GPS Spoofing Over the Persian Gulf, the ADS-B Position Integrity Problem, and What Happens When the Surveillance System Built Around GPS Gets Fed Lies

GPS spoofing doesn’t just confuse an aircraft’s navigation system - it corrupts every downstream system that trusts that position, including the ADS-B transponder broadcasting your location to air traffic control and every aircraft within 200 miles. This is a documented, recurring problem in specific international corridors, and the architecture of modern airspace surveillance makes it harder to detect than most pilots realize.

What ADS-B Actually Depends On

Automatic Dependent Surveillance-Broadcast does exactly what its name describes. The aircraft automatically broadcasts its own position, derived entirely from its own GPS receiver. There is no independent verification. The system trusts the GPS, computes position from satellite signals, and rebroadcasts that position to every ADS-B receiver in range - ground stations, controllers’ displays, and other aircraft equipped with ADS-B In.

That GPS dependency was a deliberate architectural choice. Under normal conditions, GPS is extraordinarily accurate and reliable. ADS-B was designed to replace expensive ground-based secondary radar with a distributed, self-reporting surveillance network, and it delivered. Coverage improved, accuracy improved, and oceanic tracking went from position reports every tens of minutes to continuous surveillance. The technology is genuinely transformative.

The vulnerability is the core assumption: that every GPS signal is genuine.

Why GPS Signals Can Be Faked

GPS satellites orbit roughly 20,000 kilometers above the surface, broadcasting with approximately 50 watts of power. By the time that signal reaches an aircraft antenna, received power has fallen below the thermal noise floor of the receiver. GPS chipsets extract the signal from noise using spread-spectrum techniques - which is also what makes GPS signals vulnerable to spoofing.

The distinction between jamming and spoofing is critical.

Jamming is blunt force. A jammer floods the GPS frequency with noise, the receiver loses lock, and the cockpit alerts. Receiver Autonomous Integrity Monitoring (RAIM) flags the loss. You know you have a problem.

Spoofing is surgical. A spoofer broadcasts fake GPS signals stronger than the real ones. The receiver believes them, computes a position based on those false signals, and reports that position with full confidence. No RAIM flag. No cockpit alert. The system thinks everything is fine - and your ADS-B transponder broadcasts the false position to everyone listening.

The difference, from a surveillance integrity standpoint, is the difference between a blank display and a display full of convincing lies.

The Documented Threat Geography

Eurocontrol began formally logging GPS spoofing events in the eastern Mediterranean around 2019–2020. Numbers increased significantly after 2022, correlated with escalating military activity in the region. By 2023, Eurocontrol’s GNSS monitoring service was recording hundreds of interference events per month in certain areas, particularly the eastern Mediterranean, the Persian Gulf corridor, and approaches to active conflict zones.

Airlines operating into Beirut, Tel Aviv, and Baghdad have filed reports. Business jet operators transiting the region have documented navigation anomalies. The pattern is strikingly consistent across carriers and aircraft types: the navigation system suddenly reports a position jump. In some documented cases, the aircraft’s apparent position shifts toward a nearby major airport - triggering terrain warnings and traffic alerts based on phantom data, pulling crew attention toward a problem that doesn’t exist while the real navigation picture quietly degrades.

Aircraft have inadvertently entered restricted airspace because the FMS was navigating on a false GPS position. The airplane thought it was somewhere it wasn’t. The pilots, trusting their instruments, didn’t catch the discrepancy until other cues made it obvious.

What Spoofing Does to the ADS-B Picture

When a GPS receiver is spoofed, the ADS-B transponder broadcasts the false position. Every controller receiving that track sees the aircraft where it isn’t. Every aircraft with ADS-B In shows the same false position. If a real aircraft happens to be at the spoofed position, both tracks merge on the controller’s display. TCAS on nearby aircraft issues resolution advisories based on phantom geometry.

The controller’s picture isn’t just wrong - it’s actively misleading in compounding ways.

In oceanic airspace, where there is no primary radar at all, this is especially consequential. The ADS-B position report isn’t cross-checked against anything. It is the track. A spoofed position report in oceanic airspace is indistinguishable from a genuine one by current ground systems.

How Transport Aircraft Catch It

Most transport-category aircraft carry Inertial Reference Systems alongside their GPS receivers. An IRS uses accelerometers and gyroscopes - no satellites - to continuously estimate position through dead reckoning from a known starting point. It drifts over time, typically 1–2 nautical miles per hour of flight, so it can’t substitute for GPS indefinitely. But it provides a critical cross-check.

When an FMS blends GPS and IRS position data, a sudden GPS position jump that the IRS hasn’t recorded any corresponding acceleration to justify creates a flagged discrepancy. That physical disagreement is a detector that doesn’t depend on signal characteristics at all.

You can fake a GPS signal. You cannot fake the fact that the airplane’s accelerometers didn’t feel the acceleration required to actually travel that distance.

This is exactly how airline crews have caught spoofing events before they became incidents.

What Pilots Should Do

ICAO and Eurocontrol guidance on suspected GPS spoofing is clear: revert to alternate navigation. Disengage lateral navigation using GPS position. Use IRS position and cross-check against ground-based navaids - VORs and DME fixes where available. Report to ATC immediately. File an air safety report after landing. Eurocontrol maintains a public GNSS interference reporting portal specifically for documenting these events.

The spoofing indicators to know:

Sudden, large position jumps on the navigation display
Disagreement between GPS-derived and IRS-derived position
TCAS advisories against traffic no one can see
Terrain warnings over terrain you know is behind you

The General Aviation Gap

General aviation aircraft with glass panels, GPS navigators, and ADS-B Out typically have one primary navigation source: GPS. There is no IRS to compare against. If that GPS receiver is spoofed convincingly, there is no built-in anomaly detection. At night, over water, or in IMC, the visual cues that might reveal a discrepancy aren’t available either.

RAIM was designed to detect satellite hardware failures, not spoofing. A well-designed spoofing attack can simultaneously mimic consistent signals from multiple fake satellites, defeating RAIM entirely because the fake signals are internally consistent. RAIM was built assuming the threat was geometry and hardware - not an adversary broadcasting deliberate false signals.

What the Industry Is Developing

Several parallel technical approaches are underway:

Signal-to-noise monitoring. Spoofing signals typically arrive at unusually high power to overwhelm the real ones. A receiver that monitors power levels can flag anomalously strong signals as potential spoofing indicators.

Dual-frequency receivers. Virtually all aviation GPS receivers today use GPS L1. The newer GPS L5 civilian frequency carries higher power and better interference resistance. Spoofing both frequencies simultaneously requires significantly more sophisticated equipment than spoofing L1 alone.

Cryptographic signal authentication. A US Space Force program called Chimera embeds authentication codes directly into the GPS navigation message, allowing a compatible receiver to verify that a signal actually originated from a government-controlled satellite rather than a ground-based spoofer. The European Galileo navigation satellite system has already incorporated similar authentication features. Multi-constellation receivers using both GPS and Galileo have a cross-check that’s substantially harder to defeat simultaneously.

Certification, however, takes years - not months. These technologies exist in various stages of development and early deployment, but incorporating them into certified avionics and working through TSO qualification and STC processes for retrofits is a long runway.

The Backup Infrastructure We Retired

There’s an uncomfortable piece of history here. The entire architecture of NextGen - and its European equivalent SESAR - rests on GPS as the foundational navigation input. ADS-B isn’t just a traffic tool. It is the primary surveillance infrastructure for an airspace that has progressively retired secondary radar.

An enhanced ground-based navigation system called eLoran was once a serious candidate for a GPS-independent backup. eLoran uses very-low-frequency transmitters broadcasting at vastly higher power than GPS satellites, making it immune to satellite-level spoofing attacks. The infrastructure was largely in place from the legacy Loran-C network, which had served aviation navigation since the 1950s.

The United States shut down Loran-C in 2010 - just as the full implications of complete GPS dependency were beginning to be understood. eLoran has never been fully revived despite persistent advocacy from navigation engineers and aviation safety researchers. The timing is worth noting: the backup was retired before the risks of what it was backing up were fully appreciated.

Other countries drew different conclusions. South Korea activated a national eLoran network after North Korean GPS jamming disrupted commercial aviation near the border. Russia maintains Loran infrastructure as a deliberate hedge alongside its own GNSS constellation, GLONASS. The United States is still evaluating options, but no funded, committed eLoran revival program is currently underway.

What This Means Right Now for Pilots

For domestic operations in the contiguous United States, spoofing risk is genuinely low. The documented large-scale spoofing campaigns are concentrated in specific international corridors near active conflict zones. Domestic flying is not currently a significant exposure area.

But the skill set matters regardless. Know where your RAIM status is displayed. Know how to fly a VOR approach on raw data. Know how to navigate to a fix using DME if the moving map goes dark. These procedural skills have been somewhat underemphasized since GPS became ubiquitous, and the spoofing problem is a concrete reason to keep them current.

For international operations - particularly the eastern Mediterranean, the Middle East, or any region near active military activity - know the indicators, fly with appropriate skepticism when anomalies appear, and file ASRS reports when navigation anomalies occur. Those reports are how the system learns where the threat is real.

ADS-B remains a remarkable capability. The surveillance picture it provides is better than what came before. But the integrity of that picture is only as good as the GPS signals feeding it - and in a world where spoofing technology is proven, accessible, and actively deployed over inhabited airspace, that dependency warrants clear-eyed attention.

Key Takeaways

GPS spoofing silently feeds false positions into ADS-B transponders, corrupting the controller’s traffic picture with no cockpit warning to the crew
In oceanic airspace, a spoofed ADS-B report is indistinguishable from a genuine one - it is the only track available
IRS/GPS disagreement is the primary detection mechanism on transport aircraft; most GA aircraft lack this cross-check entirely
RAIM detects satellite geometry failures, not adversarial spoofing; a well-executed attack can defeat RAIM entirely
Anti-spoofing solutions exist (dual-frequency GPS, Chimera authentication, Galileo cross-checking) but aviation certification timelines mean deployment is measured in years
The United States retired the Loran-C backup infrastructure in 2010, before GPS dependency was fully understood, and no funded replacement is currently underway