GPS Spoofing Over the Middle East, Phantom Traffic on Your Display, and the ADS-B Vulnerability That Conflict Zones Are Exposing

GPS spoofing has become a documented, ongoing threat in the Middle East, Baltic, and Black Sea regions, with hundreds of incidents logged by pilots and dispatchers. Unlike GPS jamming - which fails visibly - spoofing feeds your aircraft false position data without triggering any alert, corrupting the ADS-B surveillance picture for every aircraft in the vicinity.

How ADS-B Depends on GPS - and Why That Creates a Vulnerability

ADS-B works by having each aircraft calculate its GPS position and broadcast it continuously on 1090 MHz or 978 MHz. Other aircraft and ground stations receive those broadcasts to build a shared traffic picture. The system works perfectly under one condition: that the GPS data is accurate.

When GPS position is manipulated, that false position propagates through the entire cooperative surveillance network. Every receiver in range - other cockpits, ATC displays - sees the aircraft where it isn’t.

Jamming vs. Spoofing: A Critical Distinction

Jamming floods the GPS frequency with noise. Your receiver loses lock, raises a flag, and you know to revert to other navigation sources. The problem is visible.

Spoofing broadcasts signals that are indistinguishable from legitimate GPS satellite transmissions. Your receiver accepts them without raising an alarm, computes a false position, and hands that position to your FMS as verified truth. The autopilot then flies toward a location that doesn’t match your actual position on the ground.

That is a fundamentally different threat. With jamming, you know you have a problem. With spoofing, you may not know for minutes - minutes during which your terrain avoidance system is making decisions based on fabricated geography, and your transponder is advertising that fabricated geography to every aircraft around you.

What’s Actually Happening Over the Middle East

OPSGROUP, an international network of pilots, dispatchers, and controllers, has documented hundreds of GPS spoofing incidents across Iran, Iraq, and the eastern Mediterranean. The incidents follow recognizable patterns.

One common pattern places the aircraft’s GPS-indicated position at a fixed point - frequently a major airport. Pilots have reported their GPS suddenly showing them on final approach to an airport when they were actually at cruise altitude, hundreds of miles away. In some cases, the FMS began computing a descent toward the false position. That is an autopilot deviation waiting to happen for a crew that isn’t monitoring closely.

EASA has published safety information bulletins flagging the eastern Mediterranean - including airspace around Cyprus, Turkey, and the Levant - as well as the Baltic region, where Russian electronic warfare activity near the Ukraine conflict has been extensively documented. The FAA has issued parallel advisories and NOTAMs for operators transiting these regions.

How a Spoofed Aircraft Corrupts the Broader Traffic Picture

Because ADS-B is a cooperative system, a single aircraft broadcasting a false position appears at that false position on every nearby traffic display. If multiple aircraft are simultaneously spoofed, the traffic picture can become unreliable across a wide area.

The risk isn’t only to the spoofed aircraft. It propagates to everyone sharing that airspace.

One documented scenario involves crews seeing traffic appear to be on a collision course on their displays and initiating an evasive maneuver - only to have ATC report confusion. The evasive action itself created a conflict with real traffic. A phantom traffic picture prompted a real maneuver, and that maneuver created a real problem.

TCAS and ADS-B: Clearing Up a Common Misconception

Some pilots have been concerned that GPS spoofing could cause false TCAS resolution advisories. This concern is partially valid, but needs precise framing to be useful.

TCAS works by directly interrogating nearby transponders and measuring the time-of-flight of the reply to establish range. That measurement is direct and does not depend on GPS or ADS-B position data. A spoofed position in another aircraft’s GPS will not cause your TCAS to issue a resolution advisory for a ghost target.

However, modern integrated traffic systems fuse TCAS interrogation data with ADS-B broadcasts for what appears on the display. A spoofed aircraft broadcasting a false position will appear on your traffic display at that false position - which can look alarming even if the actual aircraft is nowhere near you.

If your traffic display shows a target that ATC says doesn’t exist, trust ATC. Query the conflict. Do not maneuver based solely on an unverified display picture.

How Aware Pilots Are Catching It

Commercial aircraft equipped with Inertial Reference Systems (IRS) have a built-in cross-check. IRS tracks position using accelerometers and gyroscopes from a known starting point - no external signals required. A sudden, large discrepancy between GPS and IRS position is a strong indicator of spoofing.

General aviation aircraft typically lack inertial navigation and rely almost entirely on GPS. In potentially spoofed environments, VOR remains useful for a gross position check. Pilots should know which VOR stations are accessible along their route and periodically cross-check GPS position against a bearing and distance from a known station.

Spoofing typically displaces GPS position laterally. It does not affect the barometric altimeter, attitude indicator, or airspeed system. A pilot monitoring all instruments - not just the moving map - has multiple data points that can reveal the inconsistency:

The moving map shows an incorrect position
The altimeter reads correctly
Airspeed matches the winds-aloft forecast
The VOR bearing matches the chart

Pilots who miss the spoofing are typically the ones who handed everything to the autopilot and stopped actively cross-checking.

Why GPS Signals Are So Easy to Fake

The fundamental problem is signal weakness and lack of authentication. GPS satellites broadcast at the equivalent of a 25-watt lightbulb from 12,000 miles altitude. By the time that signal reaches a receiver, it is extraordinarily faint. A ground-based spoofing transmitter broadcasting at much higher power can easily overwhelm the real signal.

GPS signals also carry no cryptographic authentication. A receiver has no way to verify that what it’s receiving actually originated from a GPS satellite - it computes position from timing data, and if the timing data is convincing, it accepts it.

The European Galileo navigation system has been developing Open Service Navigation Message Authentication (OS-NMA), which adds a cryptographic signature to the navigation message that a receiver can verify. The American GPS system has been working on similar authentication features. But deploying this across the global receiver ecosystem takes years - a software update cannot be pushed to every GPS chip on the planet simultaneously.

In the interim, newer avionics increasingly include GNSS interference detection that monitors signal characteristics for anomalies consistent with spoofing. Retrofitting this capability into the existing global fleet is a long-term process.

Practical Guidance for Operators Transiting Affected Regions

EASA, the FAA, and OPSGROUP have converged on consistent guidance:

Know the regions. Spoofing is concentrated near active conflict zones and documented electronic warfare areas. The Middle East, Baltic, Black Sea, and parts of the Arctic have all appeared in official advisories. When routing through these areas, brief specifically on GPS unreliability - don’t treat it as a general disclaimer.

Brief your automation response. Decide in advance what the crew will do if GPS position begins to behave anomalously. At what point do you disconnect the autopilot and navigate by raw data? Who calls the position checks? Brief it before departure. Don’t improvise it at flight level 380.

Cross-check regularly. In affected regions, compare IRS and GPS position at defined intervals. Use VOR cross-checks when available. Sanity-check groundspeed against winds-aloft data. One data source is a display. Two data sources in agreement is confidence.

Report every anomaly. GPS spoofing reports feed the dataset that helps OPSGROUP, EASA, and the FAA identify new spoofing zones and update advisories. The Aviation Safety Reporting System (ASRS) accepts GPS spoofing reports. OPSGROUP maintains its own reporting portal. The data is only as good as what pilots contribute.

Why This Matters for the Long-Term Future of ADS-B

ADS-B was designed around an assumption: that every aircraft broadcasts truthful position data derived from reliable GPS. That assumption was reasonable when the system was conceived. It is proving less reasonable in an environment where sophisticated actors have both the motive and the capability to manipulate GPS signals at scale.

ADS-B still provides vastly better surveillance coverage than secondary radar alone, particularly in oceanic and remote environments. The technology isn’t broken. But its dependency on an unauthenticated, easily overpowered signal is a structural vulnerability - one that pilots need to understand the same way they understand other system limitations. ADS-B Out doesn’t help you see non-equipped traffic. ADS-B In coverage has gaps. And ADS-B position data is only as trustworthy as the GPS feeding it.

Knowing where a tool fails is exactly as important as knowing what it can do.

Key Takeaways

GPS spoofing generates no cockpit warning. Your FMS accepts the false position as truth and acts on it - potentially commanding autopilot deviations and broadcasting a corrupted position to every ADS-B receiver in range.
Hundreds of documented incidents have been logged by OPSGROUP in the Middle East, with EASA and FAA advisories covering the Baltic and Black Sea regions as well.
A spoofed aircraft can generate phantom traffic on nearby displays, prompting unnecessary evasive maneuvers that create real conflicts with real traffic. If ATC says a target doesn’t exist, trust ATC.
TCAS resolution advisories are based on direct transponder interrogation, not GPS or ADS-B data - a spoofed position will not generate a ghost RA, but it will generate a misleading display picture.
The pilots who catch spoofing are the ones still cross-checking: IRS vs. GPS, VOR bearings, groundspeed vs. winds-aloft, altimeter vs. moving map. Situational awareness requires active monitoring, not just autopilot supervision.