GPS Spoofing, Corrupted ADS-B Position Reports Over the Eastern Mediterranean, and What Happens to Traffic Separation When the Data You Trust Is Being Lied To

GPS spoofing places a false position on your navigation display with complete confidence and no caution flags - while simultaneously broadcasting that false position to every aircraft within 150 miles and to every ground station on the ADS-B network. It is not a theoretical vulnerability. Multiple airline crews over the Eastern Mediterranean have had their GPS place them over Tehran Imam Khomeini International Airport while flying over open water with Cyprus visible below.

Why ADS-B Has a Single Point of Failure

Automatic Dependent Surveillance - Broadcast - the word dependent is the architecture’s defining characteristic. The system does not independently determine where your aircraft is. It depends on you to report it.

Your avionics receive a GPS position fix, package it with altitude, velocity, track, and squawk code, then broadcast the full data set on 1090 MHz (1090 Extended Squitter, used by commercial and IFR-equipped GA aircraft) or 969.95 MHz (UAT). Ground stations feed that broadcast to radar facilities. Other aircraft display it on cockpit traffic systems. The network is dense, the data rate is high, and the resulting picture genuinely outperforms what radar alone can deliver.

That architecture has one assumption embedded in every link of the chain: your GPS position is accurate.

How Spoofing Defeats GPS Integrity Checks

GPS receivers include Receiver Autonomous Integrity Monitoring (RAIM), which cross-checks range measurements from multiple satellites for internal consistency. If one satellite transmits bad data, it disagrees with the others and RAIM flags it. This works well against natural errors - satellite failures, ionospheric disturbances, multipath interference from terrain.

It does not work against spoofing.

A spoofer broadcasts fake GPS signals at the correct frequency, with correct modulation and correct satellite pseudorandom noise codes, but with false timing data embedded inside. The receiver performs its standard integrity checks. It sees multiple satellite-like signals that are mutually consistent. It calculates a position and reports it with full confidence. RAIM finds nothing to flag because the false signals are internally coherent with each other. No caution lights, no flags, no warnings anywhere on the panel.

Jamming - the blunt alternative - floods the GPS frequency with noise. Your receiver loses lock and you get a warning. Spoofing is surgical. The difference between jamming and spoofing is the difference between a system that fails honestly and a system that lies confidently.

The Documented History: Where and When

The pattern in civil airspace began crystallizing around 2017–2018, when the aviation safety organization OPSGROUP started aggregating pilot reports of GPS anomalies. The distribution was not random.

Aircraft over the Black Sea, parts of Syria and Iraq, and the Eastern Mediterranean reported sudden GPS position jumps placing them over major airports they were nowhere near - including Tehran Imam Khomeini International and Baghdad International. The false positions were frequently placed directly on airport centerlines, which matters: spoofing systems calibrated to push aircraft away from restricted military airspace tend to anchor the false position somewhere that automated conflict detection treats as normal departure or arrival traffic.

By 2019–2020, OPSGROUP had documented hundreds of incidents. Geographic analysis showed the highest concentrations corresponded to areas of active military operations in Syria, Iraq, and the broader Gulf region. A separate cluster appeared along the Baltic, concentrated on approaches to Helsinki, Tallinn, and Riga - consistent with the signal environment near Russian territory.

Spoofing is a military capability developed to confuse adversary guidance systems, precision weapons, and drones. Commercial aircraft are not the target. They are collateral participants in a signal environment that makes no distinction between an airline navigation receiver and a weapons guidance unit.

Three Ways Spoofing Breaks the Surveillance Picture

First: the cockpit traffic display. ADS-B In draws from ADS-B Out broadcasts by surrounding aircraft. If those aircraft are also flying through the same spoofed GPS environment, their reported positions are wrong too. The traffic picture on your screen bears no reliable relationship to where other aircraft actually are. A display showing clear airspace when it is not clear is worse than no display at all - a blank screen signals a problem; a resolved traffic picture signals everything is fine.

Second: the controller picture. In radar-covered airspace, Secondary Surveillance Radar (SSR) independently interrogates transponders and derives position from radar geometry - no GPS involved. When ADS-B position and radar return disagree significantly, the system can flag the discrepancy. That check is real and has caught anomalies. But it requires the gap to be large enough to trigger an alert, requires a controller to notice it under workload, and requires radar coverage to exist. Over oceanic routes and sparsely covered regions, that cross-check is not available. A gradual position walk - where the spoofer slowly moves apparent position rather than snapping it - can stay below the alert threshold while still producing a materially incorrect traffic picture.

Third: TCAS - the nuanced one. Resolution Advisories are generated from transponder-based ranging. When TCAS interrogates another aircraft, it measures round-trip signal time and derives range directly, with no GPS dependency. That geometry is resilient to spoofing. If another aircraft is geometrically close enough to threaten separation, the advisory fires.

But the Traffic Advisory display - the graphical picture of surrounding aircraft - draws from ADS-B position data, not purely from transponder ranging. In a spoofed environment, that display is unreliable. The RA saves you when geometry goes critical. The situational awareness designed to keep you ahead of needing that RA is built on a data layer that has been corrupted.

This Is Not Confined to Conflict Zones

The intuitive response is to treat GPS spoofing as a problem for routing through active conflict zones, resolved by routing around them. That framing is wrong.

GPS signals do not respect airspace boundaries. A spoofer operating in one jurisdiction broadcasts into adjacent airspace. OPSGROUP’s risk map shows anomalies affecting aircraft on routine airways over Cyprus, over the Greek islands, and on approaches into Helsinki and Tallinn. These are not conflict destinations. Tallinn and Helsinki are ordinary European city-pairs served daily by routine commercial operations.

What Mitigations Actually Exist

Inertial Reference Systems (IRS) on modern commercial airliners maintain an independent position estimate using accelerometers and gyroscopes with no satellite input. Multiple IRS units cross-check each other, and when GPS disagrees significantly with IRS, the flight management system flags it on the flight deck. This works well for large sudden position jumps. It is less effective against slow gradual spoofing, because IRS accumulates its own drift over time and cannot reliably distinguish slow spoofing from slow IRS error at low magnitudes.

For general aviation, IRS is not an option. The practical mitigation is continuous cross-checking against VOR and DME where infrastructure exists, maintaining geographic awareness against charted features, and treating any sudden GPS excursion as a data integrity event rather than a system quirk.

Multilateration (MLAT) is an infrastructure-level check that deserves more attention. Ground stations receiving 1090 MHz transmissions from multiple locations can derive aircraft position from time-difference of arrival - a geometry entirely independent of GPS. A dense MLAT network can compare an aircraft’s ADS-B position against its MLAT-derived position and flag discrepancies without touching GPS integrity. In Europe, where the ground station network is reasonably dense over populated airways, this provides a meaningful backstop. Coverage over oceanic routes and remote regions remains limited.

Resilient Positioning, Navigation, and Timing (resilient PNT) is the FAA’s term for the long-term structural answer. eLoran (enhanced Long Range Navigation) provides positioning and timing from low-frequency ground-based signals that are orders of magnitude stronger than GPS and fundamentally resistant to the spoofing that overwhelms satellite receivers. DME-DME positioning provides independent cross-checking using range measurements from multiple Distance Measuring Equipment stations with no satellite dependency. Progress on resilient PNT development has been real, but comprehensive coverage across the National Airspace System is measured in years, not months.

What This Means Operationally, Today

Check OPSGROUP’s GPS spoofing risk map before flying internationally through the Eastern Mediterranean, Middle East, or Baltic region. It is updated as incidents are reported and reflects the current operational environment more accurately than any other single source.

Cross-check position continuously on affected routes against VOR, DME, and charted geographic features. If your GPS position jumps suddenly in a known spoofing environment, treat it as a data integrity event - not a glitch.

Do not rely on your ADS-B traffic display for situational awareness in regions where GPS integrity is in question. The Resolution Advisory will still work. The display picture may not.

File reports when you see anomalies. OPSGROUP maintains a reporting form. EUROCONTROL collects GPS anomaly reports. The FAA has incident reporting channels. The community risk map depends entirely on pilots providing data points.

The Larger Problem

The aviation architecture being built right now - urban air mobility, uncrewed operations at scale, drone integration into controlled airspace - depends more heavily on GPS-derived position than today’s system, not less. ADS-B was the first step toward an airspace picture built from aircraft self-reporting their own positions. Every next-generation concept extends that model further.

If the GPS layer is manipulable by a ground-based transmitter using available military technology, every system that trusts it without independent corroboration carries that vulnerability forward. The elegant architecture of ADS-B delivers everything it promised in a clean GPS environment. The gap is what happens at the boundaries, where signals are not clean and the assumption of GPS integrity does not hold. Closing that gap is the unfinished work in front of the industry.

Key Takeaways

GPS spoofing defeats RAIM by broadcasting internally consistent false signals - receivers report wrong positions with full confidence and no warnings
Corrupted GPS positions propagate through ADS-B Out to every nearby aircraft and ground station, making the entire traffic picture unreliable in the affected area
TCAS Resolution Advisories remain valid because they use transponder ranging; the traffic display does not, because it draws from ADS-B position data
Documented spoofing affects routine airways over Cyprus, the Greek islands, and approaches into Helsinki and Tallinn - not only conflict-zone routing
Near-term mitigations: OPSGROUP risk map, continuous VOR/DME cross-checking, and mandatory incident reporting to build community awareness
Long-term structural solutions (eLoran, DME-DME, resilient PNT) are in development but not yet comprehensively deployed