A magnetometer sensor that detects tampering is described. The sensor samples magnetometer data and computes a set of vectors based on the magnetometer data. The sensor detects a tampering of the magnetic sensor based on determining that the set of vectors is outside the reference plane for the magnetometer sensor. The sensor generates a notification to a security system coupled to the magnetometer sensor. The notification indicating the tampering of the magnetometer sensor.