Chinese police exploit software to extract personal data from phones

In July 2025, a mobile security company named Lookout revealed significant findings regarding surveillance practices by police departments in China. They reported the existence of a software called Massistant, developed by Xiamen Meiya Pico, which enables law enforcement to extract various types of data from confiscated electronic devices, including private communications, multimedia files, and geographical tracking records. The software has raised alarms due to its capabilities, as it can also access encrypted messages on platforms such as Signal. According to Kristina Balaam, the researcher conducting the analysis for Lookout, travelers entering China must remain vigilant, as their devices are susceptible to confiscation and subsequent data retrieval without their consent. The software must be installed on an unlocked device and operates in a manner that maintains access for authorities to the user's data once the software is in place. Balaam noted an increase in reports from Chinese forums, where individuals claimed they discovered this malware on their phones post-interaction with police. The implications of this technology are profound, particularly given recent changes in Chinese law regarding electronic device searches. As of 2024, security personnel in China have had the authority to examine mobile devices during regular inspections at border crossings, which often occur without a warrant or an active criminal investigation. This legislative shift underscores the urgency for travelers to be informed about their rights and the risks of data exposure when entering China. Balaam expressed her concern that measures like Massistant are part of a wider network of spyware and malware utilized by Chinese surveillance technology firms. These tools pose significant threats to privacy and digital security for both locals and foreign visitors alike, highlighting the growing ecosystem of surveillance that has developed within the region in recent years, igniting debates about privacy rights and state surveillance on a global scale.