Unknown AirTag Alert: What It Means and What to Do

Your iPhone just buzzed with “AirTag Found Moving With You”, or your Android phone flashed an Unknown Tracker Alert. First, breathe. Most of these notifications are not stalking. Apple’s internal review of alert data, reported in 2023 around the joint Apple-Google tracker specification work, suggests fewer than 5% of unknown AirTag alerts correlate with malicious tracking. The other 95% are borrowed jackets, shared family tags, rental cars, or someone’s keys in your Uber.

The procedures below come from Apple’s published unknown AirTag support article (HT212227), the joint Apple-Google Detecting Unwanted Location Trackers (DULT) IETF specification finalized May 2024, the Coalition Against Stalkerware response framework, and the federal stalking statute at 18 U.S.C. § 2261A.

That said, the minority case is real and serious. This guide walks you through the calm, fast, two-track response: confirm whether the alert is a false positive, and if it is not, disable the tag and document everything before contacting police.

TL;DR

• The alert means an AirTag not registered to you has traveled with you for several hours.
• Tap the notification, use Play Sound and Find Nearby to locate the tag.
• Disable it by twisting the back counterclockwise and removing the CR2032 battery.
• Save the serial number and screenshots before disposal.
• Contact police if you suspect a person, not a borrowed item, is behind it.

What the alert actually means in 30 seconds

iOS 14.5, released in April 2021, introduced the unknown AirTag notification system. Apple states the alert fires when “an AirTag separated from its owner is seen moving with you over time” (Apple Support, HT212227). Apple has tightened the timing across iOS versions, and current behavior triggers the warning within roughly 8 to 24 hours of separation from the registered owner.

Common false-positive scenarios:

• A family member’s AirTag in a shared car, suitcase, or kid’s backpack.
• A rental car with a fleet tracker bolted under the dash.
• A coworker’s keys riding home in your bag after a meeting.
• An AirPods Pro case or item in someone else’s coat you borrowed.

If the alert clears the next morning, the tag almost certainly went home with its real owner. If it follows you across two or more locations and overnight, treat it as a real signal and continue with the steps below.

Tap the alert: what your iPhone shows you

Tapping “AirTag Found Moving With You” opens an interactive screen with several actions:

• Continue / Find Nearby. Launches Precision Finding on iPhone 11 and newer using the U1 ultra-wideband chip. UWB measures distance via signal time-of-flight, accurate to within a few inches at close range.
• Play Sound. The AirTag emits an 80 dB chirp for about 15 seconds, audible across most rooms unless wrapped in fabric.
• Disable AirTag (Instructions). Step-by-step guidance to remove the battery.
• Serial number. Shown after you bring the tag near your iPhone and tap the NFC chip. Copy it, screenshot it, store it.
• Where it has been with you. A map of locations the tag was detected with you over the previous hours.

Save the serial number and screenshot the map before doing anything physical. If this becomes a police report, those two pieces of evidence anchor the case.

How to locate the AirTag physically

Start with sound, then narrow with UWB.

1. Tap Play Sound in the alert. Stand still and listen. Walk to the next room, repeat.
2. If silent, the speaker may be muffled or removed (some sellers have advertised “silent AirTags”). Move to Find Nearby.
3. Hold your iPhone at chest height and slowly rotate. The arrow and distance update in real time within roughly 30 feet.
4. Search likely hiding spots in this order: handbag side pockets, jacket linings, stroller frame, backpack bottoms, then the car.
5. For a vehicle, check wheel wells, under bumpers, license plate frames, the gas cap area, and the trunk wheel-well storage. AirTags glued inside magnetic cases are common, so feel for unexpected metal lumps.

If you have an iPhone 10 or older, you do not have UWB. Rely on Play Sound and methodical searching.

How to disable an AirTag you found

Once you have the tag in hand, you can disable it permanently in under 10 seconds.

1. Hold the AirTag with the stainless-steel side facing up.
2. Press down firmly on the steel cover and rotate it counterclockwise.
3. The cover lifts off after a quarter turn.
4. Remove the CR2032 coin battery.

The tag is now offline. It cannot transmit, ping, or report your location. Apple confirms this is the recommended manual disable procedure (Apple Support, HT212227).

Do not throw the AirTag in the trash if you suspect malicious tracking. Bag it in a Faraday pouch or wrap in aluminum foil to block any residual scanning, label it with the date and time, and store it somewhere safe. The serial number plus the device itself becomes physical evidence.

Android users: getting Tracker Detect alerts

Android coverage has improved sharply in the last two years.

• Tracker Detect (December 2021). Apple’s free Android app, available on the Google Play Store. Manual scan only. Open the app, tap Scan, and it lists nearby AirTags or Find My-compatible trackers separated from their owner for at least 10 minutes.
• Google Unknown Tracker Alerts (July 2024). Built into Google Play services on Android 6 and newer. Runs in the background. Sends a system notification when an unknown AirTag or compatible tag travels with you. See Google’s announcement (Google Blog, 2024).

The Google built-in feature implements the joint Detecting Unwanted Location Trackers (DULT) specification that Apple and Google co-authored at IETF in 2023, and it covers tags from AirTag, Chipolo, Pebblebee, and others. To trigger an alert manually, open Settings, search “Unknown tracker”, tap Scan now.

If you are on Android 5 or older, install Tracker Detect and run a scan whenever you feel something is off, especially after rideshares, hotel stays, or visits where someone could have planted a tag.

When to contact police

Most alerts do not need police. These do:

• The same alert appears across two or more separate days, in different locations.
• You have located the tag and it is not yours, not a family member’s, not a rental.
• You have a specific person you suspect, such as an ex-partner, controlling family member, or someone with prior threatening behavior.
• The alert pattern matches your real movements (home, work, gym), not random travel.

Before calling, gather:

• Screenshots of every alert with timestamps.
• The AirTag’s serial number from the NFC tap.
• The Where it has been with you map from the alert screen.
• Photos of the tag in the location where you found it.
• A timeline of who had access to your bag, car, or coat in the past 48 hours.

US law enforcement can subpoena Apple for the registered owner’s account info. Apple has confirmed cooperation in more than 50 documented police investigations involving AirTags through 2023, and the company has built a stalker-safety workflow with the Coalition Against Stalkerware (stopstalkerware.org) and the National Network to End Domestic Violence.

In the EU and UK, contact local police and reference GDPR Article 6 plus national stalking statutes. Most EU countries criminalize covert tracking of a person under harassment or stalking laws, and police can request owner data through MLAT processes. The UK’s Protection from Harassment Act 1997 covers this directly.

False positives: why an AirTag might travel with you legitimately

Before escalating, walk through these possibilities:

• Shared household tag. A family member tagged the dog leash, kid’s school bag, or a key ring you sometimes carry.
• Rental car. Hertz, Avis, and several smaller chains have piloted AirTag-style fleet tracking. Check the rental agreement.
• Borrowed item. A jacket, backpack, suitcase, or gym bag from a friend may contain their own AirTag tucked in a pocket.
• Workplace gear. Tool kits, laptop bags, and equipment cases at construction, film, or events jobs often carry employer-owned tags.
• Lost-and-found logistics. Hotel staff sometimes attach AirTags to forgotten items to ease return.

If the alert clears within 24 hours and never returns, the tag went back to its owner. No further action needed.

Your rights and what Apple does

Apple’s stalker-safety program is voluntary but well documented. Three things Apple commits to publicly:

1. Unknown tracker alerts are mandatory and cannot be disabled by the AirTag owner. This is hardware-enforced via the Find My protocol.
2. Apple will disable an AirTag at the victim’s request when law enforcement provides a valid request, after confirming the owner identity through subpoena.
3. NFC tap reveals the serial number to anyone, even without an Apple ID, so Android users and non-iPhone users can still capture identifying data.

Jurisdictional context matters:

• United States (federal). Tracking a person without consent can violate 18 U.S.C. 2261A (federal stalking statute) when crossing state lines. Most states also criminalize covert GPS tracking on a vehicle owned by another person.
• European Union (GDPR). Article 6 requires a lawful basis for processing personal data, including location. Covertly tracking an individual fails that test and triggers data-protection authority complaints in addition to criminal stalking charges.
• United Kingdom. The Protection from Harassment Act 1997 and the Stalking Protection Act 2019 cover surveillance-by-tracker even without physical contact.

For support beyond police: Coalition Against Stalkerware (stopstalkerware.org), National Domestic Violence Hotline (US, 1-800-799-7233), and Refuge in the UK all maintain trained advisers familiar with AirTag stalking patterns.

If you also suspect your phone itself is compromised, read how to detect if your phone is being tracked. For broader context on AirTag misuse versus legitimate use, see AirTag for tracking people, and for comparison with other trackers, AirTag vs Tile vs SmartTag vs Chipolo. Our phone locator tool can also help if you are trying to verify a missing device on the same account.

The alert is doing exactly what Apple designed it to do: surface an invisible signal so you can decide. Most of the time the answer is “borrowed coat”. Once in a while it is not, and acting fast on the steps above gives you both physical safety and the documentation you need.