestions on how to improve this content, please submit a pattern.
The TFA Matrix is a research framework under active development. Technique classifications, detection methods, and mitigations reflect current understanding and are subject to revision. This framework does not constitute forensic methodology, legal evidence standards, or clinical diagnostic criteria. Practitioners should apply professional judgement appropriate to their discipline and jurisdiction.