⚠ Smart home devices are often controlled by whoever set up the account. If you're in a shared home, the other person may have admin access to all devices.

Watching Through Smart Home Devices

Someone uses smart home devices — cameras, doorbells, speakers, or home assistants — to watch, listen to, or record you in your own home.

What You Might Notice

Smart home devices behave unexpectedly
Cameras move on their own, speakers activate without prompts, or lights/locks change without your input.
The other person knows what's happening inside the home
They reference private conversations or activities that happened when they weren't present.
You can't control devices or change settings
You don't have admin access, or settings keep reverting after you change them.
Indicator lights on cameras or devices activate at odd times
Small LED lights on cameras may blink when recording or being accessed remotely.

What You Can Do

Check which accounts control your smart home devices
Identify who has admin access to cameras, speakers, locks, and thermostats.
Physically disconnect devices you're concerned about
Unplug cameras and smart speakers. Cover camera lenses with tape if you can't unplug.

The other person may notice if devices go offline.
Change Wi-Fi passwords
This disconnects all devices. You can then selectively reconnect only the ones you control.

Only do this if you safely control the router.
Do a factory reset on devices you want to keep
This removes previous account connections. Set them up fresh with your own account.

Important: This resource provides general information, not personal advice. Every situation is different. The actions suggested here may not be safe in your specific circumstances — particularly if the person causing harm could notice changes to your devices or accounts. Always consider your physical safety first.

If you need personalised support, contact 1800RESPECT (1800 737 732) or your local specialist domestic violence service. If you are in immediate danger, call 000.

This framework is under active development. View full limitations & methodology.

Smart Home Surveillance

Using shared smart home devices including cameras, video doorbells, baby monitors, voice assistants, and other IoT devices to monitor victim's presence, activities, conversations, and visitors. Often exploits devices installed during cohabitation where perpetrator retains administrative access after separation.

ID: SAFE-T-0077

Sub-techniques: No sub-techniques

Tactic: Surveillance & Tracking

Created: 04 February 2026

Last Modified: 07 March 2026

Mitigations

ID	Mitigation
SAFE-M-0021	Smart Home Account Takeover Transfer device ownership to sole-controlled account. Factory reset devices and reconfigure with new credentials.
SAFE-M-0022	Recording Device Audit Identify all cameras, microphones, and recording-capable devices. Disable or remove devices that cannot be secured.
SAFE-M-0023	Voice Assistant Hardening Disable remote access features, drop-in capabilities, and voice purchasing. Delete stored recordings.

Detection Indicators

ID	Detection Indicator
SAFE-D-0020	In-Home Activity Knowledge Adversary references conversations or activities that occurred inside the home.
SAFE-D-0021	Device Behaviour Anomalies Cameras activating, indicator lights engaging, or voice assistants responding without user trigger.
SAFE-D-0022	Unauthorised Device Access Smart home app settings show adversary account retains admin or viewer access.

The TFA Matrix is a research framework under active development. Technique classifications, detection methods, and mitigations reflect current understanding and are subject to revision. This framework does not constitute forensic methodology, legal evidence standards, or clinical diagnostic criteria. Practitioners should apply professional judgement appropriate to their discipline and jurisdiction.

Full limitations, methodology & responsible use statement.