Rayan

Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it. i've suspected this for months but last week something happened that made me finally check. i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know. i connected my iPhone to my MacBook and ran Claude Code that same night. it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway. what it found: → TikTok activated the microphone 347 times while the app was "closed" in the background → Instagram → 211 background activations → Facebook → 189 → Snapchat → 94 every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp. Claude Code pulled the full keyword cache: → "breakup" — tagged 4 hours before her feed changed → "moving out" — from a conversation with my mom last Tuesday → "wedding venue" — from a call with my sister about her engagement that i never searched once → "protein powder" — said it out loud to my roommate, had ads for it within an hour → "flight to tokyo" — mentioned it at dinner, saw travel ads the same night those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone. the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours. then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently. i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit. what i did: → revoked microphone access from every app that doesn't need it to function → disabled background app refresh for TikTok, Instagram, Facebook, Snapchat → turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7 → revoked "nearby interaction" permission which uses ultrasonic audio between devices Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone. within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real. the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.

Claude Code found a live video stream of my 8 month old daughter's crib on a public website. the camera was our baby monitor. the website had 73,000 other cameras from the same brand all streaming live to anyone who clicked the link my wife and i bought a CoziCam Pro when our daughter was born. 4.6 stars on Amazon, 28,000 reviews, $49. you download the app, connect it to WiFi, and you can watch your baby from your phone. every parent we know has something like it. we had it running every single night for 8 months i was running a home network security audit with Claude Code. checking what devices were connected, what ports were open, what was sending data to external servers. everything looked normal except the baby monitor → device → CoziCam Pro → model CC-400X → stream → unencrypted RTSP on port 554 → credentials → default admin/admin → never prompted us to change → broadcasting to our app AND simultaneously to an open relay server → relay server → 103.***.***.22 → Osaka, Japan → stream accessible without any login → direct URL Claude Code followed the relay server and found a website indexing every camera connected to it. organized by country, city, and device type. there was a category called "nursery" with a live thumbnail grid. thousands of baby monitors streaming in real time i found our camera on page 3. our daughter's crib. the stuffed bear on the shelf. the nightlight in the corner. live in 720p to anyone on the internet. it had been streaming since the day we plugged it in → total cameras on the site → 73,400+ → nursery category → 4,200 active streams → countries → 34 → United States had the most with 12,800 cameras → streams sorted by "most watched" and "recently added" and "HD quality" → our camera → added 8 months ago → the exact day we set it up → some streams had comments underneath them. i'm not going to say what people were writing under videos of nurseries the camera cost $49 on Amazon. the company's support page hasn't been updated since 2024. there is no firmware patch available. they sold hundreds of thousands of these and the relay servers are still running with zero authentication on every single one what Claude Code did on our network: → killed the RTSP stream and blocked port 554 on the router → blocked the relay server IP at the firewall level → changed all default credentials on every connected device in the house → scanned for other devices with open streams → found our doorbell camera was also exposed on port 8080 → i unplugged both cameras and threw them in the trash i reported the website to FBI IC3 and sent everything to the FTC. as of right now the site is still live. 73,000 cameras still streaming. thousands of them pointed at cribs my wife hasn't slept a full night since i told her. she gets up every few hours and walks to the nursery herself now. we don't use a camera anymore. i'd rather be exhausted than have strangers watching my daughter sleep if you have a baby monitor or any smart camera you bought on Amazon for under $80 check your router settings tonight. any device streaming on port 554 or 8080 with default credentials could already be on one of these sites. the cheaper the camera the more likely it's compromised the prompt is in the first reply. run it on your home network. takes 3 minutes. you need to know what's watching your family

Claude Code found the scammer who stole $2,400 from my mom using just his phone number. full name, address, workplace, and 11 other families he did the same thing to. his VPN and burner number didn't protect him from a single thing my mom called me at 11pm barely able to talk. someone called her pretending to be her bank saying her account was compromised and she needs to verify her card immediately. she's 64 and lives alone. she panicked and gave them her card number, CVV, and the verification code from the SMS. three transfers went through before she realized what happened. $2,400 gone. that was her savings for my sister's wedding in march she kept apologizing to me on the phone. "i'm sorry, i'm so stupid, please don't tell your sister." i drove to her apartment at midnight and she was sitting at the kitchen table with the phone still in her hand. she looked like she aged 10 years in one hour i went to the police the next morning. they took a report, said they'd look into it. i asked what that means and the officer said "we'll add it to the file." that means nobody is going to do anything and we both know it so i took the one thing he left behind - the phone number he called from - and gave it to Claude Code → VoIP number → registered under br***t.kov***[email protected] → that email → 4 matches in breach databases → full name: Br**t A. Kov***c → VPN IP → 185.***.***.47 → routed through Netherlands → real IP from VoIP provider dashboard login → 74.***.***.12 → Houston, TX → Facebook → profile since 2016 → 347 friends → employer listed publicly on his page → Venmo → public by default → 11 incoming payments in 90 days with notes like "refund" and "reimbursement" Claude Code cross-referenced the Venmo payments with public scam reports on the FTC database. he wasn't just scamming one person. he was running this full time for at least 3 months → victim 1 → 71 year old woman in Florida → $3,100 → called "about suspicious activity" → victim 2 → retired couple in Ohio → $1,800 → same frozen account script → victim 3 → single mom in Georgia → $950 → she filed a police report too. nothing happened → my mom → $2,400 → same script, same voice, same burner number rotated through 4 VoIP providers his VPN routed traffic through the Netherlands but he logged into his VoIP dashboard from his real IP twice in October without it on. his Facebook has been public since 2016 with his city and photos of his car with the plate visible. he spent $4 a month on a VPN and thought that made him untraceable i compiled everything Claude Code found into a single report: → full legal name confirmed through public records → home city → Houston, TX area → matched to voter registration → 11 confirmed victims across 5 states → total stolen ~$19,200 → 4 VoIP numbers rotated monthly → all registered to the same email → complete Venmo transaction history as evidence sent it to the police and FBI IC3. the same officer who said "we'll add it to the file" called me back the same afternoon asking where i got all of this. suddenly they had a name, a face, and 11 other victims willing to testify i called my mom that night. told her they found him. she didn't say anything for about 10 seconds. then she started crying again. not like before. she kept saying "really? they found him?" i didn't tell her it wasn't the police who found him. i didn't tell her it took me less than an hour sitting at my kitchen table if someone scammed your family don't just file a report and wait. save that phone number. don't delete the call history. Claude Code can pull more from one phone number than most people think is possible the prompt is in the first reply. if you got scammed or someone suspicious keeps calling people you care about - try it. takes 2 minutes