Surveillance Detection: A Brief Introduction
Surveillance detection (SD) is the covert effort to determine whether surveillance is taking place—and if it is, to collect key details about it: who’s conducting it, when and where it happens, what they look like, what they’re doing, and how their actions connect to the target.
Before diving into the fundamentals, a few clarifications about this article’s intent are in order.
The field of surveillance detection is both broad and complex. Many of its core principles come with exceptions—and exceptions to those exceptions. The goal here isn’t to provide a full education on the subject, but rather a clear and concise introduction. No short article can cover every contingency or subtlety that exists in the field.
It’s also important to note that no article, book, or even seminar can truly teach someone how to conduct surveillance detection. While some of the language below may sound instructional, that’s simply for efficiency’s sake. This is not a how-to manual—it’s a brief overview meant to introduce core ideas and help you start thinking like an SD professional.
Breaking It Down
A good way to approach surveillance detection is to divide it into two parts:
- What to look for — the signs and behaviors that suggest someone might be conducting surveillance.
- How and from where to look — the positioning, mindset, and tactics that allow an SD operator to observe effectively.
What to Look For
Many people assume detecting surveillance means spotting anyone who looks suspicious—nervous, out of place, or too interested in the target (watching closely, taking notes, filming, etc.). While such obvious signs sometimes appear, they usually indicate amateur-level surveillance. Professional operatives are trained precisely not to display those cues.
We can always hope for easy tells—and we should stay alert for them—but effective surveillance detection depends on recognizing the subtler indicators.
The single most important sign that someone may be conducting surveillance is correlation to the target.
If that word sounds vague, it’s because correlations often are. A correlation can be any observable act, movement, communication, or even just presence that aligns over time or distance with the target’s movements or activities. In other words, any repeated or meaningful connection—no matter how subtle—between a person and the target can signal surveillance.
Even the best-trained operatives can’t entirely eliminate correlations; they can only disguise them. Understanding what those correlations look like—and why they’re so hard to avoid—comes easiest once you’ve done surveillance yourself. Experience teaches you what it feels like to track a target, and that awareness sharpens your ability to notice others doing the same. It’s a bit like how casinos or fraud units hire ex-cheats to spot the tricks they once used. In this realm, it really does “take one to know one.”
As discussed in previous articles, hostile surveillance typically begins with reconnaissance—learning the target’s environment, identifying potential vantage points, and observing who naturally occupies them. A vantage point is a place that offers a clear line of sight to the target while allowing the operative to blend in: a coffee shop, a park bench, a busy sidewalk.
But no matter how well an operative blends, there’s always tension between appearance and intent. The operative might look casual, but their true purpose—visually collecting information—inevitably produces correlations. Watching a target, following them, signaling, texting, or even checking the time in sync with their actions—each is a potential clue.
Some correlations are especially hard to detect, such as those that develop over time or across distance. Imagine a CEO on a week-long business trip: someone who lingers every morning in the same hotel lobby could be creating a pattern. If that same person appears again at different hotels in different cities, their repeated presence alone becomes a powerful indicator.
How (and From Where) to Look
Once you know what to look for, the next question is: how—and from where—do you observe?
Two key principles apply:
- A correlation has two sides: the target and the surveillance operator. To confirm that a correlation exists, you generally need to observe both simultaneously. There are exceptions, but these often require advance knowledge of the target’s movements or coordination with the target’s security team.
- Covert positioning is essential. The SD operator must remain undetected, ideally from a vantage point that allows both the target and the suspected surveillance area to be seen within one field of vision—without the need to constantly turn or shift.
The ideal SD vantage point, therefore, is usually behind the suspected surveillance location. From this position, an SD operator can observe both the operative and the target while staying out of sight.
For example, if a bench at the edge of a park offers a good view of a company’s headquarters—a likely surveillance point—then a second bench farther back in the park, overlooking both that bench and the building, would be an ideal SD position.
Similarly, if surveillance might be taking place from a café window across the street from the same headquarters, a good SD position could be a seat deeper inside the café. From there, the SD operator could quietly observe both the street activity (perhaps coordinated with information from the protection team) and anyone repeatedly watching the building.
Of course, real-world conditions rarely match textbook scenarios. Perfect vantage points and ideal circumstances are luxuries. That’s why realistic field training focuses on adaptability—learning how to gather useful information even when the setup is less than perfect.
Get my new espionage thriller, Ghost Echo – on Amazon, December 15th.
