AliExpress Uses WebAudio API and Zero

Cybersecuritynews •Guru Baran • August 25, 2026

AliExpress’s homepage quietly builds hidden WebAudio processing graphs in the browser, a technique that appears to power an aggressive device-fingerprinting system while producing an unexpected real-world side effect: interfering with Bluetooth multipoint audio switching on connected headphones. Security researcher Laserphile, using multipoint Bluetooth headphones that stay simultaneously paired to a PC and a phone, noticed […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AliExpress Caught Using Inaudible Audio for Device Fingerprinting AliExpress has been accused of employing inaudible audio signals through the WebAudio API to fingerprint users' devices. This technique was uncovered by developer Matt Callaghan, who noticed that his Bluetooth headphones stopped functioning properly when an AliExpress tab was open. The site generates inaudible audio waves at zero volume, which are processed by the browser to identify unique device characteristics. This method allows AliExpress to track users without their consent, as it collects various hardware and software data. Although this fingerprinting technique can help detect fraudulent activities, it raises significant privacy concerns due to a lack of transparency. Users can mitigate this tracking by using privacy-focused browsers like Firefox or Brave, which block such scripts. The incident has sparked discussions about the ethical implications of such tracking methods. 4 sources 56

Extracted Entities

Platforms (1)

WebAudio API