A live NSW Police investigation into an alleged vehicle-tracking plot shows why movement data can be operationally sensitive – and why a professional vehicle bug sweep requires more than a visual check or basic RF detector.
By Claude Khoury, Chief Operating Officer, NSI Global
PUBLISHED: 8 October 2026
In February 2026, detectives from the NSW Police State Crime Command’s Robbery and Serious Crime Squad established Strike Force Greer after a tracking device was located on the vehicle of a former detective. Police later charged two men with installing or using a tracking device to find a person without consent and, in September, appealed for public assistance as the investigation continued.
For readers unfamiliar with the term, Technical Surveillance Countermeasures (TSCM) is the professional process of detecting, locating and assessing covert surveillance threats such as GPS trackers, hidden listening devices, hidden cameras and other unauthorised surveillance equipment. In a vehicle context, clients commonly describe this work as a vehicle bug sweep or car bug sweep.
The criminal allegations remain before the courts, and NSW Police were still seeking another person who may be able to assist investigators when they issued their 18 September public appeal.
The unresolved case should not be used to speculate about motive, responsibility or what the tracker may have revealed. It does, however, provide a useful security lesson: a vehicle can expose far more than a person’s location. Movement patterns can reveal routines, residences, workplaces, meetings, associates and predictable points of vulnerability.
What NSW Police Have Confirmed
NSW Police said Strike Force Greer was established in February 2026 to investigate a tracking device located on a former detective’s vehicle. Following further inquiries, police arrested a 61-year-old man on 31 August and a 45-year-old man on 1 September. Both were charged with installing or using a tracking device to find a person without consent.
On 18 September, Robbery and Serious Crime Squad detectives publicly sought information from anyone who had been in the car park of a licensed premises on Bay Village Road, Bateau Bay, between 4pm and 6.30pm on 19 February 2026. Police said they were attempting to identify an additional person who may be able to assist with their inquiries.
The NSW Police release did not disclose the tracker’s make, model, power source, communications method, mounting location, discovery method or the data it may have collected. Those unknowns are important. They demonstrate why a responsible Technical Surveillance Countermeasures analysis must distinguish what is known from assumptions about the device.
| WHAT IS PUBLICLY ESTABLISHED – AND WHAT REMAINS UNKNOWN |
| Publicly established: a tracking device was located on a former detective’s vehicle; Strike Force Greer was established; two men were charged; and NSW Police continued to seek information about another person in September 2026.
Not established in the primary police release: the exact tracker type, where it was concealed, how it communicated, how long it operated, what movement data was obtained, who physically installed it, or the ultimate purpose of the alleged tracking. |
Why Vehicle Tracking Is a Counterintelligence Problem
Location data can become intelligence. A single position may reveal very little, but repeated observations can expose patterns: where a person lives, when they leave, where they work, which facilities they visit, who they meet and which routes or locations recur.
For executives, government personnel, lawyers, journalists, investigators and others handling sensitive matters, that pattern-of-life information can have operational value. It can support physical surveillance, identify meeting locations, expose relationships or help an adversary predict when a person or asset will be in a particular place.
Vehicle security therefore belongs within a broader counterintelligence model. Protecting a phone, email account or office while ignoring the vehicle can leave movement and conversation patterns exposed through another collection pathway.
A Tracker Does Not Have to Transmit Continuously
A common misconception is that every tracking device can be found simply by scanning for a continuous radio signal. In practice, tracking technologies can behave differently.
Some devices may use satellite-navigation data and transmit location through a cellular or other wireless connection. Others may communicate intermittently, enter low-power states or transmit only under certain conditions. Some devices can log data locally for later recovery. Consumer locating technologies can also rely on surrounding devices or short-range wireless ecosystems rather than behaving like a conventional continuously transmitting GPS tracker.
The defensive lesson is straightforward: no single detection method covers every device state. A tracker that is asleep, powered down, recording locally or transmitting only briefly may not be obvious during a basic RF scan.
What a Vehicle TSCM or Bug Sweep Should Actually Examine
A professional vehicle TSCM inspection – commonly described by clients as a vehicle bug sweep or car bug sweep – combines technical examination with a structured physical assessment of the vehicle and the threat context.
Depending on the scope and vehicle, relevant methods can include visual and physical inspection, radio-frequency analysis, non-linear junction detection, thermal or electrical assessment, examination of vehicle electronics and investigation of unexplained devices, wiring or modifications.
The objective is not simply to find a commercially available GPS tracker. A comprehensive vehicle bug sweep may include GPS tracker detection, listening device detection, hidden camera detection, electronic bug detection and assessment of unauthorised transmitters or other devices capable of collecting location, audio, video, communications or other information from the vehicle environment.
NSI Global’s Vehicle, Vessel and Aircraft TSCM capability covers executive and government transport environments for tracking devices, listening devices, hidden cameras and unauthorised transmitters.
The Vehicle Is More Than a Transport Asset
Senior personnel often use vehicles as informal mobile offices. Calls are made from the cabin, meetings are discussed while travelling, sensitive documents may be transported and destinations can reveal business or operational intent.
That makes the vehicle a hybrid security environment. It combines a physical asset, a communications environment and a movement profile. Modern vehicles also contain their own wireless, infotainment, telematics and connected-service systems, which can complicate the technical background in which a covert device must be identified.
A TSCM practitioner therefore has to distinguish legitimate vehicle systems and normal emissions from anomalies that warrant further examination.
Discovery Should Trigger an Evidence-Preservation Response
Once a suspected tracking device is found, the problem changes. The object is no longer only a security threat; it may also be evidence.
Unnecessary removal, powering, charging, pairing, button presses or connection to a computer can alter the device state or affect stored information. Where there is a credible criminal, legal, employment or security issue, the immediate priority should be to document the device and circumstances, restrict unnecessary access and obtain appropriate police, legal or forensic advice.
Depending on lawful authority and the device, forensic examination may be able to identify configuration data, stored location records, timestamps, network or account information, pairing artefacts, SIM or subscriber details, memory contents or other technical evidence. The availability of those artefacts varies substantially between devices.
The Surrounding Evidence Can Matter as Much as the Tracker
A vehicle-tracking investigation is rarely limited to the electronics inside the tracker itself. The access pathway can be equally important.
Investigators may need to correlate the device with CCTV, dashcam footage, vehicle access records, parking locations, work or event schedules, witness observations, communications records and other evidence capable of showing when a person could have approached the vehicle.
That is reflected in Strike Force Greer. NSW Police specifically asked the public for CCTV or dashcam footage from a defined car-park location and time window as they continued trying to identify another person who might assist the investigation.
This is a useful counterintelligence lesson: detecting the device answers only one question. A complete investigation also asks how it got there, when it got there, who had opportunity and what the technical evidence can establish.
Tracking Devices and NSW Law
Section 9 of the Surveillance Devices Act 2007 (NSW) prohibits a person from knowingly installing, using or maintaining a tracking device to determine the geographical location of a person without that person’s express or implied consent, or an object without the consent of a person in lawful possession or control of that object, subject to statutory exceptions.
The Act provides exceptions for circumstances including use under a warrant, emergency authorisation, Commonwealth law or for a lawful purpose. The application of those provisions depends on the facts and legal authority in each matter.
The two men charged in Strike Force Greer are entitled to the presumption of innocence. Nothing in this case study should be read as expressing a view on their guilt or on any unresolved factual question before the courts.
When Should a Vehicle TSCM Inspection Be Considered?
Vehicle TSCM – or a vehicle bug sweep, in common buyer terminology – should be risk-led rather than driven by fear. A credible trigger can arise where there is an identified threat, suspicious device, unexplained knowledge of movements, evidence of stalking or surveillance, heightened executive risk, sensitive operations or another reason to believe a vehicle may have been accessed.
- A suspicious object, unexplained wiring or electronic device is discovered in or on the vehicle.
- An unauthorised person appears to know movements, destinations or meeting locations that were not publicly available.
- The vehicle has been left in an exposed location during a period of heightened threat.
- Access keys, parking credentials or vehicle control have been compromised.
- A high-risk employee, contractor, relationship or dispute creates a credible surveillance concern.
- An executive, government official, investigator, journalist or other sensitive role receives a specific threat warning.
- A previous tracker or covert device has been found and the organisation needs to assess the broader environment and possible re-compromise.
Why Consumer Tracker Alerts Are Not a Complete Vehicle Bug Sweep
Smartphone alerts for certain consumer tracking ecosystems are valuable personal-safety controls, but they should not be confused with a comprehensive vehicle TSCM inspection or car bug sweep.
Those alerts are designed around supported consumer technologies and particular detection behaviours. They cannot be assumed to detect every cellular tracker, locally logging device, custom surveillance platform, powered-off device or other covert technology.
Where the threat is credible and consequential, the inspection methodology should be chosen around the risk rather than around the capabilities of one consumer application.
Frequently Asked Questions
Can a GPS Tracker Be Hidden on a Vehicle Without the Driver Knowing?
Yes. Tracking devices can be compact and may operate without obvious symptoms to the driver. Detection depends on the device, installation method and technical state.
Will an RF Detector Find Every Vehicle Tracker?
No. An RF detector can help identify active transmissions, but a device may transmit intermittently, enter a low-power state, record locally or use a communications method that requires other detection approaches.
Can a Tracking Device Record More Than Location?
It depends on the device. Some surveillance platforms may combine location tracking with other sensors or communications capabilities. A device should be identified and examined before assumptions are made about what it can collect.
Should a Suspected Tracker Be Removed Immediately?
Where there is no immediate safety reason to do so, unnecessary handling can compromise evidence. Document the discovery, restrict access and seek appropriate police, legal, security or forensic advice. Immediate personal safety takes priority in an emergency.
Can Forensics Show Who Installed a Tracker?
Sometimes technical and surrounding evidence can assist, but a tracker does not automatically identify the person who installed it. Attribution may require device data, accounts, telecommunications records, CCTV, access evidence, fingerprints or other investigative material.
What Does a Vehicle Bug Sweep Look For?
A professional vehicle bug sweep can look for GPS trackers, hidden listening devices, covert microphones, hidden cameras, unauthorised transmitters and other electronic surveillance equipment, as well as suspicious modifications or wiring relevant to the defined threat. The exact scope should be risk-led rather than based on one device category.
Why the 2026 NSW Case Matters
The Strike Force Greer investigation remains active, and the criminal allegations have not been finally determined. For that reason, the case should be treated as an example of surveillance risk and investigative response, not as a basis for speculation about motive or guilt.
Its TSCM lesson is clear. Vehicles can expose a person’s movements, associations and sensitive conversations. A vehicle bug sweep therefore needs to consider more than continuously transmitting GPS devices: hidden listening devices, covert cameras, intermittent transmitters and locally logging equipment can create different detection challenges. Finding a device should begin an evidence-preservation and access-path investigation rather than end the security response.
For organisations and individuals operating in genuinely high-risk environments, vehicle security belongs alongside office TSCM, bug sweeps of sensitive premises, mobile-device security, executive protection and counterintelligence. The relevant question is not simply whether a GPS tracker can be found. It is what information an adversary could collect through the vehicle and which controls are needed to reduce that exposure.
Organisations, law firms, government agencies and authorised representatives requiring a risk-based vehicle TSCM inspection, vehicle bug sweep or car bug sweep can contact NSI Global for a confidential TSCM consultation.
Sources and Further Reading
- NSW Police – Robbery and Serious Crime Squad appeal for information as investigation into alleged plot to track former detective continues, 18 September 2026
- NSW Legislation – Surveillance Devices Act 2007
- NSI Global – Technical Surveillance Counter Measures
- NSI Global – Vehicle, Vessel and Aircraft TSCM
- NSI Global – Hidden Camera in UK Government Offices: TSCM Lessons
