416-668-4070
Counter-Surveillance · TSCM

Someone put a tracker on you.
We find it. We remove it. We document it.

Toronto Fob is the only NASTF VSP-approved locksmith in the GTA offering court-grade Technical Surveillance Counter-Measures. Vehicles, homes, boardrooms, executive fleets — RF sweep, physical inspection, OBD-II forensics, and a signed written report every time.

NASTF VSP-approved Licensed Ontario locksmith Court-admissible reports Confidential · no reporting to third parties

What we look for — and find

Every device below has come off a real client’s vehicle, home, or office in the last 12 months.

📍

GPS Trackers

Magnetic battery units, hardwired OBD-II, self-installed AirTags. We locate active and dormant.

Cellular · LTE-M · GNSS
🎙️

Audio Bugs

Analog FM, digital burst transmitters, GSM/4G audio bugs streaming live to a listener.

30 MHz – 6 GHz
📷

Hidden Cameras

Wi-Fi cams disguised as smoke detectors, USB chargers, screws. Lens-glint detection + RF fingerprint.

2.4 / 5 GHz Wi-Fi
🕵️

AirTag & Tile

BLE trackers hidden in bumpers, wheel wells, glove boxes, jacket linings. We sniff the advertising channels directly.

BLE 5.1
🔌

OBD-II Devices

Fleet/insurance dongles left behind by ex-employers, ex-partners, dealer test drives.

CAN bus · K-line
📡

Cellular Interceptors

IMSI catchers, femtocell relays, stingray-class devices operating in your immediate area.

700–2600 MHz
🚗

Relay-Attack Rigs

Signal amplifiers parked near your fob to unlock/start your car. We test your key’s exposure.

315 / 433 / 868 MHz
🛰️

RF Beacons

Long-battery LoRa/LPWAN pingers used for slow-refresh location tracking under the radar.

433 / 868 / 915 MHz

Where we sweep

Every environment gets a tailored sweep protocol. Pricing includes the written report.

🚗 Vehicle Bug Sweep

Cars, trucks, motorcycles, RVs. Full RF baseline, magnetometer pass, undercarriage & interior physical search, OBD-II port audit.

  • Full-spectrum RF sweep (30 MHz – 6 GHz)
  • Ferrous-metal search of all cavities + wheel wells
  • OBD-II device detection and safe removal
  • Bluetooth / BLE tracker scan (AirTag, Tile, Chipolo)
  • Signed written report with device photos + serials
from $349

🏠 Home & Condo Sweep

Bedrooms, home offices, common areas. RF baseline, Wi-Fi camera detection, thermal imaging on suspect fixtures.

  • Wi-Fi network audit (rogue APs, hidden cams)
  • Thermal & lens-glint camera detection
  • Power outlet + smoke detector + USB audit
  • Line-of-sight audio bug detection
  • Signed written report with room diagram
from $499

💼 Executive Vehicle Fleet

C-suite & principal vehicles. Recurring sweeps between meetings, before travel, after service appointments.

  • Pre-drive rapid sweep (under 25 min)
  • Post-service dealer/valet re-inspection
  • Discreet on-location service
  • Monthly retainer available
custom quote

🏛️ Boardroom & Meeting Rooms

Pre-meeting sweeps for M&A, legal, family-office, and litigation-sensitive conversations.

  • Full RF + Wi-Fi + BLE sweep pre-meeting
  • NLJD (non-linear junction detection) on request
  • Conference phone & A/V audit
  • Chain-of-custody documentation
from $899

Our 4-step process

Every sweep follows the same protocol so results are repeatable and admissible.

Baseline RF Sweep

HackRF One + SDR++ across 30 MHz – 6 GHz. Identify every transmitter in the space and classify by protocol.

Physical Inspection

Magnetometer, borescope, thermal imager, mirror. Every cavity, panel, and mount point checked by hand.

Digital Forensics

OBD-II port audit, CAN-bus trace, Bluetooth/BLE advertising scan, Wi-Fi rogue-AP detection.

Written Report

Signed, dated, photograph-backed report — court-admissible. Device serials, extraction photos, chain of custody.

The equipment we actually use

We publish our kit because most sweep services don’t. This is what runs on every job.

HackRF One30 MHz – 6 GHz SDR — the RF baseline scanner
SDR++ / SDRangelWaterfall display, protocol demod, wideband capture
Ubertooth OneBluetooth Classic + BLE 5.1 sniffer for hidden trackers
PortaPack H2Portable field SDR for undercarriage & parking-lot passes
Thermal ImagerFLIR-class camera — detects powered cameras behind fixtures
MagnetometerDetects magnetic-mount GPS trackers on ferrous surfaces
Borescope2 mm articulating scope for wheel wells & interior cavities
OBD-II ScannerAutel IM508 — identifies rogue OBD dongles & CAN traffic
Lens-glint DetectorReflection-based hidden-camera locator

Why our reports hold up

Any technician can wave a $50 bug detector. Fewer can testify.

🇨🇦

NASTF VSP-Approved

Approved for the U.S./Canada Vehicle Security Professional program — the same credential OEMs and law enforcement recognize.

📋

Licensed Ontario Locksmith

Ministry-licensed, insured, and bonded. Vehicle work performed by a licensed technician, not a hobbyist.

⚖️

Court-Admissible Reports

Signed, dated, photograph-backed. Chain of custody documented. Format accepted by counsel in Ontario family and civil matters.

Common questions

How long does a vehicle sweep take?

Standard passenger vehicle: 60–90 minutes on site. Executive vehicles with extensive rear-cabin audio or heavy aftermarket wiring can run 2 hours. Boardroom sweeps: 90 min – 3 hours depending on room size and A/V complexity.

Will you tell my ex / employer / anyone that we swept?

No. Every engagement is confidential. We do not share client identity, sweep results, or extracted devices with any third party unless you provide written direction. Reports are addressed to you or your legal counsel — nobody else.

Do you remove trackers, or just find them?

Both. We locate, photograph in place, extract, bag with chain-of-custody label, and hand it to you or your lawyer. If you want the device preserved for evidence, we do not power it down or alter its state.

What if you don’t find anything?

You still get the signed report. A clean sweep is a valuable document — it establishes a baseline, and if something turns up later, the timeline proves when it was planted.

Do you work with lawyers directly?

Yes. We regularly work with Ontario family-law counsel, corporate/M&A counsel, and litigation firms. We can invoice through your law firm, deliver the report to counsel under privilege, and testify to methodology if required.

Where do you cover?

Greater Toronto Area, Downtown Toronto (Downtown Toronto / Financial District / Yorkville / Entertainment District), York, Peel. Executive and boardroom sweeps: Ontario-wide by arrangement.

Can I do this myself with a bug detector from Amazon?

A $60 RF detector will find an actively transmitting bug the size of a matchbox in a quiet room. It will miss: dormant GPS trackers, burst-mode audio devices, BLE trackers, and anything cellular. It also produces no report, no serial capture, and no admissible evidence. If it’s serious enough to matter, don’t rely on Amazon.

Book a Sweep

Same-week appointments in the GTA. Same-day emergency sweeps by phone.

Confidential line — answered by the technician who does the sweep, not a call center.

Every Make. Every Model.

Tap your brand — key & fob programming for every make, on-site.

AcuraAlfa RomeoAudiBMWBuickCadillacChevroletDodgeFiatFordGenesisGMCHondaHyundaiInfinitiJaguarJeepKiaLand RoverLexusLincolnMaseratiMazdaMercedesMINIMitsubishiNissanPolestarPorschesmartSubaruSuzukiTeslaToyotaVolkswagenVolvo

Toronto Fob

Unit 2, 736 Bay Street
Toronto, ON M5G 2M4
416-668-4070

Yonge & Wellesley

568 Yonge Street
Toronto, ON M4Y 1Y8
647-992-6882

Richmond Hill

Doncrest Mart, Unit 36
420 Hwy 7
Richmond Hill, ON L4B 3K2
647-961-3988

Hours: 8am – 8pm Monday – Saturday  ·  © 2026 Toronto Fob  ·  NASTF VSP-Certified

Scroll to Top