π― The Reality Check
There is no perfect solution. [ICE's Mobile Fortify](/articles/surveillance/ice-facial-recognition-real-time-deportation) scans faces in seconds. [Clearview AI](/articles/surveillance/meta-pays-1-4-billion-scanning-faces) has billions of photos. [Flock Safety cameras](/articles/surveillance/flock-safety-20-billion-scans-ice-access) are in 5,000 jurisdictions. [Ring doorbells](/articles/surveillance/ring-doorbell-scanning-faces-without-consent) scan everyone who walks by.
But you can make it harder. Sometimes much harder. Here's what actually works, what doesn't, and why.
β οΈ The Fundamental Problem
Information Asymmetry
You're fighting blind:
- Don't know where cameras are
- Don't know what AI model they use
- Don't know if you're in their database
- Don't know if they're using iris/gait recognition too
Facial recognition systems have improved mask recognition since COVID. They can now identify people from body shape, gait, and movement. Some systems work with only 30% of your face visible.
β What Actually Works (Ranked by Effectiveness)
Tier 1: Highly Effective
1. Full Face Masks (95%+ Effective)
Why it works: Masks remain "one of the few surefire ways of evading these systems" even in 2025.
What to use:
- N95/KN95 masks (cover more of face)
- Balaclavas
- Ski masks
- Face scarves/bandanas covering nose to chin
Important notes:
- Modern systems CAN identify you from just eyes - need sunglasses too
- Gait recognition can still track you (change your walk)
- Drawing attention to yourself may trigger manual review
- In some jurisdictions, masks at protests are illegal (check local laws)
2. Head Positioning (60-80% Effective)
Why it works: Facial recognition needs specific facial geometry. Wrong angle = no match.
How to do it:
- Tilt head down 15-30 degrees (looking at phone/ground)
- Turn face away from camera direction
- Keep head moving slightly (harder to capture)
- Avoid looking directly at cameras
Limitations:
- Only works if you know where cameras are
- Awkward to maintain for long periods
- Doesn't work against [Flock Safety's](/articles/surveillance/flock-safety-20-billion-scans-ice-access) license plate tracking
3. The Sunglasses-Hat-Mask Combo (90%+ Effective)
The setup:
- Wide-brim hat or baseball cap (obscures from above)
- Large sunglasses (blocks eyes and periocular region)
- Face mask covering nose and mouth
Why it works: Blocks all key facial landmarks - eyes, nose, mouth, jawline.
Drawback: Extremely conspicuous. Creates Streisand Effect - you stand out MORE to human observers.
Tier 2: Moderately Effective
4. IR LED Glasses (40-70% Effective)
How they work: Infrared LEDs invisible to human eye but overwhelm camera sensors with bright spots where your eyes should be.
Products:
- Reflectacles (passive IR-blocking lenses)
- IRpair/Phantom (active IR LED systems)
- DIY: 940nm IR LEDs embedded in glasses frames
Effectiveness varies by camera:
- Works against: IR-sensitive cameras without filters (many security cameras, older systems)
- Fails against: Cameras with IR filters, visible light-only systems
- Major problem: Creates obvious white blob where face should be - easy to flag for manual review
Cost: $150-400 for commercial products, $20-50 for DIY
5. CV Dazzle Makeup (30-60% Effective)
What it is: "Computer Vision Dazzle" - asymmetric makeup patterns that break facial detection algorithms.
Techniques:
- Create asymmetry between left/right face (algorithms expect symmetry)
- Use contrasting colors in unusual directions
- Obscure nose bridge (critical detection point)
- Break up eye-nose-mouth triangle geometry
- Use hair to cover key facial features
Why it's limited:
- Worked on Facebook's 2015 algorithms. Modern AI is better.
- Time-consuming: 30-60 minutes to apply correctly
- Expensive: Requires specific makeup products
- Streisand Effect: Extremely visible to humans
- "Difficult, if not impossible, to develop a design that can counter every form of facial recognition"
2025 research: Subtle darkening of brow lines, nose bridge, and jaw contours shows some promise without being as visible. But effectiveness remains debatable.
6. Adversarial Patterns (Research Stage - 20-50% Effective)
What they are: Specific patterns/patches designed to confuse particular AI models.
The problem:
- Only work against specific models they're designed for
- You don't know what model is being used
- Models update constantly
- Requires deep technical knowledge to create
Verdict: Not practical for real-world use yet.
Tier 3: Minimally Effective (But Better Than Nothing)
7. Sunglasses Alone (15-30% Effective)
Why limited: Modern algorithms can identify you from nose, mouth, jawline, ears, and facial structure.
When it helps:
- Blocks periocular (eye region) biometrics
- Reduces confidence scores
- May prevent match if database photo doesn't have sunglasses
Best types: Large, wrap-around, mirrored lenses
8. Different Hairstyle/Facial Hair (10-20% Effective)
Why it barely works: AI focuses on facial geometry, not appearance details.
Slight help: Long hair covering sides of face, large beard obscuring jawline
β What Doesn't Work (Don't Waste Your Time)
Anti-Facial Recognition Clothing
The claim: T-shirts with faces printed on them confuse algorithms
Reality: Systems easily filter out non-face patterns. Commercially available products are ineffective against modern AI.
Face Changing Apps/Filters
The claim: Alter your appearance in social media photos
Reality: [Clearview AI scrapes billions of photos](/articles/surveillance/meta-pays-1-4-billion-scanning-faces). Filtering your Instagram won't help when someone else posts you.
Avoiding Social Media
The claim: If you're not on Facebook, you can't be recognized
Reality: Clearview scraped EVERYONE's photos from the internet. Driver's licenses. Passport photos. DMV databases. You're already in the system.
π― Situation-Specific Strategies
At a Protest
Before you go:
- β Wear mask + sunglasses + hat combo
- β Change your gait (walk differently than normal)
- β Wear generic, common clothing (harder to track you specifically)
- β Cover tattoos and distinctive features
- β Leave phone at home or in airplane mode (separate protest phone)
- β Use cash only
During:
- β Keep head tilted down when walking past cameras
- β Stay in crowds (harder to isolate you)
- β Change appearance mid-protest (different jacket, hat)
- β Avoid [Ring doorbells](/articles/surveillance/ring-doorbell-scanning-faces-without-consent) on residential streets
Critical note:
[Flock Safety cameras](/articles/surveillance/flock-safety-20-billion-scans-ice-access) track license plates in 5,000 jurisdictions. Don't drive to protests. [ICE and Border Patrol have backdoor access](/articles/surveillance/ice-surveillance-arsenal-complete-tech-stack).
Daily Life in High-Surveillance Areas
If you're in an area with:
- [Flock Safety cameras](/articles/surveillance/flock-safety-20-billion-scans-ice-access)
- Heavy [Ring doorbell](/articles/surveillance/ring-doorbell-scanning-faces-without-consent) adoption
- [ICE operations](/articles/surveillance/ice-facial-recognition-real-time-deportation)
Practical daily measures:
- Vary your routes - Don't take the same path every day
- Baseball cap + sunglasses - Socially acceptable, provides some protection
- Head down when walking - Look at your phone (but watch where you're going)
- Avoid lingering - Keep moving, don't stand in camera view
- Know camera locations - Map them in your area
If ICE Targets You Specifically
Reality check: If [ICE specifically targets you](/articles/surveillance/ice-surveillance-arsenal-complete-tech-stack), facial recognition countermeasures won't save you. They have:
- Mobile Fortify (instant facial scans)
- Clearview AI ($9.2M contract)
- Palantir ImmigrationOS (AI tracking)
- Graphite spyware (reads encrypted messages)
- Flock Safety access (20 billion monthly scans)
Better strategies:
- Know your legal rights
- Have immigration lawyer's number ready
- Document everything
- Connect with rapid response networks
- Don't answer questions ("I want to remain silent. I want to speak to a lawyer.")
π οΈ DIY: Building IR LED Glasses
If you want to experiment with infrared jamming:
Materials Needed:
- 940nm IR LEDs (4-8 units) - $10-20
- 3V button cell batteries (CR2032) - $5
- Sunglasses frame - $10-20
- Small switch - $2
- Wire, solder, electrical tape
How it works:
- Mount IR LEDs on sunglasses arms pointing toward your face
- Connect to battery pack with switch
- LEDs overwhelm camera sensors (invisible to human eye)
- Camera sees bright spots instead of facial features
Warnings:
- Only works on IR-sensitive cameras without filters
- Creates obvious anomaly in footage (triggers review)
- May violate laws against interfering with surveillance
- Test with your phone's front camera (it can see IR) to verify it works
π± The Bigger Picture: Beyond Your Face
Defeating facial recognition is only part of the surveillance problem:
- Gait recognition: AI can identify you by how you walk
- License plate tracking: [Flock Safety scans 20 billion plates monthly](/articles/surveillance/flock-safety-20-billion-scans-ice-access)
- Phone tracking: Location data, cell tower pings, WiFi connections
- Credit card tracking: Every purchase creates a data point
- Social graph analysis: Who you associate with reveals who you are
- IoT data: [Smart home devices track everything](/articles/surveillance/41-billion-iot-devices-watching-you)
Comprehensive privacy requires addressing ALL surveillance vectors, not just cameras.
βοΈ Legal Considerations
Know the Laws in Your Area
Facial recognition is banned for law enforcement in:
- Portland, Oregon (strictest ban in US)
- San Francisco, California
- Oakland, California
- Berkeley, California
- Minneapolis, Minnesota
23 states have biometric privacy laws requiring consent before facial scanning (Illinois BIPA is strongest).
But: [ICE ignores these restrictions](/articles/surveillance/ice-surveillance-arsenal-complete-tech-stack). Illinois bans Clearview for police, but ICE uses it anyway with no oversight.
π― The Bottom Line
What Works Best: Ranked
- Full face mask + sunglasses + hat (90%+)
- Head positioning (looking down) (60-80%)
- IR LED glasses (40-70%, depends on camera)
- CV Dazzle makeup (30-60%, time-intensive)
- Sunglasses alone (15-30%)
The Harsh Reality
There's no perfect solution. You can make it harder, but [you're probably already in Clearview AI's database](/articles/surveillance/meta-pays-1-4-billion-scanning-faces). [ICE has Mobile Fortify on agents' phones](/articles/surveillance/ice-facial-recognition-real-time-deportation). [Flock Safety cameras are in 5,000 jurisdictions](/articles/surveillance/flock-safety-20-billion-scans-ice-access). [Ring doorbells scan everyone](/articles/surveillance/ring-doorbell-scanning-faces-without-consent).
The goal isn't invisibility. It's making yourself more expensive to track than you're worth.
Best Strategy
Combine multiple low-level countermeasures:
- Baseball cap + sunglasses (socially normal)
- Keep head tilted down
- Vary your routes and patterns
- Use cash when possible
- Leave phone at home for sensitive activities
- Know your legal rights
Perfect privacy is impossible. Operational privacy is achievable if you're willing to accept inconvenience.
π References
- Blink Identity - Defeating Facial Recognition Technology
- Joseph Steinberg - How To Prevent Facial Recognition Technology From Identifying You
- CyberGhost - How to Avoid Facial Recognition in 5 Steps
- The Register - Subtle makeup tweaks can outsmart facial recognition (January 2025)
- Adam Harvey - CV Dazzle
- Communications of the ACM - Using Makeup to Block Surveillance
- Reflectacles - Privacy Eyewear & Anti Facial Recognition Glasses
- Phys.org - Near-infrared glasses thwart face recognition
- Hackaday - Using IR LEDs To Hide In Plain Sight