Every listening device has a job: capture sound, then get it to whoever planted it. Doing that job forces the device to interact with the physical world — it draws power, radiates a field, transmits a signal, or warms up. Detection is simply checking for each of those side effects in a sensible order. Here is the order that works.
First, understand what you are hunting
Listening devices fall into three broad families, and each is caught by different checks:
- Networked bugs (Wi-Fi microphones, IP camera/mic combos) — stream audio over a network. Caught by the Wi-Fi scan.
- Radio bugs (Bluetooth recorders, wireless mics, GSM bugs with a SIM card) — transmit wirelessly. Bluetooth types are caught by the BT scan; all types emit fields caught by the EMF sweep at close range.
- Record-only bugs (voice-activated recorders with storage) — transmit nothing, so they are the hardest. Caught by physical inspection, EMF and sometimes the thermal/IR check.
Step 1 — Map who could have planted it
Two minutes of thinking beats an hour of scanning. When did the suspicion start? Who has had unsupervised access since — a contractor, a guest, an ex with a key, a previous tenant? Sweep the rooms where sensitive conversations actually happen first: bedroom, living room, office.
Step 2 — Scan the Wi-Fi network
Networked bugs are the most common because they are the cheapest and easiest to buy. They are also the easiest to expose: they must be connected, and a network scanner lists everything connected.
Step 3 — Scan for Bluetooth devices
Turn off your own Bluetooth gear first. Then scan. In a controlled home environment, an unfamiliar BLE device that persists — especially an unnamed one whose signal is strongest in one particular room — deserves a physical search of that room.
Step 4 — EMF sweep at close range
This is the check that catches transmitters regardless of protocol — including GSM bugs that use a SIM card and never touch your Wi-Fi or Bluetooth. Powered electronics create electromagnetic fields your phone's magnetometer can sense within a few centimeters.
Step 5 — Thermal and infrared check
Powered devices generate heat, and camera-microphone combos often include infrared LEDs. After dark, kill the lights and pan the room with the camera check; glowing points invisible to your eyes are IR emitters.
Step 6 — The record-only problem
A voice-activated recorder with no transmitter defeats network and Bluetooth scans. It does not defeat physics: it still needs a microphone opening, a power source and placement near conversation. That is why the physical inspection matters — pinholes, fresh adhesive, objects that moved, items that feel heavy. Combine it with the EMF sweep, since even "silent" recorders are powered circuits.
When to bring in a professional
A professional TSCM (Technical Surveillance Counter-Measures) sweep uses spectrum analyzers and non-linear junction detectors that find even unpowered electronics — at a price, typically several hundred dollars or more per visit. The sensible path for most people: run the free phone-based sweep first, escalate to a professional if you find evidence, if the stakes are legal or corporate, or if strong warning signs persist after a clean scan.