Printer yellow tracking dots: how to inspect a page
UpdatedShare
Startoner · Paper and privacy
A printed page can carry information you never typed: in the Xerox DocuColor system studied by the Electronic Frontier Foundation (EFF), microscopic yellow dots encode the printer serial number as well as the date and time of printing. This was documented by EFF [1].
We explain what this finding means and provide an inspection sheet to examine your own pages without drawing unverified conclusions.
Sources consulted: 2 October 2026.
Conceptual illustration generated with AI. The circles are exaggerated decorative elements, not an actual pattern or a photograph of a laboratory test.
Two-page A4 sheet: preparation, observations, and limits of findings. Includes a blank inspection area and fields to record conditions. Contains no yellow tracking dots designed by us.
Download A4 sheet in PDF View previewFree download
What are yellow tracking dots or MICs
Machine Identification Code (MIC) refers to tracking codes added by certain printers. In the devices studied, the focus is on tiny marks added to the printout rather than the document text itself. Initial EFF research examined test sheets from Canon and Xerox devices and identified different layouts. For this reason, it is best to speak of specific mechanisms rather than a single universal tracking grid. Source: original EFF investigation [2].
The distinction matters when reviewing a page. Spotting a repeated mark raises a question; interpreting its content requires understanding the specific encoding scheme that generated it. Do not confuse a magnified photograph with an attribution to an individual, nor a visual coincidence with the definitive identification of a machine.
This article focuses on documented marks found in colour laser printing. If you are unsure what printing technology your device uses, start with our comparison between laser and inkjet printers. We do not extrapolate findings across every printer, every print mode, or every hardware generation.
What has been tested and how far it extends
The EFF guide for DocuColor describes a 15 by 8 dot matrix repeated across the page. It explains how to interpret specific fields and notes that recorded timestamps may reflect another time zone or an incorrectly configured internal clock. That documented format is an illustrative example, not a master key for decoding any yellow mark. Source: DocuColor decoding guide [1].
Research continued in later years. In 2018, TU Dresden reported an experiment examining 1,286 pages from 141 printers across 18 manufacturers. That figure represents the sample size of that specific study, not the total number of modern devices affected nor an industry-wide detection rate. The corresponding study by Richter, Escher, Schönfeld, and Strufe is titled Forensic Analysis and Anonymisation of Printed Documents. Source: TU Dresden announcement [3]; project overview and study reference [4].
To illustrate the scope, here are examples from EFF historical database:
| Specific model | What EFF recorded | What you can conclude |
|---|---|---|
| Xerox DocuColor 12 | Dots observed in EFF testing | Evidence exists for this specific historical model. |
| Brother HL-4200CN | Dots observed in EFF testing | Does not allow generalising to the entire brand. |
| HP Color LaserJet 8500 | Dots not observed | Does not prove absence of other markings. |
Source and limitations: EFF printer list, no longer updated [5]. A "yes" records anomalous tracking dots observed; on its own, it does not confirm what data they contain.
Before you begin: prepare a useful test sample
The inspection sheet provides a structured framework for home observation, not forensic legal testimony. We have not conducted physical printer tests for this article. What we provide is an orderly way to record your observation conditions and preserve context.
Use a fresh page created specifically for testing, free of personal names, addresses, account numbers, or confidential work documents. Record full make and model, date, print mode, and paper batch. If a detail is unknown, write 'unknown'. Leaving a field unanswered is better than filling in details from memory.
Print the sheet at actual size without adding background fills from your browser. Its design uses black and grey tones; the observation area is completely blank in the digital file. That does not predict what your printer might deposit. In addition, keep an unprinted sheet from the same pack. This comparison is part of our protocol to identify pre-existing paper blemishes.
Step-by-step page inspection
Observe and record before interpreting
- Identify the sample. Assign a clear reference code and record which side of the paper you are inspecting. Store the test sheet without writing directly inside the designated observation area.
- Inspect unprinted areas. Begin with the blank box on the sheet, then check unprinted margins. Note whether you see isolated specks, toner spatter, or repeated patterns, without assigning meaning yet.
- Use visible blue light and magnification. EFF used blue illumination and magnification to examine marks. In their demonstration, contrast causes yellow dots to appear dark against the paper. Direct the light at the paper. Ultraviolet light is not required for this protocol. Method described by EFF [2].
- Compare with the unprinted control sheet. Examine under identical lighting and record any differences. If a mark is faint or ambiguous, document the uncertainty rather than forcing a conclusion.
- Document your procedure. Record lighting source, magnification level if known, inspected area, and file names. If you repeat the test, create a fresh log sheet to enable comparison across trials.
For later review, capture one full-page photograph and one close-up image. On a working digital copy, mark the observed spot while preserving the original raw capture separately. An effective note describes what you did and what you observed. Avoid overreaching statements such as 'my printer tracks everyone' when you have simply seen a cluster of marks.
Working with a high-resolution scan
The DEDA open-source project provides tools to extract and, in certain cases, decode printer dots. Its documentation recommends lossless formats, such as PNG, scanned at 300 dpi with neutral contrast. It notes that newer patterns may not be recognised and scanner image-enhancement filters can inadvertently erase faint dots. Source: DEDA documentation [6].
If you need guidance scanning documents, see our tutorial on how to scan with your printer. Record scanner settings used and save the unedited raw file before applying filters. A software error should be recorded as a processing failure, not proof that a tracking code does not exist.
Formulating an honest conclusion
| Your observation | How to record it | Next step |
|---|---|---|
| No dots distinguishable | 'Not observed under these conditions' | Review methodology and lighting limits. |
| Faint marks seen, but no clear structure | 'Inconclusive result' | Preserve sample and record ambiguities. |
| Repeated geometric arrangement visible | 'Pattern observed, content unverified' | Cross-reference with published documentation. |
| Software tool outputs decoded data | 'Output pending independent validation' | Record software version, parameters, and consistency. |
These standardised labels represent our suggested logging methodology. They keep empirical observations separate from subjective interpretation. Do not treat historical device lists as privacy certificates: EFF itself cautions that its database cannot rule out other tracking methods. Review EFF caveats [5].
If your page exhibits visible streaks or blotches, consult our diagnostic guide on print quality issues and streaks. Keep print defect troubleshooting distinct from tracking dot analysis; do not mistake mechanical roller marks for forensic surveillance codes.
Privacy and printer supplies: reasonable questions
Do tracking dots reveal who clicked 'print'?
Documented DocuColor decoding reveals hardware and print job data. Connecting a printed page to an individual human requires corroborating external evidence. A printer serial number alone cannot establish who operated a shared office printer. That distinction between machine and user is highlighted throughout the EFF investigation [2].
Does buying compatible toner change the situation?
We do not have a test that would allow us to promise this. Do not choose a consumable as an anonymity measure based on this article. To choose the correct reference, you can consult how to find the toner your printer needs and the catalogue of Startoner compatible toner cartridges. That choice does not constitute a verification of privacy.
Can I certify a page as anonymous after inspection?
A visual check cannot certify anonymity. Research by the DFD project also explores physical printing process characteristics that may fingerprint devices, independent of deliberately embedded tracking dots. Source: TU Dresden project goals [4]. Where strict confidentiality is required, a magnifying glass inspection cannot prove a document is untraceable.
The sheet serves a more grounded, practical goal: keeping a structured record of which sample you checked, under what conditions, and what you saw. Download it, preserve your observations, and share verified sources rather than sweeping conclusions.
Original editorial resource from Startoner. The inspection sheet is educational and does not certify absence of tracking. Download the inspection PDF again.
Sources and references
Further reading
Was this article helpful?
Ask us about your printer
Tell us the model and we will confirm the right cartridge. We reply within 24h.