Cell-Site Simulators: The Phone Surveillance You Can’t See
Cell-site simulators, commonly called Stingrays after the Harris Corporation product, are devices that impersonate cell towers. Every phone within range connects to the fake tower instead of a real one, exposing call data, text messages, and precise location to the operator.
How they work
- The Stingray broadcasts a strong cell signal that mimics a legitimate tower
- Phones in range automatically connect to the strongest signal (by design)
- The device captures IMSI numbers (unique phone identifiers) from every connected phone
- It can intercept call metadata, SMS content, and in some cases voice calls
- By triangulating signal strength, it pinpoints phone locations to within a few meters
The collateral problem
Stingrays are dragnet devices. To target one suspect’s phone, the device intercepts data from every phone within range, potentially thousands of innocent people in a city block. This makes them one of the most invasive surveillance tools in law enforcement’s arsenal.
Where they’re deployed
The EFF Atlas of Surveillance has documented cell-site simulator use by law enforcement agencies across the US. Sentinel tracks these as the “Cell-Site Simulator” type. Due to the classified nature of the technology, the true number of deployments is likely much higher than documented.
Known users include the FBI, DEA, ICE, IRS, local police departments in major cities, and the US Marshals Service. Many agencies have signed non-disclosure agreements with Harris Corporation that prevent them from disclosing Stingray use, even to judges.
Detection
Detecting a cell-site simulator requires monitoring for anomalies in cell tower behavior:
- Unexpected tower appearances
- Towers requesting older, less-secure connection protocols (2G downgrade attacks)
- Signal strength inconsistencies
- Towers with missing or suspicious identifiers
These are the RF signatures that cell-site simulators leave in your environment, and they are detectable with commodity hardware.
Legal status
The Supreme Court has not directly ruled on cell-site simulators. Some federal courts have required warrants. Many local police departments have used them without warrants for years, often hiding their use from courts through parallel construction (fabricating an alternative explanation for how they obtained evidence).