Illustration of a blue magnifying glass over paper with large yellow decorative cardboard circles
Article · Printing blog

Printer yellow tracking dots: how to inspect a page

Updated

Startoner · Paper and privacy

A printed page can carry information you never typed: in the Xerox DocuColor system studied by the Electronic Frontier Foundation (EFF), microscopic yellow dots encode the printer serial number as well as the date and time of printing. This was documented by EFF [1].

We explain what this finding means and provide an inspection sheet to examine your own pages without drawing unverified conclusions.

Sources consulted: 2 October 2026.

Conceptual illustration generated with AI. The circles are exaggerated decorative elements, not an actual pattern or a photograph of a laboratory test.

Your inspection workbook, ready to print

Two-page A4 sheet: preparation, observations, and limits of findings. Includes a blank inspection area and fields to record conditions. Contains no yellow tracking dots designed by us.

Download A4 sheet in PDF View preview

Free download

Real preview: Yellow tracking dots inspection sheet

Yellow tracking dots inspection sheet

PDF A4 · 2 pages · 5 KB

Download PDF

What are yellow tracking dots or MICs

Machine Identification Code (MIC) refers to tracking codes added by certain printers. In the devices studied, the focus is on tiny marks added to the printout rather than the document text itself. Initial EFF research examined test sheets from Canon and Xerox devices and identified different layouts. For this reason, it is best to speak of specific mechanisms rather than a single universal tracking grid. Source: original EFF investigation [2].

The distinction matters when reviewing a page. Spotting a repeated mark raises a question; interpreting its content requires understanding the specific encoding scheme that generated it. Do not confuse a magnified photograph with an attribution to an individual, nor a visual coincidence with the definitive identification of a machine.

This article focuses on documented marks found in colour laser printing. If you are unsure what printing technology your device uses, start with our comparison between laser and inkjet printers. We do not extrapolate findings across every printer, every print mode, or every hardware generation.

What has been tested and how far it extends

The EFF guide for DocuColor describes a 15 by 8 dot matrix repeated across the page. It explains how to interpret specific fields and notes that recorded timestamps may reflect another time zone or an incorrectly configured internal clock. That documented format is an illustrative example, not a master key for decoding any yellow mark. Source: DocuColor decoding guide [1].

Research continued in later years. In 2018, TU Dresden reported an experiment examining 1,286 pages from 141 printers across 18 manufacturers. That figure represents the sample size of that specific study, not the total number of modern devices affected nor an industry-wide detection rate. The corresponding study by Richter, Escher, Schönfeld, and Strufe is titled Forensic Analysis and Anonymisation of Printed Documents. Source: TU Dresden announcement [3]; project overview and study reference [4].

To illustrate the scope, here are examples from EFF historical database:

Specific modelWhat EFF recordedWhat you can conclude
Xerox DocuColor 12Dots observed in EFF testingEvidence exists for this specific historical model.
Brother HL-4200CNDots observed in EFF testingDoes not allow generalising to the entire brand.
HP Color LaserJet 8500Dots not observedDoes not prove absence of other markings.

Source and limitations: EFF printer list, no longer updated [5]. A "yes" records anomalous tracking dots observed; on its own, it does not confirm what data they contain.

Before you begin: prepare a useful test sample

The inspection sheet provides a structured framework for home observation, not forensic legal testimony. We have not conducted physical printer tests for this article. What we provide is an orderly way to record your observation conditions and preserve context.

Use a fresh page created specifically for testing, free of personal names, addresses, account numbers, or confidential work documents. Record full make and model, date, print mode, and paper batch. If a detail is unknown, write 'unknown'. Leaving a field unanswered is better than filling in details from memory.

Print the sheet at actual size without adding background fills from your browser. Its design uses black and grey tones; the observation area is completely blank in the digital file. That does not predict what your printer might deposit. In addition, keep an unprinted sheet from the same pack. This comparison is part of our protocol to identify pre-existing paper blemishes.

Step-by-step page inspection

Observe and record before interpreting

  1. Identify the sample. Assign a clear reference code and record which side of the paper you are inspecting. Store the test sheet without writing directly inside the designated observation area.
  2. Inspect unprinted areas. Begin with the blank box on the sheet, then check unprinted margins. Note whether you see isolated specks, toner spatter, or repeated patterns, without assigning meaning yet.
  3. Use visible blue light and magnification. EFF used blue illumination and magnification to examine marks. In their demonstration, contrast causes yellow dots to appear dark against the paper. Direct the light at the paper. Ultraviolet light is not required for this protocol. Method described by EFF [2].
  4. Compare with the unprinted control sheet. Examine under identical lighting and record any differences. If a mark is faint or ambiguous, document the uncertainty rather than forcing a conclusion.
  5. Document your procedure. Record lighting source, magnification level if known, inspected area, and file names. If you repeat the test, create a fresh log sheet to enable comparison across trials.

For later review, capture one full-page photograph and one close-up image. On a working digital copy, mark the observed spot while preserving the original raw capture separately. An effective note describes what you did and what you observed. Avoid overreaching statements such as 'my printer tracks everyone' when you have simply seen a cluster of marks.

Working with a high-resolution scan

The DEDA open-source project provides tools to extract and, in certain cases, decode printer dots. Its documentation recommends lossless formats, such as PNG, scanned at 300 dpi with neutral contrast. It notes that newer patterns may not be recognised and scanner image-enhancement filters can inadvertently erase faint dots. Source: DEDA documentation [6].

If you need guidance scanning documents, see our tutorial on how to scan with your printer. Record scanner settings used and save the unedited raw file before applying filters. A software error should be recorded as a processing failure, not proof that a tracking code does not exist.

Formulating an honest conclusion

Your observationHow to record itNext step
No dots distinguishable'Not observed under these conditions'Review methodology and lighting limits.
Faint marks seen, but no clear structure'Inconclusive result'Preserve sample and record ambiguities.
Repeated geometric arrangement visible'Pattern observed, content unverified'Cross-reference with published documentation.
Software tool outputs decoded data'Output pending independent validation'Record software version, parameters, and consistency.

These standardised labels represent our suggested logging methodology. They keep empirical observations separate from subjective interpretation. Do not treat historical device lists as privacy certificates: EFF itself cautions that its database cannot rule out other tracking methods. Review EFF caveats [5].

If your page exhibits visible streaks or blotches, consult our diagnostic guide on print quality issues and streaks. Keep print defect troubleshooting distinct from tracking dot analysis; do not mistake mechanical roller marks for forensic surveillance codes.

Privacy and printer supplies: reasonable questions

Do tracking dots reveal who clicked 'print'?

Documented DocuColor decoding reveals hardware and print job data. Connecting a printed page to an individual human requires corroborating external evidence. A printer serial number alone cannot establish who operated a shared office printer. That distinction between machine and user is highlighted throughout the EFF investigation [2].

Does buying compatible toner change the situation?

We do not have a test that would allow us to promise this. Do not choose a consumable as an anonymity measure based on this article. To choose the correct reference, you can consult how to find the toner your printer needs and the catalogue of Startoner compatible toner cartridges. That choice does not constitute a verification of privacy.

Can I certify a page as anonymous after inspection?

A visual check cannot certify anonymity. Research by the DFD project also explores physical printing process characteristics that may fingerprint devices, independent of deliberately embedded tracking dots. Source: TU Dresden project goals [4]. Where strict confidentiality is required, a magnifying glass inspection cannot prove a document is untraceable.

The sheet serves a more grounded, practical goal: keeping a structured record of which sample you checked, under what conditions, and what you saw. Download it, preserve your observations, and share verified sources rather than sweeping conclusions.

Sources and references

  1. This was documented by EFF
  2. Source: original EFF investigation
  3. Source: TU Dresden announcement
  4. project overview and study reference
  5. EFF printer list, no longer updated
  6. Source: DEDA documentation

Was this article helpful?

Back to blog