GPS Spoofing over the Middle East, the ADS-B Position Jumps That Have Sent Airliners off Course, and the Trust Problem Hiding Inside Modern Surveillance

GPS spoofing over the Middle East has caused documented, repeated navigation failures on commercial aircraft - including position jumps of more than 100 nautical miles - by exploiting the fundamental architecture of ADS-B (Automatic Dependent Surveillance-Broadcast). The system broadcasts whatever position the GPS receiver reports, with no independent mechanism to verify that position is real. EUROCONTROL, IATA, and the Flight Safety Foundation have all published guidance on the threat, and incidents have been accumulating since approximately 2019–2020.

What ADS-B Actually Does - and What It Can’t Check

ADS-B replaced secondary radar as the primary surveillance backbone in most of the world’s controlled airspace. Rather than waiting for a ground antenna to query a transponder, aircraft transmit continuously - packaging GPS-derived position, pressure altitude, groundspeed, track, and identification, then broadcasting that packet every second on 1090 MHz. Ground stations and other aircraft with ADS-B In receivers hear it in near real time. Under normal conditions, the accuracy exceeds what secondary radar could ever deliver.

The FAA ADS-B Out mandate took effect January 1, 2020. Any aircraft operating in most U.S. controlled airspace must transmit. That is the outbound side: the aircraft tells the system where it is.

The system cannot verify whether that position is true.

How GPS Spoofing Exploits That Gap

GPS satellites orbit at roughly 20,000 kilometers altitude. The signals they transmit arrive at a receiver antenna at a power level comparable to a 60-watt lightbulb viewed from 25,000 kilometers away - extraordinarily weak. The receiver performs timing math on signals from at least four satellites and triangulates a position.

If a ground-based transmitter broadcasts a stronger false signal on the same frequencies the GPS satellites use, the receiver hears the false signal first. It performs the same timing math. It arrives at a false position. ADS-B then broadcasts that false position to every receiver in range - with full confidence.

This is the distinction between spoofing and jamming. Jamming overwhelms the GPS signal and denies the receiver usable data. It is loud and obvious: GPS flags go red, RAIM alerts fire, crews know immediately they have lost GPS. Spoofing is quiet. The receiver believes it is working perfectly, reports high accuracy and high integrity, and raises no flags. The position is simply wrong.

The Pattern of Incidents in the Middle East

Aircraft operating on airways over Iran, Iraq, the eastern Mediterranean, and approach corridors to airports near Tehran have reported sudden, large GPS position errors since approximately 2019–2020. These are not gradual drifts. Crews describe instantaneous relocations - 30, 50, and over 100 nautical miles from actual position.

A significant proportion of the documented cases show aircraft GPS receivers being spoofed to positions associated with Tehran Imam Khomeini International Airport. Researchers believe the spoofing infrastructure is set to a defined false location - possibly to defeat military targeting systems - rather than generating random noise. That points to a sophisticated, deliberate operation.

EUROCONTROL’s advisories name affected airways and geographic regions. Formally attributing the signal source is both technically difficult and politically complicated. The practical effect is the same regardless of origin: the GPS infrastructure that ADS-B depends on has been weaponized in airspace where commercial aviation operates daily.

What Happens Inside the Cockpit

Crews describe the navigation display repositioning suddenly. The flight management computer - typically programmed to trust GPS over other navigation sources - may then attempt to steer toward the false position as if it were a programmed waypoint.

Modern large transport aircraft carry inertial reference systems (IRS) that maintain a position solution using accelerometers and gyroscopes, independent of external signals. If the GPS position diverges sufficiently from the inertial solution, the system is designed to flag the disagreement. But the alert threshold and the aircraft’s response to it vary considerably by aircraft type and avionics generation. Older glass cockpit aircraft may surface no clear alert at all.

There have been documented cases of aircraft entering Iranian restricted airspace because their navigation showed them outside it. Iranian ATC has had to contact crews to advise them of their actual position relative to restricted areas.

Why ADS-B’s Integrity Fields Don’t Catch It

The ADS-B message format does include integrity metadata: NACp (Navigation Accuracy Category for position), NIC (Navigation Integrity Category), and SIL (Source Integrity Level). Ground systems use these values to assess how much to trust a given contact.

The flaw is that these values are self-reported. They come from the aircraft’s own receiver evaluating its own signal quality. A sophisticated spoofing system can transmit a clean, consistent false signal - one the receiver assesses as a high-quality GPS fix. The receiver then reports high integrity on all fields. The ATC display shows a high-integrity contact with no flags. The position is fabricated, and the system has marked it as reliable.

A controller watching carefully might notice a contact that moves at an impossible speed or jumps discontinuously. But automated correlation systems are not universally designed to catch spoofing signatures, and controllers are watching many targets simultaneously.

Why This Matters for the Traffic Picture

TCAS (Traffic Collision Avoidance System) uses ADS-B position data from surrounding aircraft to construct its traffic model. If nearby aircraft are broadcasting spoofed positions, TCAS is working from corrupted inputs. It performs correct calculations on wrong numbers. Resolution advisories generated from that data may be incorrect - a serious safety concern in high-density airspace.

What RAIM Can and Cannot Do

RAIM (Receiver Autonomous Integrity Monitoring) is the standard GPS integrity tool in aviation. It compares satellite solutions across multiple satellites and flags internal inconsistencies. It helps in some spoofing scenarios.

It does not help when spoofing blankets an entire area uniformly. If all satellites in view are broadcasting the same false signal, RAIM detects no inconsistency. It checks whether the satellites agree with each other - not whether they are telling the truth. If all of them are telling the same lie, RAIM does not raise a flag.

Multi-constellation receivers offer a more robust check. Modern GNSS receivers can receive signals from GPS, the European Galileo constellation, the Russian GLONASS system, and China’s BeiDou. Spoofing all four simultaneously at consistent false positions is significantly harder than spoofing GPS alone. Some newer commercial aircraft and avionics systems already use multi-constellation receivers as a de facto integrity layer.

The right architectural answer is cryptographic signing of position data. Next-generation ADS-B development discussions include a framework under which position broadcasts would carry a digital signature, allowing ground systems to verify the data came from a legitimate, certified, untampered source. Integrity would no longer depend solely on the aircraft’s receiver evaluating its own signal.

The obstacle is scale. The existing global ADS-B ground infrastructure does not support authenticated navigation. The installed transponder base runs into the hundreds of thousands of aircraft across general aviation and commercial operations. ICAO working groups have published technical papers. The FAA has participated in research discussions. Aviation infrastructure moves carefully, through global consensus, on timelines measured in years to decades.

What Pilots Can Do Now

EUROCONTROL maintains a live GPS interference database; operators flying affected routes should check it before filing. The FAA publishes GPS interference NOTAMs for domestic events, and the NOTAM system captures some international events. IATA has published recommended practices for flights into affected regions.

The operational guidance is straightforward:

If GPS position disagrees with the inertial reference system, trust the IRS
Cross-check with VOR if in range
Monitor groundspeed and track against expected values and flag any discontinuity
If a sudden jump occurs, advise ATC immediately
File a safety report through your operator; general aviation pilots should use the NASA Aviation Safety Reporting System (ASRS)

That reporting data feeds the EUROCONTROL interference database and gives researchers the information needed to characterize spoofing geometry.

For general aviation pilots flying domestic routes in the United States, material risk today is low. The documented incidents are concentrated in areas with high-density military activity and known spoofing history. But the structural lesson applies universally: ADS-B shifted the integrity burden from radar - which was independent of the aircraft - to GPS, which is onboard and can be deceived. That was an acceptable trade in the threat environment that existed when the standard was written in the 1990s and early 2000s. That threat environment has changed.

Key Takeaways

GPS spoofing causes instantaneous, flagless position jumps - unlike jamming, which is obvious. Spoofed receivers report high integrity with no warnings.
ADS-B has no independent mechanism to verify that the position it broadcasts is accurate; integrity fields are self-reported by the same receiver that may be deceived.
Documented spoofing over Iran, Iraq, and the eastern Mediterranean has been active since approximately 2019–2020, with position errors exceeding 100 nautical miles in some cases.
TCAS and other aircraft relying on ADS-B In are downstream victims of spoofed traffic data, with potentially incorrect resolution advisories as a result.
The near-term operational defense is cross-checking GPS against IRS and VOR, reporting anomalies immediately, and monitoring EUROCONTROL’s GPS interference database before filing affected routes.