Forensic Phone Examination · Stalkerware · AirTag Tracking

You’re Not Imagining It.

A forensic examiner checks your phone for spyware, tracking apps, and AirTag pairings, including what consumer antivirus apps are not built to check. You get a written report if you need one for a protective order or custody case.

Call (239) 241-8095

We answer 7am–11pm Eastern. After hours, leave a message and we call back at a time you say is safe.

Text us instead

Can’t talk freely? Text us a code word and we’ll call back at a time you say is safe.

First call

Free triage

30-minute call to figure out whether you actually need a forensic exam or whether something simpler will solve it.

Done-for-you

Fixed fee by number of devices. You see your exact price before you sign.

Our examiner runs it end-to-end, in device packages (1, 2 to 3, or 4 to 5 devices). Work beyond the packages is priced in writing before it starts. A written report of what the exam found, with the chain of custody, for a protective-order or custody filing.

Quinnlan Varcoe, founder and lead forensic examiner at SleuthX

Who you’re calling

Quinnlan Varcoe (she/her)

Lead forensic examiner · 9 active GIAC certifications · Naples, FL

You’ll talk to a real woman examiner on the first call, not a sales rep, not a chatbot. I’ve handled cases for survivors of stalking and tech-enabled abuse, and for family-law attorneys. NDA from first contact. I’ll tell you the truth about what your phone shows, even if the answer is "nothing."

What a forensic phone scan actually finds

Stalkerware and spyware such as Pegasus, FlexiSPY, mSpy, Cocospy, and dozens of less-known tools. Most consumer antivirus apps cannot see these. When a matter calls for it, we engage Cellebrite and Magnet Axiom through our licensed partner network, the same tools federal examiners use.
AirTag and tracker pairing covers devices currently or previously paired to your phone, plus a local Bluetooth sweep instructions if needed.
Account access audit. We review which devices and sessions have signed in to your iCloud, Google, email, banking, social. Devices syncing your messages. Mailbox forwarding rules. Hidden OAuth grants.
Plain-language summary of what we found, what to change first, and when it is safe to, and what to do with police or counsel. We can sit on a call with your attorney if you have one.

We examine only a device you own. Before we start, you sign a form stating that you own it. Other legal authority, such as a court order, is covered in our terms.

If you need help right now and can’t reach us

National DV Hotline: 1-800-799-7233 · text START to 88788
NNEDV Safety Net: tech-abuse safety planning at techsafety.org
If you’re in immediate danger: call 911.

When you are ready

If you want an examiner to look at this with you, call the number below.

Signing opens DocuSign in a new tab and emails the letter to the address you enter. Use an email no one else can read, and close that tab when you finish.

Call (239) 241-8095

Frequently asked

How do I know if there's spyware on my phone?

You usually can't be sure on your own. Real stalkerware (Pegasus, FlexiSPY, mSpy and others) hides from consumer antivirus apps. Common signs are battery drain, the partner knowing things you never told them, or the phone running hot at night. A forensic exam with Cellebrite or Magnet Axiom is the only way to confirm.

If you find something, will removing it alert the person?

It can. If we find stalkerware, removing it can alert the person who installed it. We plan the timing with you and your advocate first, and nothing is removed before you say so.

Can the findings be used in court or a protective order?

We cannot promise how a court will treat the report. It records the hash values, the method, the tools and their versions, and the exhibits, with a documented chain of custody, formatted for protective-order filings, custody motions, civil suits, and police reports. Admissibility is always the court's decision.

What does the exam cost?

The first 30-minute call is free. Our examiner does the work in device packages. Fixed fee by number of devices. You see your exact price before you sign. Work beyond a package is priced in writing before it starts.

Will the person tracking me know I'm getting it checked?

Not from us. NDA from first contact, encrypted records, no client names shared. The exam itself is read-only on extraction; the phone behaves normally during the process. The only signal that could leak is if you tell someone, or if a synced iCloud or family-sharing account is showing your activity.

Where are you, and do I have to send my phone?

We are based in Naples, Florida, and examine devices in Naples and in California. Before any work starts you sign one page: the agreement and the chain-of-custody form. The agreement you sign explains how to hand over or ship your device.

What if the examination finds nothing?

We do not promise a result. You get a written report on completion covering each device and each account you sent, whatever it shows.

Can you show who did it?

An examination can show what happened on a device or account, and when. It often cannot show who was behind it, and we will not tell you it can.

Whose device can you examine?

We examine only a device you own. Before we start, you sign a form stating that you own it. If that statement is false, the evidence can become unusable in court.

One call. Free. No commitment.

Call (239) 241-8095

7am–11pm Eastern · after hours, a callback at a time you say is safe

Tap the red Quick Exit button at any time to leave this page immediately.