Spyware on a spouse's phone is not a mere private curiosity. If a hidden app reads messages, records audio, tracks movements, or transmits content remotely, the marital relationship does not automatically render that monitoring lawful. However, the doubt is often concrete: is knowing the phone code enough? What happens if the data is later produced in a separation proceeding? Is it possible to report the matter and also claim compensation?
In this guide, I help you distinguish suspicion from a fact that can be proven, occasional monitoring from the installation of a surveillance system, and useful evidence from evidence obtained by violating others' rights. We will also see why the word "spyware" alone is not enough to establish which offence applies or which claim for damages can be brought.
Marriage does not authorize the digital monitoring of the other spouse
Each spouse retains their own private digital sphere. A telephone, e-mail inbox, chat, cloud archives, and personal accounts may contain communications, images, health data, payment information, and conversations that do not become freely accessible simply because a marriage, cohabitation, or couple crisis exists. Sharing a home or expenses does not equate to consent to hidden surveillance.
Consent must specifically concern the access performed. Handing over the phone for the other to answer a call, knowing a code for practical reasons, or using a shared tablet does not necessarily authorize reading private conversations, activating automatic call forwarding, installing a monitoring app, or keeping data to monitor the other. The content of the authorization, its duration, and the concrete use made of the information all matter.
Spyware is different from occasional consultation. This expression refers to programs that operate discreetly and can collect data from the device: messages, calls, location, photographs, application activity, and sometimes sounds or images. To frame the fact, the app's actual function, who installed it, which credentials were used, how long the data was collected, and whether that data was transmitted or disclosed are decisive.
What criminal profiles may come into play
There is no single "spyware offence." The criminal qualification depends on the specific conduct: installing a program, accessing a protected account, listening to conversations, acquiring messages, or disclosing the collected material are not identical. Precisely for this reason, it is incorrect to state that any phone monitoring automatically constitutes the same offence; however, it is equally wrong to believe that the marital relationship eliminates the criminal protections of confidentiality.
Recordings and private life in the home
The hidden recording of events in private life may have criminal significance. Article 615-bis of the Criminal Code concerns the undue retrieval of news or images regarding private life carried out in the places indicated by Article 614 of the Criminal Code, through visual or sound recording tools. An app capable of activating a microphone or camera can therefore make it important to verify where the interceptions take place and what is collected; the mere presence of an app, without those prerequisites, does not allow this rule to be applied automatically. The text of the article can be consulted in Law no. 98 of 1974 on Normattiva.
Access to phone, accounts, and communications
Unauthorized access to a protected system is a distinct issue. If security measures on a phone, an e-mail inbox, a social profile, or a cloud archive are bypassed or circumvented, Article 615-ter of the Criminal Code regarding unauthorized access to a computer or telematics system may become relevant. Protection by PIN, password, fingerprint, or two-factor authentication is an important fact; nevertheless, even knowing a credential does not in itself render lawful any use that exceeds permitted limits.
Messages and communications have their own protection. Depending on the technique employed, rules on the violation of correspondence and those on computer or telematics communications may come into play, including interception conduct or the installation of equipment intended to intercept. Articles 615-ter, 616, and 617-quater and following are part of the Criminal Code; their list and placement are available in the text of the Criminal Code published by Normattiva. The presence of passwords, the nature of the communications, and the technical operation of the program affect the legal classification.
Disclosure can aggravate the prejudice and open further questions. Showing chats, audio, or photographs to family members, colleagues, friends, or on social media is not the same as keeping them to oneself. The people reached, the damage to reputation, and the potential relevance of additional offences change. Even when the content is invoked to prove infidelity or a lie, the stated purpose does not automatically authorize clandestine collection or the circulation of data.
What to do if you suspect a spy app
Safety comes before investigative curiosity. If you fear the device is being monitored, avoid using the suspicious phone to discuss the discovery or hastily change every setting. From a trusted device, you can update passwords, recovery addresses, and active sessions of the most sensitive accounts. Do not log into the other spouse's accounts to look for confirmation, however: reacting to a possible violation with a new unauthorized access can create an additional problem.
Preserve what you observe without unnecessarily altering the device. Noting dates, times, anomalous behaviors, unexpected notifications, or visible screens can be useful. A photograph of the screen or a screenshot alone does not prove who installed a program, when it was activated, or what data it transmitted. If the fact must be ascertained, a technical copy performed in a manner suitable to document integrity and provenance can have a very different value from isolated images or forwarded conversations.
A criminal complaint requires timely and precise framing. Some offences against privacy and communications are prosecuted upon a complaint by the injured party, while other circumstances may affect procedural admissibility. It is not prudent to wait for the situation to resolve itself nor to indicate a standard deadline without identifying the potential offence and the moment you became aware of it. If there is an immediate danger to your personal safety, the priority is to ask the competent authorities for help.
Evidence obtained with spyware is not automatically inadmissible
A chat produced in court is neither automatically valid nor automatically to be excluded. The origin of the material matters. In criminal proceedings, Article 191 of the Code of Criminal Procedure establishes that evidence acquired in violation of prohibitions established by law cannot be used; the rule allows inadmissibility to be raised even ex officio. This principle can be consulted in the text of Article 191 of the Code of Criminal Procedure.
The rule does not allow shortcuts. It is not enough to label a file as "illicit evidence" for the judge to strike it, just as it is not enough to attach a screenshot to make it reliable. One must distinguish the proceeding in which the document is offered, the conduct by which it was acquired, the legal prohibition possibly violated, the authenticity of the content, and the fact one intends to prove. Furthermore, the violation of privacy may have autonomous consequences, even if the data is nonetheless discussed in a proceeding.
In family disputes, the right of defense is not a license to spy. A separation or a child custody case may make certain facts of couple life relevant, but they do not eliminate the problem of how those facts were gathered. Recording a conversation in which one participates is different from setting up a hidden system that acquires conversations and data of an absent person over time. The technical and factual distinction must be clarified before founding a procedural choice on that material.
Compensation: what damage must be proven
Compensation does not automatically stem from the discovery of the app. In civil proceedings, it is necessary to link unlawful conduct to actual damage and prove the nexus between the two. The prejudice may be pecuniary, for example if necessary costs were incurred or economic resources were compromised; it may also be non-pecuniary, when the invasion of privacy concretely impacted dignity, peace of mind, personal relationships, or reputation.
The proof of damage must be consistent with the suffered fact. Dramatic reconstructions are not needed, but rather concrete elements: the duration of monitoring, the type of information collected, any disclosure to third parties, documentable personal consequences, and expenses made necessary by account protection or restoration. The judge does not award a fixed amount simply because a rule was violated; they assess the alleged and proven damage in the specific case.
The GDPR does not apply automatically to the family sphere. The European regulation excludes from its scope processing carried out by a natural person for purely personal or household activities. If, however, the processing steps outside that sphere, Article 82 of the GDPR recognizes the right to compensation for material or immaterial damage caused by the infringement; it remains necessary to prove actual damage, as formal infringement alone is not sufficient. The European framework can be consulted in the Regulation (EU) 2016/679 on EUR-Lex.
Complaint, civil protection, and separation: different paths to coordinate
Criminal protection serves to ascertain a potential offence. A criminal complaint or report presents the facts, the devices involved, the known dates, and available elements to the authorities. It does not replace a civil lawsuit for compensation and does not automatically dictate that all gathered material be used in other proceedings. For this reason, it is useful to keep separate the objective of stopping the intrusion, the criminal ascertainment, and the financial claim for damages.
Civil protection aims to remove and compensate for the prejudice. Depending on the facts, it may become important to request the cessation of further conduct, the return or deletion of copies in the author's possession when legally practicable, and compensation for proven damages. If a family proceeding is already underway, the claims and acts must be constructed without confusing the plane of the marital crisis with that of digital violation.
The riskiest mistake is turning suspicion into counter-surveillance. Installing software in turn, accessing others' profiles, or disclosing received material can compromise the position of the person who considers themselves injured. For an initial examination, a few orderly pieces of information are normally useful: which devices are involved, what signals were observed, which accounts appear exposed, and whether there are already messages, files, or documents filed in a proceeding.
Frequently asked questions
Can I read my spouse's messages if I know their code?
No, knowing the code does not create general authorization. Limited consent to use the phone on particular occasions may exist, but reading chats, e-mails, or private content to monitor the other is a different activity. The purpose of access, the limits of consent, and the potential presence of security measures all matter.
Is a spouse-tracking app always a crime?
One cannot answer with an automatic yes. It is necessary to understand whether the app was installed covertly, what data it acquires, whether current and informed consent exists, and whether it also collects communications, audio, or other information. Continuous and covert tracking can pose different problems from a shared and consciously activated function.
Do screenshots prove that spyware was installed?
By themselves, normally no. They can document an anomaly or the content visible at a given moment, but they do not identify with certainty the program, the author of the installation, or the data actually transmitted. When technical origin is decisive, correct preservation of the device and specialist assessment take on greater importance.
Can illegally obtained chats be used in separation?
There is no rule of automatic admissibility. The judge must be able to assess the provenance, reliability, and relevance of the document in the specific proceeding. The fact that a chat seems useful does not render the way it was acquired lawful; at the same time, the objection must precisely indicate why the origin of the material is problematic.
Can I claim compensation even if the data was not published?
Yes, disclosure is not the only possible source of damage. Even clandestine monitoring can injure privacy and produce compensable consequences, but the damage must be alleged and proven along with the link to the conduct. Lack of publication may affect the gravity and proof of prejudice, but it does not absolutely exclude a civil claim.
Addressing the problem without creating new violations
The most effective protection starts from verifiable facts and correct behaviors. Securing accounts, preserving available elements, and distinguishing clandestine collection from lawfully formed evidence prevents impulsive decisions. If you believe you have suffered monitoring via spyware, you can contact me: with my staff, we can clarify which facts are already documented, which protections are concretely assessable, and how to prevent the reaction to monitoring from exposing you to further risks as well.