Are Apple AirTags Being Used to Track People and Steal Cars?

On a Sunday night in September, Ashley Estrada was at a friend’s home in Los Angeles when she received a strange notification on her iPhone: “AirTag Detected Near You.”

An AirTag is a 1.26-inch disc with location-tracking capabilities that Apple started selling earlier this year as a way “to keep track of your stuff.” Ms. Estrada, 24, didn’t own one, nor did the friends she was with. The notification on her phone said the AirTag had first been spotted with her four hours earlier. A map of the AirTag’s history showed the zigzag path Ms. Estrada had driven across the city while running errands.

“I felt so violated,” she said. “I just felt like, who’s tracking me? What was their intent with me? It was scary.”

Ms. Estrada is not alone in her experience. In recent months, people have posted on TikTok, Reddit and Twitter about finding AirTags on their cars and in their belongings. There is growing concern that the devices may be abetting a new form of stalking, which privacy groups predicted could happen when Apple introduced the devices in April.

The New York Times spoke with seven women who believe they were tracked with AirTags, including a 17-year-old whose mother surreptitiously placed one on her car to stay apprised of her whereabouts.

Some authorities have begun to take a closer look at the threat posed by AirTags. The West Seneca Police Department in New York recently warned its community of the tracking potential of the devices after an AirTag was found on a car bumper. Apple complied with a subpoena for information about the AirTag in the case, which may lead to charges, West Seneca police said.

And in Canada, a local police department said that it had investigated five incidents of thieves placing AirTags on “high-end vehicles so they can later locate and steal them.”

Researchers now believe AirTags, which are equipped with Bluetooth technology, could be revealing a more widespread problem of tech-enabled tracking. They emit a digital signal that can be detected by devices running Apple’s mobile operating system. Those devices then report where an AirTag has last been seen. Unlike similar tracking products from competitors such as Tile, Apple added features to prevent abuse, including notifications like the one Ms. Estrada received and automatic beeping. (Tile plans to release a feature to prevent the tracking of people next year, a spokeswoman for that company said.)

But AirTags present a “uniquely harmful” threat because the ubiquity of Apple’s products allows for more exact monitoring of people’s movements, said Eva Galperin, a cybersecurity director at the Electronic Frontier Foundation who studies so-called stalkerware.

“Apple automatically turned every iOS device into part of the network that AirTags use to report the location of an AirTag,” Ms. Galperin said. “The network that Apple has access to is larger and more powerful than that used by the other trackers. It’s more powerful for tracking and more dangerous for stalking.”

Apple does not disclose sales figures, but the tiny $29 AirTags have proved popular, selling out consistently since their unveiling.

An Apple spokesman, Alex Kirschner, said in a statement that the company takes customer safety “very seriously” and is “committed to AirTag’s privacy and security.” He said the small devices have features that inform users if an unknown AirTag might be with them and that deter bad actors from using an AirTag for nefarious purposes.

“If users ever feel their safety is at risk, they are encouraged to contact local law enforcement who can work with Apple to provide any available information about the unknown AirTag,” Mr. Kirschner said.

Police could ask Apple to provide information about the owner of the AirTag, potentially identifying the culprit. But some of the people who spoke with The Times were unable to find the associated AirTags they were notified of and said the police do not always take reports of the notifications on their phones seriously.

After a Friday night out with her boyfriend this month, Erika Torres, a graduate music student in New Orleans, was notified by her iPhone that an “unknown accessory” had been detected near her over a two-hour period, moving with her from a bar to her home.

She called the police and she called Apple, but she never found an AirTag. An Apple representative told her other devices could set off the alert, including AirPods. When Ms. Torres posted a video about her experience to YouTube, a dozen people commented about it happening to them. “The number of reports makes me think there must be some sort of glitch that is causing all these people to experience this,” Ms. Torres said. “I hope they’re not all being stalked.”

Ms. Estrada, who got the notification while in Los Angeles, eventually found the quarter-sized tracker lodged in a space behind the license plate of her 2020 Dodge Charger. She posted a video of her ordeal on TikTok, which went viral.

“Apple probably released this product with the intent to do good, but this shows that the technology can be used for good and bad purposes,” Ms. Estrada said.

Ms. Estrada said she was told by a Los Angeles police dispatcher that her situation was a nonemergency and that if she wanted to file a report she’d have to bring the device with her to the station in the morning. She didn’t want to wait and disposed of it after taking several photos.

A spokesperson for the Los Angeles police told The Times that the department had not heard of cases in which an AirTag had been used to track a person or a vehicle. But Ms. Estrada said that after she posted her TikTok video, an Apple employee, acting on their own, contacted her. The employee was able to connect the AirTag to a woman whose address was in Central Los Angeles.

Another woman was notified by her iPhone that she was being tracked by an “unknown accessory” after leaving her gym in November. When she got home, she called the police.

The woman, Michaela Clough of Corning, Calif., was told that a report could only be filed if someone showed up at her home and that Apple’s notifications were not enough proof that she was being stalked. She later got in touch with an Apple customer service representative who was able to disconnect the device from Ms. Clough’s iPhone. The device was never found.

“I was terrified and frustrated that there was nothing I could do about it,” Ms. Clough said, noting that she hadn’t returned to her gym since. “For a good week there, I just stayed home.”

AirTags and other products connected to Apple’s location-tracking network, called “Find My,” trigger alerts to unknown iPhones they travel with. The AirTag product page on Apple’s website notes that the devices are “designed to discourage unwanted tracking” and that they will play a sound after a certain amount of time of not detecting the device to which they are paired.

In June, after concerns about stalking were raised, Apple pushed an update to AirTags to cause them to start beeping within a day of being away from their linked devices, down from three days. Still, “they don’t beep very loudly,” Ms. Galperin said.

A person who doesn’t own an iPhone might have a harder time detecting an unwanted AirTag. AirTags aren’t compatible with Android smartphones. Earlier this month, Apple released an Android app that can scan for AirTags — but you have to be vigilant enough to download it and proactively use it.

Apple declined to say if it was working with Google on technology that would allow Android phones to automatically detect its trackers.

People who said they have been tracked have called Apple’s safeguards insufficient. Ms. Estrada said she was notified four hours after her phone first noticed the rogue gadget. Others said it took days before they were made aware of an unknown AirTag. According to Apple, the timing of the alerts can vary depending on the iPhone’s operating system and location settings.

The devices’ inconsistencies have caused confusion for people who weren’t necessarily being tracked nefariously. Mary Ford, a 17-year-old high school student from Cary, N.C., received a notification in late October that she was being tracked by an unknown AirTag after driving to an appointment. She panicked as she searched her car.

Ms. Ford only realized it wasn’t a threat when her mother revealed she had put the tracker in the vehicle about two weeks earlier to follow her daughter’s whereabouts.

“I was nervous about Mary being out and not being able to find her,” said her mother, Wendy Ford. She said she hadn’t intended to keep the knowledge of the AirTag from her daughter, “but if I knew she would have been notified, I probably would have told her.”

Jahna Maramba rented a vehicle from the car-sharing service Turo last month in Los Angeles, then received a notification about an unknown AirTag near her on a Saturday night with her girlfriends.

She took the vehicle to her friend’s parking garage where she searched the outside of the car for an hour before its owner notified her that he had placed the device inside the vehicle. Ms. Maramba had been driving the car for two days.

A spokesperson for Turo said in a statement that the company has no control over the technology car owners use on the vehicles they rent out.

“Imagine finding out via a notification that you’re being tracked,” Ms. Maramba said. “And you can’t do anything about it.”