Bug Sweeping in India: What a Sweep Involves, the Law and How to Prepare

Most people search for a bug sweep when something already feels wrong: a competitor seems to know last week's pricing discussion, an ex-partner turns up wherever you go, or a charger in a rented room looks slightly odd. This guide explains what a sweep in India actually involves, where the law stands, how to book one without alerting whoever may be listening, and how to judge whether a provider is worth hiring.

What is bug sweeping?

Bug sweeping, known in the security industry as technical surveillance countermeasures (TSCM) and often called a "debugging service" in India, is the systematic search of a defined space for devices that capture or transmit audio, video or location without the occupants' consent. A sweep usually covers three kinds of threat. Transmitting devices, such as GSM (SIM-card) bugs, Wi-Fi cameras and radio-frequency (RF) transmitters, emit signals. Non-transmitting devices, such as SD-card voice recorders and pinhole cameras, store data locally and emit nothing. Trackers attached to vehicles report location over mobile networks or Bluetooth. Because no single instrument catches all three, a professional sweep combines a spectrum analyser, a non-linear junction detector (NLJD), optical and thermal checks and a close physical inspection. The result is a written account of the areas examined, the methods used and any findings. A sweep describes a space at the time it was inspected; it does not certify that the space will stay clean.

Which tool finds which device?

The most useful thing to understand before hiring anyone is that each detection method covers a different gap. A provider who brings only one instrument is only checking for one kind of device.

A non-linear junction detector (NLJD) deserves a word of explanation, because it is the instrument that separates a professional sweep from a gadget check. It transmits a low-power signal and listens for the harmonic echo that semiconductor components return, which means it can locate electronics that are switched off. Genuine circuits return a stronger second harmonic, while rusty metal joints tend to return a stronger third harmonic, which is how an operator tells a hidden circuit board from a corroded nail. A spectrum analyser does the opposite job: it finds devices that are actively transmitting, whatever they look like.

Is bug sweeping legal in India?

Checking a home, office or vehicle that you own or lawfully control for hidden devices is a precaution, and the Indian laws that apply here are aimed at the people who carry out covert surveillance and at signal-blocking equipment. Hidden-camera recording of private acts, monitoring a woman's electronic communications and possessing a jammer are each covered by specific provisions, listed below. The position is less simple when the space is shared, rented or controlled by someone else, or when the sweep involves another person's phone or vehicle. Those situations call for legal advice before anyone touches the property. For most readers the practical meaning is this: sweeping your own space is a sensible step, but what you do with any device you find (and whose property it is on) has legal consequences, so document first and act second.

The BNS came into force on 1 July 2024 and replaced the Indian Penal Code, so older articles citing IPC Section 354C are describing the predecessor of Section 77. You can read the provisions in the BNS as published by the Ministry of Home Affairs, the Information Technology (Amendment) Act, 2008, which inserted Section 66E (published by MeitY) and the Telecommunications Act, 2023 in the Gazette of India.

Note what these laws do not do. Section 77 protects women in the specific situations it describes, and Section 66E concerns images of defined body areas; neither is a general ban on every recording made in a private room. Whether a particular recording is unlawful depends on the facts, which is a question for a lawyer.

Can you use a jammer to block bugs?

No. Blocking a bug's signal with a jammer is not a lawful shortcut in India. The Department of Telecommunications advisory of July 2022 states that cellular jammers, GPS blockers and other signal-jamming devices are generally illegal unless specifically permitted by the Government of India, that private organisations and individuals cannot procure or use them, and that advertising or selling them is unlawful. The Telecommunications Act, 2023 now puts the possession and use of blocking equipment on a statutory footing. A jammer would also disrupt legitimate phones and emergency calls, and it tells you nothing about whether a device exists. Finding and documenting the device is the lawful route.

Before you book: keep the sweep quiet

This is the step most guides skip, and it often decides whether a sweep finds anything. If a device is live, whoever planted it may be listening to the room or reading the phone you use to arrange the sweep. A person who expects a sweep can switch a device off, retrieve it, or simply stop using it for a while.

1. Arrange the sweep from somewhere else. Do not discuss it inside the room you suspect, or on a phone or computer you think may be compromised. Use a different device and, if possible, a different location.
2. Keep the circle small. In an organisation, tell only the people who must approve access. Avoid calendar invites, group chats or visitor passes that describe the purpose.
3. Do not search first. Pulling apart chargers, smoke detectors or car panels before the sweep can disturb evidence and signal that you are suspicious.
4. Keep normal routines. A room that goes silent the day before a sweep tells a listener something has changed. Where it is safe to do so, use the space as usual until the team arrives.
5. Prepare a scope list privately. Note which rooms, vehicles, phones and items are in scope, when the space is normally used, who has had access (contractors, visitors, domestic staff), and when your suspicion started.
6. Decide in advance what happens if something is found. Agree with the provider whether a device will be left in place and documented for the police, or removed. Removing a device before it is photographed in position can weaken a later complaint.

If you believe you are in immediate danger, none of this should delay you. Safety comes before evidence, and the emergency number 112 is the right first call.

How a professional bug sweep usually runs

Methods differ between providers, but a thorough sweep in India generally follows a recognisable sequence. Ask any provider to walk you through their version of it before you agree to anything.

1. Scoping and threat discussion. Held away from the suspect area. The provider asks what triggered the concern, who might benefit from listening, and which spaces matter most.
2. RF survey. A spectrum analyser records the radio environment, so legitimate signals (Wi-Fi routers, phones, building systems) can be separated from unexplained ones.
3. Electronic-component search. An NLJD is passed over walls, furniture, fittings and objects to locate hidden circuitry, whether powered or not.
4. Optical and thermal checks. Lens detectors look for the reflection of camera lenses, and a thermal camera shows powered devices that are warmer than their surroundings. Thermal imaging reads surface temperature; it does not see through walls.
5. Physical inspection. Hands-on examination of the places devices are commonly concealed: power sockets and adapters, smoke detectors, light fittings, false ceilings, furniture, décor, and for vehicles the underbody, wheel arches, bumpers, boot and OBD port.
6. Line and device checks where in scope. Telephone lines, conference equipment and, where agreed, phones may be examined for signs of tampering.
7. Findings and report. Any suspicious item is documented in place before anyone decides what to do with it.

What should a bug sweep report contain?

The report is what you are paying for. It is the record you will show your board, your lawyer or the police, so it should be specific enough that someone else could understand exactly what was and was not checked. A useful report states:

• The date, start and end time, and the addresses, rooms and vehicles covered, plus any areas that could not be accessed.
• The methods and instrument types used in each area.
• Each finding, with photographs taken in position, the exact location, and what was done with the item.
• Unexplained signals or anomalies that were noted but not resolved.
• Practical recommendations, such as access controls or a follow-up sweep before a specific meeting.
• A plain statement of limitations: what the sweep could not establish.

Ask to see a redacted sample report before you book. A provider who will not show one, or whose sample is a single page saying "no devices found", is telling you something about the depth of the work.

What a bug sweep cannot tell you

A sweep reports findings within the areas it accessed, using the methods it used, under the conditions and at the time it was carried out. Finding no device does not prove that none exists, and no honest provider promises complete detection or future protection. A device installed the day after a sweep will not appear in its report.

A physical sweep also does not cover every route by which information leaks. Spyware on a phone, a compromised email account, a shared cloud folder or an insider repeating conversations are separate problems that need different checks. Treat any provider that guarantees "100% detection" with caution; the claim is not something the technology can support.

How much does bug sweeping cost in India?

There is no standard national rate, and published prices vary widely between providers. Rather than rely on a headline figure, ask for a written quote that shows how the price was built. These are the factors that usually move it:

A quote that is far below others usually means fewer methods, less time or a thinner report. Compare what is included, not only the total. The types of sweep BugSweepingTSCM offers for businesses, homes and vehicles are described on the services page.

Can you check for bugs yourself?

You can reduce obvious risks yourself, especially in a hotel room or rental. Some popular advice works; some gives false comfort.

• Look at what faces the bed, shower or desk. Chargers, clocks, smoke detectors and decorative items pointing at private areas are worth a close look.
• The torch test. Shining a phone torch across a dark room can catch the glint of a camera lens. It misses lenses behind tinted covers and gives no information about audio bugs.
• The phone-camera infrared check. Some phone cameras show the infrared LEDs that night-vision cameras use, as faint glowing dots in a dark room. Many rear cameras filter infrared, so the front camera often works better. A camera without infrared lighting will not show up at all.
• Detector apps and cheap RF detectors. Apps cannot detect radio signals the phone's hardware cannot measure, and low-cost RF detectors react to every Wi-Fi router and phone nearby. Both miss devices that record locally.
• Bluetooth tracker alerts. iPhones warn you when an unknown AirTag or Find My accessory is moving with you, and Android phones running Android 6 or later offer unknown tracker alerts with a manual "Scan now" option under Safety and emergency settings. These catch Bluetooth tags, not GPS trackers that use a SIM card.

For a room-by-room approach to cameras, see our guide on how to detect hidden cameras in a hotel room or office, and for cars, how GPS trackers are hidden on vehicles. Do-it-yourself checks are a reasonable first step for travel. They are not a substitute for a professional sweep when the stakes are a business negotiation, a legal dispute or your personal safety.

What to do if you find a hidden camera or bug

Your safety comes first, and you do not need to collect evidence before asking for help. If you feel in danger, leave the space and call 112, India's single emergency number for police, medical and other emergencies. You do not need to stay near the device or confront anyone.

If it is safe to do so:

1. Note exactly where the device is and when you found it.
2. Photograph it in position without touching, unplugging or opening it. Handling it can destroy fingerprints and stored data.
3. Do not destroy or throw away the device, and do not post about it online.
4. Report it to the local police. For cybercrime, including private images published or shared online, you can also file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in); complaints there are handled by the relevant State or UT police, and an online complaint does not automatically become an FIR.
5. Take legal advice about your own situation, particularly in a rented property, a workplace or a family dispute.

The helpline 1930 is for reporting urgent online financial fraud, such as money taken through a scam. It is not the number for a hidden camera or stalking emergency; use 112 or the police for those.

If you suspect someone is monitoring your phone, for example a partner or family member, seek help using a device or account you believe they cannot access. Do not reset the phone, delete apps or confront the person first. Doing so can alert them and erase evidence. For Bluetooth trackers, Apple's guidance is to go to a safe public location and contact law enforcement if you feel your safety is at risk.

How to choose a bug sweeping provider in India

People often search for the "best" bug sweeping company, but the useful question is whether a particular provider can show you how it works. These checks separate careful providers from the rest:

• Methods named in writing. The quote should list the instrument classes and physical checks included. A line that says only "advanced equipment" tells you nothing.
• A sample report. Redacted, but detailed enough to show areas covered, methods and limitations.
• Honest limits. A provider that promises "100% detection" or a "guaranteed clean" result is overstating what any sweep can do.
• Confidential intake. The first conversation should happen away from the suspect space, and the provider should raise this without being asked.
• Evidence awareness. Ask what happens if a device is found. The answer should involve photographing it in place and discussing a police or legal route, not quietly pulling it out.
• No jammers. Any provider that offers to sell or install a signal jammer is proposing equipment that Indian law does not allow private buyers to possess or use without Central Government permission. Walk away.
• Verifiable identity. A registered company, a named person responsible for the work, and credentials you can check yourself.

If you are comparing providers in a particular city, BugSweepingTSCM has location pages for Mumbai, Delhi NCR, Bengaluru and Chandigarh. For businesses, our guide to the signs that an office or boardroom may be bugged covers the warning signs that usually prompt a corporate sweep.

Frequently asked questions