--- title: How to Detect Fake Cell Towers Near You | daily.dev description: A hands-on demonstration using Dragon OS and software-defined radio hardware (RTL-SDR, HackRF, LimeSDR) to scan for cell towers and detect potential fake base... canonical: https://daily.dev/posts/how-to-detect-fake-cell-towers-near-you-2wxsjvbx0 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How to Detect Fake Cell Towers Near You | daily.dev og:description: A hands-on demonstration using Dragon OS and software-defined radio hardware (RTL-SDR, HackRF, LimeSDR) to scan for cell towers and detect potential fake base... og:url: https://daily.dev/posts/how-to-detect-fake-cell-towers-near-you-2wxsjvbx0 og:image: https://api.daily.dev/og/posts/2WxsjvbX0.png og:image:alt: How to Detect Fake Cell Towers Near You og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How to Detect Fake Cell Towers Near You **[David Bombal](https://daily.dev/sources/davidbombal)** · 62 min read · 0 upvotes · 0 comments ## Summary A hands-on demonstration using Dragon OS and software-defined radio hardware (RTL-SDR, HackRF, LimeSDR) to scan for cell towers and detect potential fake base stations (stingrays/IMSI catchers) used by law enforcement or nefarious actors. The guest, a hacking instructor and author, explains cell network vulnerabilities including SS7's lack of authentication, unencrypted metadata, and temporary identifiers (RNTI) that can be linked back to unique device IDs during initial connection. Using tools like cell_search and Falcon, the demo shows how to establish a baseline of cell towers in an area and identify suspicious new towers with no cell ID and strong signal strength. Recommendations include GrapheneOS and Signal for better protection, alongside ProtonVPN for public Wi-Fi, though it's noted these don't fully protect against network-level surveillance since metadata remains unencrypted. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can I detect a fake cell tower or stingray near me? Scan the full cell frequency range repeatedly (roughly 600 MHz to 3 GHz) using a tool like cell_search on Dragon OS with an RTL-SDR or HackRF to build a baseline of legitimate towers by cell ID and frequency. A newly appearing tower with unusually strong signal and no cell ID is suspicious, since carriers always assign cell IDs while law enforcement or intelligence stingrays often leave that field blank. _Developers building surveillance-detection tools can track SDR and RF security techniques like this on daily.dev._ ### How much does it cost to build a homemade stingray or IMSI catcher? A homemade cell tower interceptor can be built for around $2,000, compared to roughly $50,000 for a commercial stingray unit historically sold only to law enforcement and intelligence agencies (with some commercial units costing up to $250,000). The low cost and public availability of technical knowledge is driving an increase in homegrown, illegal cell interception devices. _Security researchers tracking the cost and prevalence of surveillance hardware follow RF security coverage on daily.dev._ ### Does using Signal or GrapheneOS protect me from cell tower interception? Signal encrypts message content end-to-end, so someone intercepting cell traffic cannot read the messages, but they can still see your metadata, including who you connect to and which cell tower you use. GrapheneOS offers the most confidential phone operating system available but still connects to the same insecure cell network, so location and connection metadata remain exposed regardless of the app or OS used. _Anyone weighing privacy tools against real network exposure can follow mobile security analysis on daily.dev._ ## Similar posts on daily.dev - [There’s a hidden Android setting that spots fake cell towers](https://daily.dev/posts/there-s-a-hidden-android-setting-that-spots-fake-cell-towers-4u14z84mq) · Hacker News · 0 upvotes · 0 comments - [Demonstrating The Sheer Lack Of Security In First Gen Cellular Networks](https://daily.dev/posts/demonstrating-the-sheer-lack-of-security-in-first-gen-cellular-networks-ykbtufypb) · Hackaday · 0 upvotes · 0 comments - [Schneier on Security](https://daily.dev/posts/schneier-on-security-vyu66d29m) · Schneier on Security · 0 upvotes · 0 comments - [ORNL builds more sensitive GPS interference detector](https://daily.dev/posts/ornl-builds-more-sensitive-gps-interference-detector-l2ez6takr) · The Register · 0 upvotes · 0 comments --- Tags: [#vpn](https://daily.dev/tags/vpn) [View this post on daily.dev](https://daily.dev/posts/how-to-detect-fake-cell-towers-near-you-2wxsjvbx0) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How to Detect Fake Cell Towers Near You","url":"https://daily.dev/posts/how-to-detect-fake-cell-towers-near-you-2wxsjvbx0","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-detect-fake-cell-towers-near-you-2wxsjvbx0"},"datePublished":"2026-08-14T14:12:50.485Z","dateModified":"2026-09-14T07:54:29.723Z","description":"A hands-on demonstration using Dragon OS and software-defined radio hardware (RTL-SDR, HackRF, LimeSDR) to scan for cell towers and detect potential fake base...","image":"https://i.ytimg.com/vi/NQM9x9kxqUs/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/NQM9x9kxqUs/sddefault.jpg","isAccessibleForFree":true,"articleSection":"David Bombal","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"David Bombal","logo":"https://media.daily.dev/image/upload/s--Dz6oUxSb--/f_auto/v1710503980/logos/davidbombal","url":"https://daily.dev/sources/davidbombal"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-detect-fake-cell-towers-near-you-2wxsjvbx0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"vpn","timeRequired":"PT62M","video":{"@type":"VideoObject","name":"How to Detect Fake Cell Towers Near You","description":"A hands-on demonstration using Dragon OS and software-defined radio hardware (RTL-SDR, HackRF, LimeSDR) to scan for cell towers and detect potential fake base...","thumbnailUrl":"https://i.ytimg.com/vi/NQM9x9kxqUs/sddefault.jpg","uploadDate":"2026-08-14T14:12:50.485Z","duration":"PT62M","url":"https://api.daily.dev/r/2WxsjvbX0","embedUrl":"https://www.youtube.com/embed/NQM9x9kxqUs"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"David Bombal","item":"https://daily.dev/sources/davidbombal"},{"@type":"ListItem","position":3,"name":"How to Detect Fake Cell Towers Near You"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-to-detect-fake-cell-towers-near-you-2wxsjvbx0#faq","mainEntity":[{"@type":"Question","name":"How can I detect a fake cell tower or stingray near me?","acceptedAnswer":{"@type":"Answer","text":"Scan the full cell frequency range repeatedly (roughly 600 MHz to 3 GHz) using a tool like cell_search on Dragon OS with an RTL-SDR or HackRF to build a baseline of legitimate towers by cell ID and frequency. A newly appearing tower with unusually strong signal and no cell ID is suspicious, since carriers always assign cell IDs while law enforcement or intelligence stingrays often leave that field blank. Developers building surveillance-detection tools can track SDR and RF security techniques like this on daily.dev."}},{"@type":"Question","name":"How much does it cost to build a homemade stingray or IMSI catcher?","acceptedAnswer":{"@type":"Answer","text":"A homemade cell tower interceptor can be built for around $2,000, compared to roughly $50,000 for a commercial stingray unit historically sold only to law enforcement and intelligence agencies (with some commercial units costing up to $250,000). The low cost and public availability of technical knowledge is driving an increase in homegrown, illegal cell interception devices. Security researchers tracking the cost and prevalence of surveillance hardware follow RF security coverage on daily.dev."}},{"@type":"Question","name":"Does using Signal or GrapheneOS protect me from cell tower interception?","acceptedAnswer":{"@type":"Answer","text":"Signal encrypts message content end-to-end, so someone intercepting cell traffic cannot read the messages, but they can still see your metadata, including who you connect to and which cell tower you use. GrapheneOS offers the most confidential phone operating system available but still connects to the same insecure cell network, so location and connection metadata remain exposed regardless of the app or OS used. Anyone weighing privacy tools against real network exposure can follow mobile security analysis on daily.dev."}}]} ```