The New York AG fines a stalkerware developer $410K and forces him to alert his customers' victims that they are being secretly monitored via one of his apps
Sergiu Gatlan / BleepingComputer :
Context & Ripple Effects
This fine lands on a stalkerware industry that has been squeezed from every direction for years: the FTC's ban of Support King from the surveillance business set the federal template in 2021, and Google's Play Store rules requiring notice and a persistent notification cut off the main distribution channel back in 2020. What is new here is the remedy itself — the New York AG is not just extracting money but forcing the developer to break the secrecy that is the entire product.
The enforcement arc has also escalated from civil and platform action to criminal law, with pcTattletale's founder later pleading guilty in the first successful US prosecution of a spyware operator in over a decade. A coalition of antivirus vendors, the EFF, and Kaspersky formed the Coalition Against Stalkerware to flag these apps as early as 2019, so the detection side of the fight was already organized when this penalty arrived.
First-order effects
- The developer pays $410,000 and must directly notify people being monitored through his app — turning his own customer base into an evidence channel against him.
- Buyers of the app lose the core value proposition: covert monitoring without the target's knowledge.
Second-order effects
- Remaining stalkerware developers now face a playbook where state AGs can impose victim notification on top of fines, raising the cost of staying in the business beyond what the FTC's Support King ban alone signaled.
- App-store gatekeepers like Google get reinforcement for strict consent-and-notification rules, since regulators have demonstrated they will act where platforms' policies leave gaps.
Third-order effects
- If the pattern holds, consumer spyware shifts from a gray-market product category to one treated like malware — prosecuted, fined, and flagged by antivirus vendors — with the surviving commercial demand pushed toward consensual monitoring tools with disclosure built in.
- Victim notification as a mandated remedy could become standard in surveillance-related enforcement, changing how regulators measure harm from secret data collection.
The trend: Stalkerware is being dismantled by converging pressure — platform bans, vendor coalitions, civil penalties, and now criminal prosecution — moving secret device surveillance out of the legitimate software market.