ADS-B Spoofing, the Unauthenticated Broadcast, and Why the System That Sees Every Airplane Will Believe an Airplane That Isn't There

SUMMARY: ADS-B broadcasts every aircraft’s position in the clear and without authentication - here’s why that design lets ghost planes appear, and why the sky isn’t falling.

ADS-B can be spoofed because it was deliberately designed as an open, unauthenticated broadcast. Aircraft self-report their GPS position in unencrypted messages that carry no digital signature, so a receiver has no way to prove the airplane in a message actually exists. The vulnerability is real and inherent, but it’s contained by a layered system of independent radar, multilateration, and human controllers - so a phantom aircraft is far more likely to fool a public flight-tracking website than to endanger real air traffic.

What Is ADS-B and How Does It Work?

Automatic Dependent Surveillance–Broadcast (ADS-B) watches nearly every airplane in the developed world. Since the 2020 U.S. mandate, it’s active in controlled airspace the moment your master switch comes on. The name explains the entire system if you unpack it word by word.

Automatic means it runs on its own - no controller has to interrogate you, no button gets pushed. Your equipment simply transmits.

Dependent is the critical word. The system depends on the airplane to determine its own position. Traditional radar is independent: a ground station sends a pulse, it bounces off your airframe, and the radar measures time and angle to locate you without your cooperation. ADS-B is the opposite - your airplane asks a GPS receiver “where am I?” and then broadcasts that answer to the world.

Surveillance is how you get seen. Broadcast is the heart of it: your airplane doesn’t send its position to one controller on a private channel. It shouts it in every direction to anyone with a receiver on the right frequency.

In the United States, aircraft transmit on one of two links. Airliners and high-altitude traffic use 1090 MHz (the extended squitter, the same frequency the transponder already used). Lighter general aviation aircraft can instead use 978 MHz, the Universal Access Transceiver (UAT). Different plumbing, same idea - both push out a data packet roughly twice per second.

Why Is ADS-B Not Secure? Encryption vs. Authentication

The packet has no lock on it, and understanding why requires separating two ideas people constantly conflate.

Encryption is about secrecy - can a stranger read my message? Authentication is about identity - can a stranger prove they are who they claim to be?

ADS-B messages are not encrypted. Anyone with a $40 software-defined radio and a laptop can pull them from the air and read them in plain language. That’s actually a feature. The goal was cheap, open traffic information so your panel could see other airplanes, so websites could track flights, and so a handheld receiver in your lap could paint the sky. Openness was the point.

But the messages are also not authenticated. There is no digital signature, no shared key, nothing that proves a position truly came from a real Boeing 737 at FL330 rather than from someone in an apartment with an antenna. The receiver - whether a ground station or your panel display - takes the message at face value. It has to. That trust is baked into the D in ADS-B: Dependent.

What ADS-B Spoofing Attacks Are Possible?

Academic security researchers at universities in Europe and the United States began probing ADS-B almost as soon as it was mandated. In controlled settings, they’ve demonstrated three distinct attacks worth understanding separately.

Injection. You build a valid ADS-B message from scratch - position, altitude, call sign, a made-up airframe ID - and transmit it. A ghost airplane appears, with a track and a speed, indistinguishable from the real thing because, as far as the bits are concerned, it is real. Nothing about it is malformed.

Deletion. Harder and cleverer. Because these messages are just radio pulses, carefully timed energy transmitted on top of a real airplane’s signal can corrupt it so the receiver discards it. Do that consistently and a real aircraft fades off the display.

Modification. A blend of the two. Let a real message begin, then step on its tail end, and the reported position can be nudged - a little left, a little higher. Enough to matter.

How Dangerous Is ADS-B Spoofing, Really?

The gap between what’s possible in a lab and what’s dangerous in the national airspace is enormous. Three caveats keep this in perspective.

First, ADS-B is not the only thing watching you. Air traffic control never threw away radar. Controllers still have primary radar - the independent airframe bounce that doesn’t care what your box transmits - plus secondary radar interrogating your transponder. Increasingly they also have multilateration, which uses several ground receivers in known locations to measure the tiny differences in when each one hears your signal. Because radio waves travel at the speed of light, those timing differences pin down where the transmission physically originated. Multilateration doesn’t trust the position in your message - it measures where the signal actually came from. A ghost whose radio energy all originates from one fixed rooftop, rather than a moving point in the sky, gives a well-instrumented system a real chance to notice the story doesn’t add up.

Second, controllers are humans with judgment. An airplane that pops into existence at 300 knots, flies through another aircraft’s position, accelerates beyond any airliner’s capability, and then vanishes doesn’t fool an experienced controller for long. The easiest system to spoof - the raw display - sits behind people and cross-checks that are much harder to fool.

Third, the motive math is bad for attackers. Spoofing traffic in a way that causes real danger is difficult, local, and generally requires being physically near the airspace you’re attacking. It’s also a serious federal crime that puts a bright investigative spotlight on wherever the transmissions came from. The barrier isn’t only technical - the risk-to-reward is genuinely poor.

The honest assessment: the vulnerability is real, inherent, and not fixable with a software patch - but the sky isn’t falling, because ADS-B was never deployed as a single point of failure. It lives inside a layered system with independent sensors and human eyes.

Where Is ADS-B Spoofing Actually a Concern?

The defenses get thinner at the edges. Out over the ocean, at high latitudes, and anywhere the only surveillance is space-based ADS-B from satellites with no radar backstop underneath, the layered defense weakens.

The bigger soft spot is the public data layer. Flight-tracking websites, apps, and data feeds often have no multilateration cross-check at all. That’s exactly why a phantom aircraft occasionally trends on a tracking site - a joke call sign transmitted from the ground. The professional air traffic system has defenses. The public data layer has far fewer.

The Privacy Flip Side: Openness Cuts Both Ways

The same property that makes ADS-B easy to fake - an open broadcast anyone can receive - also makes it impossible to hide. When you switch on ADS-B Out, you announce your unique airframe identifier to every receiver in range, many belonging to hobbyists feeding public networks. Your airplane’s movements become a public record, which has produced everything from property-tax bills built off tracking data to fights over who owns that little airplane icon on the map. That’s not a separate story from spoofing - it’s the same open, unauthenticated design viewed from the other side.

The FAA built a partial answer. The Privacy ICAO Address (PIA) program lets eligible aircraft on the 1090 link broadcast a rotating, anonymized identifier instead of their permanent one, making it harder for third-party trackers to tie flights to a specific tail. A related effort, Limiting Aircraft Data Displayed (LADD), works on the data-distribution side. Neither is perfect - determined watchers find ways around anonymized addresses - but they show the people running the system understand exactly what they built and are trying to return some privacy without breaking the open architecture.

Can ADS-B Be Fixed With Authentication?

Adding authentication is active research, not a product you can buy. Academics have proposed lightweight digital signatures so a receiver could verify a position came from a legitimate transmitter. The engineering challenge is brutal, and it’s a lesson in system constraints.

The ADS-B message is tiny, with almost no spare room for a cryptographic signature. Millions of aircraft and receivers worldwide would need compatible keys and a way to manage them. And any change must stay backward compatible with equipment already bolted into hundreds of thousands of panels and certified to standards that took years to write.

That’s the real reason it isn’t fixed - not because nobody noticed, but because retrofitting trust into a global, already-deployed, safety-critical broadcast standard is among the hardest engineering problems there is. Designing authentication in on day one is far easier than injecting it into a system a hundred thousand airplanes already depend on. So the near-term answer isn’t a new ADS-B - it’s defense in depth: keep independent radar, lean on multilateration to catch physics mismatches, and build anomaly detection that flags the airplane accelerating like no airplane can.

The Bottom Line for Pilots

On balance, ADS-B is a genuinely good system. It gave general aviation traffic awareness that once cost a fortune, delivered free weather and traffic on the 978 link, and gave controllers a cheaper, more precise picture of the sky.

But understand what it is: a dependent, cooperative, open broadcast that trades away secrecy and built-in proof of identity - on purpose - in exchange for being cheap, universal, and interoperable. Every strength and every weakness flows from that single trade. The openness that lets your panel paint traffic is the same openness that lets a stranger read your tail number. The trust that lets the system work without a controller in the loop is the same trust that lets a ghost onto the screen.

There’s no free lunch between openness and trust. You can have a system that’s open, cheap, and easy to receive, or one that’s locked down, authenticated, and expensive - but physics and economics won’t let you have both at once. ADS-B picked a side. Knowing which side makes you a smarter operator when you decide how much of your scan to hand over to that traffic display.

Key Takeaways

• ADS-B is unauthenticated by design. Messages carry no digital signature, so receivers cannot verify that a reported aircraft actually exists - this is a design trade-off, not a bug.
• Three demonstrated attacks exist: injection (creating ghost aircraft), deletion (erasing real ones), and modification (nudging reported positions).
• The professional air traffic system is well defended by independent primary radar, multilateration that measures where signals physically originate, and experienced human controllers.
• The public data layer is the soft spot - flight-tracking sites often lack multilateration checks, which is why phantom aircraft occasionally appear there.
• Openness enables privacy loss too; the FAA’s PIA and LADD programs offer partial anonymity, while true message authentication remains an unsolved research challenge due to tiny message size and global backward-compatibility constraints.