How Standard Wi-Fi Signals Can Track People Without Them Knowing

Your Wi-Fi router talks to your phone constantly, even when you're not doing anything online. Most of that chatter is invisible and forgettable. One piece of it, it turns out, is neither.

It's called beamforming feedback. Whenever your device and your router communicate, they exchange this signal as part of normal Wi-Fi operation. Nothing about that sounds alarming, until you learn it's sent unencrypted. Anyone with an ordinary Wi-Fi device nearby can listen in on it, no special equipment or hacking tools required.

Researchers found that this leaked signal isn't just noise. It can be used to recognize an individual person, an identity inference attack they named BFId. No camera. No access to your phone. Just a router doing what routers already do, broadcasting a signal that happens to carry an unintended fingerprint.

This isn't a fringe claim. The work was peer-reviewed and presented at the ACM SIGSAC Conference on Computer and Communications Security, one of the top academic venues in the field. That matters, because it means the finding survived scrutiny from other security researchers before it became public, not just a headline built on a preprint.

What makes this genuinely unsettling is how ordinary the exposure is. Beamforming feedback exists to help your network run smoothly. Nobody designed it to identify people. It just does, as a side effect nobody accounted for, sitting unencrypted in plain radio air for anyone tuned in to grab.

The researchers behind the discovery are now pushing to get encryption and privacy protections built into the next generation of Wi-Fi sensing standards, before this quiet leak gets locked in as a permanent feature of how Wi-Fi works. Whether that happens before the standard ships is still an open question. For now, the signal keeps going out, unprotected, every time your phone talks to your router.