GPS Spoofing, the Phantom ADS-B Position, and the Surveillance Threat Growing Above Europe and the Middle East

GPS spoofing does not just mislead the pilot flying the affected aircraft - it corrupts the surveillance picture for every controller and every other aircraft receiving that aircraft’s ADS-B broadcast. EUROCONTROL documented thousands of GPS interference events across European and surrounding airspace between 2022 and 2024, and the problem is geographically concentrated in some of the world’s busiest international corridors. This is an active, operational threat, not a theoretical one.

What ADS-B Actually Is - and Why That Makes It Vulnerable

ADS-B stands for Automatic Dependent Surveillance, Broadcast. Those first two words carry the vulnerability. The system is automatic and dependent - the aircraft determines its own position, primarily through GPS, and broadcasts that position continuously to anyone listening. Ground stations receive it. Other aircraft receive it via ADS-B In. The entire traffic picture is built from it.

Traditional radar works from the other direction. The antenna sends a pulse, that pulse reflects off the aircraft, and the system calculates position from the return signal’s travel time. The aircraft does not need to know where it is. Radar is an independent source of truth.

ADS-B reverses that relationship entirely. The aircraft reports its own position. If GPS is wrong, the broadcast is wrong, and the surveillance picture is wrong - with no automatic flag to indicate that anything has failed.

The Difference Between Jamming and Spoofing

GPS jamming is the simpler problem. A jammer floods the GPS frequency with noise; the receiver cannot hear the satellites, the system fails, and the cockpit typically shows an indication. It is bad, but it is detectable.

Spoofing is fundamentally different. A spoofing transmitter broadcasts fake GPS signals that look, from the receiver’s perspective, identical to legitimate satellite signals. The receiver locks on, computes a position, and reports it as valid. No warning annunciator. No flag. No degradation indication. The receiver is functioning exactly as designed - the signals it is processing happen to be fraudulent.

The receiver cannot distinguish a spoofed signal from a genuine one without additional cross-reference information. This is not a malfunction. It is the system working correctly on bad inputs.

Where This Is Happening Now

EUROCONTROL’s Aviation Intelligence Unit has tracked thousands of GPS interference events from 2022 through 2024. The geographic distribution is not random. Elevated interference activity has been documented in the eastern Mediterranean, the Baltic Sea region near the Finnish and Estonian borders with Russia, and broadly across the Middle East - including airspace over and around Iraq, Iran, Syria, and Israel.

The FAA began issuing NOTAMs warning of GNSS interference in the eastern Mediterranean in 2022. Those warnings have been updated and extended multiple times since. Pilots planning flights in or through these regions should check current NOTAMs; the interference advisories are present and specific.

What Spoofing Looks Like Inside the Cockpit

Pilots operating in affected regions have reported consistent symptoms. The most dramatic is a sudden, large position jump - the GPS position indicator shows the aircraft relocating by tens of miles with no corresponding sensation or outside reference to support it. Displayed groundspeed and track do not match what instruments and outside cues suggest.

In documented cases, flight management systems have computed that the aircraft was positioned over an airport and began presenting approach guidance, when the aircraft was actually at cruise altitude over open water or desert. FMS automation is sophisticated enough to recognize proximity to an airport and respond to it. When the position data feeding that logic is spoofed, the automation responds to a situation that does not exist.

That mismatch - automation behaving inconsistently with actual aircraft state - creates significant crew workload and confusion, particularly when GPS spoofing is not immediately identified as the cause.

The ADS-B Surveillance Integrity Problem

When an aircraft broadcasts a spoofed GPS position via ADS-B Out, every downstream receiver gets the wrong information. Other aircraft with ADS-B In cockpit displays see that aircraft in the wrong location. Controllers receiving ADS-B through ground stations see the wrong position. Any system using ADS-B data to compute separation or traffic geometry is working from corrupted inputs.

TCAS - the Traffic Collision Avoidance System required on most transport-category aircraft - is largely resistant to GPS spoofing. TCAS operates through transponder interrogation: it transmits a signal, the nearby transponder responds, and TCAS calculates range and closure rate from the reply. TCAS does not use GPS position at all. A spoofed aircraft still has a functional transponder; TCAS will still see it.

ADS-B In is a different matter. It shows where other aircraft report themselves to be, based on what they are broadcasting. A nearby aircraft broadcasting a spoofed position appears in the wrong location on the cockpit display - with no warning that the information is inaccurate.

The Backup Layers That Currently Matter

The system is not defenseless. Most high-traffic controlled airspace retains primary or secondary radar as a cross-check on ADS-B data. Controllers with radar coverage can detect when an ADS-B target’s reported position does not correlate with the radar return. That discrepancy is a meaningful alert that something is wrong.

The longer-term concern involves trajectory. Both the FAA’s NextGen program and Europe’s SESAR have moved steadily toward ADS-B as the primary surveillance method, with a corresponding intent to reduce dependence on expensive, infrastructure-intensive ground radar. In oceanic airspace, where radar never reached, ADS-B through satellite networks like Aireon on the Iridium constellation provides coverage where nothing previously existed.

Progressively reducing radar infrastructure as ADS-B becomes more dominant is a risk calculus worth examining carefully if GPS spoofing can silently compromise ADS-B - and it demonstrably can.

Technical Countermeasures in Development

Receiver Autonomous Integrity Monitoring (RAIM) is the first line of defense already built into aviation GPS receivers. RAIM cross-checks signals from multiple satellites against each other; if one satellite’s solution disagrees significantly with the others, RAIM flags it and can exclude it. Unsophisticated spoofing can be caught this way.

The problem is that a sophisticated attack can produce internally consistent spoofed signals - all wrong in exactly the same way, all agreeing with each other. The receiver sees good signal quality, good geometry, good RAIM status, and a position that is simply incorrect.

The deeper technical answer is cryptographic signal authentication, specifically Navigation Message Authentication (NMA). The concept: the satellite signs its navigation message with a cryptographic code the receiver can verify. A spoofing transmitter cannot produce a valid authentication code without the private key held by the satellite operators. The newer civilian GPS frequencies - L5 and L1C - include or are planned to include authentication mechanisms. Aviation GPS receivers capable of validating these signals would be fundamentally more resistant to spoofing.

The challenge is time. Aviation GPS receivers are certified avionics. Development and certification cycles are measured in years. Fleet turnover in general aviation is measured in decades.

Inertial Navigation Systems (INS) offer a GPS-independent cross-check: they compute position from accelerometers and gyroscopes, tracking acceleration over time from a known starting point. A significant divergence between INS position and GPS position is a meaningful warning signal.

DME - Distance Measuring Equipment - provides another independent layer. DME measures slant-range distance to a ground station; multiple stations can produce a position solution entirely independent of GPS. The FAA has deliberately maintained DME infrastructure even as GPS has become dominant, partly for this reason. Active work continues on DME-based positioning as a GPS-independent en-route navigation layer.

What Pilots Should Do Now

Know the high-risk geography. If operating in or transiting the eastern Mediterranean, Baltic region, or Middle East broadly, elevated alertness to GPS anomalies is warranted. These areas are flagged in current NOTAMs and in EUROCONTROL’s published safety information.

Cross-check navigation actively. GPS has been reliable long enough that many pilots have stopped actively validating it against other sources. In interference-prone airspace, that habit needs to return. If GPS position and VOR radial, DME range, or outside visual references disagree, that discrepancy is information. Do not automatically privilege GPS over corroborating sources.

Understand your automation’s degradation modes. On aircraft with integrated FMS, know what happens when the system loses GPS confidence. Does it revert automatically to radio navigation? Does it require crew action? Does it continue presenting guidance on a degraded position without a clear indication? That section of the aircraft systems documentation matters before it becomes relevant in flight.

Report anomalies. EUROCONTROL’s interference tracking depends on flight crew reports. The FAA’s Aviation Safety Reporting System (ASRS) accepts these reports under no-jeopardy protection. A sudden large position jump, FMS behavior inconsistent with actual aircraft state, or groundspeed and track that do not correlate with other references are all worth reporting. The collective surveillance picture of where and how this problem occurs improves with each report.

The Longer Arc

The technical barrier to GPS spoofing has decreased over time. Software-defined radio hardware capable of signal generation is commercially available. The documented incidents have been geographically concentrated in ways consistent with nation-state actors operating near conflict zones and certain borders, but the capability is not exclusively held at that level.

Aviation has navigated analogous challenges before. The introduction of GPS created a new dependency on satellite signal availability; the response was RAIM for integrity monitoring, WAAS for improved accuracy and integrity in approach operations, maintained radio navigation infrastructure as backup, and procedures built around the failure modes. The result was a system that is reliable, accurate, and appropriately hedged.

The same process is underway for spoofing. The problem is documented. The failure modes are understood at a technical level. ICAO’s GNSS Panel, EUROCONTROL’s safety teams, the FAA’s technical centers, and avionics manufacturers are all engaged. Cryptographic authentication, INS cross-checking, DME backup positioning, and improved RAIM algorithms all exist in some form; the gap is between a known threat and a fully certified, widely fielded technical solution.

The gap will close. The question is how the aviation system manages the interim period, particularly as the infrastructure balance shifts further toward ADS-B.

Key Takeaways

GPS spoofing broadcasts false position data without triggering any cockpit or system warning, making it fundamentally more dangerous than GPS jamming, which at least produces a detectable failure indication.
ADS-B Out is GPS position, broadcast - spoofed GPS directly corrupts the surveillance picture for controllers and other aircraft, while TCAS remains largely unaffected because it uses transponder interrogation, not GPS.
EUROCONTROL documented thousands of interference events between 2022 and 2024, concentrated in the eastern Mediterranean, Baltic region, and Middle East; FAA NOTAMs on GNSS interference in these areas have been active since 2022.
Cryptographic signal authentication (NMA) in newer GPS signal formats is the technical solution, but aviation certification timelines and fleet turnover rates mean full adoption is a long-horizon project.
Current pilot mitigations are awareness of high-risk geography, active cross-checking against VOR/DME/INS references, understanding automation degradation modes, and filing anomaly reports with EUROCONTROL or ASRS.