What Your Camera's Serial Number Says About You (and Who Reads It)
Published 23 August 2026 ยท 6 min read
GPS coordinates get all the attention in photo metadata discussions, and we have covered how to check for those before sharing. But a photo can carry something quieter that identifies you just as specifically: your camera's serial number. Unlike GPS, which describes where one photo was taken, a serial number ties every image you have ever published to the same physical device. It is a fingerprint that travels with the file.
Where the serial number lives
Most cameras write a BodySerialNumber (tag 0xA431 in EXIF) or InternalSerialNumber field into every file. Canon puts the body serial in the maker notes and, on many bodies, a second internal serial in the sensor block. Nikon embeds both a camera serial and lens serial numbers. Sony, Fujifilm, Olympus and Panasonic all have their own variants. Phone cameras are less consistent: iPhones strip most identifying fields by default, while many Android phones embed a fairly complete EXIF block including device-specific identifiers.
The lens side is often richer than people expect. Modern lenses with electronic contacts report their serial number, focal length range, and even the shutter actuation count of the body in some makers' maker notes. A single JPEG can tell a reader what camera you own, what lens was mounted, how old the body probably is, and approximately how many photos you have taken with it.
Who actually reads this
Second-hand buyers and sellers. This is the benign case and the reason many people first encounter the tag. When you photograph a camera to list it on eBay, the photo's EXIF may contain the serial number of the very camera you are selling. Buyers use this to verify the item, but it also means a public listing connects your seller account to a specific device, and to every other photo that device has produced that is online with metadata intact.
Insurance and warranty. Insurers ask for serial numbers for a reason: a stolen or damaged camera is identified by them. Photos submitted as evidence are sometimes checked against the claimed serial. This cuts both ways, because a photo with an intact serial that does not match the claim is a fast way to get a payout denied.
Law enforcement and journalists. Photo forensics relies heavily on serial matching. Confiscated cameras, wire photo metadata, stolen-image disputes, and verification of war-crime or human-rights imagery all lean on the fact that a device serial plus shooting data is hard to fake consistently across many files. Bellingcat and similar open-source investigation groups have repeatedly connected photographers to locations and events through metadata chains, serial numbers included.
Stock and marketplaces. Platforms that license photography sometimes use serial data to track submissions and detect duplicated work. Less benignly, scraped marketplaces can use it to build profiles: one seller, many accounts, one camera.
Anyone, if you strip nothing. As we showed when examining what messaging apps do with photo metadata, a photo sent as a file rather than as an image keeps its entire EXIF block. The same applies to photos pasted into documents, uploaded to forums as attachments, or hosted from a camera SD card without processing.
The correlation problem
A serial number alone does not name you. The risk is correlation. Suppose you post photos to a hobby forum with EXIF intact, and separately sell items on a marketplace using photos from the same camera. Anyone who can see both sets now knows the forum account and the seller account belong to the same person, where they photograph their goods, and possibly the inside of their home through background content. Photographers covering sensitive subjects, from union organising to wildlife crime whistleblowing, have been identified exactly this way.
Camera bodies also have useful quirks. Hot pixels, dust spots on the sensor, and the precise behaviour of the shutter produce a noise fingerprint that researchers have shown can match photos to a specific body even when EXIF has been stripped. The serial number makes that attack trivial; sensor dust makes it possible anyway. Stripping metadata raises the cost of identification, it does not make you invisible.
What to do about it
The practical answer is boring and effective: check files before they leave your machine, and strip what you do not need to share. You can drag any file onto the EXIF reader on our homepage and see every identifying field, serial numbers included, parsed locally in your browser. Nothing uploads anywhere.
- For public posting, remove BodySerialNumber, InternalSerialNumber, lens serials and GPS. Keep copyright and your own contact fields if you want them.
- For marketplaces, remember the serial in a listing photo of the device itself is often intentional and fine; the serial in photos taken by that device is the one you did not mean to publish.
- Beware of screenshots that are not screenshots: an image exported rather than screenshotted keeps its metadata.
- If you shoot professionally, set up your export pipeline once, with stripping on by default, instead of remembering file by file.
The serial number in your photos is not a tracking beacon in the active sense; nobody is notified when it appears. It is a durable identifier that quietly links your images to each other and to your camera. Most of the time that is harmless. The one time it is not, you will not get a warning, so the checking has to happen first.