A method and controller for detecting an unauthorized access point in a wireless communication network includes a first step of generating (200) a probe identity that is unused in the wireless communication network. A next step includes informing (202) adopted access points in the communication network of this generated probe identity, and that packets from this generated probe identity should be ignored. A next step includes broadcasting (204) at least one probe request using the generated probe identity. A next step includes detecting (206) if there are any probe responses to the at least one probe request, indicating an unauthorized access point. A next step includes providing an alert (214, 216, 218) if an unauthorized access point is detected.