Counter-surveillance for journalists. The patterns that get noticed before the story is filed.

The shape of the threat

Hostile-environment journalism in 2026 absorbs three categories of physical surveillance that the digital threat model does not address.

The first is direct human surveillance. A team of two to four operators following a journalist on foot or in vehicles, using rotating frontal positions and parallel routes to maintain coverage without obvious presence. Professional teams are competent enough to stay out of view, while amateur teams are noticeably easier to spot, and most surveillance a journalist actually encounters sits closer to the amateur end of that range.

The second is technical surveillance in physical space. CCTV networks that the host country can query against face-recognition. License plate readers in cities and at checkpoints. Stingrays and IMSI catchers that simulate cell towers and identify which phones are present at a meeting. Audio and video bugs in hotel rooms, vehicles, and meeting venues. Each one has been documented in cases involving working journalists.

The third is the surveillance of the people connected to the journalist. The family member at home. The fixer in country. The source who is now identifiable to the regime because of patterns observed around the journalist. The threat does not stop at the journalist’s perimeter; it extends to the contact graph. The framework for thinking about contact-graph exposure is the same one we cover in operational identity separation, applied to physical rather than digital identifiers.

Surveillance detection routes

The core counter-surveillance discipline is the surveillance detection route, abbreviated SDR. The principle: the journalist plans a route through the city that includes specific choke points, doublings-back, and pace changes that a surveillance team will struggle to follow without revealing themselves. The journalist is not trying to lose surveillance; the goal is to identify whether surveillance is even present.

The principles of an effective SDR are easy to state on paper but considerably harder to execute well in the field. Cover natural distance: an SDR that takes thirty minutes to cover four blocks looks suspicious. Cover natural distance over a route that includes natural reasons to turn around (buying a coffee, looking at a map, checking a phone), to change pace (entering a building with multiple exits, taking an elevator, using a metro that has multiple lines available at the next station), and to observe (sitting at a window of a cafe with a view of the route just traveled).

The SDR is run before any high-value meeting. It is not the high-value meeting itself. The SDR happens hours before, possibly the day before. If surveillance is detected, the meeting does not happen and the response plan activates. If no surveillance is detected, the meeting can proceed with the additional confidence (not certainty) that the journalist arrived clean.

Patterns to notice

The signals a competent surveillance team produces, in declining order of how often they actually appear in real cases.

The same vehicle in two unrelated locations

The single most common signal. A vehicle parked outside the journalist’s hotel that is also parked, hours later, outside the cafe where the journalist meets a fixer. Coincidence is statistically possible. The same vehicle a second time, in a third unrelated location, is no longer coincidence.

The same person in two unrelated locations

Less common because professional teams rotate. But amateur teams do not, and many of the surveillance threats journalists face are amateur. A face seen in the lobby of a hotel and again at the corner of an unrelated street, two hours later, is the signal. The discipline is to notice and remember faces, which is harder than it sounds and improves with practice.

The static observer

A person standing on a street corner, sitting in a parked vehicle, occupying a cafe seat for an unusually long time without active engagement. What gives them away is duration: people doing genuine things have natural time-frames for those activities, while observers tend to overshoot the natural reasons to be present.

The mirrored route

The journalist takes an unusual path. The same person or vehicle takes a similar path. A surveillance team that did not anticipate the route will follow visibly, while one that did anticipate it will not, and the SDR is specifically designed to expose the unprepared team.

The technical surveillance in physical space

The physical-electronic threats and what reduces them.

CCTV and face recognition

Most cities the journalist will visit have networks of public and private cameras. The recordings are queryable in some configurations against face databases the journalist may be in (visa application photos, passport photos, social media photos). The mitigation is not to evade the cameras (largely impossible) but to be intentional about what the camera record shows. Routes that go through low-camera-density areas. Hats and sunglasses that limit face capture. Awareness that the camera record will, in retrospect, be used to reconstruct the journalist’s movements.

License plate readers

Less ubiquitous than CCTV but increasingly common at city entry points and in some neighborhoods. Hired vehicles capture more attention than rented or borrowed local vehicles. Some journalists use foot, public transit, or local taxis specifically to avoid the LPR-against-rental-car pattern.

IMSI catchers and stingrays

Devices that simulate a cell tower and identify all phones in the area. Used at protests, at meetings of interest, and along travel routes. Detection is difficult; mitigation is to leave the regular phone behind for sensitive meetings, use a travel phone with no contact data, and assume any phone present at a meeting has been identified to the network. The framework around device hygiene is the same one we cover in border control AI in 2026: the device that contains nothing useful is the only safe device in a hostile space.

Bugs in hotel rooms and vehicles

Audio bugs are simpler to deploy than video bugs and more commonly encountered. The mitigation is procedural: assume the room and the vehicle are bugged, and conduct sensitive conversations elsewhere (a walk in a public space, a moving conversation with the source, a meeting in a venue chosen by the source for reasons unrelated to the journalist’s stay). Sensitive conversations belong in places the surveillance team did not have time to prepare in advance.

Operational baseline before any high-risk trip

The baseline below is not exhaustive, but it is the minimum that almost every working journalist in this space follows.

Pre-trip mapping of the city: route choices, choke points, escape routes from likely meeting venues, the location of the embassy or consulate. The maps live offline on a device that does not retain them in cloud-syncing services.

Communications schedule with home: a specific time, a specific channel, a specific phrase that means “all is well” and a different phrase that means “trigger the contingency plan.” The contingency plan is documented and a single trusted contact at home knows what to do with each phrase.

Source verification process: the chain of introductions to a source includes at least one verified link, and meetings with new sources happen only after the chain is checked. The framework for verifying source legitimacy in hostile environments is older than most journalists realize. The mistakes that get made now were the same mistakes being made in 1985.

Insurance and recovery plan: the news organization’s hostile-environment training, the kidnap-and-ransom insurance the organization carries, the legal contacts who will respond if the journalist is detained. None of this is operational discipline; it is the institutional substrate that makes the operational discipline matter. The framework around what to prepare on the journalist’s side is in why most security setups fail in the field.

Frequently asked questions

Where do journalists actually learn this?

Three primary places. Hostile-environment training courses (Centurion, AKE International, Pilgrims Group, several smaller providers) deliver one-week intensive courses that cover the physical and digital basics. Major news organizations send their staff to these. Independent journalists mostly do not. Second, mentorship from journalists who have worked the same beats. Third, the Committee to Protect Journalists and Reporters Without Borders publish guidance that is more accessible than the formal training but covers most of the same ground.

Should I carry a counter-surveillance kit (signal jammer, bug detector)?

Generally no. The kit is illegal in many jurisdictions, including the ones journalists most need it in. Its presence in a journalist’s bag at a checkpoint creates substantially more problems than it solves. The exception is a basic IR-camera or RF-detector for hotel-room sweeps, which is small enough to be portable and discreet enough to use without raising alarm. Even that is not standard.

Do I need a fixer or can I work alone?

Depends on the country and the story. Working alone in a country whose language and customs you understand and whose threat environment is moderate is feasible. Working alone in a country whose surveillance state is sophisticated and whose language you do not speak is a distinct kind of dangerous. The fixer is the operational extension that lets a foreign journalist function safely, with the trade-off that the fixer is also the most-targeted person around the journalist and their safety becomes part of the journalist’s responsibility.

What is the most overrated piece of counter-surveillance advice?

The constant blanket warnings about all phones being compromised at all times. The phone-as-tracker model is real but produces less practical information than people assume in the absence of a specific targeting decision. The journalist’s discipline budget is finite; spending it on phone-paranoia rather than on physical surveillance awareness is a common mistake. Phones are tools; the people watching the journalist are the threat.

---

There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.