Judith Herman observed that the methods of coercive control are remarkably consistent across contexts: isolation, surveillance, the unpredictable enforcement of arbitrary rules, and the slow erosion of a victim's sense that any space belongs to them alone. What has changed is not the logic of domination but its infrastructure. The phone in a victim's pocket, the thermostat on the wall, and the shared cloud account holding years of photographs can all become instruments of a single, continuous project of control.

Technology-facilitated abuse is not a separate category of harm. It is coercive control extended into domains that were once private by default. The abuser who used to check the car's mileage now checks a location-sharing app. The abuser who once listened at the door now reviews a synced message history. What distinguishes the digital dimension is persistence. Surveillance no longer requires physical proximity, so leaving the home does not necessarily mean leaving the abuser's field of vision.

This creates a profound challenge for victim services. Traditional safety planning assumed that physical separation produced a measure of safety, and that a victim could act privately once out of the abuser's sight. Neither assumption holds reliably in connected environments. This analysis examines three dimensions of the problem: the tactics abusers deploy, the reasons those tactics are so difficult to detect, and the principles of safety planning that take the digital landscape seriously without inadvertently escalating danger.

The tactics of technology-facilitated abuse are best understood not as a list of technical exploits but as functional extensions of coercive control. Each serves one of a few recognisable purposes: monitoring movements and communications, restricting autonomy, destabilising the victim's sense of reality, or punishing perceived defiance. Categorising tactics by function rather than by device matters, because specific products change rapidly while the underlying logic of control remains strikingly stable across generations of technology.

Location tracking is among the most common forms, and much of it requires no technical sophistication at all. Family location-sharing features, shared mobile plans, vehicle apps that report a car's position, and small consumer tracking tags concealed in a bag or vehicle can all reveal where a victim is at nearly any moment. Practitioners regularly encounter clients whose abusers appeared at workplaces, friends' homes, or even confidential shelters with no apparent explanation.

Account access is often more consequential than any specialised tool. Abusers frequently know or originally set the victim's passwords, control the recovery email or phone number, or share a cloud account that silently synchronises messages, photographs, and browsing history across devices. In these cases the abuser does not need to break in; they simply never left. Intimate partners possess precisely the personal knowledge that security systems treat as proof of identity.

Commercial stalkerware occupies a more deliberate tier, covertly forwarding messages, call logs, and sometimes ambient audio to a remote dashboard. Smart home devices, meanwhile, enable something closer to psychological warfare. Thermostats adjusted remotely, locks whose codes change, lights that switch on at night, and speakers that play sounds unprompted can make a victim feel they are losing their grip on reality. This is gaslighting with an interface, and it often persists after separation when the abuser retains administrative control.

What unites these tactics is the collapse of boundaries that Herman identified as central to recovery: between private and public, between the abuser's presence and absence. Technology makes the abuser ambient. For victims, the consequence is not merely exposure but a pervasive sense that no conversation, location, or decision can be trusted as their own. That sense of omnipresence is itself a mechanism of control, frequently effective even when actual monitoring is far more limited than the victim fears.

Takeaway

Abusers rarely need to hack anything; intimacy itself supplies the passwords, shared accounts, and physical access that security systems mistake for legitimacy.

The harm of technology-facilitated abuse is compounded by how difficult it is to confirm. Surveillance that works well leaves few visible traces. Victims often know something is wrong—the abuser references a private conversation, appears unexpectedly, or knows details they could not plausibly know—yet cannot identify the mechanism. This gap between certainty of experience and absence of evidence is where much of the secondary harm occurs, and where institutional responses most often fail.

Part of the difficulty is technical. Stalkerware is designed to conceal itself, while legitimate features such as location sharing, synced backups, and linked devices sit in settings menus few people ever examine. Smart home systems may have multiple administrators without any obvious indication. Even skilled professionals can struggle to determine whether information is leaking through a compromised device, a shared account, a mutual acquaintance, or social media posts in which the victim has been tagged by others.

The more insidious difficulty is epistemic. Victims describing seemingly omniscient abusers are frequently disbelieved—sometimes by police, sometimes by family, and occasionally by service providers themselves. Accounts of a partner who seems to know everything can be heard as paranoia, particularly when the victim is already visibly distressed. Herman's insight that disbelief compounds trauma applies with particular force here: an accurate perception of being watched is reframed as evidence of instability.

This dynamic can be exploited deliberately. Abusers who manipulate devices or reference monitored conversations may simultaneously suggest that the victim is imagining things. When institutions echo that framing, they inadvertently complete the abuser's work. Evidentiary standards deepen the problem, as courts often expect forensic documentation that victims cannot obtain without specialist assistance—and such assistance is scarce, unevenly distributed across regions, and rarely available without cost.

Detection also carries its own risks. Discovering and removing a tracking app, or changing a compromised password, can signal to the abuser that the victim is preparing to act, and the period surrounding separation is already the most dangerous in an abusive relationship. Victims are caught in a genuine bind: remaining under surveillance is dangerous, but abruptly ending it may be more dangerous still. Detection is therefore never simply a technical question. It is, fundamentally, a risk assessment.

Takeaway

When a victim says their abuser knows everything, the most trauma-informed response is to treat that statement as a hypothesis worth investigating rather than a symptom worth managing.

Safety planning in connected environments must begin from a counterintuitive principle: the immediate goal is not necessarily to eliminate surveillance, but to manage it strategically. Advice such as 'just change your passwords' or 'get rid of your phone,' however well-intentioned, can trigger escalation if the abuser notices their access disappearing. Effective planning treats the victim as the expert on the abuser's likely reactions and builds every digital step around that knowledge.

A sound protocol begins with a collaborative technology inventory: which devices, accounts, vehicles, and smart home systems the victim uses, which the abuser purchased, set up, or has handled, and what the abuser has seemed to know. Mapping the abuser's apparent knowledge against these access points often reveals likely channels more efficiently than device scanning alone. Crucially, this conversation should take place on a device and in a space the victim believes to be safe.

Planning then distinguishes between documentation, workarounds, and removal. Documentation preserves evidence for protective orders or prosecution. Workarounds allow private action without alerting the abuser—using a safer device, such as a library computer, a trusted person's phone, or a new device never linked to compromised accounts, for help-seeking while monitored devices continue behaving normally. Removal of trackers, stalkerware, and shared access is timed deliberately, ideally coordinated with physical safety measures and the moment of separation.

Organisational practice matters as much as individual advice. Agencies should audit their own systems: whether appointment reminders or confirmation texts could reveal contact with services, whether intake routinely asks about technology, and whether staff can recognise common tactics. Partnerships with digital security clinics and technology safety specialists extend capacity well beyond what most frontline advocates can provide. Shelter confidentiality, for instance, now requires attention to everything residents and their belongings bring through the door.

Throughout, victim autonomy is non-negotiable. Some victims will choose to tolerate known monitoring because the reassurance it gives the abuser keeps them calmer and more predictable. Others must preserve digital connections to children, employment, or support networks. A trauma-informed approach respects these choices as rational responses to constrained circumstances rather than failures to follow advice. Safety plans that demand total digital disconnection ask victims to trade one form of isolation for another.

Takeaway

In connected environments, safety planning is less about cutting the abuser off than about deciding when, how, and on whose terms that access finally ends.

Technology-facilitated abuse reveals something essential about coercive control: it was never fundamentally about physical proximity. It was about the abuser's claim on the victim's attention, movement, and sense of reality. Connected environments simply give that claim new reach, extending it into spaces that victims and practitioners once regarded as refuges.

The implications for justice systems are significant. Victims' accounts of pervasive surveillance deserve investigative seriousness rather than reflexive scepticism. Evidentiary frameworks must accommodate digital harms, and victim services need technical capacity that matches the sophistication of the tactics they confront. None of this replaces relational advocacy; it extends it.

Most fundamentally, tech-aware safety planning restores what Herman placed at the centre of recovery: the victim's authority over their own life. Rather than prescribing disconnection, effective practice helps victims understand their digital environment and decide, deliberately and safely, how to reclaim it. Safety, in the end, means having a space that is genuinely one's own.