Skip to main content

Every frequent flyer has a version of the same story. You shuffle forward in the security line, shoes off, laptop out, jacket in the bin. Then you step into that large upright booth, raise your arms like you’re being held at gunpoint, and wait for the machine to decide whether you’re carrying anything it doesn’t like. The whole thing takes about ten seconds. You collect your belongings, put your shoes back on, and forget it ever happened.

But that machine has a history most passengers know nothing about. And it starts with a piece of technology that was quietly removed from over a hundred airports because of what it showed agents on the other side of the screen.

The TSA Rapiscan scanner replacement is a story about rushed decisions, real security gaps, and what happens when the government prioritizes speed over privacy. Understanding it also tells you something important about what’s actually happening when you step through airport security today.

The Security Gap That Triggered Everything

To understand why TSA deployed the Rapiscan 1000 at airports across the country, you have to go back to Christmas Day 2009. Umar Farouk Abdulmutallab, a Nigerian man who became known as the “Underwear Bomber,” attempted to detonate plastic explosives hidden in his underwear while aboard Northwest Airlines Flight 253, traveling from Amsterdam to Detroit. Twenty minutes before landing in Detroit, he attempted to trigger the bomb. Instead of exploding, it caught fire, causing severe burns to his leg. Passengers and flight attendants tackled him and extinguished the flames.

The device contained PETN and TATP, two high explosives, and was designed to be detonated using a syringe filled with other chemicals. The attack failed, but it exposed something alarming: a passenger had walked through airport security with explosives sewn into his clothing, and the existing screening technology hadn’t caught it.

The problem wasn’t just operational. It was structural. Will Geddes, founder of ICP Group and a security specialist, explained the core flaw in plain terms in a recent LADbible interview. Traditional walk-through metal detector gates could only flag metallic objects, and there was simply “no means of actually looking at the body intrinsically” to detect non-metallic threats hidden under clothing. Fabric, plastic, and chemical compounds were invisible to those machines. That gap is exactly what Abdulmutallab’s handlers had exploited.

A Rushed Response and a $180,000 Solution

The pressure to act fast after the Abdulmutallab incident was intense. According to the LADbible interview, Geddes described the airport security world going into a “tailspin” as agencies scrambled to get new technology in place. His assessment of the TSA’s procurement process was pointed: they ended up buying “the first thing that they could possibly get.” That turned out to be the Rapiscan backscatter scanner.

The Washington Post reported in 2013 that the TSA deployed exactly 174 full-body Rapiscan scanners across airport security checkpoints, ending what became a $40 million contract for the machines. The scanners were brought in beginning in 2010, each unit costing approximately $180,000. The LADbible reporting confirmed Geddes characterized them as “very invasive,” and that description turns out to be something of an understatement.

The technology behind these machines was backscatter X-ray imaging. Unlike standard metal detectors, backscatter units bounced low-energy X-rays off a person’s skin and generated a detailed image of what lay beneath their clothing. With these older machines, officers located in a remote area away from passengers could see under clothing. And by “under clothing,” that means precisely what it sounds like: privacy advocates noted at the time that the technology displayed a detailed image of the surface of the skin under clothing, prosthetics, including breast prostheses, and other medical equipment normally hidden, such as colostomy bags.

The scanners became known colloquially as “virtual strip searches.” Privacy advocates used that exact phrase – “virtual strip searches” – to describe what the machines produced. Agents in a remote viewing room could see passengers’ bodies in significant detail. The public, once they understood what was actually happening, was not pleased.

The Privacy Complaints That Forced Congress to Act

Widespread complaints began surfacing in 2012, and they reached the point where Congressional action became unavoidable. In 2012, Congress enacted the FAA Modernization and Reform Act of 2012, which required the TSA to ensure that all Advanced Imaging Technology used to screen passengers must be equipped with and employ Automatic Target Recognition (ATR) software. ATR is a type of privacy-protecting software that replaces the detailed body image with a generic, cartoon-like outline of a human figure, flagging only the locations where something suspicious is detected.

Rapiscan was given a deadline to update its machines accordingly. The deadline: June 1, 2013. The company failed to meet it. TSA Administrator John S. Pistole ordered the removal of the 174 scanners after concluding that the ATR software Rapiscan needed to develop could not be delivered by the Congressionally-mandated deadline.

The TSA’s written statement, confirmed by The Washington Post, was unambiguous: “TSA has terminated part of a contract with Rapiscan since the company is unable to deploy non-imaging Automated Target Recognition software by the Congressionally-mandated June 2013 deadline.” There was no appeal, no extension. The machines had to go.

As of June 1, 2013, all backscatter full-body scanners were removed from use at U.S. airports because they could not comply with TSA’s software requirements. The TSA body scanner replacement affected all 174 airports where the Rapiscan units had been operating.

Which Airports Were Affected – and What Replaced the Scanners?

The airports affected by the TSA body scanner replacement were spread across the country – anywhere the Rapiscan units had been deployed since 2010. The entire U.S. airport network, not a regional subset, was touched by this transition.

Millimeter wave full-body scanners, which comply with ATR software requirements, became the exclusive replacement technology. These machines work on an entirely different principle to the backscatter units they replaced. Millimeter waves transmit through clothing but reflect from skin, and an algorithm then looks at each image and flags anything that’s not a human body part for further screening by TSA agents.

Crucially, these machines don’t produce anything that resembles a nude image. According to a former TSA checkpoint advisor, “the body scanners provide a nondescript avatar image of the human anatomy,” showing items that might be on the skin or inside clothing, using a generic human form to ensure passenger privacy while maintaining security effectiveness.

If the scanner detects something suspicious, it displays a generic outline of a human figure with the suspicious item indicated by a yellow box. If it finds nothing, it simply displays the word “OK” with no image at all. Today, according to the TSA’s own technology factsheet, approximately 1,200 Advanced Imaging Technology units are deployed at nearly 400 airports, all using millimeter wave technology with non-ionizing radiation to detect metallic and non-metallic threats concealed under clothing.

Are Body Scanners Private and Safe?

This is one of the most common questions travelers have, and the TSA Rapiscan scanner story makes it easy to understand why people ask. The good news is that what replaced those scanners is genuinely different – both in terms of privacy and radiation exposure.

Today’s millimeter wave machines don’t see nipples or genitalia, and they do not pick up a person’s size, weight, or height. Because of privacy and health concerns, the old machines were removed from all airports in 2013, and the avatar technology now in use ensures privacy for all passengers.

On the safety side, the difference between the old backscatter X-ray machines and today’s millimeter wave scanners is significant. Backscatter units used low-energy ionizing radiation. Millimeter wave scanners do not. According to the U.S. Environmental Protection Agency, millimeter wave machines use non-ionizing radiofrequency waves to detect threats, and they emit far less energy than a cell phone.

There’s also a persistent myth worth addressing: that airport body scanners can see inside the body. Body scanners use Advanced Imaging Technology that functions as a millimeter wave scanner, sending millimeter waves toward a passenger that pass through clothing and reflect off the skin, and whatever is concealed, and bounce back an image interpreted by the machine. They scan to skin level, not beyond it. Medical implants, screws, and internal devices are not visible.

One remaining option for anyone still uncomfortable with the scanning process: passengers who feel that the whole-body scan violates their privacy can opt out of the screening process, though they will receive alternative screening, including a physical pat-down.

Why This History Still Matters in 2026

The Rapiscan saga is more than a historical curiosity. It’s a case study in how security technology gets adopted under pressure – and how accountability mechanisms, when they actually function, can force meaningful change. The body scanner privacy issues that emerged from Rapiscan’s deployment prompted legislation that now governs every full-body scanner at every U.S. airport.

In 2024, the TSA screened three million people in a single day for the very first time – an unprecedented volume that underlines how central this infrastructure is to American travel. The machines screening all those people bear no resemblance to the ones that sparked the 2012 privacy outcry. That shift happened because passengers complained loudly enough that Congress moved.

The DHS and TSA aren’t standing still either. According to a January 2025 Department of Homeland Security report, the TSA’s Science and Technology Directorate is actively collaborating on next-generation Advanced Imaging Technology, with new and retrofitted screening systems currently being tested at a Transportation Security Laboratory in Atlantic City, New Jersey. Improvements being explored include higher-definition scanning and systems that could eventually eliminate the need to remove shoes at security checkpoints.

Read More: Flying? Be Prepared for These Key TSA Rule Changes

What This Means for You

The short version: when you step through that scanner at a U.S. airport today, no one in the building is seeing a detailed image of your body. The system that made that possible was removed from all 174 affected airports by June 2013, following the failed TSA Rapiscan scanner replacement and the Congressional mandate that came out of widespread airport body scanner privacy complaints. The machines currently in use display a generic human outline to the agent on duty – nothing more than a featureless figure with a box around any flagged area.

If you want to make the most of the current setup, there are two practical things worth knowing. First, if you have a medical device, implant, or anything you’d prefer not to discuss at a checkpoint, you can request a private screening or opt out for a pat-down – that right hasn’t changed. Second, if you travel frequently and want to reduce the time spent in security lines, TSA PreCheck gives access to dedicated lanes that, according to TSA data, cut wait times significantly. The underlying technology is the same, but the process moves considerably faster for enrolled travelers. Neither option requires you to simply accept what’s put in front of you – which, given how this story started, seems like exactly the right attitude to bring to the airport.

A.I. Disclaimer: This article was created with AI assistance and edited by a human for accuracy and clarity.

Read More: Airport Worker Shares Travel Hack That Will Help Stop Your Luggage from Getting Lost