Inside the Machine: How ICE Built the Most Sweeping Domestic Surveillance Apparatus in American History

On a cold January morning in St. Paul, Minnesota, a woman and her husband decided to follow a caravan of ICE officers through their neighborhood. They wanted to observe. Within minutes, ICE agents had surrounded their vehicle. One walked up to the car and greeted the woman by name [1].

She had never met the agent. He had identified her through her license plate.

That encounter—intimate, immediate, chilling in its casualness—captures the reality of what ICE has become in 2026: not merely an immigration enforcement agency, but the operator of what civil liberties organizations describe as the most comprehensive domestic surveillance machine in American history [2].

The Shopping Spree

The scale of ICE's surveillance buildup is staggering. Following legislation passed in summer 2025 that transformed ICE into the country's most highly funded law enforcement agency, the agency embarked on what the Electronic Frontier Foundation has called a "surveillance shopping spree" [2]. More than $300 million has been allocated under the Trump administration for social-media monitoring, facial recognition, license-plate readers, and location-tracking services [1]. By some estimates, ICE's 2025 surveillance budget alone is ten times the size of the agency's total surveillance spending over the previous thirteen years [2].

Since the creation of the Department of Homeland Security in 2003, ICE's overall budget has nearly tripled, from $3.3 billion to $9.6 billion in fiscal year 2024 [3]. The FY2026 budget request has pushed spending even further, with billions earmarked for enforcement technology and personnel [4].

The purchases read like a catalog of surveillance capitalism's most powerful tools: biometric trackers, cellphone location databases, spyware, drones, facial recognition systems, AI-powered predictive analytics, and access to commercial data brokers holding billions of records on American residents [1][2].

Faces in the Crowd: Mobile Fortify and Clearview AI

Perhaps no tool better illustrates ICE's new capabilities than Mobile Fortify, a smartphone app that allows field agents to scan a person's face and fingerprints and instantly compare them against government databases containing more than 200 million images [5][6].

The app, which debuted in 2025, compares captured photos against databases maintained by Customs and Border Protection, including targets lists and travel document libraries. According to a lawsuit filed by the State of Illinois and the City of Chicago in January 2026, ICE has used Mobile Fortify in the field more than 100,000 times [5].

Internal footage obtained by NBC News shows ICE officers using facial recognition apps to determine the citizenship status of teenagers who were not carrying identification [6]. A Privacy Threshold Analysis for Mobile Fortify reveals that ICE does not allow people to opt out and will collect and retain data for 15 years from anyone scanned—including U.S. citizens and legal permanent residents [6].

Complementing Mobile Fortify are ICE's contracts with Clearview AI, the controversial facial recognition company that has scraped more than 50 billion facial images from social media and the open internet. ICE's Homeland Security Investigations division entered into a $9.2 million contract with Clearview, and a separate $3.75 million contract signed in September indicated the technology would also be used to investigate "assaults against law enforcement officers"—a category that critics warn could easily encompass protest activity [7][6].

The All-Seeing Eye: Palantir's ImmigrationOS

At the center of ICE's digital infrastructure sits Palantir Technologies, the data analytics firm co-founded by Peter Thiel that has maintained contracts with ICE for over a decade. In 2025, ICE awarded Palantir a $30 million contract to build "ImmigrationOS," a platform designed to serve as the agency's comprehensive operating system for immigration enforcement [8].

ImmigrationOS has three stated functions: streamlining the identification and apprehension of individuals prioritized for removal; tracking and reporting self-deportations with "near real-time visibility"; and making deportation logistics more efficient [8][9].

The platform builds on Palantir's existing Investigative Case Management system, which was already valued at $18.5 million under a September 2024 contract. But ImmigrationOS represents a qualitative leap—promising what procurement documents describe as "granular tracking" of immigrants, including predictive analytics about where individuals are likely to be at a given moment [8].

Meanwhile, the ELITE app, which ICE began deploying in June 2025, uses AI to draw from DHS information systems as well as data ICE has received from other agencies—including home addresses from Medicaid records—to create instant dossiers on individuals encountered in the field, complete with probability scores predicting their location patterns [1][10].

Your Phone Is the Informant

ICE's surveillance web extends into the pockets of hundreds of millions of Americans through commercial phone location data. In September 2025, ICE purchased a subscription to Penlink's Webloc, a tool that aggregates billions of daily location signals from mobile devices [11].

Webloc allows agents to "geofence" a specific area—draw a virtual boundary around a neighborhood, workplace, church, or school—and track every phone within it. Agents can trace anyone's movements over time, identify home addresses from work locations, and map social networks based on proximity data [11].

According to an internal ICE legal analysis, this commercially acquired location data can be queried without a warrant—despite the Supreme Court's 2018 ruling in Carpenter v. United States that tracking someone's phone location requires judicial authorization. The government's workaround: because individuals "voluntarily" share location data with apps, purchasing that same data from commercial brokers is not considered a search under the Fourth Amendment [11].

ICE has also purchased Penlink's Tangles product, which can link together a person's social media posting history, comments containing keywords, location data, tags, photos, and their connections to friends and family members [11].

The Data Broker Pipeline

Behind ICE's surveillance apparatus lies a vast pipeline of commercial data. LexisNexis holds a $16.8 million contract to sell ICE access to billions of data points on more than 276 million U.S. residents, compiled from thousands of government and commercial records. In 2022 alone, ICE performed over 1.2 million searches in seven months using LexisNexis's Accurint Virtual Crime Center tool [12].

Both LexisNexis and Thomson Reuters are listed as official data "partners" of Palantir, meaning law enforcement investigators can ingest material from these companies' databases directly into Palantir's data-mining software [12][13]. Thomson Reuters's license plate database alone boasts more than 20 billion plate scans, and ICE renewed its contract for access in 2025 [1].

The integration of these data streams creates what privacy researchers describe as a "mosaic" effect: individually, a license plate scan or a phone location ping reveals little, but woven together through platforms like ImmigrationOS and ELITE, they can reconstruct a person's entire life—where they live, where they work, who they associate with, where they worship, and what they believe [10].

Spyware: The Nuclear Option

Perhaps most alarming to civil liberties advocates is ICE's access to Graphite, a military-grade spyware tool made by Israeli firm Paragon Solutions. Graphite employs "zero-click" exploits—meaning it can compromise a phone without the target ever clicking a link or opening a file. By adding someone to a WhatsApp group in a specific way, Graphite can force their phone to read an infected PDF file, granting operators access to encrypted messages, photos, and real-time location data [14].

In October 2025, Representatives Summer Lee, Shontel Brown, and Suhas Subramanyam sent a letter to DHS demanding information on ICE's plans to deploy Graphite domestically, warning it posed risks to "freedom of movement, freedom of speech, and right to privacy" [14][15]. Researchers at the University of Toronto's Citizen Lab have documented Graphite's misuse by the Italian government to spy on journalists and humanitarian workers [14].

The EFF warned that ICE's access to Graphite represents an escalation beyond traditional surveillance: "This isn't monitoring—it's infiltration" [2].

Mission Creep: From Immigrants to Dissenters

What has transformed the debate around ICE surveillance from a niche immigration policy concern into a broader civil liberties crisis is the agency's increasingly explicit targeting of American citizens engaged in protest activity.

ICE's August 2025 privacy impact assessment for social media monitoring tools stated they would be used to track "threats to the agency." But the Brennan Center for Justice found that in practice, the agency is searching not for threats but for any anti-ICE statements [16].

The Marshall Project has documented cases where protesters and observers who engaged in constitutionally protected activity found themselves subject to federal investigation [17]. In Minnesota, the ACLU has filed suit alleging the administration is violating the First Amendment rights of protesters and observers [1].

ICE agents have used Flock automated license plate reader cameras—deployed by local police departments—to conduct more than 4,000 lookups for immigration purposes, often without the knowledge of the local governments that purchased the cameras [7]. This practice effectively conscripts local surveillance infrastructure into federal immigration enforcement, regardless of sanctuary city policies.

The Regulatory Void

At the same time ICE has been acquiring these tools, the Trump administration has scaled back protections governing the use of civilian data. Executive orders that previously imposed guardrails on how agencies could use commercial data and AI tools have been rescinded or weakened [2].

There is currently no comprehensive federal law governing the use of facial recognition by law enforcement. No federal statute specifically regulates the purchase of commercial location data by government agencies. And while some states—notably Illinois—have enacted biometric privacy laws that restrict private companies, those laws do not bind federal agencies operating within their borders [6][5].

Vanderbilt Law School's analysis concludes that ICE's surveillance expansion exists in a "regulatory void" where technology has far outpaced the legal framework meant to constrain government power [5].

What Comes Next

Over 40 civil rights organizations have written to Congress urging hearings on ICE's surveillance practices [18]. Several lawsuits are working their way through federal courts. And within immigrant communities, the chilling effect is already measurable: advocates report that people are avoiding hospitals, schools, and churches—not because of physical ICE presence, but because they believe their phones are being tracked [1].

The woman in St. Paul whose name was called out by an agent she had never met now thinks twice before leaving her house with her phone. "They know where I am," she told NPR. "They always know where I am" [1].

That feeling—of being perpetually watched by an agency with virtually unlimited technological reach and diminishing legal constraints—is no longer confined to undocumented immigrants. It is becoming the shared experience of anyone who intersects with ICE's ever-expanding surveillance web. And as the technology grows more powerful, the question is no longer whether ICE can watch everyone. It's whether anything will stop it.