Almost every modern spy camera and Wi-Fi microphone has the same weakness: it needs a network connection to deliver what it captures — and in a home, that network is yours. That makes the Wi-Fi scan the highest-value sixty seconds in any privacy sweep: one list, and every networked device in the building is on it.
What a network scan shows you
A scanner queries your network and returns, for each connected device: its IP address (its number on your network), its MAC vendor (the manufacturer of its network chip — often the most revealing field), and where available a hostname or device type. You do not need to understand networking to use this: the job is simply matching each row to a physical device you own.
Step 1 — Scan
Step 2 — Take inventory
Count what you own: phones, laptops, TV, console, printer, smart speakers, plugs, thermostat, doorbell. Walk the house if you have to — the goal is a list of expected devices to check off against the scan. In most homes the scan should reconcile to zero unexplained entries.
Step 3 — Judge the leftovers
For every entry you cannot match, apply these heuristics:
- Camera vendors — names tied to IP cameras and surveillance hardware are an immediate investigate-now flag.
- Generic module makers — chips like "Espressif" (ESP32/ESP8266) power thousands of legitimate smart gadgets and most DIY spy devices. Fine if it is your smart plug; alarming if you own nothing smart.
- Unnamed / unknown entries — legitimate consumer devices usually announce a name. A silent, nameless device that is always connected deserves attention.
- Phones or laptops that are not yours — could be a neighbor with your password, could be worse; either way it does not belong.
Step 4 — Force the issue
Change the Wi-Fi password (and update your own devices). Every device you did not update gets kicked off — including any bug. Then re-scan over the following days: if the mystery entry reappears, someone re-entered your password, which is information in itself. For guests and IoT gadgets, use your router's guest network so unknowns stay isolated from your main devices.
Step 5 — Locate the device physically
A network hit tells you a device exists, not where it hides. Cross over to the physical sweep: check the usual disguises (chargers, detectors, clocks, décor — see what listening devices look like) in rooms where a camera or mic would have something to capture.
Know the limits (and cover them)
Two device types never appear on a Wi-Fi scan: GSM bugs, which use their own SIM card and the cellular network, and record-only recorders, which transmit nothing. That is not a reason to skip the scan — it is the reason a full sweep also includes Bluetooth, EMF and physical checks. The complete sequence is in our listening device detection guide.