What is the Sherlock face-search trend on TikTok?

Creators photograph strangers, run the photo through a face-search app, then greet them as fans. A YouTube investigation published on 18 October 2026 traced a network of TikTok accounts doing this with an app called Sherlock Search. One clip of a hobby writer approached in a supermarket passed 70 million views. The “fan” had found him by scanning his face minutes earlier the internet is eating itself, YouTube (18 Oct 2026).

The video also found accounts posting near-identical clips that promote the app, often with referral codes in the comments. Some use it on photos from dating apps. It reports that the app’s official TikTok reposts these videos, and that few creators disclose any paid relationship. Those are the video’s findings; we have not verified who is paid. We do not name the people filmed or the creators.

Press coverage is thin. An Italian outlet found thousands of reels, mostly by Gen Z users, and at least twelve apps with “Sherlock” in the name. It noted that nothing in the apps stops someone uploading a photo of a stranger The Vermilion (22 Aug 2026). We found no regulator action against the app.

TikTok has allowed this before. In 2023 an account used face recognition to identify ordinary people in concert footage. TikTok told 404 Media the account did not break its rules, because it believed only public information was used 404 Media (2 Oct 2023). TikTok’s policy pages block automated readers, so we could not check its current wording.

How do face-search apps work, and how accurate are they?

You upload a face; the service compares it with faces it has collected from public web pages and returns similar faces with links. Results are likely matches, not identifications.

Sherlock

  • Several sites, one brand. Search results show sherlocksearch.com, sherlockapp.com, imsherlock.com and others. We could not confirm that one company runs all of them.
  • Who is behind the iOS app. The terms at imsherlock.com name “BzH App Studio LLC”, apply New York law and were last updated on 13 January 2026 Sherlock terms (read 19 Oct 2026).
  • Claims. Two of the sites advertise “99.2%” accuracy with no method given sherlocksearch.com sherlockapp.com. The App Store listing says “Over 1 billion faces indexed”. In the US a single search costs $4.99, and subscriptions run from $3.99 a week to $19.99 a month Apple App Store (read 19 Oct 2026). The YouTube video quotes UK prices of £2.99 a scan or about £63 a year, which we could not confirm.
  • What the terms admit. “We do not guarantee the accuracy or completeness of search results.” Uploads go to a “third-party API” that deletes them “within 24 hours”. Users must have “all rights, permissions, consents, and lawful bases” to submit a photo; these terms do not limit searches to your own face. Stalking and harassment are banned, but the app cannot see how results are used.

PimEyes and FaceCheck.ID

PimEyes searches “publicly available websites” such as blogs, news and company sites PimEyes. Its own rules ban “creating profiles of strangers”. Germany’s Hamburg regulator took more than five years to find it had broken the law. It then sent only an “information letter”, because the company appears to be based in Dubai. The group noyb is suing the regulator to force real action noyb (30 Apr 2026).

FaceCheck.ID is run by “Tech Solutions - Belize”. A search costs 3 credits, packages start at $19, payment is by cryptocurrency only and there are no refunds FaceCheck.ID. Its FAQ says “a computer can’t establish a guaranteed identity match” FaceCheck.ID FAQ.

Accuracy

No independent test of Sherlock, PimEyes or FaceCheck.ID exists; their accuracy figures are their own. The US standards body NIST found “a wide range in accuracy across developers”. Some systems made more false matches for some groups in one-to-many searches like these NIST (19 Dec 2019). False matches have real costs: the ACLU counts more than a dozen US wrongful arrests after police relied on face recognition ACLU (14 Apr 2026). A wrong match from a consumer app can just as easily point a stranger at the wrong person.

Our own Face Finder lists these engines for investigators who need them. The same tools are open to anyone, which is why this guide exists.

Can smart glasses record you without you knowing?

Yes, more easily than a phone. EssilorLuxottica sold over 7 million Meta AI glasses in 2025, against about 2 million in 2023–24 combined Road to VR (12 Feb 2026). The camera sits in the frame, and recording starts with a tap or a voice command.

  • The recording light. Meta says a white “capture LED” blinks when the glasses capture, and “has no off switch”. Since July 2026 the camera is disabled if the light is blocked, “tampered with or destroyed”. Meta says it takes legal action against sellers of tampering services Meta (7 Jul 2026).
  • Workarounds exist. 404 Media found a paid service that disabled the light: “People just won’t know the wearer is recording” 404 Media (23 Oct 2025). Hamburg’s data protection authority tested the light and found it too faint to see reliably in daylight UC Today (5 Aug 2026).
  • Face recognition on glasses. In 2024 two Harvard students paired Ray-Ban Meta glasses with PimEyes to “just go from face to name”; they did not release the code 404 Media (2 Oct 2024). In 2026 the New York Times reported that Meta was working on a feature called “Name Tag” Engadget (13 Feb 2026). Meta said “the feature does not exist” after WIRED found and reported dormant face-recognition code, which Meta then removed PetaPixel (9 Jun 2026). US senators and dozens of civil society groups have objected EPIC (18 Mar 2026). We found no launch as of 19 October 2026.
  • Recording without the light (reported). The Financial Times reported that Meta has tested “super sensing” glasses that take photos every few seconds. It said executives did not want the light on in that mode, though plans could change MacRumors on the FT (9 Jul 2026).
  • Where the footage goes. In April 2025 Meta turned on its camera AI by default for US owners. It said the option to turn off voice-recording storage was “no longer available” TechCrunch (30 Apr 2025) PetaPixel (1 May 2025). Swedish newspapers later reported that contractors reviewing glasses footage saw intimate scenes, which led to a US class action PetaPixel (9 Mar 2026).

The backlash is growing. Texas’s attorney general opened an investigation into Meta’s glasses on 20 May 2026 Texas AG (20 May 2026). France’s regulator, the CNIL, warned that it is “très difficile” for people nearby to know they are being filmed CNIL (11 May 2026). Courts in England and Wales now confiscate smart glasses at the door Freevacy on the Guardian (11 Aug 2026). Royal Caribbean bans recording glasses in restrooms, youth areas, medical areas and its casinos TravelPulse (Feb 2026). Several UK theatres, clubs and restaurants followed in August PetaPixel (10 Aug 2026). Instagram removed two pickup-artist accounts with over a million followers each. Its head said “We don’t want people to be surreptitiously taking videos of other people” PetaPixel (27 Jul 2026). California’s governor vetoed a bill that would have required a recording light on wearables LAist (1 Oct 2026).

Meta now also sells camera-free “Ray-Ban Meta Audio” glasses TechCrunch (23 Sep 2026). They look much the same, so you cannot always tell which kind someone is wearing.

Are shops and police scanning faces in public?

In the UK, increasingly yes. Facewatch, a shop face-recognition service, is “used by over 125 retailers operating thousands of stores”. It sent “nearly 300,000 alerts” to shops in the first half of 2026 and plans to alert police to the most serious matches Biometric Update (13 Jul 2026). Sainsbury’s uses it in 55 stores and plans up to 150 more before Christmas Retail Gazette (1 Jul 2026). Two Sainsbury’s shoppers were wrongly told they had been flagged and were removed from a store; the companies blamed human error Retail Technology Innovation Hub (Aug 2026). The government’s planned rules would cover police only; shops “would not fall under the new framework” Home Office consultation (Dec 2025).

UK police use is scaling up. The January 2026 policing white paper funds 40 more face-recognition vans The Register (28 Jan 2026). The Metropolitan Police says it scanned “more than three million faces” in a year to September 2025, with 962 arrests Met Police (31 Oct 2025). Fixed cameras on lampposts in Croydon led to 173 arrests The Register (13 May 2026). The Met plans fixed cameras in the West End by the end of 2026 Local Government Lawyer (24 Jun 2026). At least 12 forces have used live face recognition, and there is no specific law for it yet Statewatch (12 Jun 2026).

In the US, a private nonprofit in New Orleans runs live face recognition on about 200 of its 5,000-plus cameras. It sends tips to police NPR via WFAE (16 Dec 2025). Ring doorbells now offer “Familiar Faces”, which stores faceprints in the cloud; a class action says it scans passers-by who never agreed The Register (3 Jun 2026). Ring dropped a planned Flock partnership in February 2026, but police can still ask users for footage GeekWire (13 Feb 2026). The FTC banned Rite Aid from face recognition for five years after false matches ABC7 (20 Dec 2023). New York City requires shops that collect biometrics to post signs at their entrances Biometric Update (8 Jan 2026).

In the EU, the AI Act has banned police real-time face identification in public since 2 February 2025. Narrow exceptions remain, such as searching for a missing person Eunews (31 Jul 2026). In Australia, a tribunal largely sided with Bunnings over its in-store face recognition, while a ruling against Kmart is under appeal Clayton Utz (Feb 2026) OAIC (29 Jul 2026).

License plate readers track cars rather than faces; see our Flock guide.

Can one photo reveal where you live?

Increasingly, yes. GeoSpy, an AI tool that places photos from buildings and plants, was used by people asking for help “stalking specific women” before public access closed. Its police version, Raven, lets officers “figure out what specific Airbnb or Zillow property a photo was taken in” from an indoor picture 404 Media (12 Oct 2026) Malwarebytes (15 Oct 2026). Our Raven guide has the detail.

Ordinary chatbots can do a rougher version. In a 2025 test, ChatGPT placed a selfie near Grand Central in 56 seconds with the photo’s metadata removed TechRadar (17 Apr 2025). Combine a face match with a located photo and a stranger can get from your face to your street.

Can someone film you in public and post it?

Usually yes in the US; it is more limited in the UK and EU. Prank, street-interview and pickup channels film strangers for views. A BBC investigation found more than 65 channels covertly filming women on nights out, with over three billion views BBC via MyJoyOnline (2 Feb 2026).

  • US. Photographing what is plainly visible in public is protected ACLU. About a dozen states, including California, require everyone’s consent to record a conversation LAist (1 Oct 2026).
  • UK. Filming in public is not automatically unlawful, but posting identifiable, monetised footage can breach data protection law Inforrm (17 Feb 2026). Since 1 April 2026, the Protection from Sex-based Harassment in Public Act can make filming a crime. It applies when the aim is harassment, alarm or distress because of someone’s sex Social Care Today (1 Apr 2026). A bill to ban covert sexualised filming for profit has been proposed Liberal Democrats (11 Feb 2026).
  • EU. Ireland’s regulator says a photo taken for yourself likely falls under the household exemption. Someone who posts it publicly is “likely to be considered a data controller” and needs a legal basis Irish DPC. France also protects private life “in all places, private and public” CNIL (11 May 2026).

Is it legal to scan a stranger's face with an app?

The law mostly targets the companies, not the person holding the phone. Most biometric laws apply to collecting faces “for a commercial purpose”. That is our reading of the laws below, not a court ruling, and this is not legal advice. Harassment, stalking and doxxing laws can still apply to what a person does with a match.

PlaceFace-search appsKey rule
EUBuilding face databases by untargeted scraping is bannedAI Act Art. 5(1)(e), in force since 2 Feb 2025; GDPR treats face data used to identify people as special-category data
UKCovered by UK GDPR; no AI ActICO biometric guidance; the Clearview case
IllinoisStrongest US law; private lawsuitsBIPA: up to $1,000 per violation, $5,000 if intentional or reckless
TexasState attorney general onlyCUBI: up to $25,000 per violation
WashingtonCommercial enrolment needs notice and consentRCW 19.375.020
Rest of USNo general ruleNo federal biometric privacy law

Sources: EU AI Act Article 5 EC AI Act Service Desk and dates European Commission; GDPR Recital 18 on personal use and on those who “provide the means” GDPR Recital 18; ICO ICO biometric guidance; Illinois BIPA and its 2024 amendment Davis Wright Tremaine (Aug 2024, updated Apr 2026); Texas Tex. Bus. & Com. Code §503.001; Washington RCW 19.375.020. Illinois also lets people sue over doxxing that makes stalking or injury likely GovTech (16 Aug 2023).

Enforcement is weak. Clearview AI, which built a database of about 30 billion faces, faces about €100 million in EU fines that it “simply ignores” noyb (28 Oct 2025). The Dutch regulator said using Clearview is itself illegal Autoriteit Persoonsgegevens. The UK’s £7.5 million fine is back before a tribunal Infosecurity Magazine (9 Oct 2025). In the US, an appeals court threw out approval of Clearview’s class settlement on 13 July 2026 Lawyer Monthly (15 Jul 2026). A 2022 settlement bars Clearview from selling to most private businesses ACLU (9 May 2022). Consumer apps face no such limit.

How can you protect yourself?

  1. Opt out of the face engines. PimEyes: a free form that needs a face photo and an ID with everything but the face blurred. PimEyes says it “could not find all matches”, so send several photos PimEyes opt-out PimEyes. FaceCheck.ID: free removal with a selfie check FaceCheck.ID. Clearview: request forms for residents of some US states, and automatic opt-out for Illinois Clearview. Opting out hides results; the photos stay on the sites they came from PimEyes.
  2. Cut the links between your face and your name. Face matches lead to profiles. Remove yourself from people-search sites with our removal guide and from Google with this one. Californians can use the state’s DROP portal to reach every registered data broker at once California Privacy Protection Agency.
  3. Check your own exposure. Search for your face with our Face Finder or Reverse Image Search so you know what a stranger would find.
  4. Don’t rely on “cloaking” tools or special glasses. Researchers found photo-cloaking tools such as Fawkes give “a false sense of security” Radiya-Dixit et al., ICLR 2022. Infrared-blocking glasses fool some phone unlocks but “will not at all stop” matching from ordinary photos 404 Media (27 Oct 2025).
  5. Spot camera glasses. Look for thick arms, a small lens at a corner of the frame, a white light, a tap on the arm or “Hey Meta” Tom’s Guide (May 2026). You can ask the wearer to stop.
  6. If a stranger “recognises” you, don’t confirm details. You can ask them not to film or post you.
  7. If you are posted without consent, file a privacy complaint. YouTube requires that you are “uniquely identifiable” and that you file it yourself YouTube Help. Instagram and Threads have a privacy report form for your image or video Instagram Help. On TikTok, use the in-app report.
  8. Before you post, check the background. Windows, street signs and room interiors can place you. Our geolocation guide shows what others can read from a photo.

If someone is using what they found to follow or threaten you, see our doxxing response guide and contact the police.

Sources

All sources were read or checked on 19 October 2026 and are cited where used. TikTok’s policy pages, The Guardian, the BBC and The Verge block automated readers. We did not work around that, so their reporting is cited through other outlets that quote it. Paywalled reports (New York Times, Financial Times, WIRED) are cited through the outlets that summarised them. Company figures, such as accuracy rates and sales, are the companies’ own. We do not name people filmed, small creators or individuals behind the apps. This is general information, not legal advice.

Frequently Asked Questions

Is the Sherlock face search app accurate?

Not as advertised, as far as anyone can tell. Two Sherlock sites claim 99.2% accuracy with no method given, and no independent test exists. Its own terms say it does not guarantee the accuracy of results. Users and press report many lookalike results, so a match is a lead to check, not proof of identity.

How do I stop my face appearing in face search engines?

Use each engine's removal form. PimEyes removes results for free if you send a face photo and an ID with everything but your face blurred. FaceCheck.ID removes results after a selfie check. Clearview takes requests from residents of some US states. Removal hides results but does not delete the original photos.

Do Meta glasses show a light when recording?

Yes. A white light on the front blinks when the glasses take a photo or video, and Meta says it has no off switch. The camera stops if the light is covered or tampered with. But the light is faint in daylight, paid services to disable it have been reported, and camera-free models look similar.

Can Meta glasses recognise faces?

Not as of 19 October 2026. The New York Times reported in February 2026 that Meta was working on a face recognition feature called Name Tag. WIRED later found dormant code, which Meta removed. Meta says the feature does not exist. Students showed in 2024 that the glasses can be paired with a separate face search engine.

Can a shop use face recognition on me in the UK?

Yes, if it can justify it under data protection law. Facewatch says over 125 retailers use its system, including Sainsbury's. The ICO says use must be necessary and proportionate, and the government's planned new rules would cover police only. You can ask a shop what data it holds on you.

What should I do if someone films me and posts it?

Ask them to delete it, then report it. YouTube and Instagram both have privacy complaint forms for people who can be identified in a video. In the UK, filming meant to harass someone because of their sex can be a crime. If the poster also shares where you live or work, keep evidence and contact the police.

Next step

Check what a stranger would find. Search for your own face with our Face Finder, then opt out of each engine that shows you.

Face Finder Reverse Image Search Remove Yourself From People Search Doxxing Prevention Raven Photo Geolocation Flock Cameras