The U.S. Federal Trade Commission (FTC) has officially rejected a request from the CEO of a company that sold illegal surveillance applications — so-called 'stalkerware' — to withdraw regulation. The FTC announced on December 8, 2025 that it had decided not to accept a petition from Scott Zuckerman, CEO of SpyFone, to invalidate or modify the 2021 consent order.
In this decision, the FTC determined there was insufficient basis to reconsider the existing order, stating that "it has not been demonstrated that there were material changes in facts or legal circumstances." Accordingly, Zuckerman and his company Support King, LLC have been reconfirmed in their effective permanent exclusion from the surveillance software business.
In the lawsuit filed in 2021, the FTC pointed out that Zuckerman and SpyFone had sold apps capable of covertly monitoring smartphones and tablets without user consent. The apps were designed to collect and share sensitive personal information including photos, text messages, web search history, location information, and actual movement routes without the device owner's knowledge, and the FTC's determination was that they required disabling device security features, exposing users to additional security risks.
This case is cited as a representative example that publicized how surveillance apps sold under the pretext of 'spouse surveillance' or 'child protection' can in reality be misused for privacy invasion and stalking crimes. The FTC at the time determined that these actions clearly violated consumer protection laws and decided on strong sanctions.
Under the consent order finalized in late 2021, Zuckerman and Support King were completely banned from providing, promoting, selling, or advertising surveillance apps or related services, and for any future business, are required to establish an information security program and receive third-party evaluation every two years. Regular reporting obligations to the FTC were also simultaneously imposed.
Zuckerman subsequently petitioned to withdraw or relax the order on the grounds that the legal and institutional environment had changed, but the FTC did not accept this. After reviewing 27 opinions received during the petition process, the Commission decided to reject the petition with a 2-0 vote.
This decision shows that the FTC still maintains a firm stance on mobile privacy and data security, particularly covert surveillance technology. The FTC has defined stalkerware not merely as a technical issue but as a matter directly connected to consumer safety, human rights, and digital violence. This rejection decision is also interpreted as once again sending the message to the market that "commercial abuse of surveillance technology cannot be tolerated in any form."
The FTC stated through a press release that "the Commission performs the role of promoting competition and protecting and educating consumers," urging consumers to be vigilant about surveillance apps and fraudulent activities. At the same time, the FTC emphasized that it absolutely does not impersonate official agencies to demand money or make threats, and urged that suspicious cases be reported through the reporting platform.
This ruling aligns with the international trend of strengthening regulation surrounding surveillance apps and personal information collection. As generative AI and data technology rapidly spread, the FTC is reaffirming the principle that "technological advancement must not be utilized in ways that violate individuals' privacy and safety." The SpyFone case will remain as an example showing that this principle is not merely a declaration but is leading to actual enforcement and sanctions.
