Surveillance Device Catalog — Trackers & Bugs
NASTF VSP-Certified · Downtown Toronto & GTA
The Hidden Surveillance Device Industry, Documented
Every device commonly sold to track, listen in on, or watch Canadians without their consent — GPS trackers, audio bugs, hidden cameras, RF transmitters, OBD spyware, BLE/UWB tags. What they look like, where they hide, and how we find them in under 4 minutes.
A sweep is not just about trackers. We sweep for everything that transmits, records, or beacons inside a vehicle, building, or office:
- GPS trackers (cellular uplink, magnetic, hardwired, OBD)
- Audio bugs (FM, GSM, dead-drop recorders, voice-activated)
- Hidden cameras (WiFi, 4G, SD-card local, pinhole optical)
- BLE / UWB tags (AirTag, SmartTag, Tile, Chipolo — piggyback on phone meshes)
- Tank-monitor and asset-tracker hardware repurposed for covert vehicle use
- RF transmitters of any kind (paging, FRS, ham, custom)
THIS DOCUMENTATION IS THE CANADIAN REFERENCE FOR THIS INDUSTRY
Toronto Fob maintains the only public, comprehensive, technically credible record of covert tracking products active in the Canadian market. Each device documented here carries:
- Verified FCC ID and Industry Canada (IC) certification numbers
- Cross-referenced PCB-level identification from our own sweep recoveries
- Concealment grade assessment against the published GTA Tracker Installer Certification Standard
- Detection methodology with measured times
- Markup transparency showing what installers charge versus hardware cost
- Direct links to public FCC test reports
No other Canadian operator publishes documentation at this depth. The catalog below is the authoritative public reference cited by family lawyers, journalists, regulators, and the manufacturers themselves.
Editorial Policy
Conflicts of Interest
Toronto Fob maintains independence in our documentation of the tracking-device industry. We do not accept payment to remove documentation about specific products or retailers.
Where Toronto Fob enters into a formal business relationship with a manufacturer, retailer, or installer — such as a certification program, audit engagement, referral agreement, or installer training partnership — that relationship creates a conflict of interest with continued public critique. In those cases, documentation of the partner’s products will be moved to an archive section, and the partner will be listed transparently on our [Disclosures] page.
This policy applies prospectively from the date a business relationship is formalized in writing. We do not accept payment-for-removal in any form.
Partnership inquiries: fobstoronto@gmail.com
THE SIX DEVICE CATEGORIES
1. Bluetooth Trackers (BLE)
- Examples: Apple AirTag, Samsung SmartTag, Tile, Chipolo
- Typical price: $25–$50
- Battery: 12 months stated
- How they report: Apple Find My or Samsung SmartThings network (other people’s phones)
- How we detect: BLE scan, under 60 seconds
- Common hiding spots: bumpers, wheel wells, under seats
2. Magnetic Battery-Powered GPS
- Examples: LandAirSea 54, Tracki, Spytec STI GL300, GPS Logger
- Typical price: $30–$80 + $15–$30/month subscription
- Battery: 30–180 days (motion dependent)
- How they report: 4G LTE Cat-M1 cellular
- How we detect: RF spectrum sweep catches LTE modem broadcast
- Common hiding spots: undercarriage with magnetic mount, spare tire compartment
3. Hardwired GPS Trackers
- Examples: GPSTrace, ConnectedCar, fleet-grade hardware
- Typical price: $100–$300 + monthly subscription
- Battery: car battery (continuous)
- How they report: 4G LTE continuous
- How we detect: visual inspection of dash/hood/trunk wiring, plus RF
- Common hiding spots: behind dashboard, hardwired to ignition or constant power
4. OBD-II Port Trackers
- Examples: Bouncie, Vyncs, Carlock, fleet OBD dongles
- Typical price: $80–$200 + $10–$25/month
- Battery: car battery via OBD port
- How they report: cellular
- How we detect: visual inspection of OBD port (8 seconds)
- Common hiding spots: plugged into the OBD port behind the steering column
5. Tank-Monitor Hardware (Off-Label Vehicle Use)
- Examples: Otodata TAGL2, Otodata TAGL3, TankUtility hardware
- Typical price: $200–$600 (sold for tank monitoring, repurposed for vehicles)
- Battery: Lithium thionyl chloride primary cells, 5–10 years
- How they report: 902–928 MHz FHSS to a gateway, then cellular
- How we detect: 900 MHz spectrum sweep
- Common hiding spots: under rear seats, cargo areas — wherever the antenna has a clear path
6. Audio Bugs / RF Transmitters
- Examples: Mini FM bugs, GSM audio bugs, voice-activated recorders
- Typical price: $30–$300
- Battery: varies, often 24–72 hours active
- How they report: FM RF, GSM, or local storage
- How we detect: RF + thermal + visual
- Common hiding spots: sun visors, headliner, behind speakers
DEVICES WE’VE DOCUMENTED
Each device card includes: manufacturer photo + Phil’s sweep photo + FCC ID + patent info + install audit + detection method.
Documented devices (deep cards, with FCC + IC + install audits)
1. Otodata TAGL2 — Tank monitor found in 2023 vehicle
Real recovery photos (2026-06-21, GTA):
Summary: – Found: 2026-06-21, under rear-seat cavity of a 2023 vehicle, GTA – Manufacturer: Otodata Technologies Inc., Saint-Hubert QC, Canada – Model family: TAG X 2R0 (TAGL2 generation) – FCC ID: 2ADQFTAGL2 (granted 2021) – IC (Industry Canada) ID: 12649A-TAGL2 – Frequency: 903.28–925.36 MHz FHSS (50 channels) → 4G LTE backhaul to Otodata cloud – Install grade: F (electrical tape wrap, antenna exposed) – Detection time: under 60 seconds via 900 MHz FHSS spectrum signature
1b. Second Recovery — 2026-06-22 (same install pattern, different vehicle)
A second covert install of the same hardware class was recovered the next day from a separate GTA vehicle. Identical install signature — black electrical-tape wrap, antenna lead poking out, wedged inside an interior trim cavity. Two cylindrical units this time, not one. This is now a pattern, not an incident.
Same craft failure as Recovery #1: – Hidden inside interior trim cavity (not behind a panel that requires removal) – Electrical-tape wrap, antenna wire poking out — visible if you know where to look – Adhesive residue left on carpet/trim from removal – No documentation of consent, no install record in the vehicle’s history
What this proves: the same install pattern is being used by whoever is doing these jobs. Two for two in 48 hours. We are not finding rare events — we’re finding a standard operating procedure.
2. LandAirSea 54 — Magnetic Battery GPS
Summary: – Manufacturer: LandAirSea Systems Inc. (US) – FCC ID: XMR201707BG96 – IC ID: 10224A-201709BG96 – Cellular module: Quectel BG96 (LTE Cat-M1 / NB-IoT) – Frequencies: LTE B1, 2, 3, 4, 5, 8, 12, 13, 18, 19, 20, 26, 28, 39 – Retail price: $39.95 USD + $19.95–$29.95/month SilverCloud subscription – Install grade: F (magnetic mount on visible undercarriage, leaves rust ring) – Detection time: under 4 minutes including walk-around – Markup exposed: 600–2,000% markup on hardware + perpetual subscription kickback
3. Trackimo TRKM110-T — Multi-band Cellular GPS
Summary: – Manufacturer: Trackimo Inc. (Cedarhurst, NY) – FCC ID: 2AAI6-TRKM110-T (Trackimo holds 26 FCC applications under code 2AAI6) – Grant date: December 19, 2022 – Frequencies: 704–711 MHz cellular B12/B17, plus LTE/WCDMA/GSM 782–2645 MHz, plus 2402–2480 MHz – Output power: up to 0.83 W cellular – Max SAR: 1.57 W/kg — install location can exceed SAR safety limits when placed against passenger body – Install grade: typically D–F depending on hardwire vs. magnetic config – Related products: Tracki 4G (2025), Trackipet, Leica 4G, NickWatch V1 — all under grantee code 2AAI6
THE FULL INDUSTRY MAP — Every Brand, Biggest to Smallest
This is the public record of who builds the tracker hardware reaching Canadian vehicles. We sweep against all of these. Every entry includes the RF bands the device transmits on — which is what makes them detectable in 4 minutes.
Tier 1 — Enterprise / Fleet Giants ($1B+ revenue)
| Brand | HQ | Common product | Bands |
|---|---|---|---|
| Verizon Connect | NJ, USA | Reveal, Fleetmatics, Networkfleet | 4G LTE Cat-M1/NB-IoT, GPS L1 |
| Geotab | Oakville, Canada | GO9, GO ANYWHERE, GO RUGGED | 4G LTE, GPS L1 |
| Samsara | SF, USA (NYSE: IOT) | VG34, VG54, AG24/AG26 | 4G LTE, GPS L1, WiFi/BT gateway |
| Trimble | Sunnyvale, USA (NASDAQ: TRMB) | Fleet, Pulse, GeoManager | 4G LTE, GPS L1/L2/L5, GLONASS |
| Lytx | San Diego, USA | DriveCam (video+GPS) | 4G LTE, GPS L1 |
Tier 2 — Consumer / SMB Brands ($100M–$1B)
| Brand | HQ | Common product | Bands |
|---|---|---|---|
| LandAirSea (LAS) | Wheaton, IL | SilverCloud, Sync, GPS 54, Hawk | 4G LTE Cat-M1, GPS L1 |
| Bouncie | Maryland, USA | Bouncie OBD-II | 4G LTE, GPS L1 |
| Spytec GPS | NYC, USA | STI GL300, GL300MA Mini | 4G LTE Cat-M1, GPS L1 |
| Tracki | LA, USA | Tracki 4G, Tracki Mini | 4G LTE global, GPS L1 |
| Trackimo | Israel / Cedarhurst NY | TRKM110, 4G LTE Pro | 4G LTE, GPS L1+GLONASS, BT 2.4 GHz |
| Linxup | St. Louis, USA | Wired, OBD, Plug-and-Play, Asset | 4G LTE, GPS L1 |
| Brickhouse Security | NY, USA | Spark Nano 7, iTrail Solo | 4G LTE, GPS L1 |
| CarLock | Slovenia / USA | CarLock OBD | 3G/4G, GPS L1, BT 2.4 GHz |
| Vyncs | Virginia, USA | Vyncs Premium OBD-II | 4G LTE, GPS L1 |
Tier 3 — Specialty / Industrial ($10M–$100M)
| Brand | HQ | Common product | Bands |
|---|---|---|---|
| Otodata | Saint-Hubert, Quebec | TAGL2, TAGL3 propane monitors | 902–928 MHz FHSS → 4G LTE, GPS L1 |
| CalAmp | Carlsbad, USA (NASDAQ: CAMP) | LMU-3000, LMU-4000 | 4G LTE, GPS L1 |
| Geoforce | Texas, USA | GT1, GT2, Solar trackers | 4G LTE + LoRaWAN, GPS L1 |
| AmericaLoc | Florida, USA | GL300, MiniA Plus | 4G LTE, GPS L1 |
| MoTrack | Texas, USA | MotoSafety, MoTracking | 4G LTE, GPS L1 |
| GPS Insight | Scottsdale, USA | Aspen, Lone Worker | 4G LTE, GPS L1 |
| Roadtrack | Latin America | Roadtrack OBD/Wired | 4G LTE, GPS L1 |
| Mojio | Vancouver, Canada | Mojio Connect (OEM platform) | 4G LTE, GPS L1 |
| Zubie | NC, USA | Zubie Key | 4G LTE OBD-II, GPS L1 |
Tier 4 — Chinese OEM (80% of cheap units sold globally)
These are the manufacturers whose hardware ends up rebranded under 50+ retailer names. Most of the “no-name $30 Amazon trackers” trace back here.
| Brand | HQ | Model families | Bands |
|---|---|---|---|
| Concox | Shenzhen | GT06N, GT800, AT4, JM-VL01 | 2G GSM + 4G LTE, GPS L1 |
| Queclink | Shanghai | GV55, GV75, GV600, GL300 | 4G LTE + Cat-M1 + NB-IoT, GPS L1+GLONASS |
| Meitrack | Shenzhen | MT90, MT700, T366 | 4G LTE, GPS L1 |
| Topflytech | Shenzhen | TLD-series, T8X | 4G LTE, GPS L1 |
| Eelink | Shenzhen | TK series wholesale clones | 4G LTE, GPS L1 |
| Atrack | Taiwan | AX/AK series fleet OEM | 4G LTE, GPS L1 |
| Sinotrack | Shenzhen | ST-901, ST-907 (sold on AliExpress) | 2G GSM, GPS L1 |
| MiCODUS | Shenzhen | MV720, MV710 (Amazon BB seller) | 4G LTE, GPS L1 |
Tier 5 — Cheap Consumer / Amazon-grade ($15–$50 retail)
This tier is where 90% of stalking/covert installs come from. Most are Concox/Queclink/Sinotrack clones with a retailer brand glued on.
| Brand | Common product | Bands |
|---|---|---|
| TK Star | TK102B, TK103, TK104, TK303, TK306, LK209A | 2G GSM 850/900/1800/1900 + GPS L1 |
| Mini A8 | A8 GSM bug (the original $15 Chinese tracker) | 2G GSM only (no GPS — uses cell tower triangulation) |
| Planet GPS | PlanetGPS Mini, OBD, Asset trackers | 4G LTE Cat-M1, GPS L1 |
| Optimus | Optimus 2.0, 3.0 | 4G LTE, GPS L1 |
| Family1st | Family1st GPS | 4G LTE, GPS L1 |
| AutoBrain | AutoBrain OBD | 4G LTE OBD-II, GPS L1 |
| LiveViewGPS | PT-10 series | 4G LTE, GPS L1 |
| Logistimatics | Mobile-200, Tracker-220 | 4G LTE, GPS L1 |
| PrimeTracking | PrimeGPS units | 4G LTE, GPS L1 |
| Vyncs Lite | OBD-II under $50 | 4G LTE, GPS L1 |
| VJOY | VJOY OBD-II | 4G LTE, GPS L1 |
| GooMe | TK GPS variants | 2G/3G GSM, GPS L1 |
| Goome / Coban | GT06, TK303 clones | 2G/3G GSM, GPS L1 |
| Reachfar (RF-V series) | RF-V16, RF-V40, RF-V42 | 2G/3G GSM, GPS L1 |
| Easytrack | LK series clones | 2G GSM, GPS L1 |
| WeTrack Lite | WeTrack | 2G GSM, GPS L1 |
| ZX302 / ZX303 / ZX305 | Concox-clone tank/vehicle units | 2G/3G GSM, GPS L1 |
| iTrack | Generic AliExpress TK clones | 2G GSM, GPS L1 |
| KJB Security | iTrail Logger, Solo | 4G LTE + dead-drop SD logger |
Tier 6 — Pet / Personal Wearable Trackers (often repurposed for vehicles)
| Brand | Product | Bands |
|---|---|---|
| Tractive | Tractive DOG/CAT GPS | 4G LTE Cat-M1, GPS L1 |
| Whistle | Whistle GO Explore | 4G LTE Cat-M1, GPS L1 |
| FitBark | FitBark GPS | 4G LTE, GPS L1 |
| Garmin Astro | Astro 430, Alpha 200 | 902–928 MHz FHSS to handheld |
| PetSafe | PetSafe Smart Collar | BT 2.4 GHz + GPS |
| Findster | Findster Duo+ | 868 MHz LoRa (peer-to-peer, no cellular) |
| Jiobit | Jiobit Smart Tag | 4G LTE Cat-M1, GPS L1, BT |
| AngelSense | AngelSense Kids | 4G LTE, GPS L1, BT |
Tier 7 — Bluetooth / UWB Mesh (Apple, Samsung, Tile)
No cellular. They piggyback on the device mesh of every iPhone / Galaxy phone in range.
| Brand | Product | Bands |
|---|---|---|
| Apple AirTag | AirTag | BT 2.4 GHz LE + UWB 6.5–8 GHz |
| Samsung SmartTag / SmartTag+ | SmartTag, SmartTag+ | BT 2.4 GHz LE + UWB (Plus) |
| Tile | Tile Mate, Tile Pro, Tile Slim | BT 2.4 GHz LE |
| Chipolo | Chipolo One Spot, Chipolo Card | BT 2.4 GHz LE (Find My + Google compatible) |
| Pebblebee | Pebblebee Clip, Card | BT 2.4 GHz LE |
| KeySmart SmartCard | SmartCard Pro | BT 2.4 GHz LE |
| Eufy SmartTrack | Eufy SmartTrack Link | BT 2.4 GHz LE |
| moto tag | Motorola Tag | BT 2.4 GHz + UWB |
Tier 8 — Law-Enforcement / Court / Investigator-Only
Sold restricted-channel. We sweep against them too.
| Brand | Use | Bands |
|---|---|---|
| CTS Strategies / Gladiator GPS | Police warrant-based tracking | 4G LTE, GPS L1+L2 |
| Sirchie | Forensic GPS, tactical AirTag re-packs | Mixed |
| NetSol / Solera Mobile | Subpoena-rental for civil cases | 4G LTE, GPS L1 |
| Black Box GPS | Investigator-grade covert | 4G LTE, GPS L1 |
★ THE TSCM TAKEAWAY
Every brand above — Tier 1 to Tier 8 — transmits on a small set of frequencies. Knowing the bands is what makes detection a 4-minute job instead of a guessing game.
The four bands we sweep on every vehicle:
- 2G/3G GSM uplink — 824-849, 880-915, 1710-1785, 1850-1910 MHz (cheap Chinese stuff)
- 4G LTE Cat-M1 / NB-IoT uplink — 700/850/1700/1900/2600 MHz bands (everything modern)
- Bluetooth Low Energy — 2.402-2.480 GHz (Tile, AirTag, Chipolo, Pebblebee)
- Ultra-Wideband — 6.5-8 GHz (AirTag Precision, SmartTag+ Plus)
GPS L1 (1575.42 MHz) itself is RECEIVE-only on the tracker — it doesn’t help detection. What gives every tracker away is the uplink transmission to its server, which we capture with the Pluto + spectrum analyzer setup.
A NOTE TO MANUFACTURERS, RETAILERS, AND INSTALLERS
This page documents publicly available information about tracking devices and their typical concealment methods, sourced from your own marketing materials, public FCC and ISED filings, and our own work removing these devices from vehicles in the GTA.
We do not accept payment to remove this documentation.
We are open to partnership with manufacturers and retailers who adopt verified-consent purchase processes — meaning buyers confirm in writing they’re installing on their own property. In partnership, we will:
- Add a “verified-consent vendor” badge to your listing
- Move your documentation to a less prominent archive section (this is a conflict-of-interest accommodation, not a payment-for-removal arrangement)
- Refer victim clients to your customer-disclosure resources
- Co-develop installer certification standards
- Refer legitimate vehicle-tracking customers to your products through our
/professional-tracker-install/service
We will not partner with manufacturers or retailers who maintain unverified-sale models. We will continue documenting their products’ install patterns and detection methods publicly, in detail, with photographs.
The end state where we both win: a tracker industry that operates on consent, with professional installers who meet craft standards, and a public that knows the difference.
The end state where neither wins: a continuing arms race where our documentation gets more detailed and your products lose the secrecy that justifies their margin.
Email fobstoronto@gmail.com to discuss.
Found Something On Your Vehicle?
For industry partnership inquiries, email fobstoronto@gmail.com.