§ Guide

IOS Spyware Stalkerware And Mobile Compromise

Ref · E-D · 2026 · §LIBClass · ConfidentialJuris · England & WalesStatus · Active

Guide · 19 pages · 25 min read · Published 2026-09-02

Read this guide on your phone, browse guides by topic or go back to the full PDF library.

§ Credit and source

Published by Computer Forensics Lab on 2026-09-02. Original material of the practice, free to read, cite and download. See every guide's author and source.

§ Full text of IOS Spyware Stalkerware And Mobile Compromise

Download the PDF

Prefer a PDF that matches this page exactly? Download the current text as a PDF, generated from the wording shown here, including any later corrections.

SPYWARE, STALKERWARE & COMPROMISE · A GUIDE FOR UK LAWYERS

iOS Spyware, Stalkerware and Mobile

Compromise

When the Phone Itself Is the Weapon: Detecting Covert Surveillance, and the

11 Questions to ask · Suggested wording

12 Checklist and red flags · When to involve a digital forensic expert

13 Frequently asked questions

14 Glossary · References · Disclaimer · How a specialist laboratory can assist

Executive summary

surveilled through consumer stalkerware, the misuse of legitimate features like shared location and Find My,

or rare sophisticated spyware, and this work carries an unusual duty of care, because victim safety comes before

evidence-gathering.

§ 02 · FIRST PRINCIPLES

The problem in plain English: when the phone is the weapon

§ 12 · QUICK CONTROL

Checklist and red flags · When to involve a digital forensic

expert

Frequently asked questions

My client thinks their phone is being tracked. Where do we start?

Is it usually sophisticated spyware?

Why can't you just scan the phone and be sure?

Working with Computer Forensics Lab

Speak to a forensic examiner, not a salesperson.

§ Common questions

Frequently asked questions

My client thinks their phone is being tracked. Where do we start?
With their safety, before any exam in at i on (
Why can't you just scan the phone and be sure?
Because detection on iOS is genuinely limited (
Should we just remove any monitoring we find?
Not reflexively, because removal can escalate risk (
§ Related documents
Instruct the practice

Bring us in early. Defensibility is built, not retrofitted.

Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.

WhatsApp