• MySTV

Smart toys 'could leave children vulnerable to strangers'

Testing by consumer group Which? raises concerns over potential Christmas best-sellers.

The i-Que Intelligent Robot toy.
The i-Que Intelligent Robot toy. i-Que/PA

"Concerning vulnerabilities" in several "smart" toys tipped to be top sellers at Christmas could be used by a stranger to talk or send messages to a child, consumer group Which? has warned.

Which? testing found the Bluetooth connection in four toys - the Furby Connect, i-Que Intelligent Robot, Toy-Fi Teddy, and Cloud Pets - was not secure, meaning they could be easily accessed with "very little technical know-how".

The testing found:

  • a hacker would not need a password, PIN code or any other authentication to achieve access.
  • anyone within a 10 to 30-metre Bluetooth range of the Furby could connect to the toy when it was switched on.
  • anyone could download the app for the i-Que Intelligent Robot, find one of the toys within Bluetooth range and start chatting using the robot's voice by typing into a text field.
  • The Toy-Fi Teddy lacked any authentication protections, meaning the watchdog's hackers could send their voice messages to a child and receive answers back.
  • The Cloud Pets toy could be hacked via its unsecured Bluetooth connection and made to play their voice messages.
  • Which? has written to retailers calling on them to stop selling toys with proven security issues.

Alex Neill, the group's managing director of home products and services, said: "Connected toys are becoming increasingly popular but, as our investigation shows, anyone considering buying one should apply a level of caution.

"Safety and security should be the absolute priority with any toy. If that can't be guaranteed, then the products should not be sold."

Vivid Imaginations, which distributes the i-Que robot toy, told Which? it will "actively pursue this matter" with the manufacturer after "communicating the issues" raised in the published reports.

Cloud Pets toys.
Cloud Pets toys. PA

But it confirmed the toys fully comply with the Toy Safety Directive and European standards, adding: "Whilst some of these reports highlight potential vulnerability in the products, there have been no reports of these products being used in a malicious way.

"While it may be technically possible for a third party to connect to the toys, it requires a certain sequence of events to happen in order to pair a Bluetooth device to the toy, all of which make it difficult for the third party to remotely connect to the toy."

The Furby Connect toy.
The Furby Connect toy. hasbro.com

Hasbro, which makes the Furby Connect, said it took the Which? report "very seriously" but said it was "confident in the way we have designed both the toy and the app to deliver a secure play experience".

It added that manipulating the toy would require close proximity and "a number of very specific conditions that would all need to be satisfied in order to achieve the result described by the researchers at Which?".

Spiral Toys declined to comment to Which? in relation to Toy-Fi Teddy and Cloud Pets.

One account. All of STV.

This field is required. That doesn't look like a valid e-mail format, please check. That e-mail's already in our system. Please try again.
Forgot password?
This field is required. At least 6 characters please. Did you enter your details correctly?
If you've forgotten your details then use the 'Forgot password?' link.
Need to reset your password?

We'll send a link to reset your password to

We've sent you details on how to reset your password

Please check your email and follow the instructions.

Forgotten your email address?

Have you forgotten the email address that you previously joined with? Don't worry, by emailing enquiries@stv.tv we can help.

One account. All of STV.

This field is required. Please enter at least 2 characters
This field is required. Please enter at least 2 characters
At least 6 characters please
This field is required. At least 6 characters please.
You have to be 16 or over to join
This field is required. This doesn't appear to be a valid date
Type your full postcode and select your address This field is required. It doesn't look like you've entered a valid postcode. Can't find your address? Confirm the details you've given us are correct by clicking here

By continuing you agree to our Terms of Use, including our Privacy Policy and Cookie Policy. Any issues contact us.

Upload Profile Picture

Please make sure your image is under 2mb in size and a valid JPG, PNG or GIF.

Are you sure?

Unfortunately, you'll be unable to access our premium content. We’ll be sorry to see you go, but if you change your mind you can rejoin us at any time.

Please verify your STV account

Please verify your STV account using the email we sent you. If you have lost the email, we can send you another one, just click the button below.


We've sent you a new verification email.
Please check your email and follow the instructions to verify your account.

Welcome to STV
Thanks for joining us.


Sorry, you must be at least 12 years old to place a vote for your Real Hero.

Please review our Voting Terms of Use for more information.


Sorry! It seems that you are using a browser that is incompatible with our voting service.

To register your vote please copy the below URL in to your regular mobile browser. We recommend Google Chrome, or Safari.



Sorry, you seem to have already voted in this category.

Thanks for voting

Now share your vote with friends on your social network

Share on twitter Share on facebook

Cast your vote

Please register or sign in to continue.

Cast your vote

This field is required. This doesn't appear to be a valid date

Cast your vote

Please fill out this form to cast your vote. As you are under 16 years old you will not create an STV account. Why do we need these details?

This field is required. Please enter at least 2 characters
This field is required. Please enter at least 2 characters
This field is required. That doesn't look like a valid e-mail format, please check.
Location This field is required.
Parental Consent This field is required.

That's you. All that's left is to click the 'Submit Vote' button below. By doing so, you confirm that you and your parent or guardian have read and accept our Voting Terms of Use, Privacy Policy and Cookie policy, and that the details you have entered are correct. We'll look after them as carefully as if they were our own.