Geolocation OSINT: Finding Where Photos Were Taken

What Is Geolocation OSINT?

Geolocation is the process of determining where a photo or video was captured. Open Source Intelligence (OSINT) investigators use publicly available tools and techniques to do this.

The process typically follows three steps:

1. Check metadata: Look for GPS coordinates hidden in the file
2. Analyze visual clues: Identify landmarks, signs, architecture, vegetation
3. Verify with mapping tools: Cross-reference findings with satellite imagery and street view

A single overlooked detail, a phone number on a storefront, a distinctive power line configuration, the shape of a distant hill, can completely solve a geolocation challenge.

Who uses these techniques:

• Journalists verifying the authenticity of images
• Human rights investigators documenting war crimes
• Law enforcement tracking suspects
• Insurance investigators checking claims
• Researchers monitoring environmental changes
• Stalkers finding where someone lives (unfortunately)

Step 1: Extracting Metadata

Most photos contain hidden data called EXIF (Exchangeable Image File Format) metadata. This is the "low-hanging fruit", always check it first.

What EXIF data can include:

• GPS coordinates: Exact latitude and longitude
• Date and time: When the photo was taken
• Camera model: What device captured the image
• Software: What app or editor processed it
• Altitude: Elevation above sea level
• Direction: Which way the camera was pointing

If GPS coordinates exist, the investigation is essentially over. You have exact location data.

EXIF Extraction Tools

When Metadata Is Stripped

Social media platforms often remove EXIF data when you upload images:

The catch: Even if metadata is stripped, the original file on your device still has it. And if someone gets that original file, through a data breach, shared cloud folder, or direct message, they have your location data.

Step 2: Visual Clue Analysis

When metadata is missing, investigators turn to what's visible in the image itself. This is where geolocation becomes detective work.

What Investigators Look For

Text and signage:

• Street signs and road markers
• Store names and phone numbers
• License plates (format varies by country/state)
• Language on signs
• Price tags (currency symbols)

Architecture and infrastructure:

• Building styles (colonial, brutalist, modern)
• Power line configurations (different countries have different standards)
• Road markings and traffic signals
• Manhole covers (often city-specific)
• Utility poles

Natural features:

• Mountain ranges and hill shapes
• Rivers, lakes, coastlines
• Vegetation types (palm trees vs. pine trees)
• Soil color
• Weather patterns

Cultural indicators:

• Vehicle types (right-hand vs. left-hand drive)
• Clothing styles
• Shop types and brands
• Food and restaurant signage

Reverse Image Search

If the image exists elsewhere online, reverse image search can find it, sometimes with location information attached.

Step 3: Shadow and Sun Analysis

Shadows reveal time and location. The sun's position, its elevation and direction, varies based on date, time, and geographic location.

The technique:

1. Measure the length of a shadow relative to the object casting it
2. Calculate the sun's elevation angle using trigonometry
3. If you know the date and time, you can determine possible locations
4. If you know the location, you can determine when the photo was taken

Key Tools

SunCalc: Shows the sun's position at any time and place. Enter a location and date to see where shadows should fall. Use it to verify if a photo's shadows match a suspected location.

Bellingcat's Shadow Finder: Automates shadow analysis. Input the ratio of object height to shadow length, plus the date and approximate time. It calculates all possible locations on Earth where that shadow configuration could occur.

How it works in practice:

1. Find an object with a measurable shadow (flagpole, person, building)
2. Estimate the object's height and the shadow's length
3. Input the ratio into Shadow Finder
4. The tool generates a ring of possible locations
5. Cross-reference with other clues to narrow down

Limitations: Shadow analysis requires clear shadows and known (or estimated) timing. It works best when combined with other techniques.

Step 4: Satellite and Street View Verification

Once you have candidate locations, you verify using satellite imagery and street-level photos.

Primary Verification Tools

Google Earth Pro:

• Free desktop application with high-resolution imagery
• Historical imagery slider shows locations at different times
• 3D view helps match mountain skylines and building profiles
• Measurement tools for distances and areas

Google Street View:

• Ground-level imagery for final confirmation
• Historical Street View shows how locations changed over time
• Helps match storefronts, signs, and street details

Other satellite sources:

Verification Process

1. Match major features: Mountain ranges, rivers, large buildings
2. Match street layout: Road patterns, intersection shapes
3. Match architectural details: Window shapes, roof styles, building colors
4. Match movable objects: Signs, utility poles, fences (may have changed)
5. Account for time: Construction, demolition, seasonal changes

Real-World Geolocation Examples

Bellingcat's work: The investigative outlet has used geolocation to verify locations of airstrikes, document war crimes, and track military movements. Their analysis of MH17 crash evidence helped identify the missile launcher's route through Ukraine.

GeoConfirmed: A volunteer collective that geolocates photos and videos from conflicts, primarily in Ukraine. They've verified thousands of incidents, providing open-source evidence for researchers and journalists.

Law enforcement: FBI agents have used geolocation techniques to identify locations from photos shared by suspects. In one case, agents identified a suspect's location from a single photo by matching visible rooftops to satellite imagery.

The process: An image from a conflict zone shows smoke rising. Investigators:

1. Analyze building shapes and street patterns visible in the frame
2. Match distinctive features to satellite imagery
3. Verify with multiple image sources
4. Confirm exact GPS coordinates
5. Document with before/after satellite imagery

What seems like an anonymous photo becomes geospatially verified evidence.

How to Protect Your Location

Every technique investigators use can be used against you. Here's how to reduce your exposure.

Strip Metadata Before Sharing

On iPhone:

1. Open the Photos app
2. Tap the share icon
3. Tap "Options" at the top
4. Turn off "Location"
5. Then share the photo

On Android:

1. Open the photo in Google Photos or your gallery
2. Tap the three dots menu
3. Select "Edit" > "More" > "Remove location"
4. Or use Settings > Camera > disable "Save location"

On desktop:

• Use ExifTool: exiftool -all= photo.jpg
• Or right-click > Properties > Details > "Remove Properties and Personal Information"

Disable Location on Camera

Prevent metadata from being added in the first place:

• iPhone: Settings > Privacy & Security > Location Services > Camera > Never
• Android: Varies by device, usually in Camera settings > Location tags > Off

Be Aware of Visual Clues

Even without metadata, your photos reveal information:

• Street signs and landmarks identify location
• Shadows reveal time of day
• Vegetation and weather indicate region
• Window reflections show additional surroundings
• Background details you didn't notice are visible to investigators

Before sharing sensitive photos:

1. Examine backgrounds carefully
2. Blur or crop identifying features
3. Consider whether the image could be traced to your location
4. Don't share photos immediately (timestamps can be cross-referenced)

The Bottom Line

Geolocation OSINT turns photos into maps. EXIF metadata might contain GPS coordinates. If not, shadows reveal time and location. Visual clues, signs, architecture, vegetation, narrow down the region. Satellite imagery and street view confirm the exact spot.

These techniques have exposed war crimes, verified breaking news, and helped investigators find missing persons. They've also been used by stalkers and harassers to locate their targets.

Every photo you share is a potential data point. Strip metadata before sharing. Be aware of what's visible in frames. Understand that a single overlooked detail, a reflection, a street sign, a distinctive shadow, can reveal exactly where you were.

The tools are free. The techniques are documented. Assume anyone with motivation can learn to use them.

References

1. Bellingcat, Using the Sun and the Shadows for Geolocation
2. Bellingcat, Shadow Finder Tool
3. Bellingcat's Online Investigation Toolkit, Geolocation
4. SunCalc, Sun Position Calculator
5. GeoConfirmed, Volunteer Geolocation Collective
6. GIJN, Using the Sun and Shadows for Geolocating Photos and Videos
7. Neotas, Geolocation OSINT Investigation Techniques

Related

• Photo Metadata: The Hidden Tracking in Your Images, EXIF data and privacy risks
• OSINT Tools: How They Find You, The complete investigator's toolkit
• Protecting Yourself from OSINT, Reduce your digital footprint
• Reverse Image Search OSINT, Finding where images appear online
• Invisible Watermarks and Printer Tracking Dots, Hidden tracking in documents and images