GPS Spoofing, the False Positions Flooding the ADS-B Surveillance Picture, and What OPSGROUP Has Been Documenting Over the Eastern Mediterranean

GPS spoofing - the deliberate generation of fake satellite signals to feed aircraft navigation systems a false position - has been documented across the eastern Mediterranean, Levant, Iraq, and Iran since at least early 2022. Unlike jamming, spoofing produces no cockpit flags and no receiver alerts. The aircraft navigates confidently to the wrong place, and every system downstream, including the ADS-B transponder broadcasting that position to controllers and other traffic, inherits the lie.

What Is GPS Spoofing - and Why It’s Different From Jamming

Most pilots have some familiarity with jamming. A jammer transmits noise on GPS frequencies, overwhelming the satellite signals. The receiver fails, it tells you it failed, and a RAIM alert fires. The failure is honest: the instrument announces that something is wrong.

Spoofing works by a completely different mechanism. A spoofing transmitter doesn’t try to blind the receiver - it generates its own GPS-format signals, carefully timed and structured to look exactly like authentic transmissions from legitimate satellites. It creates a believable false satellite geometry. The receiver doesn’t see noise or a failure. It sees what it interprets as clean satellite data, computes a position from that data, and reports it with full confidence to every system downstream.

Nothing alerts. No flags appear. The GPS position looks like a GPS position because, as far as the receiver is concerned, it is one.

How GPS Spoofing Breaks ADS-B

ADS-B Out works by having each aircraft self-report its position. The transponder takes the GPS output, combines it with altitude and identity data, and broadcasts it at roughly one update per second. There is no position verification step on the ground - no cross-check against radar, no cryptographic authentication of the GPS data. The system takes the aircraft’s word for where it is.

This was a deliberate design choice, and in a clean environment it’s a sound one. GPS-derived position is more accurate than what secondary surveillance radar can provide. It’s globally available without expensive ground infrastructure in remote or oceanic regions. When the FAA mandated ADS-B Out with the January 2020 deadline, the goal was a genuinely better surveillance system than radar alone could deliver.

But the design rests on a load-bearing assumption: that the GPS position the aircraft reports is honest.

When spoofing corrupts that position at the source, everything downstream degrades with it. The transponder broadcasts wrong coordinates. The controller’s display shows a wrong target. Every aircraft equipped with ADS-B In shows wrong traffic in the wrong location. Nothing on any display reads “position suspect” - the corrupted data arrives with the same confidence indicator as correct data. That is a different category of failure than the system was designed to handle.

Where It’s Happening: The Eastern Mediterranean and Beyond

OPSGROUP (opsgroup.io) has been the most consistent and operationally useful tracker of GPS interference events for commercial and business aviation. They publish regular advisories, collect and analyze crew reports, and maintain geographic mapping of affected areas. OPSGROUP is not affiliated with any regulator or government body - they identified the information gap and started filling it themselves. If you fly internationally and are not following their advisories, that needs to change.

Based on OPSGROUP reporting and corroborating data from the European Union Aviation Safety Agency (EASA), GPS interference has been documented across a region stretching from the Black Sea southward through the eastern Mediterranean, into the Levant, Iraq, and Iran. The pattern shifts as underlying political and military situations evolve, but it has been persistent since at least early 2022 and the data suggests it’s expanding rather than contracting.

The Black Sea situation tracks closely with the Russian invasion of Ukraine in February 2022. Electronic warfare is a well-documented Russian military capability, and GPS disruption has been extensively documented over parts of Romania, Moldova, and Kaliningrad by both OPSGROUP and Finland’s civil aviation authority, Traficom, which has published rigorous geographic analysis of the interference patterns.

The eastern Mediterranean and Middle East problem is different in character. Crew reports point to active spoofing rather than jamming - aircraft don’t merely lose GPS, their systems confidently calculate and report wrong positions. Some of those wrong positions are specific, repeatable, and geometrically consistent in ways that suggest deliberate signal engineering.

Aircraft operating in the Beirut Flight Information Region (FIR) and the Nicosia FIR, which covers Cyprus and a large area of the eastern Mediterranean, have reported navigation systems placing them hundreds of miles from their actual position. Aircraft overflying Iran and Iraq have reported anomalies severe enough that the FMS began executing unexpected route modifications - if the system thinks you’re somewhere else, it starts computing a different route to your destination. Crews have reported unexpected waypoint sequencing and navigation commands that made no sense given their actual situation.

The Ground Proximity Warning System (GPWS) scenario has been documented in crew reports and deserves particular attention. The GPWS compares navigation system position against an onboard terrain database. If the navigation system believes the aircraft is over a mountain range when it’s actually at cruise altitude over open water, the system generates a genuine pull-up warning. It isn’t malfunctioning - it’s doing exactly what it was designed to do with corrupted upstream data.

What the Controller Sees - and Doesn’t

A controller working traffic on primary radar doesn’t care what the aircraft says about its position. Radar calculates position from the geometry of the signal return, independent of the aircraft’s navigation system. ADS-B trusts the aircraft. So when a transponder broadcasts a false position and the controller is relying on ADS-B as the primary surveillance source, the controller has a corrupted picture with no automatic alert that anything is wrong.

In oceanic airspace - across large portions of the Atlantic and Pacific beyond radar range - ADS-B is often the primary or only position data available. In parts of the Middle East beyond the range of regional radar infrastructure, the situation is similar. When GPS spoofing corrupts ADS-B in those areas, there is no radar backstop to catch it.

Controllers in the region have reportedly contacted crews to query their position when an ADS-B track didn’t match the expected route. That is the correct response - and it’s also a clear signal that something in the picture didn’t add up. The harder question is how many anomalies go undetected.

What Regulators Have Published

EASA has published several Safety Information Bulletins addressing GPS interference in the Middle East. ICAO has issued circulars to member states. The FAA has contributed to multilateral working groups on the problem. The guidance that has emerged is sound: know the affected areas, cross-check GPS against independent navigation sources, monitor for anomalies, and report what you encounter.

That last point matters more than it might appear. The picture we have of this problem’s scope comes primarily from crews who filed reports and organizations like OPSGROUP that aggregate them. There is no equivalent of an ACAS resolution advisory report - a standardized format that creates a paper trail automatically. For GPS anomalies, filing a report requires personal initiative, and many crews who manage the situation without incident don’t follow through. The real scope is probably larger than the data currently reflects.

What Pilots Should Do Right Now

Before flight, if your route passes near any of the documented areas: review OPSGROUP advisories, EASA Safety Information Bulletins, and NOTAMs for your route. Knowing in advance that you’ll be in a potentially compromised environment changes how you scan and cross-check en route.

In the cockpit, if you have an Inertial Reference System (IRS), treat it as your primary cross-check in affected airspace. The IRS is mechanically independent of GPS. It drifts over time - typically a few miles per hour - but that drift is slow and predictable. A sudden, large discrepancy between GPS position and IRS position, more than a few miles in a short period, is a strong indicator that one source is wrong. In a known spoofing environment, believe the IRS.

For aircraft without IRS - which includes most of general aviation - the cross-check tools are older but effective. Distance Measuring Equipment (DME) provides slant-range distance from a ground-based station with no relationship to satellites. VHF Omnidirectional Range (VOR) provides a magnetic bearing from a ground station. A DME distance combined with a VOR radial produces a position fix that no GPS spoofer can corrupt. This is part of why ground-based navaids still exist, and why proficiency with them matters beyond the training requirement.

RAIM (Receiver Autonomous Integrity Monitoring) - the GPS receiver’s internal self-check - is one more data point, not a guaranteed spoof detector. A sophisticated spoofing transmitter can generate self-consistent false signals that RAIM won’t flag. But an imperfect implementation will create geometric inconsistencies that RAIM will catch.

The behavioral tells are worth building into your scan. A GPS position that suddenly jumps to a new location without a corresponding flight maneuver. An FMS behaving in ways that don’t match the actual situation. Navigation commands that don’t make sense. A GPWS terrain warning at cruise altitude over flat terrain or open water. None of these is definitive in isolation, but any one of them in a known interference area warrants an immediate cross-check against independent navigation sources before continuing to trust the GPS.

Why This Problem Extends Beyond Conflict Zones

ADS-B was conceived in an era when the threat model for civil aviation GPS centered on signal degradation: atmospheric interference, multipath reflections near terrain, satellite geometry gaps. The deliberate generation of fake satellite signals to fool aircraft navigation systems was not a central design consideration.

The technology required to spoof civilian GPS - which uses an unencrypted signal format - has become significantly less exotic. Researchers have demonstrated credible spoofing using commercial software-defined radio hardware and freely available signal processing software. The threat is not permanently confined to nation-state actors near active conflict zones.

The Long-Term Technical Fixes - and Their Timeline

Multi-constellation receivers that simultaneously process American GPS, European Galileo, Russian GLONASS, and Chinese BeiDou are significantly harder to fool - an attacker must simultaneously generate fake signals for multiple independent satellite systems with internally consistent geometry across all of them. That is a substantially higher technical bar. Multi-constellation receivers are becoming more common in modern avionics, but they are not universal in older aircraft or much of the general aviation fleet.

Europe’s Galileo system has a feature called Open Service Navigation Message Authentication (OSNMA) that embeds cryptographic signatures in the satellite signal, allowing receivers to verify that the signal came from a legitimate Galileo satellite. That capability is being deployed now. American GPS does not have signal authentication for civilian users. It has been discussed for years. Adding it requires changes to the satellite signal structure and to receivers across the entire ecosystem - a process measured in years, not months.

The data tells a clear story about where the industry stands. ADS-B delivered what it promised across nearly every dimension it was designed to improve: position accuracy, update rate, coverage where radar couldn’t reach. The technology worked. The threat model it was built around didn’t fully anticipate an environment where the GPS signal itself would be adversarially manipulated. The adaptation is underway. The full technical fix is not close.

Key Takeaways

• GPS spoofing generates fake satellite signals that produce a false position with no cockpit alert - fundamentally different from jamming, which announces its own failure
• Because ADS-B Out relies on self-reported GPS position with no ground-based verification, spoofing corrupts the entire surveillance picture downstream: controller displays, ADS-B In traffic, and separation assurance
• OPSGROUP (opsgroup.io) and EASA Safety Information Bulletins are the primary operational sources for affected area mapping; these should be part of preflight research for any international routing near the eastern Mediterranean, Levant, Iraq, or Iran
• IRS, DME, and VOR provide position cross-checks entirely independent of GPS and cannot be corrupted by a GPS spoofer - proficiency with these systems is an active safety tool, not an anachronism
• Underreporting means the documented scope of this problem is probably smaller than the actual scope; filing a report when you encounter GPS anomalies contributes directly to how regulators understand and resource a response