By Michael Benavides
•
July 19, 2026
The Question Is Not Whether to Believe You. It Is What Can Be Proven. People who raise this get one of two responses, and both are useless. Either they are waved off, or they are told everything they fear is confirmed. Neither helps anyone build a case. The useful posture is the boring one a lawyer takes with any matter: what happened, what evidence exists, who is the identifiable actor, and what does the law provide. Ava asked attorney Michael Benavides to walk through it that way. Ava Asks, Michael Answers — Evidence and Remedies, Plain English Ava: Someone tells you they think they are being monitored inside their home. Where do you start? Michael, Esq.: I start where I start with a car accident. What did you observe, when, and what is written down. I am not there to diagnose anybody and I am not qualified to. I am there to find out whether there is a legally actionable matter, and that turns entirely on evidence and on identifying a defendant. Ava: Is the underlying technology real? Michael, Esq.: Parts of it plainly are, and we covered that in the previous article. Wi-Fi sensing is a published IEEE standard shipping in consumer hardware that reads motion and respiration through walls. Internet providers retain months of connection records. Device makers hold recordings and telemetry and answer subpoenas. None of that is speculative. So the honest answer is that the general capability exists and is documented. Ava: But? Michael, Esq.: But a capability existing in the world is not proof that a particular person used it against a particular household. That is the gap a case has to close, and it is closed with evidence, not with the existence of the technology. I would be doing someone a disservice if I pretended otherwise. Ava: What kind of evidence actually helps? Michael, Esq.: Records that are contemporaneous, objective, and attributable. A dated log with times and specific descriptions, kept as things happen rather than reconstructed later. Network captures showing what a device on your network is transmitting and to what address. Router and account logs. Billing and service records. Photographs of physical installations. Correspondence — texts, emails, letters — especially anything that shows a person knew something they should not have known. Police reports, even ones that went nowhere, because they establish a timeline. Ava: Network captures — is that something an ordinary person can produce? Michael, Esq.: With help. Traffic can be captured and analyzed to show which devices in a home are communicating, how often, and with which destinations, including foreign ones. That is ordinary digital forensics and it produces exhibits. It is also how you separate a device behaving normally from a device that should not be phoning anywhere. Ava: How do you tell normal from not normal? Michael, Esq.: This matters and it protects people from chasing the wrong thing. Modern networks are noisy by design. Smart devices contact manufacturer servers constantly. Phones connect to dozens of services in the background. A traceroute crossing many hops with timeouts is routine, not evidence of interception. Router lights blink on ordinary traffic. Unknown devices on a network are frequently a neighbor's guest, an old phone, or a printer. If someone builds a case on that kind of material it will not survive, and worse, it obscures anything real that might be there. Ava: So what would be meaningful? Michael, Esq.: An identifiable actor connected to a specific act. A device found in the home that no one in the household purchased. Traffic from a household device to an endpoint that has no business relationship to it. A landlord, employer, or former partner with access, opportunity, and something in writing. That is the shape of a provable case. Ava: If it is a government agency, what applies? Michael, Esq.: The Fourth Amendment, and in California, CalECPA at Penal Code sections 1546 through 1546.4. If a California agency compelled electronic communication information about you — which the statute defines to include an IP address — it generally needed a warrant, your consent, or an emergency. Section 1546.2 requires that you be notified. Section 1546.4 permits a motion to suppress under Penal Code section 1538.5, though I have to be straight that suppression is available rather than automatic, and courts have applied the good faith exception. Ava: And if it is a private party? Michael, Esq.: Entirely different toolbox, and often a better one. California has a constitutional right to privacy that reaches private conduct. There is the tort of intrusion upon seclusion. There are criminal statutes on stalking and electronic harassment, and eavesdropping and recording provisions depending on what was captured. Landlord-tenant law governs entry and installation in a rental. Employment law governs an employer. Which of those applies depends on who did what. Ava: What about federal agencies? Michael, Esq.: CalECPA does not bind them. That is a real limit and people should know it up front rather than discovering it later. Ava: What should someone do this week? Michael, Esq.: Five things. Start a dated log today and keep it contemporaneously. Preserve everything — do not wipe or reset devices you think are involved, because that destroys the evidence. Request your own records: internet provider account records, and the data-access records from device makers, most of which have a formal process. If you filed a police report, get the report number. And write down the specific people who have had access to your home, your network, or your accounts, because a case needs a defendant. Ava: What should they not do? Michael, Esq.: Do not confront the person you suspect. Do not access someone else's device or account to look for proof — that is a crime and it will end your case and start a different one. And do not spend money on detection gadgets sold to this community online. Most produce readings that mean nothing in court, and the money is better spent on a forensics professional who can produce an admissible exhibit. Ava: Last question. What do you say to someone who has been dismissed by everyone they have told? Michael, Esq.: That being dismissed is not the same as being wrong, and that a lawyer's job is not to decide whether your experience is real — it is to find out whether there is a provable claim and tell you honestly either way. Some of these consultations end with a viable case. Some end with me saying the evidence is not there yet and here is what would change that. Both are real answers. And if what someone is carrying is heavier than a legal problem, I would rather say so plainly and help them find the right kind of support than pretend a lawsuit is the thing that helps. What to Do Start with evidence rather than with the technology. Keep a contemporaneous dated log; preserve devices and do not reset them; obtain your own internet provider account records and submit data-access requests to device manufacturers; retain any police report numbers; and identify every person with access to your home, network, or accounts, because a claim requires a defendant. Distinguish ordinary network behavior — background telemetry, multi-hop traceroutes with timeouts, blinking indicator lights, unfamiliar devices that turn out to be household or neighbor equipment — from an identifiable actor connected to a specific act. If a California government entity compelled your electronic communication information, CalECPA (Penal Code sections 1546 et seq.) generally required a warrant, consent, or an emergency, section 1546.2 required notice, and section 1546.4 permits a suppression motion under section 1538.5, subject to good-faith analysis; CalECPA does not bind federal agencies. If a private party is involved, California's constitutional privacy right, intrusion upon seclusion, stalking and electronic harassment statutes, eavesdropping and recording provisions, and landlord-tenant or employment law may apply instead. Do not confront a suspect, do not access anyone else's device or account, and be skeptical of consumer detection products marketed for this purpose. A V2K and RF Defense consultation in Sacramento, Stockton, or Modesto will review what you have and give you a direct answer about whether it supports a claim. This concludes the five-part Router and the Fourth Amendment series. V2K & RF Defense | Blue Data Law | Michael Benavides, Esq., CA Bar No. 270714 | Sacramento, Stockton & Modesto | 707-362-4166 | attorneymichaelbenavides.com ATTORNEY ADVERTISING. V2K & RF Defense and Blue Data are content brands of the law practice of Michael Benavides, Esq., California State Bar No. 270714. Ava is an editorial brand voice, not an attorney; only Michael Benavides, Esq. provides legal analysis. General information only — not legal advice; no attorney-client relationship is formed by reading this. Nothing in this article is medical or psychological advice, and no assessment of any individual is offered or implied. Authority referenced (Cal. Penal Code §§ 1546 et seq. and § 1538.5; Cal. Const. art. I, § 1) is as of July 2026 — confirm current law before acting. Whether any particular facts support a claim is highly fact-specific. This article describes general principles only and does not reference any actual client or pending matter. Prior results do not guarantee a similar outcome. If you are in crisis, call or text 988 for the Suicide and Crisis Lifeline, or 911 in an emergency.