OSINT via Bluetooth: how Android devices give away the owner

For reasons unknown to me, Bluetooth is still considered a purely local protocol: file transfer, connection to headsets, operation of a fitness bracelet. In practice, it gives a lot more. With proper processing of advertising packages and service information of Bluetooth devices, it is possible to determine the approximate location, type and model of the device, restore movement routes, and in some cases, identify the owner. All this happens without physical access to a smartphone or wearable devices.

Bluetooth-OSINT is used at the information collection stage, during technical support of events, during investigations and during movement monitoring. It is effective both in urban environments and in confined spaces: at train stations, business centers, hotels, and conference halls.

Android devices remain particularly vulnerable. Even with an inactive connection, they continue to send advertising packets.

Advertising packets in the context of Bluetooth, especially Bluetooth Low Energy (BLE), are special short packets of data that a device periodically transmits over the air to inform other devices about its presence.

These packets do not require a connection — they are transmitted "blindly" and are received by all devices within range. It is thanks to these advertising packages, for example, that headphones appear in the list of available Bluetooth devices on your phone.

Many models transmit the device name in clear text — for example, Pixel 8a Alex or Galaxy S22 Masha. This field often contains the user's name or nickname. Such data can be compared with search results in social networks, leaks, and databases.

Even if the name is hidden, there are still values in the packages that can be used to set the model, chip type, and manufacturer's version. If you collect data about such devices from different points, you can build a graph of movements and identify whether the devices belong to the same user.

What is visible via Bluetooth

– Device name

– Signal strength (RSSI) — allows you to estimate the distance to the source

– Manufacturer-specific data — additional fields specified by the manufacturer

– Advertising UUID — often static for specific models

– Frequency of broadcasting and interaction with services

The combination of smartphone, watch and headset is already a unique set. It is easily tracked by its characteristic behavior on the air.

Why Android makes more noise than other OS

– The MAC address may not be randomized until Bluetooth is manually rebooted

- Built–in BLE Privacy protection is either missing or partially implemented

– Device names are often transmitted in clear text

– System services are running in the background: Nearby, Fast Pair, geolocation, Smart Lock

This creates a permanent presence of the device on the radio. Even without connecting to other devices, the smartphone remains visible.

How to reduce visibility

1. Disable Bluetooth if it is not necessary to operate it

2. Disable background scanning:

Settings → Geolocation → Scan → Bluetooth Scan → Off

3. Change the device name:

Settings → About the phone → Device Name

4. Disable Nearby Share, Fast Pair, Smart Lock and other Bluetooth-enabled services

5. If root access is available, use additional utilities:

– Magisk BLE Privacy Module

– XPrivacyLua

– Bluetooth MAC Spoofer

Tools for analysis

– nRF Connect — displays BLE packets transmitted over the air

- Beacon Scanner / BLE Hero – detection and tracking of surrounding devices

— btmon with ADB – allows you to view HCI logs, including BLE, without root access

- Kismet is a powerful framework for monitoring wireless interfaces (Wi-Fi, BLE)

Even if the device is not connected to anything and is in your pocket, it can transmit this data, depending on the firmware, settings, and model. This creates a digital "fingerprint" on the airwaves.

Many people live in fantasy worlds where there aren't cultural, psychological, philosophical, political, and religious differences between individuals and groups of humans. Not everyone is a pura vida hippie. There are people out there who want to murder and rape your family for not sharing their religion. There are others who would do it for no other reason than they want to.

I've seen some of the darker side of reality, and many of your little fantasies would get a lot of people killed if carried out. Not everything is a psyop. Some of it is just good old reality that you don't want to face.

I don't value the children of violent religious zealots over those of my family, friends, neighbors, and countrymen.

I hate when a child anywhere dies, but I will never apologize for this stance.

Yes I do that. But I was describing the current bitcoin market in India. For me to buy, someone has to sell. And the sellers are very fearful these days. Nobody accepts online payments and we have to travel with cash and meet face-to-face with the sellers.

Buying/Selling is still going on, just that there are lot of hurdles along the way.

However, my message was to point out that although we have to be compliant with the rules, we have chosen the way that protects our users' data

Exactly. The majority of Americans voted for this. You're outnumbered.

This is why I love righteous dictators.

Too many idiots out there to be trusted with freedom. Especially now with worse education and growing population...

1, 2, 1, 2, 3, 3, 5, 4, 3, 2, 2, 2, 4, 6, 2, 4, 6, 4, 2, 2, 4, 7, 5, 7, 6, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7

There is this idea, and some experiments to back it up, that 80-90% of the population will just go along with what they are told and don’t pay attention to the world. They will all push the button that they are told to push. They will believe what they are told to believe. And then people expand from that to say that society is doomed, or that people must be controlled or manipulated. Or they use this bit of data to feel superior. Or say that the world can only be saved by this 10%. There is some truth here, but it’s more complicated.

I think about it this way… most of us spend most of our time existing in that NPC 90%. We can’t be experts on everything, we can’t pay attention to everything. We just don't have enough time and energy for that. But, in some area of our lives, most of us also exist in that 10%.

So instead of thinking you are the elite 10%, or feeling bad about being the NPC 90%, know that you are both!

In some areas of life you just go with the flow, and in other areas you are an expert. Know which ones are which, and serve humanity by being that bold 10% in your area of expertise.