GPS Spoofing, the Corrupted ADS-B Position, and the Surveillance Vulnerability Every Pilot Should Understand

GPS spoofing silently corrupts ADS-B surveillance by feeding falsified position data into transponders that broadcast it as fact. Unlike jamming, which triggers visible alerts, spoofing leaves receivers fully confident in a position that may be 30 miles or more from the aircraft’s actual location. This has been documented on widebody airliners over Iraq, Iran, the Levant, and the Baltic - exposing a fundamental vulnerability in the surveillance architecture modern airspace depends on.

How ADS-B Actually Works - and Why That Matters

The second word in Automatic Dependent Surveillance-Broadcast is the critical one: dependent. ADS-B does not independently determine where an aircraft is. It depends on an external source - in virtually every certified installation flying today, that source is GPS.

The GPS receiver calculates position and feeds it to the ADS-B out transponder. The transponder packages it with pressure altitude, groundspeed, track, identification, and intent data, then broadcasts on 1090 MHz for most transport category aircraft, or 978 MHz (the Universal Access Transceiver frequency) for most general aviation aircraft below 12,500 pounds maximum certificated weight. Ground stations and other aircraft receive that broadcast. Controllers build separation from it.

The system works well. When the GPS signal is honest.

The Physics Underneath the Vulnerability

GPS satellites orbit at roughly 20,000 kilometers altitude and transmit at approximately 50 watts. By the time that signal reaches an aircraft antenna, received power is around -160 dBm - one hundred sixty decibels below a milliwatt. GPS works because it uses spread-spectrum transmission and correlation techniques that are genuinely elegant from an engineering standpoint. But a weak signal is an exploitable signal.

Jamming is the blunt instrument: broadcast enough noise on the GPS frequency to overwhelm the receiver. The receiver loses lock, RAIM annunciates, and the GPS indication goes red. That is a bad day - but it is a detectable bad day. The pilot knows there is a problem.

Spoofing is fundamentally different. Instead of overwhelming the GPS signal, spoofing replaces it. A counterfeit signal uses the same modulation, the same codes, and the same timing format as a legitimate satellite transmission, broadcast at power levels slightly above the real satellites. The receiver determines the counterfeit is the strongest available signal and locks to it, then calculates a position from the false ranging data and reports that position with complete confidence.

No RAIM alert. No flags. Full status green.

Why Integrity Checks Cannot Catch a Spoofed Signal

A sophisticated spoofing operation walks the reported position gradually - a few kilometers at a time - maintaining internal consistency so the receiver’s integrity checks never register a sudden jump. The receiver computes a position that is geometrically consistent with the signal it received. It has no mechanism to distinguish that from a legitimate signal.

The Navigation Integrity Category (NIC) and Navigation Accuracy Category (NAC) values broadcast with every ADS-B position report verify that GPS-derived data meets a statistical accuracy standard. These checks are real and meaningful in a benign signal environment. But they are internal to the receiver - they verify that signals are self-consistent, not that they are authentic.

A spoofed signal with good geometry and internally consistent pseudorange data looks, from the receiver’s perspective, exactly like a legitimate signal. Because in every measurable sense, it is. It is just wrong.

What Corrupts Downstream When GPS Is Spoofed

Every system that depends on GPS position inherits the falsified data:

The Flight Management Computer places the aircraft at a location it is not.
EGPWS compares GPS position against its terrain database to generate alerts - that comparison is now corrupted.
TCAS uses ADS-B data from surrounding traffic as part of its conflict picture. If surrounding aircraft are also spoofed, the geometry used to compute resolution advisories is fiction. In reported incidents, aircraft have received resolution advisories to climb in response to apparent conflicts that were ghosts.
ADS-B out broadcasts the false position to every receiver within line of sight - including controllers and other pilots.

Where This Is Documented: The Geographic Footprint

This is not a theoretical vulnerability. EASA Safety Information Bulletin 2023-09 specifically addresses GPS jamming and spoofing affecting civil aviation and identifies four documented regions of signal integrity degradation:

Eastern Mediterranean
Black Sea region
Baltic Sea region
Suez Flight Information Region

Flight crews have described FMS systems repositioning the aircraft over airports departed hours earlier. Navigation displays have shown position jumps of 50 to 100 miles in seconds, before the receiver re-locked to the spoofed signal and reported a stable - but wrong - position. Documented anomalies have been recorded over Turkey, Israel, Lebanon, Syria, Iraq, Iran, across the Persian Gulf, eastern Ukraine, and in Finnish airspace within 200 kilometers of Russian territory.

The site GPSJam.org aggregates ADS-B transponder data to detect GPS anomaly regions in near real-time, using the density of reports with degraded position quality flags as a proxy for active interference. Their maps show large contaminated zones that shift over days and weeks, consistent with military electronic warfare operations.

Why the Architecture Was Never Designed for This Threat

When ADS-B was developed through the 1990s and into the early 2000s, the design assumption was straightforward: GPS is a reliable, high-integrity position source. Build surveillance on that foundation and inherit its reliability at a fraction of radar infrastructure cost. Structured adversarial exploitation of civil GPS by ground-based spoofing operations was not a modeled threat scenario.

The FAA ADS-B out mandate, which took effect January 1, 2020, requires GPS-sourced position in most controlled airspace. That requirement was built on the same design assumption. The integrity architecture that accompanies it - NIC, NAC, RAIM - was designed for a world where the GPS signal environment is trustworthy.

The proliferation of spoofing capability has changed that world. Software-defined radio platforms capable of generating coherent GPS-band signals are commercially available. Nation-state spoofing operations capable of producing fine-grained, internally consistent false signals require more sophisticated resources - but multiple nations demonstrably possess and operate them in airspace civil aviation transits every day.

Technical Mitigations in Development

Multi-constellation receivers raise the difficulty of spoofing substantially. A receiver simultaneously tracking GPS, Russia’s GLONASS, Europe’s Galileo, and China’s BeiDou requires fabricating four independent satellite systems with coherent geometry. Sophisticated operations account for this, but the bar is meaningfully higher. Most current Garmin navigator platforms support multiple constellations.

Receiver-level spoofing detection looks for physical inconsistencies a spoofed signal cannot easily hide: sudden jumps in apparent satellite elevation angles, signal strength patterns inconsistent with expected satellite geometry, and velocity discrepancies between GPS position derivatives and GPS Doppler measurements.

The longer-term structural solution is cryptographic signal authentication. The European Galileo constellation is testing Open Service Navigation Message Authentication (OSNMA), which cryptographically signs navigation messages so receivers can verify signal origin. The U.S. Air Force has a parallel program for GPS called Chimera (Chips Message Robust Authentication). You cannot fake an authenticated signal without the cryptographic keys, and those keys do not leave satellite operations centers.

The honest timeline: authentication operational across both GPS and Galileo, combined with certified avionics capable of processing authenticated signals, is a 10-to-15-year horizon for meaningful penetration into the global civil fleet. Some newer avionics platforms will arrive sooner. Most of the existing fleet waits for upgrade cycles.

Near-Term Protection: Procedural Cross-Checks

EASA’s guidance is direct. Cross-check. If GPS-indicated position disagrees with inertial reference system position, or with a position derived from radio navigation, treat that discrepancy as a red flag. A modern laser ring gyro IRS drifts less than 2 nautical miles per hour. It does not teleport 50 miles in a second. If GPS places the aircraft somewhere the IRS does not confirm, one system is wrong - and the IRS has no spoofing vulnerability.

For general aviation aircraft without inertial reference systems, the tools are more limited but they exist: VOR cross-radials, DME, position verification against chart landmarks. These techniques predate GPS and remain operationally valid precisely because they are independent of it. The FAA’s Minimum Operational Network of VORs - retained specifically as a GPS backup - looks more defensible with each documented spoofing event.

What This Means for the Traffic Picture in the Cockpit

If aircraft appearing on an ADS-B traffic display are broadcasting corrupted positions, that picture is not reliable. A traffic symbol showing a conflicting aircraft ahead when that aircraft is actually above is not just unhelpful - it can generate a resolution advisory that moves toward a conflict rather than away from one.

ADS-B is a genuine advancement in surveillance. Position accuracy improvements over secondary radar are real. The ability to track aircraft in oceanic airspace where radar never reached is operationally significant. Controller workload reductions are real. None of that changes because there are regions where the underlying position source can be compromised.

What changes is the mental model. ADS-B is not an independent verification of where aircraft are. It is a rebroadcast of where aircraft think they are, based on signals that can be fabricated by someone on the ground with the right equipment and motivation. Understanding that distinction is not pessimism. It is systems thinking.

If something feels wrong about where the airplane thinks it is, or where the traffic picture thinks another airplane is, treat that instinct as data. That principle predates GPS, glass cockpits, and radar. It still applies.

Key Takeaways

ADS-B is dependent surveillance: it rebroadcasts GPS-derived position, not an independently verified one. A corrupted GPS input produces a corrupted ADS-B output broadcast to everyone within line of sight.
GPS spoofing replaces the satellite signal rather than jamming it, leaving receivers fully confident and generating no alerts - making it far more dangerous than jamming from a detection standpoint.
EASA SIB 2023-09 identifies the Eastern Mediterranean, Black Sea, Baltic, and Suez regions as documented areas of GPS signal integrity degradation, with reported incidents involving position errors of 30 miles or more and position jumps of 50 to 100 miles.
Cryptographic signal authentication (Galileo OSNMA, GPS Chimera) will close the vulnerability structurally but is 10 to 15 years from meaningful penetration into the global civil fleet.
The practical near-term defense is procedural: cross-check GPS against IRS and traditional radio navigation. If the numbers disagree, the IRS is almost certainly right.