The Unencrypted Beacon - Why ADS-B Broadcasts in the Clear, How Easy It Is to Spoof a Ghost Airplane, and What the FAA Actually Does About It

ADS-B, the satellite-based surveillance system that most U.S. aircraft have been legally required to carry since January 1, 2020, broadcasts an airplane’s position, altitude, callsign, and speed in the clear - unencrypted, unscrambled, and with no digital signature proving the message is genuine. That design makes it far cheaper, faster, and more precise than radar, but it also means the system trusts any well-formed message on the right frequency. The result is a technology that has measurably improved flight safety while remaining, in a laboratory, straightforward to spoof.

What ADS-B Actually Is

Automatic Dependent Surveillance–Broadcast is a mouthful, and every word matters.

Automatic: it runs on its own. You don’t push a button or answer a query. Roughly once per second, the aircraft simply transmits.

Dependent: this is the word to circle. The system depends on the aircraft to determine its own position - straight off its GPS receiver - and then report that position honestly. It does not measure the aircraft externally.

Surveillance: it’s how aircraft are separated from one another.

Broadcast: the position is shouted out to anyone listening - ground stations, satellites, and every nearby aircraft with a compatible receiver.

How ADS-B Differs From Radar

The system it replaced, secondary surveillance radar, has an independent check built into the physics. A ground antenna sweeps around, sends an interrogation, and the transponder replies with a code and altitude. Because the radar knows which direction its antenna was pointing and how long the reply took to return, it can independently estimate bearing and range. The aircraft supplies its altitude, but the radar figures out where the aircraft is on its own. There’s a second opinion baked in.

ADS-B threw that second opinion away - for good reasons. Radar is expensive, heavy, and slow. A radar head might refresh a target only every 4 to 12 seconds depending on how fast the dish spins, it can’t see into a mountain valley, and out over the ocean there’s no radar at all.

ADS-B fixes all of that. It updates about once per second, its GPS-derived position is far more precise than a radar bearing, a ground station costs a fraction of a radar site, and the signal can be received by satellites - which is how surveillance finally reached the open ocean. Plotted against legacy radar for accuracy and update rate, ADS-B is not an incremental gain but a generational leap. That’s why controllers can run tighter, safer separation and why pilots now get free traffic and weather in the cockpit.

Why “In the Clear” Is a Problem

Every engineering decision is a trade. To get that speed, precision, coverage, and low cost, the world built a surveillance system that broadcasts openly and trusts what it hears.

Being “in the clear” means the signal is not encrypted, not scrambled, and not authenticated. There is no digital signature proving a message came from the aircraft it claims to represent. The message format is a published international standard - anyone can read it, and anyone with the right radio can transmit it.

The U.S. runs two flavors, and both broadcast openly:

1090 MHz Extended Squitter (1090ES) - used by airliners and turbine aircraft operating up high.
978 MHz Universal Access Transceiver (UAT) - used by much of general aviation, and the link that carries the free weather and traffic uplink to the cockpit.

Two links, one idea. Neither one signs its messages.

The original reasoning was defensible. Aviation radio has always been open - anyone with a scanner can listen to the tower, and old transponder codes weren’t encrypted either. Layering heavy cryptography onto a once-per-second broadcast from hundreds of thousands of aircraft, using 1960s- and 1970s-era radio spectrum and avionics certified to last decades, was seen as impractical. The engineers were solving a real problem under real constraints.

How Easy Is It to Spoof ADS-B?

In a controlled laboratory setting, spoofing ADS-B is not hard. Security researchers began pointing this out loudly more than a decade ago, around 2012, at hacker conferences like DEF CON and in academic papers.

The logic is simple: if the system trusts any well-formed message on the correct frequency, then anyone who can generate a well-formed message can inject a target. The message structure is public, and cheap software-defined radios - priced like a decent headset - can transmit on these frequencies.

In legal, controlled test setups, researchers have demonstrated creating a phantom aircraft: a “ghost” that appears on a receiver with a full position, altitude, callsign, and velocity but corresponds to no real airplane. In principle, an attacker could make one aircraft appear where it isn’t, flood a display with dozens of fake contacts, or slowly walk a target off its true course.

That’s the alarming headline. The honest threat picture is more grounded.

Why the Sky Isn’t Actually Full of Ghost Airplanes

Three things keep laboratory spoofing from becoming a routine real-world event.

First, it’s a serious federal crime. Transmitting on aviation frequencies means interfering with air navigation. The consequences are severe, and the spectrum is watched.

Second, the ground system isn’t naive. The FAA’s network doesn’t believe a single message from a single antenna. It fuses multiple sources across hundreds of ground stations and uses multilateration: when several receivers hear the same signal at slightly different times, those tiny differences in arrival time let the system triangulate where the transmission physically originated. That’s independent of what the message claims. If a message says “I’m over the mountains at 12,000 feet” but the arrival times show the energy came from a parking lot next to the airport, the contradiction is detectable. It’s the old radar’s second opinion, rebuilt in software.

Third, controllers correlate. They often have primary radar, flight plans, voice contact, and years of instinct. A target that pops into existence at 400 knots and then teleports won’t fool an experienced human for long.

So the real risk is not a Hollywood scenario of rerouting an airliner with a laptop. The FAA has been clear that safety separation does not rest on ADS-B as a blindly trusted single source. The more legitimate concerns are subtler:

Nuisance targets that increase controller workload and erode trust in the display.
Spoofing combined with GPS interference - jamming or spoofing of the satellite signal itself, a growing real-world problem - to create genuine confusion.
Privacy, since open data lets anyone track any aircraft’s tail number.

What the FAA Is Actually Doing About It

The near-term answer is validation, not encryption. Rather than locking down every transmitter, the strategy cross-checks broadcasts against sources a radio can’t fake.

Multilateration is the centerpiece. Time of arrival doesn’t lie - if your claimed position and your physical transmit location disagree, you get flagged. Wide-area multilateration networks now blanket large stretches of airspace precisely to provide that independent geometric check.

Fusion is the second layer. The controller’s picture blends radar where it exists, ADS-B, multilateration, and flight-plan data, all reconciled by software hunting for exactly the inconsistencies a spoof would create. A single lying source has to fight the entire rest of the picture.

On the research side, engineers are developing authentication schemes that could eventually let a receiver verify a message came from a legitimately equipped aircraft - without breaking compatibility with the hundreds of thousands of airplanes already flying the current standard. That backward-compatibility requirement is the hard part. You can’t push a software update to a global, certified installed base that will keep flying for another 20 to 30 years. Any deep cryptographic fix is a slow standards-body effort measured in decades, if it happens at all.

The Bottom Line for Pilots

ADS-B is not broken. It has made flying measurably safer. Cockpit traffic displays have helped countless pilots see and avoid aircraft they’d never have spotted out the window, and ocean surveillance saves both fuel and lives. The system works hundreds of thousands of times a day.

But it was built on a foundation of trust. It assumes participants are honest and leans on other systems to catch the cases where that assumption fails. Understanding that isn’t fearmongering - it’s knowing your equipment, the same way you understand that a vacuum pump can fail, a pitot tube can ice over, or GPS can drop out in a jamming environment. You don’t stop trusting the instrument; you learn its failure modes and keep your scan moving across everything else.

The deeper lesson runs through all of aviation technology: every capability you gain comes attached to an assumption you now depend on. ADS-B delivered precision, coverage, and cost savings radar never could, and the price of admission was a system that talks openly and trusts what it hears.

Key Takeaways

ADS-B broadcasts unencrypted, unauthenticated position data on 1090 MHz (airliners) and 978 MHz UAT (much of general aviation); it has been mandatory for most controlled U.S. airspace since January 1, 2020.
Unlike radar, ADS-B is “dependent” - the aircraft reports its own GPS position, removing the independent bearing-and-range check radar provided.
Spoofing a “ghost” aircraft is easy in a lab with a cheap software-defined radio, a fact security researchers have demonstrated since around 2012.
Real-world spoofing is deterred by severe federal penalties, multilateration (time-of-arrival checks), sensor fusion, and controller correlation, so ADS-B is never blindly trusted as a lone source.
The near-term defense is validation, not encryption; true cryptographic authentication is a decades-long effort because any fix must stay compatible with a huge, certified, global fleet.