What do these look like in real life?¶

These are not hypothetical patterns; they are the recurring shapes that technology-facilitated abuse takes. Each has a technical method underneath it, but the goal is always the same: reduce your independence, your credibility, and your sense of safety.

Persistence through legitimate access¶

“I never hacked anything. I already had access.”

This is the most common pattern. The abuser does not break in; they use access that was granted during the relationship and never fully revoked. Shared Apple or Google accounts, family sharing plans, saved browser sessions on a device that passed through their hands, a streaming service with a shared login.

The key feature of this pattern is that nothing looks unusual from the outside. The access appears legitimate because it once was. This makes it difficult to detect, difficult to explain to others, and difficult to act on without understanding what is actually shared.

Recovery-chain hijacking¶

Control the email. Control everything.

Once someone has access to a primary email address, they can trigger password resets across connected accounts, intercept verification codes, change recovery options to point somewhere else, and lock the original account holder out. The reset emails go to the compromised inbox. The alerts about new logins go to the compromised inbox. By the time anything is noticed, the chain may already have been traversed.

This pattern often begins with a compromise that feels small (a shared account, a forwarding rule, a backup email address that was never changed) and expands outward. The dependency structure of modern accounts means one point of access is rarely just one point of access.

Ambient surveillance¶

Not constant action. Constant visibility.

Location tracking through shared accounts or installed software. Message previews visible on an unlocked device. Cloud-synced photos uploading automatically. Smart home devices reporting presence and routine. Fitness app routes logged and accessible. This pattern does not require active intrusion; it requires that access was established at some point and was never removed.

The effect is a background awareness of your movements, communications, and state that shapes an abuser’s behaviour without ever being made explicit. They know where you were. They know who you spoke to. They know before you tell them. And you may not be able to identify how.

Narrative manipulation¶

Control what others believe.

This pattern uses digital tools to shape the account that friends, family, employers, or legal and social systems receive. It includes fabricated screenshots and edited chat logs presented as evidence; AI-generated images, video, or audio attributed to you; fake accounts sending messages in your name; selective disclosure of real content stripped of context; and false reports to employers, schools, social services, or the police.

The pattern exploits the credibility gap between “here is a document” and “I can prove it is false”. Courts, employers, and platforms are not equipped to assess the authenticity of digital evidence reliably. The burden of proof tends to land on the person being targeted.

Fabrication turns an accusation into apparent evidence: not a claim to be weighed but an artefact to be shown.

Escalation via frustration¶

Push until mistakes happen.

Account lockouts, repeated harassment spikes, and coordinated pressure are used to create a state of anxiety and exhaustion in which security decisions are made poorly. Someone who has just been locked out of their own account for the third time is more likely to reuse a familiar password. Someone who is overwhelmed is less likely to maintain careful separation of accounts and devices.

This pattern is often combined with others: harassment creates pressure, pressure creates errors, errors create new access points. The aim is not a single dramatic intrusion; it is a gradual erosion of the conditions that make security possible.

Stalkerware¶

Purpose-built stalkerware can track GPS location in real time, record calls, access messages and emails, activate microphones and cameras, and log keystrokes including passwords. It requires brief physical access to install and is designed to be invisible once running.

Commercial stalkerware is marketed as parental control or employee monitoring software, but the products are built for surveillance of adults in domestic settings. DIY equivalents using automation apps or abused “family safety” products achieve similar results. It is not, though, beyond finding: checking a device for stalkerware sets out how to look safely.

Location tracking¶

Beyond phone GPS, location can be tracked through Bluetooth trackers hidden in bags, cars, or clothing; shared account features like Apple Find My or Google Location Sharing; geotags on photos; calendar entries synced across accounts; ride-hailing history; and fitness app routes. The danger is not only being watched but being anticipated. Showing up where you did not announce you were going is not a coincidence when your movements are visible. For the Bluetooth-tracker part of this, recent iPhones and Android phones now raise an alert when an unfamiliar tag built to the shared standard, such as an AirTag, has been travelling with you, though a generic or deliberately silenced tracker can still evade it.

AI-generated content¶

Voice cloning from a few seconds of audio produces synthetic audio that can sound convincing to people who know you. Image generation tools can produce realistic fake photographs. Video synthesis is more technically demanding but available. This content is used for harassment, blackmail, reputational damage, and false evidence in legal contexts.

Even where the content is eventually identified as fabricated, the harm often precedes that identification by a significant margin. Where the content is a non-consensual intimate image, StopNCII can have a known image blocked across participating platforms before it spreads.

Financial manipulation¶

Control over shared banking applications, credit cards, and subscriptions is used to monitor spending, block access to money, create hidden debts, or generate fraudulent transactions. Buy-now-pay-later systems can be used in someone else’s name. Financial monitoring and disruption are tools of dependency: the goal is to reduce the economic options available to you, not necessarily to take money outright.

Smart home gaslighting¶

Remote control of lights, thermostats, locks, and speakers creates an environment that responds unpredictably, where things happen without explanation and are hard to convey to anyone who has not lived inside it. The effect is psychological: a persistent sense of unpredictability in a space that should feel safe, and a creeping uncertainty about your own perception of events.

Power and control, not technology¶

Every one of these patterns is about power and control. The technology is the delivery mechanism. Naming the pattern is not the same as having a solution, but once it is visible you can plan around it.

You are not imagining it. You are not overreacting. And there are ways forward.

Last reviewed: 2026-07-16.