A new report has sounded the alarm on a Wi-Fi-based technology that could transform every internet router into a potential surveillance device. The claim is stark: by analyzing the way wireless signals bounce off the human body, devices can quietly identify individuals with nearly 100 percent accuracy. This technology, which requires no cameras or wearable sensors, works by reading the unique way each person's body reflects, absorbs, or scatters Wi-Fi signals.
The research shows that Wi-Fi signals, which are already everywhere in homes, offices, and cities, can be used to create a kind of biometric signature for each person. Unlike fingerprints or facial recognition, this signature is invisible and works through walls, in darkness, and without the target ever knowing. For privacy advocates, the implications are enormous: the same router that delivers streaming content could also be used to track who is in a room, when they are there, and what they are doing.
How Wi-Fi can "see" people
Wi-Fi networks operate by transmitting radio waves across a range of frequencies. When these waves encounter obstacles—walls, furniture, people—they are partially reflected, diffracted, or scattered. Modern Wi-Fi receivers can measure this interaction using something called Channel State Information (CSI). CSI records how a signal changes as it travels from the transmitter to the receiver, capturing tiny variations caused by objects and people moving in the environment.
The key breakthrough in the recent report is the ability to extract a stable, individual-specific pattern from these signal disturbances. Every person has a unique body shape, composition, and movement style. Even when standing still, subtle movements such as breathing, heartbeat, and muscle tremors affect the way Wi-Fi signals scatter. Machine learning algorithms can be trained to recognize these patterns, effectively turning the Wi-Fi receiver into a biometric sensor.
Almost perfect accuracy
According to the report, the technology was tested in multiple environments, including through walls and in different rooms. The system achieved nearly 100 percent accuracy in identifying a specific person from a small group of individuals. In one scenario, the device could accurately determine whether a particular person was present in a room, even when the person was motionless and not emitting any obvious signal. This level of precision is comparable to, or even better than, that of facial recognition systems—but with none of the visibility.
The researchers note that the technology is still in its early stages, but they caution that it could be improved and deployed with commercially available hardware. Many modern routers already support the CSI data needed for such analysis, which means existing infrastructure could be updated with software to enable surveillance capabilities.
From benign sensing to surveillance threat
Wi-Fi sensing is not new. For years, scientists have explored its potential for health monitoring, fall detection, and gesture recognition. Smart speakers and home devices have used similar principles to detect when a person enters the room. However, the transition from detecting presence to identifying a specific person marks a major shift. Presence detection simply knows a body is there; identification reveals who that body is.
Privacy experts worry that this capability could be exploited by governments, corporations, or criminals. A landlord could secretly monitor tenants. An employer could track employees in the workplace. A stalker could determine when a victim is home alone. Because the signal is invisible and passes through walls, there would be no physical sign of surveillance. Unlike a camera, a Wi-Fi router does not look like a spy device—it is a mundane object present in nearly every building.
The data trail of everyday connectivity
The technology also raises questions about data collection and consent. When a person connects to a public Wi-Fi network, they may be unknowingly contributing to a biometric database. The report suggests that even people who do not connect to the network could be identified, as the Wi-Fi signals reflect off their bodies regardless of whether they are authenticated to the router.
Current privacy regulations, such as the General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CCPA) in the United States, generally treat biometric data as sensitive and requiring explicit consent. But it is unclear whether Wi-Fi-derived biometric signatures fall under these definitions. If a person's unique signal profile can be extracted without their knowledge, existing legal frameworks may not offer adequate protection.
Potential beneficial use cases
Not all uses of this technology are negative. Proponents point to valuable applications in healthcare and public safety. For example, Wi-Fi identification could be used to monitor elderly people living alone for signs of a fall or medical emergency. It could help locate survivors in a burning building or after an earthquake, without requiring them to carry a phone. In smart homes, it could enable personalized automation—adjusting lighting or temperature based on who is present.
The key difference between beneficial and harmful use lies in consent and transparency. A system that alerts a family caregiver when an elderly relative has not moved in several hours could be life-saving. A system that silently records the comings and goings of every person in a neighborhood is a surveillance network. The report emphasizes that the same technical foundation can lead to very different outcomes depending on how it is deployed.
Security risks and countermeasures
There is also a security dimension. If malicious actors gain access to a Wi-Fi-based identification system, they could use it to plan burglaries by determining when a house is empty. They could bypass physical security measures by learning the schedules of security guards. The report warns that this technology could lower the cost and increase the stealth of physical surveillance, making it accessible to people with limited technical skills.
Some countermeasures exist. Encryption of Wi-Fi signals does not prevent this type of analysis, because the reflections occur at the physical layer, before data is encoded. Signal jamming could block the surveillance, but it would also disrupt legitimate Wi-Fi use. Building materials that block radio waves, such as certain types of metallic foil or specialized paints, could help, but they are not practical for most homes. As a result, individuals have little defense against Wi-Fi-based identification, which increases the urgency for policy intervention.
What needs to happen next
The report calls for a broader public debate about the acceptable use of Wi-Fi sensing technologies. It suggests that manufacturers should be required to disclose the sensing capabilities of their devices and obtain explicit consent before enabling identification features. It also recommends that law enforcement be required to obtain a warrant before using such technology, just as they would for wiretapping or electronic surveillance.
Regulators are only beginning to understand the implications. The concept of "Wi-Fi privacy" is still unfamiliar to many policymakers. However, the technology is advancing rapidly, and the gap between what is technically possible and what is legally permitted is widening. The report argues that without clear rules, the default outcome will be that every router becomes a potential surveillance tool, and people will have no way to know they are being identified.
The scientific community has also called for ethical guidelines to govern research in this field. While studying Wi-Fi sensing is important for advancing knowledge, experiments involving the identification of unwitting participants may violate ethical standards. Researchers are urged to consider the dual-use nature of their work and to avoid publishing details that could be easily weaponized.
In the meantime, the technology continues to improve. Accuracy rates are climbing, the hardware requirements are shrinking, and the algorithms are becoming more efficient. What seemed like science fiction just a decade ago is now a reality in the laboratory. The question is whether society will be ready for it.
The promise of seamless, invisible sensing is tempting, from smart homes that respond to our presence to health monitors that watch over us without wires. But the same capability can be turned into an invisible chain of observation. The report serves as a stark reminder that the infrastructure of the digital age is not neutral. The routers in our homes are, in a sense, already listening—and with the right software, they may soon be able to say who we are.
Source: TechRadar News