Multilateration, the Mode S Reply That Broadcasts Your Identity Without ADS-B, and the Surveillance Network That Was Already Watching Before the Mandate

Mode S transponders broadcast a unique 24-bit aircraft identifier on every radar reply, making aircraft trackable via multilateration with or without ADS-B Out.

Aviation Technology Analyst

Pilots without ADS-B Out have never been fully off the grid. Mode S transponders have included a unique 24-bit aircraft identifier in every radar reply since the standard was introduced in the 1980s, and a surveillance technique called multilateration has been calculating positions from those replies for decades - with no equipment changes required from the aircraft.

What Is Multilateration (MLAT)?

Multilateration, abbreviated MLAT, calculates an aircraft’s position using a concept called time difference of arrival. When a transponder fires a reply, that signal radiates outward in all directions and reaches every receiver within line of sight. Because each receiver sits at a different distance from the aircraft, each captures the signal at a slightly different moment - differences measured in microseconds or tens of nanoseconds.

If you know precisely when each receiver captured the signal, and exactly where each receiver sits on the ground, you can work backward to determine where the signal originated. Three receivers constrain a two-dimensional position fix. A fourth receiver adds the altitude dimension. Five or more add redundancy and sharpen accuracy.

The underlying mathematics - hyperbolic positioning - is the same principle the Royal Navy used for submarine tracking in the 1940s, the same geometry that powered the LORAN navigation network for decades, and the same concept behind precision indoor positioning systems in use today.

How Accurate Is MLAT Positioning?

With properly synchronized receiver clocks and good geometric spread between stations, modern MLAT systems can locate an aircraft to within a few hundred feet horizontally. That’s not the precision of a GPS-derived ADS-B Out position, but accurate enough to build a clean traffic picture, support instrument approach surveillance, and establish a reliable track history.

Coverage is a direct function of receiver density and aircraft altitude. At 10,000 feet over a major metropolitan area, an aircraft is likely inside the MLAT coverage of multiple independent networks simultaneously. At 500 feet over rural terrain with no nearby receiver stations, commercial MLAT coverage may be absent entirely.

The floor for reliable commercial coverage has been falling as receiver networks grow. A few years ago, below 3,000 feet outside congested corridors was where tracking often went dark. In population-dense areas today, coverage extends considerably lower, and the trend continues as receiver counts climb.

What Is a Mode S Address and Why Does It Matter?

Every Mode S transponder contains a 24-bit unique identifier called the Mode S address. Assigned through the certification process and derived from the aircraft’s registration authority, it’s tied to the N-number in the FAA registry in the United States. It follows the aircraft for its entire operational life.

That address is transmitted in every transponder reply. The signal doesn’t travel only to the radar that sent the interrogation - it radiates outward and reaches every receiver within line of sight. That’s the behavior most pilots have never thought about.

How Is Mode S Different From Older Transponder Standards?

Older Mode A and Mode C transponders respond to every interrogation from every radar in range. In a crowded terminal area with dozens of aircraft responding simultaneously, those transmissions overlap and corrupt each other - a problem engineers call synchronous garble.

Mode S solves this through selective interrogation. The radar knows each aircraft’s unique address, calls that specific transponder directly, and only that unit responds. This dramatically reduces channel congestion and establishes a direct, individually addressed data link between radar and aircraft.

European airspace extended this capability further with Mode S Enhanced Surveillance, which extracts additional parameters - true airspeed, magnetic heading, roll angle, selected altitude - directly from aircraft avionics through the Mode S data link, without any crew action required. American airspace has not deployed Enhanced Surveillance at that scale, but the underlying infrastructure is the same Mode S architecture, and the capability has been on the table for years.

How the FAA Deployed Wide Area Multilateration

The FAA’s Wide Area Multilateration (WAM) program was built to extend surveillance into environments where traditional rotating radar falls short. Primary radar relies on line-of-sight geometry - terrain blocks it, and low-altitude flight in mountainous areas can drop completely out of the radar picture.

Alaska became one of the most significant WAM deployments in the United States for exactly this reason. Bush flying routes through the Alaska Range, approaches into narrow valleys, traffic on corridors that traditional en route radar never saw cleanly - WAM brought those aircraft into the surveillance picture for the first time and meaningfully changed the safety environment for controllers working those facilities.

Surface movement multilateration is now standard at major airports. Every aircraft on the surface with a Mode S transponder can be located in three dimensions regardless of where approach radar is pointing - the capability that drives the surface traffic displays now visible in ground control facilities and on some EFB applications.

Who Else Is Running MLAT Networks?

FlightAware and Flightradar24 both operate independent receiver networks completely separate from the FAA’s infrastructure. Flightradar24 has more than 50,000 active receiver stations globally. FlightAware maintains a comparable footprint across North America.

A significant portion of those stations are contributed by volunteers - pilots, aviation enthusiasts, and hobbyists who install small software-defined radio receivers at their homes, airports, or rooftops and feed decoded transponder data back to the tracking network in exchange for premium account access. The network grows itself.

These receivers are entirely passive. They don’t interrogate anything. They capture every Mode S reply that propagates through their coverage volume, timestamp it with sufficient precision to contribute to MLAT calculations, and report it upstream. Whether or not the aircraft has ADS-B Out, a Mode S address that multiple receivers hear simultaneously produces a calculable position.

If a dotted track line appears on FlightAware or Flightradar24 instead of a solid one, that dotted line is almost always MLAT-derived.

What Does MLAT Mean for ADS-B Compliance Monitoring?

After the ADS-B Out mandate took effect in January 2020, not every aircraft operating in rule airspace was immediately compliant. Some had FAA waivers. Some flew below the mandate floor. Some were simply not yet upgraded.

The FAA’s enforcement approach has been gradual rather than aggressive, but MLAT data is part of the monitoring architecture. If a known Mode S address appears repeatedly inside Class B or Class C airspace without an associated ADS-B Out position broadcast, that pattern is detectable. The address traces to an N-number. The N-number traces to a registered owner. The discrepancy is documentable.

The Privacy Debate and the FAA’s PIA Program

The public tracking debate accelerated around 2022 when journalists used publicly available ADS-B data to track private jets belonging to executives and public figures in real time. Entering a tail number into a public tracking app produced a complete travel itinerary.

The National Business Aviation Association (NBAA) pushed hard for stronger privacy protections. The FAA expanded its Privacy ICAO Address (PIA) program in response. Under PIA, qualifying operators receive a rotating, randomized ICAO address that changes on a regular schedule, making it difficult for public aggregators to build a continuous history tied to a specific tail.

PIA addresses the public tracking problem - not the ATC surveillance problem. The FAA’s operational systems still see every transponder reply. Safety infrastructure still tracks the aircraft. The anonymization is aimed at the commercial aggregation layer, not the surveillance foundation required for operational safety.

MLAT adds a further complication. A commercial receiver network building a position from transponder replies may publish that track regardless of whether the address is in the current PIA rotation, if the randomized address hasn’t been matched to the block list before the data goes live. The administrative timing of address rotation and real-time data flows don’t always align cleanly - a gap that hasn’t been definitively closed.

Why Turning Off Your Transponder Isn’t What You Think

Primary radar - the foundational surveillance layer - transmits an active signal and detects returns off aircraft fuselages. No transponder required. MLAT requires a responding transponder, so switching it off does remove the aircraft from MLAT, ADS-B, and Mode S data.

But primary radar still detects the aircraft as a return.

Turning off the transponder doesn’t create invisibility. It creates an uncooperative primary return that ATC automation flags as an unknown and unresolved target. Identity, altitude, and squawk code all disappear simultaneously, generating exactly the kind of controller attention a pilot didn’t intend.

Why This Matters for Pilots

The surveillance picture ATC works from is layered by design:

  • Primary radar - detects fuselage returns, no transponder required, forms the foundation
  • Mode C and Mode S - adds altitude and unique aircraft identity
  • ADS-B Out - adds GPS precision and a self-reported velocity vector
  • MLAT - fills geometric gaps between primary radar coverage volumes

A fully equipped aircraft contributes to all of those layers simultaneously and gives ATC the richest possible picture of where it is and where it’s going.

For pilots flying older equipment exempt from the ADS-B mandate: if the transponder is Mode S, its unique address is being logged on every interrogation reply. In high-receiver-density airspace, position is likely calculable by commercial MLAT networks at cruise altitude. In any radar environment, an aircraft with an active transponder is inside the FAA’s surveillance picture.

That’s not an argument for or against any particular equipment decision. It’s an argument for understanding what the equipment is actually doing.


Key Takeaways

  • Mode S transponders broadcast a unique 24-bit address on every radar reply - tied to the aircraft’s N-number in the FAA registry and in use since the 1980s
  • Multilateration (MLAT) calculates position from time difference of arrival across multiple passive receivers - no ADS-B Out required
  • The FAA’s Wide Area Multilateration (WAM) network extends coverage into mountainous terrain and airport surfaces; Alaska was one of its most significant deployments
  • FlightAware and Flightradar24 each operate independent MLAT networks with 50,000+ stations globally, largely fed by volunteer software-defined radio operators
  • The FAA’s Privacy ICAO Address (PIA) program anonymizes public-facing tracking data but does not affect ATC surveillance systems
  • Turning off a transponder removes identity from MLAT and ADS-B data but leaves a primary radar return that ATC flags as an unresolved unknown target

Radio Hangar. Aviation talk, built by pilots. Listen live | More articles