Advocacy group Privacy International creates fake companies to gain access to surveillance industry trade shows and expose the industry's surveillance powers
Meet the privacy activists who spy on the surveillance industry — LONDON- On the second floor of a narrow brick building …
Context & Ripple Effects
In 2015, Privacy International's method was access-by-deception: shell companies built to pass trade-show vetting, so its researchers could walk the floor where surveillance vendors pitch interception tools to government buyers. That groundwork paid off a year later when the group turned what it gathered into the Surveillance Industry Index, a searchable database of 500+ firms with brochures and export data.
The story matters because it marks the moment civil society stopped treating the surveillance trade as opaque and started treating it as researchable — a playbook later groups extended by leaking footage of Babel Street's warrantless Locate X tracking tool used by ICE and CBP.
First-order effects
- Surveillance vendors lose control of their most sensitive marketing channel: trade-show pitches to government buyers can now be documented and published by an advocacy group posing as a customer.
- The industry's vetting process becomes the vulnerability — every exhibitor must now screen attendees for fake companies, raising friction in exactly the closed sales environments these firms depend on.
Second-order effects
- Vendors respond by fragmenting their identities rather than opening up: Atlantic Council researchers later documented spyware firms skirting restrictions through renamings, new companies, and changed legal jurisdictions, a cat-and-mouse dynamic that devalues any static exposure database.
- Exposure work shifts from one-off stings to standing infrastructure — follow-on investigations into firms like Area SpA, IPS, and Terrogence manipulating social media show rivals in the space being profiled the same way.
Third-order effects
- Accountability for the commercial surveillance sector migrates from export regulators and courts — where Privacy International's own challenges over UK bulk hacking powers have had mixed results — toward NGOs acting as the de facto transparency layer via databases, leaks, and undercover access.
- If the pattern holds, the surveillance market splits between firms that can survive public documentation and those whose business model depends on staying unlisted, pushing the most aggressive sellers further offshore and out of reach of Western oversight.
The trend: Commercial surveillance is being forced into public view not by regulation but by a counter-surveillance ecosystem of advocacy groups building indexes, infiltrating its sales floors, and leaking its tools.