Infra

What Is Bluetooth and Wi-Fi-Based Proximity Detection for Account Linking?

Social media apps use Bluetooth and Wi-Fi scanning to detect when multiple accounts are physically co-located, linking them as potentially coordinated. Learn how proximity detection works.

bluetooth-fingerprintingwifi-proximitylocation-fingerprintingbeacon-detection

Bluetooth and Wi-Fi-based proximity detection is a technique social media platforms use to identify physically co-located accounts by scanning for nearby wireless signals and network identifiers. When multiple accounts consistently appear within Bluetooth range of the same devices or connect to the same Wi-Fi access point BSSID, the platform concludes these accounts are operated from the same physical location -- and likely by the same person.

How Does Bluetooth Proximity Detection Work?

Modern smartphones constantly broadcast Bluetooth signals and scan for nearby devices. When a social media app has Bluetooth permissions -- often bundled under location permissions -- it can collect a list of nearby Bluetooth device identifiers, signal strengths, and connection states. This data creates a fingerprint of the device's physical environment.

The app does not need to pair with or connect to any device. It only needs to observe what is in range. If two accounts, even on separate phones, consistently report the same set of nearby Bluetooth devices -- a TV, a laptop, a smartwatch, a car stereo -- the platform can infer with high confidence that both phones are in the same room or building.

BLE (Bluetooth Low Energy) beacons make this especially precise. Retail stores, offices, and even home IoT devices broadcast BLE signals with unique identifiers. When two accounts report proximity to the same beacon IDs over the same time periods, the location correlation is hard to deny. According to Google's location services documentation, Bluetooth scanning is a primary input for indoor positioning with accuracy down to a few meters.

How Does Wi-Fi Proximity Detection Work?

Wi-Fi-based detection operates on two levels. The first is direct: apps can scan for nearby Wi-Fi networks and record their BSSID (the unique hardware identifier of the access point), SSID (network name), and signal strength. If two accounts consistently connect to the same BSSID, they share a physical location.

The second level is environmental: apps can scan for all visible Wi-Fi networks in range, not just the one the device is connected to. The combination of visible network BSSIDs and their relative signal strengths creates a precise location fingerprint. Two accounts in the same building will see the same set of networks at similar signal strengths, even if they are connected to different access points.

Apple's Location Services documentation confirms that iOS devices use Wi-Fi network data to determine location, and that apps with location permissions can access this information. The platform collects crowd-sourced Wi-Fi databases that map BSSIDs to geographic coordinates, making proximity detection scalable across billions of devices.

How Do Platforms Combine These Signals?

Platforms do not rely on a single signal for proximity detection. Instead, they build a composite picture. Two accounts that share the same BSSID, see the same Bluetooth devices, share device fingerprints that suggest similar hardware profiles, and show synchronized activity timing are nearly certainly operated by the same person.

The detection is cumulative. A single shared BSSID might be explained by a coffee shop. But when accounts share BSSIDs across dozens of locations, simultaneously see the same Bluetooth devices, and never appear in different cities from each other, the statistical probability of coincidence approaches zero.

Why Proximity Detection Is Hard to Evade

Proximity detection is fundamentally different from IP-level detection because it measures physical reality. You can change your IP address with a proxy. You cannot change the fact that two phones in the same room see the same Bluetooth devices and Wi-Fi networks. The environmental signals are not generated by the device -- they exist independently in the physical world.

This is why anti-detect browsers and proxy services cannot solve proximity detection. They can spoof browser fingerprints and route traffic through different IPs, but they cannot hide the fact that all these accounts are operating from the same physical space with the same wireless environment. Only physical separation solves physical proximity detection.

How Conbersa Eliminates Proximity Correlation

We built Conbersa so each account runs on its own real physical smartphone in its own physical location. Every device has its own carrier SIM, its own network path, and its own wireless environment. The devices are not co-located, so there is no shared Bluetooth environment and no shared Wi-Fi fingerprint. Each account reports genuinely different nearby devices and networks because each account is genuinely in a different place.

This is the fundamental advantage of real hardware infrastructure over software-based approaches. Anti-detect browsers, emulators, and cloud phones all fundamentally operate from shared physical infrastructure. They may spoof fingerprints, but they cannot spoof wireless environments. Real devices in real locations produce proximity signals that are naturally independent, matching the behavior that platforms recognize as legitimate.

Neil Ruaro
Founder, Conbersa

We run agentic distribution on a fleet of real phones — and write up what we learn helping founders escape the cold start. Got a topic you want covered? Tell us.

FAQ

Frequently asked questions

Partially. On both iOS and Android, apps can still detect Wi-Fi networks and BLE beacons even when the user has toggled Bluetooth off in quick settings, because the underlying radio may remain active for location services. Fully disabling scanning requires the system-level location services toggle, not just the Bluetooth quick settings switch. Apps with location permissions can request Wi-Fi scans in the background.
Yes. Major social media apps request Bluetooth and Wi-Fi permissions that enable scanning for nearby devices, network names, signal strengths, and BLE beacon identifiers. These permissions are often bundled with location permission requests. The collected data is used for proximity detection: if multiple accounts are consistently within Bluetooth range of the same device cluster, the platform infers coordination.
Proximity detection is highly accurate for identifying co-located accounts because it provides ground truth about physical proximity. If two accounts are consistently within Bluetooth range or connected to the same Wi-Fi access point BSSID day after day, the probability of them being independent users drops close to zero. Combined with other signals, it becomes near-certain detection.
The Conbersa Blog

New guides, straight to your inbox.

Tactics on organic distribution and the cold-start problem. What's actually working, no fluff.