GPS Spoofing, the Phantom Position Problem, and the ADS-B Integrity Gap That Has ICAO Racing to Redesign Civil Surveillance

When GPS spoofing occurs, it does not just disorient the crew - it corrupts every downstream system that trusts the GPS position feed, including the ADS-B Out broadcast your transponder transmits twice per second to air traffic control and surrounding traffic. This has happened to multiple crews on multiple aircraft types in documented incidents, primarily in the Eastern Mediterranean and broader Middle East, and the vulnerability is structural to how ADS-B was designed.

How ADS-B Out Creates a Systemic Spoofing Vulnerability

ADS-B Out works by broadcasting a data packet on 1090 MHz approximately twice per second. That packet contains your ICAO aircraft address, GPS-derived latitude and longitude, GPS-derived altitude, velocity, and identification. Every element of the position data originates from the GPS receiver. The system was designed around a single foundational assumption: the GPS position your aircraft reports is accurate.

That assumption was reasonable in 2002, when ADS-B architecture was taking shape. GPS jamming existed but was largely confined to military environments. The scenario where a ground-based transmitter would broadcast counterfeit GPS signals powerful enough to override the real satellite constellation and fool commercial receivers was a research problem, not an operational one.

That is no longer the case.

How GPS Spoofing Works - and Why Receivers Can’t Detect It

Real GPS signals arrive at your antenna having traveled roughly 12,000 miles from orbit, with a signal power in the range of 20 watts spread across the entire surface of the earth beneath each satellite. The received signal sits deep in the noise floor. GPS receivers are optimized to extract that signal, but they have no native mechanism to verify that a signal claiming to be from a satellite actually is.

A spoofer transmits counterfeit GPS signals at higher power. The receiver, following its normal acquisition logic, locks onto the stronger signal. Pseudorange measurements check out. The navigation message appears valid. The receiver reports a confident position fix - one that may be wrong by hundreds of miles.

The distinction between jamming and spoofing is critical. Jamming overwhelms the signal; the receiver loses lock and displays a GPS failure flag. The crew knows something is wrong. Spoofing produces no flags. The receiver reports a valid, confident fix. The FMS updates. The moving map updates. The ADS-B transponder begins broadcasting the spoofed position as verified truth.

The Downstream Effects: ATC, Traffic Displays, and TCAS

When a spoofed position goes out over ADS-B, the effects extend well beyond the affected aircraft’s own situational awareness.

Air traffic control receives the spoofed ADS-B track as the aircraft’s reported position. Other aircraft with ADS-B In display the wrong traffic location. And TCAS computes resolution advisories using a corrupted picture of the relative geometry between your aircraft and surrounding traffic. Crews have reported maneuvering on TCAS RAs in spoofed airspace - climbing or descending for a conflict that the geometry indicated was real, but was not. That is a documented failure mode, not a theoretical one.

Controllers in affected regions have faced situations where the ADS-B track and the secondary surveillance radar return for the same aircraft were in disagreement. Reconciling two conflicting position data sources under traffic load, in real time, is not a trivial operational challenge.

Where Spoofing Has Been Documented

The Eastern Mediterranean and Middle East have been the most consistently affected areas in commercial aviation. ICAO issued a flight safety bulletin in 2019 specifically addressing GPS interference and spoofing in the region, identifying multiple operator reports of unexpected FMS position jumps, navigation discontinuities, and position alerts inconsistent with normal signal degradation. Areas flagged included the eastern Mediterranean, routes near Cyprus, and corridors in the Levant.

The geographic pattern correlates with active military activity. GPS spoofing for military applications - protecting ground installations from drone incursion, disrupting adversary navigation systems - is a documented technique used extensively in conflict zones. Civil aircraft share the same frequencies, and the spoofing does not discriminate between a hostile UAV and an Airbus A320 on approach.

Documented incidents are not confined to the Middle East. Spoofing affecting civil aviation has been reported in the Baltic region, around certain Russian military exercise areas, and in other conflict-adjacent corridors. The geographic footprint has expanded as the military utility of GPS spoofing has been validated in real operations and as the underlying technology has become more accessible.

Todd Humphreys and his team at the University of Texas Radionavigation Laboratory have published extensively on GPS spoofing vulnerabilities in civil aviation since the early 2010s. The Open Sky Network, which aggregates ADS-B data from volunteer receiver stations globally, has provided researchers a tool for mapping where position anomalies cluster - and the pattern is not random. It concentrates in regions with active electronic warfare environments.

Existing Defenses and Their Limitations

Inertial Reference System (IRS/INS)

The inertial reference system does not use GPS. It uses accelerometers and ring laser gyroscopes to dead-reckon position from a known starting point on the ground. On a long flight, IRS drift accumulates - which is precisely why GPS updates are valuable. But the IRS has a position derived entirely from measuring actual motion through space, independent of any external signal. A sudden GPS jump of hundreds of miles will disagree sharply with the IRS, and modern flight management computers will generate an alert.

The limitation: a sophisticated spoofing attack moves the apparent position gradually rather than abruptly. A slow, deliberate drift can stay within normal IRS drift tolerances long enough to cause genuine confusion before the system flags the discrepancy. The IRS is a meaningful defense against blunt attacks. Against subtle ones, the margin narrows.

Receiver Autonomous Integrity Monitoring (RAIM)

RAIM uses redundant satellite geometry to verify that the position solution is internally consistent. It was designed for satellite faults - scenarios where one satellite gives a bad reading while the others remain clean. A spoofing attack that synthesizes a coherent false signal from all visible satellites can fool RAIM. RAIM checks internal consistency; it cannot check authenticity. These are fundamentally different problems.

Multi-Constellation Receivers

If a receiver combines GPS with Galileo and GLONASS simultaneously, and a spoofer is only broadcasting false GPS signals, the other constellations will disagree. Spoofing all three major constellations simultaneously is significantly harder, requiring more hardware, more frequency coverage, and more processing. Certified avionics receivers that combine inputs from multiple satellite systems have meaningfully better spoofing resilience than single-constellation receivers.

Galileo OSNMA

The Galileo system includes a feature specifically designed for this problem: Open Service Navigation Message Authentication (OSNMA). OSNMA allows receivers to cryptographically verify that navigation messages originated from actual Galileo satellites, not a ground-based transmitter. It uses digital signatures that cannot be forged without the private key, which resides on the satellite. Galileo began broadcasting OSNMA signals in 2023, and receiver manufacturers are actively integrating the verification capability into hardware. Widespread deployment in aviation avionics will represent a meaningful structural defense.

The Installed Base Problem

This is the part of the story with the longest timeline.

The avionics equipment installed under the ADS-B mandate - transponders and GPS units that went into hundreds of thousands of general aviation aircraft between roughly 2015 and 2020 - is predominantly single-constellation hardware with no authentication capability and no multi-constellation cross-check. That investment was real, and that hardware is not going to be replaced quickly. For that installed base, the spoofing vulnerability is structural. Turning it over to hardware with better security architecture will take years, and possibly a decade or more.

ICAO and the FAA are engaged on this. Standards work is underway on navigation message authentication requirements and on what the next generation of minimum operational performance standards for GNSS receivers should include. ICAO Document 10039 covers GNSS performance and is the foundation document for where that work is headed. The standards process is methodical for good reasons. But the gap between current standards and current threats is real, and it will remain real for years.

What Pilots Can Do Now

The most practical response is disciplined position cross-checking, particularly in regions with known spoofing activity.

If the moving map position doesn’t match visual references, if the FMS shows a sudden discontinuity, if GPS and IRS positions disagree significantly - these are flags. Cross-check against VOR radials if in range. Confirm position with ATC. Do not treat a confident-looking GPS display as automatically correct.

Operators flying international routes through affected regions have added explicit crew procedures for GPS anomaly events: confirm IRS initialization is solid before entering known corridors, verify all position sources agree at the corridor entry point, and brief the crew on contingency procedures if the GPS picture becomes suspect during transit. It is airmanship applied to an electronic threat - the same methodology applied to known icing regions or turbulence forecasts.

The Structural Problem ADS-B Was Not Designed to Solve

ADS-B was built as a cooperative surveillance system. It trusts the broadcasting aircraft. There is no mechanism within the current standard for a ground station to independently verify that the position being broadcast corresponds to where the aircraft actually is. This was a deliberate design choice made in an era when the threat model didn’t require it.

Compare this to primary radar, which bounces a signal off the airframe and measures the return. Primary radar is extremely difficult to spoof at the physics level. ADS-B is entirely dependent on the integrity of the aircraft’s own navigation.

Aviation is not going to abandon ADS-B. The traffic situational awareness benefits are real, the deployment is too widespread, and the investment is too large. But the current threat environment is forcing serious technical work on what authentication looks like in the next generation of surveillance standards - how ground stations verify that a broadcast position corresponds to an independent reference, and how controllers receive a data quality flag on ADS-B inputs that allows appropriate weighting against radar returns.

The design choices being made now will define the surveillance architecture aviation operates on for the next thirty years. The lesson from the ADS-B experience is direct: security must be designed in from the start. Adding it after the threat has already arrived is expensive, slow, and leaves the installed base exposed for a decade.

Key Takeaways

• GPS spoofing is an active operational threat, not a theoretical one, with documented incidents affecting commercial aviation in the Eastern Mediterranean, Baltic region, and conflict-adjacent corridors worldwide.
• When a GPS receiver is spoofed, the false position propagates immediately to ADS-B Out broadcasts, ATC displays, traffic displays on other aircraft, and TCAS geometry calculations - the effects are systemic, not isolated.
• IRS and RAIM provide partial protection against blunt spoofing attacks, but sophisticated attacks that move position gradually or synthesize a consistent false constellation can defeat both.
• Multi-constellation receivers and Galileo’s OSNMA authentication (broadcasting since 2023) represent the structural path forward, but most of the GA fleet installed under the ADS-B mandate lacks these capabilities.
• Today’s best defense is procedural: active cross-checking of all position sources, especially GPS versus IRS agreement, and heightened skepticism about confident GPS displays when transiting known affected regions.