GPS Spoofing, Phantom Aircraft on the Traffic Display, and the ADS-B Vulnerability Hidden in Plain Sight Over the Eastern Mediterranean

GPS spoofing has evolved from a theoretical vulnerability into an active operational hazard for aircraft transiting the Eastern Mediterranean, Persian Gulf, and parts of Eastern Europe. When GPS signals are falsified, ADS-B - the system that builds your traffic picture - broadcasts those fabricated positions to every receiver in range. The result is a display that looks normal and is wrong.

What Is GPS Spoofing - and Why It’s More Dangerous Than Jamming

There are two distinct failure modes when GPS comes under attack. Jamming is blunt: radio frequency noise overwhelms the receiver, the signal disappears, and the avionics alert you. The failure is obvious.

Spoofing is different. A spoofing transmitter doesn’t block real GPS signals - it overpowers them with counterfeit signals that look legitimate. The receiver picks them up, believes them, and reports a completely fabricated position. No flags. No error messages. The box believes it knows exactly where it is.

It’s simply wrong. And it has no way of knowing that.

How a Spoofed GPS Signal Corrupts Your Traffic Display

ADS-B (Automatic Dependent Surveillance-Broadcast) works on a straightforward principle: your avionics take your GPS-derived position, altitude, groundspeed, and aircraft identification, then broadcast that data on either 978 MHz (UAT) or 1090 MHz (Extended Squitter) approximately twice per second. Other aircraft with ADS-B In receive those broadcasts. Ground stations relay the data to controllers.

The word “dependent” in that name carries the critical weight. ADS-B depends entirely on GPS as its input. If GPS is wrong, ADS-B is wrong - and it will broadcast that wrong position to everyone listening.

From the outside, this produces scenarios with direct safety implications. A controller’s scope may show an aircraft transiting restricted airspace it isn’t actually near. A flight crew’s traffic display may show targets at altitudes or bearings that don’t match anything visible outside.

The TCAS Problem: Commands to Avoid Aircraft That Aren’t There

The most serious downstream consequence involves TCAS (Traffic Collision Avoidance System). TCAS monitors traffic targets, computes potential conflicts, and can issue resolution advisories - commands to climb or descend - to prevent collisions.

In spoofed environments, aircraft have received TCAS resolution advisories for phantom traffic that didn’t exist. TCAS detected a spoofed ADS-B target, computed a conflict, and commanded an evasive maneuver against something that was nowhere nearby.

TCAS is designed as the last-resort collision avoidance layer - the final backstop before a midair. When spoofed position data triggers false resolution advisories, that backstop has been functionally compromised.

Where This Is Happening

The Eastern Mediterranean has become one of the most intense GPS spoofing environments in the world over the past two to three years. OpsGroup, a pilot safety and operations advisory organization, has documented thousands of position error events affecting commercial and general aviation aircraft operating through Cyprus, Israel, Lebanon, Egypt, Jordan, and surrounding airspace.

Other consistently affected regions include:

The Persian Gulf, particularly airspace near Iran
Eastern Europe, especially near the Baltic states and Russian-adjacent airspace

EUROCONTROL (the European Organisation for the Safety of Air Navigation) has issued multiple safety notices and NOTAMs documenting GPS interference events. The FAA has issued its own guidance. ICAO has been working the problem at the standards level.

The source is not mysterious. GPS jamming and spoofing are military electronic warfare tools. In regions with active conflict or elevated military tension, those systems run - and they don’t respect the boundaries of civil aviation corridors.

Why ADS-B Has No Built-In Defense Against Spoofed Data

When ADS-B was designed in the early 2000s, authentication was not a core requirement. A ground station or cockpit receiver that hears an ADS-B transmission has no reliable way to verify the broadcasting aircraft is actually where it claims to be. There is no cryptographic signature on those broadcasts - no mechanism to confirm a position claim has been independently validated.

That was a defensible design decision at a time when GPS spoofing was a theoretical concern rather than an operational reality. It is a much harder tradeoff today.

The practical consequence is a system that can be corrupted from outside with no real-time detection. The infrastructure collects what it hears and constructs a picture. If what it hears is false, the picture is false.

What’s Being Done to Address the Vulnerability

Progress is underway on several fronts, at varying levels of maturity.

Reporting and awareness have improved substantially. EUROCONTROL and the FAA have increased both the speed and granularity of GPS interference reporting. OpsGroup maintains a near-real-time map of reported events that professional crews and dispatchers use when planning routes through high-risk airspace. Airlines with frequent operations in affected regions have developed internal procedures - which systems to cross-check, when to treat the traffic picture with skepticism, and how to communicate GPS degradation to ATC.

Authentication research is active but not deployed. Standards bodies and researchers are working on ADS-B enhancements that would allow cryptographic verification of broadcast positions. Implementing this across a global fleet with decades of varying equipment vintages is an enormous undertaking. A fleet-wide solution is not close, but the foundational work is in progress.

VOR decommissioning has slowed. Traditional ground-based navigation - VOR, DME, ILS - provides an independent cross-check that doesn’t rely on GPS. Both the FAA and ICAO have been re-evaluating the pace of VOR shutdowns in light of the spoofing environment. The FAA paused some planned decommissioning. In a GPS-degraded environment, independent navigation infrastructure becomes more valuable, not less.

What Pilots Should Do Now

These steps apply whether you’re operating a widebody through the Levant or a piston single in unaffected domestic airspace.

Treat the traffic picture as one input, not ground truth. ADS-B In is a powerful situational awareness tool. In high-threat environments, the data feeding it may not be accurate. Visual lookout, ATC traffic advisories, and radar-based traffic information aren’t redundant to ADS-B - they’re independent inputs the system is designed to use together.

Your ADS-B Out position is data other people depend on. If your GPS is spoofed, you may be broadcasting a false position to controllers and surrounding aircraft. That affects separation. That affects the ATC picture of your entire flight.

Know your GPS integrity monitoring. Modern WAAS GPS receivers include built-in integrity monitoring. If the GPS solution falls outside acceptable parameters, the receiver will flag it. Know what that alert looks like on your specific equipment. Spoofing signatures include a sudden position shift to a location you departed hours ago, or a groundspeed jump of 200 knots or more in seconds. If those appear, trust your other instruments and revert to raw navigation.

Check current advisories before routing through affected regions. EUROCONTROL and OpsGroup GPS interference advisories are now standard preflight planning items for professional crews operating near the Mediterranean, Persian Gulf, or Eastern Europe. They belong on your checklist as well.

Key Takeaways

GPS spoofing injects fabricated positions into ADS-B, producing false traffic pictures on cockpit displays and controller scopes - with no error indication on the receiving end
TCAS resolution advisories have been triggered by phantom ADS-B targets in spoofed environments, compromising one of aviation’s final collision avoidance layers
The Eastern Mediterranean, Persian Gulf, and parts of Eastern Europe are currently the highest-risk regions, driven by military electronic warfare systems operating near civil aviation corridors
ADS-B has no authentication mechanism - there is no cryptographic verification that a broadcast position is accurate, a design limitation acceptable in the early 2000s that carries significant operational weight today
Compensating procedures are available now: cross-check traffic against visual lookout and ATC, know your GPS integrity alerts, monitor OpsGroup and EUROCONTROL advisories, and don’t assume ground-based navigation infrastructure will remain available as a fallback