Rogue Cellular Threats, Explained
Rogue base stations, IMSI catchers and false-base-station SMS blasters are different tools with different purposes. Lumping them together as one vague "fake tower" problem hides how each one actually works.
What they share is that they exploit the trust between phones and the cellular network around them.
Rogue Base Stations
A rogue base station is unauthorized cellular infrastructure that poses as the real thing or interferes with how nearby phones behave on the network.
Depending on the equipment, network generation and attack chain, rogue base stations can support device and subscriber identification, presence detection, tracking, network downgrade, denial of service, fraudulent message delivery and surveillance.
A rogue base station doesn't automatically mean a fully compromised phone. But calling it "IMSI collection" undersells the threat.
IMSI Catchers
An IMSI (International Mobile Subscriber Identity) is the subscriber identity tied to a SIM or eSIM. An IMSI catcher is designed, in part, to pull that identity from nearby phones.
A single observation can establish presence. Repeated observations can reveal arrival, departure, routine, association and movement.
Sometimes simply knowing that a person was there is the valuable part.
SMS Blasters
A normal text message travels through the carrier's messaging infrastructure. Along the way, carriers have chances to inspect, filter and block known malicious traffic.
A false-base-station SMS blaster skips that path. The attacker brings portable cellular equipment into the target area and sends fraudulent messages straight to nearby phones.
New Zealand Police documented a 2024 SMS-blaster case in which a false cell tower was believed to have sent thousands of scam messages.1 In the UK, City of London Police reported in 2026 on the sentencing of a man whose van held an active SMS-blaster system used to send malicious messages while bypassing mobile-network security.2
Phones within range can be targeted with the attacker's messages.
Airports, hotels, campuses, financial districts, government facilities, military areas, diplomatic locations, transportation hubs and major events can all draw this kind of attack.
Tracking, Manipulation and Disruption
The threat goes beyond text messages. Rogue cellular systems can build intelligence from presence and movement, interfere with normal cellular behavior and knock out legitimate service.
Depending on the equipment and configuration, a rogue cellular system may combine several of these capabilities.
Where Kingfisher Fits
Kingfisher detects. Kingfisher Watch shows. Portable Kingfisher units look for rogue cellular infrastructure, and Kingfisher Watch shows your team what they find, on your own systems. Learn more about Kingfisher and Kingfisher Watch.
If the Threat Is Invisible, Detection Comes First
Find out what is operating around your sites today.
Public Sources
- New Zealand Police, Op Orca — smishing scam smashed, October 3, 2024.
- City of London Police, Man sentenced following first UK seizure of SMS blaster fraud equipment used to spam members of the public, September 1, 2026.