NearScrub

2026-10-07

Christie's leaked collectors' exact home addresses through auction-submission photos — what GPS metadata reveals when you're consigning art, watches, or jewelry

If you've gone looking for advice on selling a couch online, you've probably run into the standard warning: strip the GPS data before you post the photo, don't give away your address. A different kind of photo submission carries a sharper version of the same risk, and it gets a lot less coverage — the photo you take of a valuable, portable item to consign it to an auction house, get it appraised for insurance, or sell it through a specialist collector marketplace.

What a 2023 Washington Post investigation found at Christie's

A university professor in Germany was preparing to sell paintings he had inherited. He photographed them at home with his iPhone and uploaded the images to Christie's website for a private evaluation — a routine first step for anyone considering consigning art to the auction house. According to reporting the Washington Post published in August 2023, those photos still carried the GPS coordinates his phone had recorded at the moment of capture, and that location data was retrievable by anyone who could get hold of the uploaded image. German cybersecurity researchers Martin Tschirsich and André Zilch told the paper that hundreds of other would-be Christie's clients, including Americans, had been exposed the same way. By the newspaper's account, roughly 10% of the photos the researchers examined carried exact coordinates — precise enough in some cases to identify which room of a building a photo was taken in, not just which building. The reporting also said Christie's declined the researchers' offer of help and did not notify the clients whose location data had been exposed. Whether Christie's handles uploaded photos differently today isn't something the public reporting settles, and we haven't tested its current site ourselves — this stands as a documented case of what submitting an unscrubbed photo to a specialist evaluator can expose, not a claim that the same hole is open right now.

Why a painting or a watch is a sharper target than a used couch

Stripping GPS before posting a couch on Facebook Marketplace is still worth doing, but the couch itself isn't much of a theft target — bulky, cheap to replace, hard to resell anonymously. A painting worth enough to consign to a major auction house, a watch worth enough to insure separately, an instrument worth enough to list on a specialist collector forum: all of that is the opposite. Compact, liquid, and by definition worth more than whatever ordinary security sits around a typical home. A GPS tag in a submission photo doesn't just reveal an address — combined with the fact that the photo exists at all, it effectively confirms that an item valuable enough to be worth consigning, appraising, or insuring is physically present at that exact point, and, per the precision the Post's sources described, potentially which room it's kept in.

Two ways a valuable-item photo reaches the recipient Uploaded with GPS intact File goes to the auction house, appraiser, or insurer's intake system as-is. Nothing stops a mishandled pipeline, a researcher, or a later leak from reading the exact coordinate — Christie's 2023 case, per the Post. Scrubbed before upload GPS removed in the browser before the file ever leaves the device. Nothing embedded left for that pipeline, a bug, or a leak to expose — regardless of how the recipient handles metadata on its own end.
Whether the recipient's own system strips metadata reliably — which, per the Post's reporting, Christie's apparently didn't in 2023 — stops being the question once there's nothing embedded in the file to begin with.

The same submission pattern shows up well beyond one auction house

Christie's is the documented case here, not the only place this applies. The same flow — photograph a valuable item at home, upload it to someone else's intake form — happens every time someone submits photos for an insurance appraisal on jewelry or a watch, consigns an instrument or a firearm to a specialist dealer, or posts a for-sale listing in a collector community. On at least one watch-collector forum, members have specifically warned each other to check photos for embedded GPS data before posting a for-sale thread — an informal, community-level version of the same caution the Christie's case illustrates at an institutional scale. That's not a study with its own numbers, just confirmation that collectors themselves have independently noticed the same gap.

What scrubbing the photo before you upload it changes

Running the JPEG through a client-side scrub — entirely in the browser, no upload to a server, the way NearScrub works — before you send it to an auction house, appraiser, insurer, or dealer removes the GPS coordinate from the file itself. At that point, it stops mattering whether that organization's own intake pipeline reliably strips metadata on its end — which, per the Post's reporting, Christie's apparently didn't. There's nothing embedded in the file for a mishandled pipeline, a researcher, or anyone else who gets hold of the image to extract, because it was never there to begin with.

What this doesn't fix

A few honest limits, specific to this situation. NearScrub supports JPEG, PNG, PDF, and Office files — not RAW camera formats like .CR2, .NEF, .ARW, or .DNG, which is what a professional photographer documenting a high-value item for an insurance or auction condition report often shoots in; those need to be exported to JPEG first before there's anything to scrub. It only removes the file's hidden metadata, not what's visible in the frame itself — a return address on an envelope in the background, a window view, a reflection in glass — so scrubbing the file doesn't substitute for looking at what the photo actually shows. It doesn't touch any address or location you type directly into an intake form's text fields, separate from the photo itself. And it only ever affects a copy at the moment you choose to run it through: a photo you already sent before reading this, a master file your professional photographer keeps unscrubbed on their own system, or a copy the auction house's own staff photographs independently once the item physically arrives are all outside anything a client-side scrub of your own upload can reach.