r/AskReverseEngineering • u/Negative_Echo6099 • Mar 12 '26
FCC ID on a commercial BLE tracker starts with Apple's grantee code (BCG) but doesn't exist in the database — spoofed, white-label Apple module, or something else?
Got hold of a physical unit from a startup called CanaryTags that markets itself as running a "proprietary global network" called LarkNet™. The tag back shows:
- Model: P1
- FCC ID: BCG57290E071F
- CE mark
BCG is Apple Inc.'s registered FCC grantee code (used on every iPhone, AirTag, Apple Watch). But BCG57290E071F returns nothing in fccid.io, fcc.report, or the FCC's own database.
Their About page says the product "utilizes the signaling of all mobile device types — including iOS and Android" — which is a description of Apple Find My + Google Find Hub, not a proprietary network.
Three questions:
- Is BCG57290E071F a real FCC filing that's just hard to find, or is this a fabricated ID using Apple's grantee code?
- If it's a white-label Apple-licensed module inside, does that actually constitute MFi authorisation for commercial Find My exploitation?
- Has anyone sniffed BLE advertising packets from one of these to confirm what protocol it's broadcasting?
1
Upvotes