The Dark Side of Item Trackers: Location Tracking Abuse, and the Coin Battery That Can Kill | 防丢器背后的「暗面」:被滥用的定位追踪,以及那颗可能致命的纽扣电池

Bluetooth Tracker FAQ · 蓝牙防丢器问答

防丢器背后的「暗面」:被滥用的定位追踪,以及那颗可能致命的纽扣电池

The Dark Side of Item Trackers: Location Tracking Abuse, and the Coin Battery That Can Kill

导语 :蓝牙防丢器(如 Apple AirTag、Google Find Hub 生态的追踪标签)本是为找回钥匙、行李、背包而生,但硬币大小的体积、可藏匿的设计与海量的「众包定位网络」,也让它们成了跟踪与隐私争议的焦点。2026 年 10 月 2 日,美国司法多地区诉讼委员会(JPML)将数十起针对苹果的 AirTag 跟踪诉讼合并为 MDL No. 3199,集中到加州北区联邦法院审理;与此同时,一颗可更换的 CR2032 纽扣电池,正在把「防丢」与「儿童误吞致命风险」这两件事牢牢绑在一起。本期 FAQ 从「安全与隐私」这一全新角度切入——不再谈定位原理与选购,而是回答:防丢器到底如何被滥用、平台如何反制、法律如何收口,以及那颗小小的电池为什么是每个家庭的隐藏风险。

Introduction : Bluetooth item trackers — such as Apple's AirTag and the tracker tags on Google's Find Hub network — were built to help you recover keys, luggage, and backpacks. But their coin-sized form factor, concealable design, and vast "crowdsourced location network" have also made them a magnet for stalking and privacy controversy. On October 2, 2026, the U.S. Judicial Panel on Multidistrict Litigation (JPML) consolidated dozens of AirTag stalking lawsuits against Apple into MDL No. 3199, centralized in the Northern District of California. At the same time, a single user-replaceable CR2032 coin cell is tying "finding lost things" tightly to a potentially fatal child-ingestion risk. This FAQ takes a fresh "safety and privacy" angle — leaving behind positioning tech and buying guides — to answer: how these trackers are actually abused, how platforms fight back, how the law is catching up, and why that little battery is a hidden hazard in every home.

FAQ 正文 · Frequently Asked Questions

1:蓝牙防丢器是怎么被用来「跟踪人」的?为什么它比想象中更难防?/ How are Bluetooth trackers actually used to stalk people, and why is it harder to defend against than people think?

** 防丢器本身没有 GPS、不联网,它靠的是「别人手机帮你上报位置」——周围任何一台 iPhone 或安卓机都会匿名接收它广播的加密蓝牙信号并回传。这套机制在「找钥匙」时是优点,在「跟踪人」时却成了帮凶:跟踪者只需把一枚 31.9mm、约 11g 的 AirTag 塞进对方的外套口袋、背包夹层或车底轮眉,就能借由被跟踪者身边的海量陌生设备持续获知其行踪,而对方可能毫不知情。

更难防的是三个现实:其一,体积太小、极易藏匿,AirTag 只有硬币大小,无内置挂孔,可轻易贴在任何隐蔽角落;其二,警告是「延迟」且「有条件」的——系统为避免误报,要求「陌生追踪器跟随你移动一段时间」才会弹窗,苹果早期甚至最长可延迟到 72 小时;其三,无手机者与安卓早期用户几乎裸奔——诉讼文件指出,跟踪受害者若「完全没有手机」或使用安卓机(自动警告直到 2023 年年中才逐步开放),几乎得不到任何保护。

需要说明的是:此处的「难防」是基于多起诉讼原告的指控与第三方(如 EFF)的实测描述,并非法院认定结论;苹果一直强调 AirTag 是「用来找物品、而非追踪人」的产品,并否认需为第三方犯罪用途承担责任。

Note: this "harder to defend" framing is based on plaintiffs' allegations and third-party testing (e.g., EFF), not a judicial finding. Apple has consistently stated that AirTag is designed to track items, not people, and denies liability for third-party criminal misuse.

These trackers have no GPS and no cellular connection — they rely on "strangers' phones reporting your location." Any nearby iPhone or Android device anonymously picks up the tracker's encrypted Bluetooth broadcast and relays it back. That is a strength when finding keys, but a liability when tracking a person: a stalker only has to slip a 31.9mm, ~11g AirTag into someone's coat pocket, bag lining, or a car's wheel well, and the victim's own surrounding devices will keep feeding location updates to the stalker — often without the victim ever knowing.

Three realities make it harder to defend against: first, the tiny, concealable size — an AirTag is coin-sized with no built-in loop, easy to hide anywhere; second, warnings are delayed and conditional — to avoid false alarms, the system only alerts after "an unknown tracker has been moving with you for a while," and Apple's early design could delay alerts up to 72 hours; third, people without phones and early Android users were nearly unprotected — lawsuit filings note that victims with "no phone at all" or using Android (automatic alerts only rolled out gradually from mid-2023) received essentially zero protection.

2:为什么 2026 年 10 月,苹果的 AirTag 突然集中「被告」了?MDL No. 3199 是怎么回事?/ Why is Apple suddenly facing a wave of AirTag lawsuits in October 2026, and what is MDL No. 3199?

这是「一根导火索被点燃后的集中爆发」。最早的 AirTag 集体诉讼 Hughes v. Apple 于 2022 年 12 月在旧金山提起,但 2026 年 3 月,联邦地区法官 Vince Chhabria 驳回了集体诉讼认证(class certification)——理由是各州法律不同、每位原告的遭遇差异太大,不适合「打包」成集体诉讼。认证失败后,原告纷纷转为个人诉讼**,从 2026 年年中起在美国多个州陆续提起数十起(有媒体统计超过 30 起)。

面对分散各地的同类案件,美国司法多地区诉讼委员会(JPML)于 2026 年 10 月 2 日裁定成立 MDL No. 3199,把联邦层面的 AirTag 跟踪案集中到加州北区联邦法院、由法官 Noël Wise 统一进行审前程序(证据开示、专家证词等)。MDL 不是「集体诉讼」,每位原告仍保留自己的个案,只是把共性问题合并处理以提效。

诉讼的核心指控高度一致:苹果在 2021 年 4 月推出 AirTag 时明知可能被用于跟踪,却未提供足够的反跟踪护栏。原告援引的一项关键数据是——据诉状称,2021 年 4 月至 2024 年 4 月间,苹果收到了 超过 4 万起与 AirTag 跟踪相关的报告(平均每月超 1000 起)。需要强调:这些目前都只是原告的单方指控,尚无任何法院认定苹果负有责任。

This is a concentrated outbreak after a fuse was lit. The original AirTag class action,

Faced with similar cases scattered across the country, the JPML on October 2, 2026 created MDL No. 3199, centralizing federal AirTag stalking cases in the Northern District of California before Judge Noël Wise for coordinated pretrial proceedings (discovery, expert testimony, etc.). An MDL is not a class action — each plaintiff retains their own case, but common issues are handled together for efficiency.

The core allegations are highly consistent: Apple allegedly knew AirTags could be misused for stalking yet failed to provide adequate safeguards when it launched the product in April 2021. A key figure plaintiffs cite: Apple reportedly received more than 40,000 AirTag-related tracking reports between April 2021 and April 2024 (averaging over 1,000 per month). To be clear: these remain one-sided allegations, and no court has yet found Apple liable.

3:苹果和谷歌现在到底有哪些「反跟踪」护栏?它们真的管用吗?/ What anti-stalking safeguards do Apple and Google now have, and do they actually work?

** 经过几年迭代,两大平台已经布下了几层防线:

1. 陌生追踪器警告(Unwanted Tracker Alerts):当一枚「不属于你的追踪器」跟随你移动一段时间,手机会弹窗提醒。iPhone(iOS 14.5+)与安卓(Android 6.0+)均支持。

2. 跨平台标准(DULT):2024 年 5 月苹果与谷歌联合发布「检测不必要的位置追踪器」规范,让 iPhone 与安卓机能互相识别对方的追踪器。这项技术工作现由 IETF 的 DULT 工作组持续推进。Chipolo、eufy、Jio、摩托罗拉、Pebblebee 等厂商已承诺让未来标签兼容该标准。

3. 声音警报:追踪器与主人分离一段时间后被移动,会自动发出声音,帮助「没手机的人」发现它;2026 年的固件更新还增强了 AirTag 2 声音的可定位性。

4. 轮换蓝牙标识符:AirTag 的蓝牙 ID 会频繁更换,增加「长期盯梢」的破解难度。

5. 手动扫描:安卓在「设置 → 安全与紧急情况 → 未知追踪器提醒」里提供约 10 秒的「立即扫描」,iPhone 也可在「查找」App 中查看「随身检测到的物品」。

但它们并非无懈可击,这也是诉讼反复揪住的核心矛盾:其一,警告是「慢热」的——为避免在公交、飞机上误报,系统要求「物理上随你移动一段时间」才提醒,EFF 实测警报最长可达 24 小时,且「较新的追踪器型号有时不会被识别」;其二,警告失败是真实存在的——多起诉讼中,受害者用 iPhone 却「从未收到提醒」;其三,关掉手机蓝牙/定位并不能阻止追踪——你关的是自己的接收能力,追踪器依旧在通过别人的手机上报你的位置。

After years of iteration, both platforms have layered several defenses:

1. Unwanted Tracker Alerts: when a tracker that doesn't belong to you moves with you for a period, your phone pops a warning — on iPhone (iOS 14.5+) and Android (Android 6.0+).

2. Cross-platform standard (DULT): in May 2024 Apple and Google jointly released the "Detecting Unwanted Location Trackers" specification, letting iPhones and Android phones recognize each other's trackers. The work now continues in the IETF's DULT working group. Chipolo, eufy, Jio, Motorola, and Pebblebee have committed to making future tags compatible.

3. Sound alerts: a tracker separated from its owner that is later moved will emit a sound, helping people without phones detect it; 2026 firmware improved the AirTag 2's audible alert.

4. Rotating Bluetooth identifiers: AirTag's Bluetooth ID changes frequently, making long-term surveillance harder to break.

5. Manual scan: Android offers a ~10-second "Scan now" under Settings → Safety & emergency → Unknown tracker alerts; iPhone lets you review "Items Detected With You" in the Find My app.

But they are not airtight — this is exactly the core tension the lawsuits keep raising: first, alerts are deliberately slow — to avoid false alarms on buses and planes, the system requires "physically moving with the tracker over time," and EFF found alerts can take up to 24 hours and that "newer tracker models aren't always detected"; second, alert failures are real — in several lawsuits, victims used iPhones yet "never received an alert"; third, turning off your phone's Bluetooth or location does not stop the tracking — you're only disabling your own reception; the tracker keeps reporting your location through other people's phones.

4:如果我怀疑自己被追踪了,应该怎么做?/ What should I do if I suspect I'm being tracked?

** 分三步,安全永远是第一优先级:

1. 看手机:iPhone 检查「查找 → 物品 → 随身检测到的物品」;安卓进入「设置 → 安全与紧急情况 → 未知追踪器提醒」,点「立即扫描」。安卓的警告会在 48 小时后自动清除、且每枚追踪器每天最多提示一次,所以及时截图留证很重要。

2. 动手找:追踪器大约是一枚 25 美分硬币的大小,重点搜查外套口袋、包内衬、车底(含轮眉、保险杠内)、儿童物品等隐蔽处。EFF 特别提醒:虐待者往往就是追踪器的主人,先做好安全预案再决定是否、以及如何停用。

3. 感到不安全,立即求助:前往公共场所并联系执法部门;对于苹果设备,警方可依法向苹果索取机主信息。不要直接去找对方当面对质——警告只是「需要排查」的信号,不等于对方有罪的证据。

需要说明:上述是公开的安全指南与 EFF 建议的汇总,不构成法律建议;不同地区关于「电子跟踪」的法律差异很大,如涉及人身安全,请优先以当地警方和维权机构意见为准。

Note: the above summarizes public safety guidance and EFF recommendations, not legal advice. Laws on "electronic tracking" vary widely by jurisdiction; where personal safety is involved, prioritize local police and advocacy organizations.

Three steps, with safety always first:

1. Check your phone: on iPhone, review Find My → Items → Items Detected With You; on Android, go to Settings → Safety & emergency → Unknown tracker alerts and tap "Scan now." Android alerts auto-clear after 48 hours and each tracker triggers at most one alert per day, so screenshot the alert promptly to preserve evidence.

2. Search physically: trackers are about the size of a U.S. quarter — check coat pockets, bag linings, under the car (wheel wells, bumpers), children's belongings, and other hidden spots. The EFF specifically warns that an abusive partner may be the tracker's owner — make a safety plan before deciding whether and how to disable it.

3. If you feel unsafe, get help immediately: go to a public place and contact law enforcement; for Apple items, police can request owner information from Apple. Do not confront the other person directly — an alert is a signal to investigate, not proof of someone's guilt.

5:为什么一颗小小的 CR2032 纽扣电池,被反复提醒是「致命风险」?/ Why is a tiny CR2032 coin cell repeatedly flagged as a "fatal risk"?

因为它够小、够亮、够危险。AirTag、三星 SmartTag 及绝大多数防丢器都使用可更换的 CR2032 锂纽扣电池(直径 20mm、厚 3.2mm、3V)。它的「致命」来自两个物理事实:其一,体积正好卡住儿童食道——误吞后,电池可能在 2 小时内引起严重化学灼伤,甚至灼穿食管、血管,造成致命大出血;其二,纽扣电池常年位列儿童误吞高发异物**,美国为此专门立法。

法律层面已经收口:美国 2022 年通过的 Reese's Law(里斯法案) 要求消费品安全委员会(CPSC)对含纽扣电池的产品制定强制标准,CPSC 已采纳 ANSI/UL 4200A-2023,规定含此类电池的产品必须采用儿童难以打开的电池仓、并在包装与产品上标注警示(选购时可留意「UL 4200A」认证标识)。

给家庭的三个具体提醒:① 更换电池时,取出的旧电池要立即放入儿童够不到的地方;② 备用电池要留在原装儿童安全包装里,不要散落抽屉;③ 若怀疑孩子误吞,立即就医,不要催吐,也不要用「喝牛奶」等方式自行处理。

Because it is small enough, bright enough, and dangerous enough. The AirTag, Samsung SmartTag, and most trackers use a replaceable

The law has already closed the loop: the U.S. Reese's Law (2022) directed the Consumer Product Safety Commission (CPSC) to set mandatory standards for products containing these batteries, and the CPSC adopted ANSI/UL 4200A-2023, requiring child-resistant battery compartments and warning labels on packaging and products (look for the "UL 4200A" mark when shopping).

Three concrete reminders for families: ① when replacing a battery, put the removed cell immediately out of children's reach; ② keep spare cells in their original child-resistant packaging, not loose in drawers; ③ if you suspect a child has swallowed one, seek emergency care immediately — do not induce vomiting or try home remedies like drinking milk.

6:「苦味涂层」纽扣电池是什么?它和防丢器有个什么「两难」?/ What is the "bitterant-coated" coin battery, and what dilemma does it create for trackers?

这是防丢器安全里一个非常「拧巴」的细节。为了防儿童误吞,以 Duracell 为代表的厂商给 CR2032 电池表面涂了一层无毒的苦味涂层(bitterant coating)**——孩子放进嘴里会因「苦」而吐出来。这是个聪明的救命设计。

但它带来了一个反效果:苦味涂层是绝缘体,如果涂到了电池与防丢器触点的接触面,就可能导致「新电池装进去却不通电」。苹果官方电池页面也承认:「部分带苦味涂层的 CR2032 电池可能无法在 AirTag 或其他电池供电产品上工作」,同时仍建议优先选用包装标注「Compatible with Apple AirTag」的苦味涂层电池。

如果买到「装进去没反应」的涂层电池,别急着扔,常见补救办法有:用异丙醇棉片轻轻擦拭电池表面 30 秒、晾干 10 秒后装入;或用 400 目以上细砂纸轻磨接触面。也可以直接选择无涂层的品牌(如多数 Energizer、Panasonic、Maxell、Murata/原 Sony、Amazon Basics)来彻底绕开这个坑。

This is a subtle but telling detail in tracker safety. To deter child ingestion, manufacturers like Duracell coat CR2032 cells with a

But it has a side effect: the bitterant coating is an insulator, and if it covers the contact surface between the battery and the tracker's terminals, the result can be "a brand-new battery that won't power the device." Apple's own battery page acknowledges that "some CR2032 batteries with bitterant coatings might not work with AirTag or other battery-powered products," while still recommending you prefer a bitterant-coated cell whose packaging states "Compatible with Apple AirTag."

If you buy a coated cell that won't respond, don't toss it — common fixes include gently wiping the surface with an isopropyl-alcohol cloth for 30 seconds and letting it dry 10 seconds before inserting, or lightly sanding the contact surface with fine (400+) grit sandpaper. Alternatively, you can simply choose uncoated brands (most Energizer, Panasonic, Maxell, Murata/formerly Sony, and Amazon Basics) to sidestep the issue entirely.

7:这些「暗面」会改变蓝牙防丢器的未来吗?普通用户该记住什么?/ Will these "dark sides" reshape the future of Bluetooth trackers, and what should ordinary users remember?

** 会,而且正在发生。三个方向值得关注:

1. 反跟踪会从「厂商自觉」走向「强制标准」:DULT 规范已从苹果/谷歌的行业倡议,进入 IETF 标准工作组;随着 MDL No. 3199 推进与可能的监管介入,防丢器行业大概率会被要求「出厂即具备跨平台、更及时的反跟踪能力」,而不是事后打补丁。

2. 「无手机者」与「安卓早期用户」的保护缺口正在被补上:跨平台警告、更响的声音警报、更频繁的标识轮换,都是在往「哪怕你没有智能手机,也至少能听到、能发现」的方向努力。

3. 电池安全成为「默认项」而非「加分项」:UL 4200A 与 Reese's Law 已经把儿童安全写进了产品门槛,未来选购防丢器时,「纽扣电池仓是否儿童防护」会像「是否防水」一样成为基本盘。

普通用户最该记住三句话:防丢器是「找东西」的工具,不是「看人」的工具——把它用在他人身上,可能触法;收到「陌生追踪器」提醒,宁可排查、不要忽视;那枚纽扣电池,永远别让孩子够到。

Yes, and it's already happening. Three directions are worth watching:

1. Anti-stalking is moving from "manufacturer goodwill" to "mandatory standard": the DULT specification has evolved from an Apple/Google industry initiative into an IETF standards working group; as MDL No. 3199 advances and potential regulation looms, the industry will likely be required to ship cross-platform, more-timely anti-stalking capabilities out of the box rather than patching after the fact.

2. The protection gap for "phoneless" people and early Android users is closing: cross-platform alerts, louder sound alerts, and more frequent identifier rotation all push toward "even without a smartphone, you can at least hear and find it."

3. Battery safety is becoming a default, not a bonus: UL 4200A and Reese's Law have already written child safety into the product bar — going forward, "is the coin-cell compartment child-resistant?" will be as basic a check as "is it waterproof?"

Three things every ordinary user should remember: a tracker is a tool for finding things, not watching people — using it on others may be illegal; if you get an "unknown tracker" alert, investigate rather than ignore it; and never let a child reach that coin battery.

免责声明:本文基于公开可检索信息整理,仅供科普参考,不构成法律或医疗建议。/ Disclaimer: Compiled from publicly available information for educational purposes only.

Scroll to Top