C
Cyrano Security
13 min read
DIY Recipe + Evidence Chain Guide

How to make theft detection powder in 5 minutes, and the one defect every recipe shares.

The recipes are short. Cornstarch and oil. Talc and boric acid. Fluorescent pigment suspended in petroleum jelly. A quinine reduction from tonic water. Each one transfers to a thief's hand within seconds of contact and stays detectable for hours to days. Each one costs less than ten dollars to mix at home. And each one breaks at the same point in court, because contact without a clock cannot rebut the secondary-transfer defense. This guide ships the four recipes plus the camera-side record that actually closes the case.

See the timestamped event that pairs with any DIY powder
4.9from 50+ properties
Four DIY recipes that actually transfer
Zone entry event to the second, timezone-aware
Under 60 seconds, tile to WhatsApp
Works on the DVR and cameras you already own

Four recipes that actually transfer

Each recipe below has been specced for one of the four common theft-protection patterns: visible deterrence on a flat surface, UV-only forensic backstop, sticky paste for vertical or outdoor application, and a chemistry-free option using only ingredients from a grocery store. The cost is under ten dollars per ounce in every case. The mixing time is under five minutes.

Recipe 1. Cornstarch + oil paste (visible)

Two parts cornstarch, one part light mineral oil or food-grade petroleum jelly. Optional: half a teaspoon of fluorescent pigment per ounce for visibility under normal room light. Stir to a uniform paste. Spread a thin film on inner shelves, drawer undersides, and tool crib lids. Transfers in 1 to 2 seconds of contact. Lasts 2 to 4 days on dry skin through casual washing.

Recipe 2. Talc + boric acid (dry)

Two parts talcum powder, one part boric acid powder. Optional: a pinch of food-grade fluorescent pigment. Dust onto the surface using a small paintbrush. Best for window sashes, door frames, and the rim of access panels. Notes: boric acid is a mild irritant, do not use anywhere children or pets can reach. Use gloves during application.

Recipe 3. UV pigment + petroleum jelly

Roughly 1:10 fluorescent pigment to petroleum jelly. Suspends the pigment so it grips vertical, outdoor, and metal surfaces. Inspect with a 365 to 395 nm UV flashlight. Use on copper spool flanges, transformer cage latches, fire alarm pull handles. Reapply every 7 to 10 days outdoors.

Recipe 4. Quinine tonic water slurry

Reduce 250 ml of brand-name tonic water by simmering to one-tenth volume. Mix the syrupy residue with two tablespoons of cornstarch. Spread thin and let dry. Glows blue under a 365 nm UV flashlight. Cheapest option. Transfers fine but only survives one hand-wash, so inspection has to happen quickly.

Recipe 5 (optional). Riboflavin + talc

Crush a 100 mg vitamin B2 tablet and mix with one tablespoon of talcum powder. Glows yellow-green under 395 nm UV. Useful when fluorescent pigment is hard to source. Same caveats: no batch number, washes off quickly, mechanical transfer only.

What none of these give you

A verifiable batch number that a forensic lab can match to the powder on a suspect's hand. A signed, contemporaneous chain of custody. A timestamp on the moment of contact. Those three things are what the camera-side record provides, and they are the difference between deterrence and prosecution.

The shared defect, in one diagram

Whichever recipe you choose, the powder is one half of the evidence pair. The other half, the half no recipe can produce, is an independent record of the suspect physically inside the treated zone at a specific second. That record is what corroborates the powder transfer as occurring at the moment of the theft, not at some unrelated earlier moment.

Any recipe + one timestamped event = one corroborated chain

Cornstarch + oil paste
Talc + boric acid
UV pigment + petroleum jelly
Quinine tonic-water slurry
Cyrano edge unit
Tile thumbnail
Zone name + dwell seconds
ISO 8601 timestamp to WhatsApp

What the camera-side event actually contains

The anchor fact of this page. A real event payload, anonymised from a Cyrano deployment, that pairs with whichever DIY powder you chose. Every field has an evidentiary purpose. Theoverlay_maskfield is the one that pre-empts the most common defense expert challenge to inference quality.

Event payload · single zone entry, paired with DIY powder

Read theoverlay_maskline carefully. It records that the DVR's baked-in clock, per-tile camera name strip, and channel bug were all masked from the model before inference. That is the field that defeats a defense expert who asks whether the model just bounding-boxed the DVR clock pixels. The record proves it did not, because those pixels were never visible to the inference pipeline. That field does not exist in any DIY powder log on its own.

The application checklist for a DIY powder + camera pairing

The pairing only works if both halves are disciplined. The DIY recipe is procedural. The camera zone is configured. A property that does one well and the other sloppily still loses cases.

Do all of these, in this order

  • Pick the recipe that fits the surface (paste for vertical, dry for sashes, UV for evidence)
  • Mix in one batch with measured ratios; record the ratios in the application log
  • Photograph the surface before and after powder application
  • Sign and date the application log; include applicator initials and recipe batch ID
  • Draw the camera zone directly over the treated surface, not the broader room
  • Set the dwell threshold to how long a thief actually pauses (10 to 60 s)
  • Set the armed time window to the hours the zone should be empty
  • Confirm the DVR overlays (clock, name strip, channel bug) are in the overlay_mask
  • Test end-to-end latency from a known target (target under 60 s to WhatsApp)
  • Schedule a UV inspection within minutes of any triggered event, log the wavelength

From mixing bowl to courtroom exhibit

A DIY powder case that holds up is not one document. It is a chain of five documents, produced at different times by different systems, each corroborating the next. Break any link and the defense walks through the gap.

The five-stage evidence chain

1

Stage 1. Recipe and application log

Date, time, applicator initials, exact surfaces treated, recipe with measured ratios, source of any pigment or quinine reduction, intended UV flashlight wavelength, re-application cadence. For a DIY powder, this log is the substitute for a manufacturer batch number. It must be signed and contemporaneous.

2

Stage 2. Zone configuration record

Which polygon was drawn around which treated surface, on which camera tile, with what dwell threshold, over what time window, and who signed off. Stored alongside the Cyrano unit's config. The document that proves the zone was armed at the moment in question.

3

Stage 3. Zone entry event

The live event. A tile thumbnail, a zone name, a dwell count, an ISO 8601 timestamp, and the overlay_mask field. Delivered to WhatsApp in under 60 seconds and archived. The independent time and place record that pairs with the powder transfer.

4

Stage 4. UV or visible inspection record

Photograph of the suspect's hands and any handled items, with date, time, inspecting officer identified, and the specific UV flashlight model and wavelength documented. The inspection should happen within minutes of the event, not hours.

5

Stage 5. Correlation exhibit

A single-page document pairing the zone event timestamp with the powder transfer photograph and showing the delta. For a prosecutor, this is the exhibit that explains why the two records cannot independently lie. The thing that breaks the secondary-transfer defense in closing argument.

The anchor numbers

Operating constants of the camera-side half of the pairing as it actually runs on properties using DIY powder.

0 sTile capture to WhatsApp, end-to-end
0 sEvent timestamp resolution (ISO 8601 with offset)
0Tiles per Cyrano unit off one DVR HDMI
0 minPhysical install on a running DVR
2

Two independent timestamped records, one powder transfer and one zone entry event, is what separates a powder case from a prosecutable powder case. That holds whether the powder came from a commercial kit or a kitchen mixing bowl.

Cyrano deployment notes, 2026

DIY powder alone vs. DIY powder + Cyrano zone event

Same recipe, same application surfaces, different evidence outcome.

FeatureDIY powder aloneDIY powder + Cyrano zone event
Proof of contactPowder transfer onlyPowder transfer + tile thumbnail
Proof of whenNoneISO 8601 timestamp to the second
Proof of whereNoneNamed zone + camera tile
Proof of durationNoneDwell seconds recorded
Substitute for batch numberRecipe log onlyRecipe log + zone event archive
Secondary-transfer defenseUnrebuttedRebutted by timestamp + zone
Similar-fluorescence defensePartially rebutted by lab analysis onlyRebutted by matched timing + location
Inference quality challengeN/ARebutted by overlay_mask field
Live intervention possibleNo, inspection happens after the factYes, within the first minute
Camera requirementN/AAny DVR with HDMI multiview

The three defense arguments, and what rebuts each one

Defense counsel has been beating powder cases with the same three arguments for decades. With a DIY powder, the arguments hit harder because there is no manufacturer to call as a witness. Pair the recipe with the camera event and each argument loses its grip.

Defense 1

Secondary transfer

“My client could have picked up the powder from a shared door handle.” Rebutted by: a timestamped zone entry event inside the treated polygon, with a dwell count, inside the armed time window. The shared-handle theory has to explain why the suspect was also standing over the treated shelf for 14 seconds at 22:14:07 local.

Defense 2

Similar fluorescence

“That glow could be detergent or tonic water.” With a DIY powder, this defense gets stronger because there is no batch number. Rebutted by: the recipe and application log, plus the zone event corroborating time and place. Coincidence is implausible at the second.

Defense 3

Chain of custody gap

“How do we know when the powder was applied or touched?” Rebutted by: the application log (signed, contemporaneous) at the front of the chain, the zone event (automated, timestamped, overlay-masked) at the moment of transfer, and the inspection log at the back.

DVR and NVR brands the zone event pairs with

Because the timestamped event is captured off the DVR HDMI multiview, compatibility is at the recorder level, not the camera level. If the recorder has an HDMI port driving a monitor, this works.

Hikvision DS-7xxx
Dahua XVR / NVR
Lorex
Amcrest
Reolink NVR
Uniview
Swann
Night Owl
Q-See
ANNKE
EZVIZ
Honeywell Performance
Bosch DIVAR
Panasonic WJ-NX series
Any DVR with HDMI out

Reading a single zone event in code

For property managers who want to pipe events into an existing ops system rather than just a WhatsApp thread, the payload deserialises to JSON. Below is the same event from the terminal output, ready for archive or correlation.

zone_entry_event.json

Mixing bowl ready. Want the timestamped half of the pair?

A 20-minute walkthrough: we tap a running DVR's HDMI, draw a zone over a test target, and show a real zone entry event landing on WhatsApp before any DIY powder transfer would even be visible.

Book a call

Frequently asked questions

What is the simplest homemade theft detection powder recipe?

The cornstarch and oil paste. Mix two parts cornstarch with one part light mineral oil (or food-grade petroleum jelly) and stir until uniform. Optional: a pinch of talcum powder to lift the bulk and a pinch of fluorescent pigment if you want it visible under UV. Spread a thin film on the inner shelf of a mailroom drawer, the underside of a copper spool flange, the top edge of a tool crib lid, or the back of a cash drawer divider. The mixture transfers easily to dry skin, lasts a few days through casual hand washing, and costs under five dollars per ounce. The recipe is fine. What it lacks is any way to defeat a defense lawyer who asks when the suspect's hand contacted the powder.

Can I make UV theft detection powder at home?

Yes, three ways. First, fluorescent pigment (sold by the gram on Amazon as 'invisible UV powder' or 'glow-in-the-dark pigment 365 nm') mixed at roughly 1:10 with cornstarch or talc, then suspended in petroleum jelly if you need it to stick to vertical or outdoor surfaces. Second, a quinine slurry from tonic water: reduce 250 ml of brand-name tonic water (Schweppes, Canada Dry, Fever-Tree all contain quinine) by simmering to one-tenth volume, then mix the residue with cornstarch and let it dry; the dried powder fluoresces blue under a 365 nm UV flashlight. Third, riboflavin (vitamin B2) crushed from a tablet and dusted into talcum powder fluoresces yellow-green under 395 nm. All three transfer to skin and survive at least one hand wash. None of them carry a verifiable batch number, which matters in court more than the formula does.

How is a homemade visible powder different from commercial visible-stain powder?

Commercial visible-stain powders (banker dye packs, SmartWater visible stains, the purple amino-acid-reactive powders sold by ASR Federal and J&L Self Defense) are formulated to bind covalently to skin proteins and stay visible for days through repeated washing. A homemade fluorescent pigment in petroleum jelly is a mechanical transfer only: it sits on the skin, it washes off in one or two hand-washings with soap, and it does not penetrate clothing fibres in the same way. For deterrence and recurring-thief identification within the same shift, the homemade version is acceptable. For 'still visible at the police station three hours later,' the commercial protein-binding powder is materially better. Either way, the camera-side record that timestamps the contact is the same, and the same record is what makes either one usable as evidence.

Why does a homemade powder lose in court?

Three defenses, all routinely successful. Secondary transfer: the suspect's hand picked up the powder from a door handle a legitimate user touched first, so glow-on-hand proves contact with powder, not contact with the stolen item. Similar fluorescence: many household substances glow under UV (laundry detergent residue, toothpaste, tonic water itself, petroleum jelly, olive oil, some bodily fluids), so the prosecutor needs to prove the glow on the hand is the same powder the building applied. With a commercial powder, a lab can match the batch number against the manufacturer's spec. With a homemade powder, there is no batch number; the prosecutor has to rebuild the recipe in a forensic lab and demonstrate spectral identity. Chain of custody: when was the powder applied, who applied it, when was the hand inspected, by whom, with what UV wavelength. All three defenses collapse the moment the prosecutor can pair the powder transfer with an independent timestamped record of the suspect physically standing over the treated surface at a specific second. Without that record, every homemade powder case is a coin flip.

What is the camera-side record that pairs with a DIY powder?

A pre_action_zone_entry event from a Cyrano edge unit. The event includes a tile thumbnail (480x270 crop centered on the person), the zone name (a polygon you draw directly over the treated surface), dwell_seconds (how long the centroid stayed inside the polygon), an ISO 8601 timestamp with timezone offset to the second, an overlay_mask field that records which DVR-baked overlays were masked before inference (the clock, the camera-name strip, the channel bug), and a delivery channel (a property's WhatsApp ops thread). Capture-to-WhatsApp latency is under 60 seconds. The event is the independent corroborating record that puts the suspect at the treated surface at a specific moment, which is the one thing a homemade powder transfer cannot do on its own.

Do I have to replace my cameras to get the timestamped event?

No. The capture point is the DVR or NVR's HDMI multiview output, the same signal that drives the existing guard monitor. The composite already has every camera mosaiced into tiles, so a single HDMI tap gives inference access to up to 25 feeds at once. Works on analog cameras, IP cameras, and any DVR brand that has HDMI out: Hikvision, Dahua, Lorex, Amcrest, Reolink, Uniview, Swann, Night Owl, Q-See, ANNKE, and their rebrands. No camera firmware involvement, no ONVIF negotiation, no per-camera credentials. Physical install on a running DVR is under 2 minutes: HDMI in, HDMI out to the monitor, network, power. Inference happens on the edge unit, on the multiview composite. The DVR you own does not move.

Where does homemade powder earn its place versus paying for commercial?

Three settings. Mailrooms and parcel lockers where the recurring loss is low-dollar but constant; a homemade fluorescent paste on the inner shelf, paired with a 19:00 to 06:00 zone window, identifies the recurring thief inside a week. Tool cribs and gang boxes on construction sites where the powder is consumable and gets reapplied weekly anyway; cornstarch + UV pigment is a fraction of the cost. Cash drawers and till trays during shift change; a thin smear of homemade visible-stain powder on the underside of the cash tray, paired with a tight zone armed only at shift change, narrows substitution and skim cases to a short list of suspects. Where commercial wins: anything you might actually litigate, where a verifiable batch number and protein-binding chemistry pays back the cost.

What goes on the application log for a homemade powder?

Date, time, applicator initials, exact surfaces treated, recipe (with measured ratios), the source of any pigment or quinine reduction, the wavelength of the UV flashlight you intend to use for inspection, and the re-application cadence. For a homemade recipe, the log is doing double duty: it is both the chain-of-custody record and the substitute-for-batch-number that lets a forensic lab verify the powder later. Pair it with the zone configuration record (which polygon, which camera tile, what dwell threshold, what armed window) and the two together form the front half of the evidence chain. The zone entry event and the UV inspection record form the back half.

Can I run a UV inspection right after the camera fires?

Yes, and it is the entire point of pairing the two. The Cyrano alert lands on WhatsApp under 60 seconds after the zone fires; if the property has a front-desk attendant or a contracted patrol, the suspect is often still on site or in the immediate area. A 365 to 395 nm UV flashlight inspection in the next several minutes catches the glow at peak intensity. Photograph hands, sleeves, and any held items. Log the wavelength of the UV flashlight used, the time of inspection, and the inspecting officer. Save the photographs alongside the zone event payload. That single bundle is the correlation exhibit that a prosecutor needs to defeat secondary transfer and similar-fluorescence challenges in one motion.

Worth saying plainly

Homemade theft detection powder is a fine product. The chemistry is well understood, the cost is trivial, and the visual impact when a UV flashlight lands on a fluorescent handprint is genuinely persuasive. What no recipe can produce on its own is the one record every defense counsel attacks: an independent, timestamped, overlay-masked, location-specific document of the moment of contact.

That record is not exotic. It is a tile thumbnail, a zone label, a dwell count, an ISO 8601 timestamp, and anoverlay_maskfield that proves the inference pipeline never saw the DVR clock pixels. It does not require replacing cameras. It taps the HDMI multiview signal that already drives your guard monitor and runs inference with a polygon drawn directly over the treated surface.

If you are going to mix the powder, log the recipe. If you are going to log the recipe, log the clock too. The recipe tells a court what was touched. The zone event tells a court when, where, and for how long.

Under 0s

End-to-end latency from zone entry to WhatsApp delivery. The clock half of the evidence pair, on the cameras you already own.

🛡️CyranoEdge AI Security for Apartments
© 2026 Cyrano. All rights reserved.

How did this page land for you?

React to reveal totals

Comments ()

Leave a comment to see what others are saying.

Public and anonymous. No signup.