IMSI Catchers & Cell-Site Simulators: How Stingrays Intercept Your Phone — and How to Detect One
An IMSI catcher — also called a cell-site simulator or Stingray — is a fake cell tower that forces your phone down to 2G, disables encryption, and captures your International Mobile Subscriber Identity. Here is how these cell-phone interceptors work, who can legally buy one, how to detect an IMSI catcher, and how to block or defend against one.
Published 2025-03-10
Your phone is constantly searching for the strongest available cell tower. It has no reliable way to verify that a tower is legitimate. An IMSI catcher — also called a Stingray, after the brand name of one commercial product — exploits this by impersonating a real tower, forcing your phone to connect to it instead. What happens next depends on what the operator wants to collect. What IMSI Means IMSI stands for International Mobile Subscriber Identity — a 15 digit number permanently assigned to your SIM card. It identifies you to the network independently of your phone number. Your IMSI does not change when you swap numbers, get a new phone, or use a prepaid SIM. Capturing your IMSI means capturing a permanent, unique identifier tied to you. How the Attack Works Step 1: Force a 2G downgrade Modern cellular networks (4G LTE, 5G) have mandatory encryption and authentication. 2G (GSM) does not. An IMSI catcher broadcasts a strong 2G signal, causing nearby phones to downgrade from 4G to 2G — your phone shows "E" (GPRS) instead of "4G" or "5G." Step 2: Intercept the IMSI When your phone connects to the fake tower, it transmits your IMSI in cleartext as part of the registration handshake. The catcher logs it. This takes milliseconds. Step 3: Optional — intercept content In 2G mode without encryption enabled, SMS messages and voice calls can be intercepted in real time. More sophisticated systems can also: Jam specific numbers while allowing others through Send spoofed SMS messages appearing to come from known contacts Measure signal timing to triangulate your precise location The…
Frequently asked questions
What is an IMSI catcher?
An IMSI catcher — also called a cell-site simulator, a Stingray, or an international mobile subscriber identity catcher — is a device that impersonates a legitimate cell tower. Your phone connects to the strongest tower it can find and has no reliable way to verify that the tower is genuine, so the fake tower captures your IMSI, can force a downgrade to unencrypted 2G, and can log identity, approximate location, and sometimes call or SMS metadata.
How do you detect an IMSI catcher?
Detection looks for the tells a fake tower leaves: an unexpected 2G/GSM downgrade in a 4G/5G area, a cell with no neighbour list, a cell ID or LAC that changes at a fixed location, abnormally high broadcast power, or missing encryption. Android tools such as AIMSICD, Crocodile Hunter, and SnoopSnitch (on rooted phones), plus SDR scanners (RTL-SDR + gr-gsm), flag these anomalies. A cell-site simulator detector cross-checks the towers your phone sees against known-good tower databases.
How do you block or protect against an IMSI catcher?
You cannot physically block a cell-site simulator without also losing service, but you can remove what it exploits: disable 2G/GSM in your phone's network settings (modern Android and iOS both allow this) so it cannot force a downgrade; use end-to-end encrypted apps such as Signal so intercepted traffic is useless; enable airplane mode in sensitive locations; and treat a sudden 2G-only connection in a 4G/5G area as a red flag. A Faraday pouch stops all radio if you need certainty.
What is an IMSI catcher catcher?
An IMSI catcher catcher (ICC) is a system that detects IMSI catchers rather than being one. It passively monitors the cellular environment — tower identities, signal strength, encryption status, and downgrade attempts — and alerts when a tower behaves like a fake. SnoopSnitch, AIMSICD, Crocodile Hunter, and research projects such as SeaGlass and CellGuard are examples.
Is an IMSI catcher the same as a Stingray or a cell-site simulator?
Yes — they are the same class of device under different names. 'Stingray' is a Harris Corporation brand name that became generic; 'cell-site simulator' is the neutral law-enforcement term; 'IMSI catcher' is the technical term; and 'cell phone interceptor' is a colloquial name. All describe a fake base station that captures phone identities and can intercept or downgrade connections.
More field notes
If any of this frightens you: this site documents what signal physics makes possible in a laboratory, which is not evidence about what is happening to any individual. If you feel watched, targeted or unsafe, that distress is real and treatable. Read about paranoia, mental health and how to get help, or call a free 24/7 line — 988 in the US and Canada, 116 123 in the UK and Norway, 13 11 14 in Australia, or find your country at findahelpline.com.