Systems and methods for detecting unauthorized tags are provided. A tag transmission report is received from a tag reader that receives wireless transmissions from a plurality of tags. A tag ID is determined for each tag of the plurality of tags in the tag transmission report. The determined tag IDs are compared to association information indicating associations between tag IDs. A notification is generated responsive to a comparison indicating that ones of the plurality of tags are not associated with other tags of the plurality of tags.