Jamming
A transmitter blasts noise on GNSS frequencies so the receiver hears nothing at all.
Like someone shouting over a whisper.
Meaconing explained for everyone
Say it: MEE-kuh-ning · from "masking beacon"
Meaconing means capturing real satellite navigation signals and playing them back from somewhere else. A GPS receiver hears the replay, trusts it, and calculates the wrong position. Every built-in check still says the position is correct.
This site explains it from zero. No prior knowledge needed.
The receiver now reports the attacker's location. All checks stay green. A GNSS-only drone has no way to tell.
commercial flights a day were being fed fake GPS signals by August 2024.
OPSGROUP, 2024flights spoofed in a single month, mid-July to mid-August 2024.
OPSGROUP, 2024ships a day had GPS jammed in the Gulf and Strait of Hormuz in June 2025.
Windward, 2025drones a month lost by Ukraine in 2023, mostly to electronic warfare.
RUSI, 2023Start here · GNSS in 60 seconds
GNSS (Global Navigation Satellite System) is the family name for GPS and its cousins: Europe's Galileo, Russia's GLONASS and China's BeiDou. Together they have well over 100 satellites in orbit.
Each satellite carries an atomic clock and keeps broadcasting one simple message: "This is satellite 12. The time is exactly this. I am exactly here."
Your receiver notes how late each message arrives. Radio travels at the speed of light, about 300 km every thousandth of a second, so a delay converts into a distance. With distances to several satellites, the receiver works out where it is.
One detail matters for everything on this site. The receiver's own clock is cheap and inaccurate, so it needs a fourth satellite just to work out its own clock error. Remember that. It is exactly the gap that meaconing slips through.
Altitude of GPS satellites. The signal spends about 0.07 seconds travelling to you.
Distance error caused by a timing error of just one millionth of a second.
By the time it reaches Earth, the signal is weaker than the background radio noise around it.
Every way GNSS can fail · the short version
A signal this faint is easy to drown, fake, copy or block. Meaconing is one threat among several. Here is each in a sentence, with an everyday comparison and whether you would notice it.
A transmitter blasts noise on GNSS frequencies so the receiver hears nothing at all.
Like someone shouting over a whisper.
A transmitter fakes satellite signals and gradually walks the receiver to a false position or time.
Like a forged letter in a convincing envelope.
An attacker records real satellite signals and replays them. The content is genuine, so it passes authenticity checks.
Like a recording of your friend's real voice, played from the wrong room.
Deep dive below ↓Tunnels, buildings, forests and roofs cut the line of sight to the satellites.
Like losing phone signal in a lift.
Signals bounce off glass and concrete, so the receiver measures the wrong distances. Common in city "canyons".
Like an echo off a cliff confusing which way a sound came from.
Solar storms disturb the upper atmosphere and make signals flicker or fade, especially near the poles and equator.
Like heat haze bending what you see.
The satellite systems themselves can fail. Galileo's public service was down for about six days in July 2019.
Like a power cut at the source.
Faulty electronics and illegal in-vehicle "privacy jammers" leak noise onto GNSS bands, sometimes near airports.
Like a neighbour's broken radio humming through the wall.
Want the full picture of every GNSS threat, with incident data from aviation and shipping? Visit our sister site gnssdenial.com.
Meaconing deep dive
A spoofer has to build fake satellite signals from scratch. That takes skill, and the result can contain small mistakes that a careful receiver might catch.
A meaconer doesn't make anything up. It listens to the real satellites with one antenna and re-transmits what it hears from another, a little louder. The messages, codes and digital signatures are all authentic, because they are the real thing.
The only false part is where and when the signal is coming from. A receiver locked onto the copy computes the position of the attacker's listening antenna, not its own.
| What the receiver gets | Real sky | Spoofing | Meaconing |
|---|---|---|---|
| Signal origin | Satellites | Attacker's generator | Satellites, re-sent by attacker |
| Message content | Genuine | Forged | Genuine |
| Digital signature | Valid | Fails, if checked | Valid |
| Satellites agree? | Yes | Usually | Yes |
| Position computed | Your own | Attacker's choice | Attacker's antenna |
| Skill needed | None | High | Low to moderate |
In 1940 and 1941, German bombers found their way over Britain at night using radio beacons. Britain's No. 80 (Signals) Wing of the Royal Air Force answered with "masking beacons", or meacons. Stations in England picked up the German beacon signals and re-radiated them from British soil.
A navigator taking a bearing on what sounded like his own beacon was pointed somewhere else. Accounts from the period describe German aircraft getting lost, and some landing at British airfields by mistake.
Eighty years later the principle is the same. The beacons are now satellites, and the navigator is often a computer with no window to look out of.
Live relay
One antenna receives the sky, another re-transmits it a few microseconds later. Cheap repeaters sold to bring GPS indoors work exactly this way, which is why using them without authorisation is restricted.
Result: victims nearby compute the receiving antenna's position.
Record and replay
The attacker records raw signals at one place and time, then plays them back later. If the recording was made on a moving vehicle, the replay produces a smooth, believable path.
Result: victims relive someone else's journey, at the wrong time.
Long-distance relay
Signals captured in one city are streamed over the internet and re-broadcast in another. Research shows this can even re-create authenticated messages at the far end.
Result: victims compute a position hundreds of kilometres away.
Every navigation message really did come from a satellite. There is nothing false inside the signal to find.
Authentication such as Galileo's OSNMA proves a message came from a satellite. A copy of that message did. In field tests, OSNMA receivers reported meaconed signals as authentic.
Integrity checks such as RAIM look for one satellite that disagrees with the others. In meaconing they all arrive through the same relay, so they agree perfectly.
Receivers lock onto the strongest matching signal. The real one is fainter than background noise, so the copy only needs a modest boost.
Remember the fourth satellite that fixes the receiver's clock? The relay adds the same extra delay to every satellite. To the receiver, that looks exactly like its own clock running slightly late. It quietly corrects "its clock" and reports a clean fix.
The extra delay never shows up as an error. The position simply becomes the attacker's antenna, and the time becomes slightly wrong.
Why it's so hard to detect · in real time
After the event, analysts can often reconstruct a meaconing attack from logs. The hard part is catching it while it happens, from inside the aircraft, with only the receiver's own view. Here is what a drone and its ground station experience.
The drone navigates by GNSS on a survey line. Everything is genuinely fine.
A relay on a hilltop 2 km away starts re-sending the sky at low power. Nothing visible changes yet.
The copy rises gently above the real signal. Signal-strength readings move a little, within normal flight variation.
The receiver's tracking slides from the real signal to the copy. Its clock estimate jumps by a few microseconds, and the clock filter smooths that over.
The receiver now reports the hilltop. Eleven satellites, valid signatures, integrity check passed.
It believes it has drifted 2 km and steers to fix an error that doesn't exist, flying away from its real route.
Return-to-home and geofencing both rely on the same false position. The drone heads for a "home" computed from the attacker's location.
Most anti-spoofing tools were designed to catch forged signals. Against a genuine signal replayed, most of them have little to grab onto.
| Check | How it works | Catches meaconing in real time? |
|---|---|---|
| Integrity monitoring (RAIM) | Flags a satellite that disagrees with the rest. | No. All satellites arrive through the same relay and agree. |
| Signal authentication (OSNMA, Chimera) | Verifies a cryptographic signature in the message. | No. The signatures are real. |
| Multi-constellation, multi-frequency | Compares GPS, Galileo, BeiDou and several bands. | Partly. A wideband relay copies every band at once. |
| Signal-strength monitoring | Watches for signals that are suspiciously strong. | Sometimes. A careful attacker keeps power close to normal. |
| Clock-jump monitoring | Watches for sudden steps in the receiver's clock. | Sometimes. A gradual takeover hides inside normal clock noise. |
| Direction finding (antenna arrays) | Detects that every signal comes from one direction. | Often. Heavy, costly and rare on small drones. |
| Inertial sensors only | Compares GNSS with measured motion. | Sometimes. Small-drone sensors drift quickly and get pulled along by the GNSS. |
| Independent absolute navigation | Compares GNSS with terrain, imagery and inertial motion. | Yes. The terrain below doesn't match the reported position. |
GNSS reports almost no movement while airspeed and motor data say the vehicle is flying.
Several vehicles report the same point, often a hilltop, building or vessel.
The receiver's time steps by microseconds, or log timestamps don't match other systems.
Real satellites vary with elevation. A relay makes them look similar.
The video feed shows a road or coastline that shouldn't be there.
Geofence alarms, or return-to-home heading in an unexpected direction.
Crewed aircraft vs autonomous platforms
Crewed aircraft meet GNSS interference every day and keep flying safely. They have trained people on board, layers of independent instruments, ground infrastructure and air traffic control behind them.
Long-haul twin-aisle jets carrying roughly 250 to 500+ passengers across oceans and continents.
Single-aisle jets for short and medium routes, roughly 120 to 240 seats. Most of the world's flights.
Smaller airliners linking regional airports, often at lower altitudes.
Private and corporate aircraft flying the same airspace with airline-grade avionics.
Offshore transport, air ambulance, search and rescue, police and utility work.
Large crewed aircraft that routinely fly near conflict zones.
Light piston aircraft and training flights. They have fewer backups, but a pilot who can look outside.
Patrol, surveillance and calibration aircraft with mission crews and extra sensors.
Two trained pilots who notice when something doesn't add up: "The screen says we're over the sea, but the coast is right there."
Airliners carry high-grade inertial systems. Modern units drift about 0.6 nautical miles per hour without any satellite help.
VOR, DME and ILS stations give position and approach guidance that don't depend on satellites.
Controllers see the aircraft on radar and can give headings and warnings.
Industry and regulator guidance, briefings on known hotspots, and checklists for GNSS loss.
Coastlines, runways and cities give an instant reality check in good weather.
But how does your autonomous platform handle it?
| Layer of protection | Crewed aircraft | Typical autonomous drone |
|---|---|---|
| Who notices? | Pilots on board, cross-checking constantly | Nobody on board. An operator, if any, watches a plausible-looking map from far away. |
| Backup position | Navigation-grade inertial systems | Small, low-cost motion sensors that drift quickly without correction |
| Ground radio aids | VOR, DME and ILS along routes and at airports | Usually none, and few reach low altitudes or remote areas |
| Outside help | Air traffic control and radar | Often beyond controlled airspace and radar cover |
| Reaction | Judgement, procedures, diversion | Autopilot logic that trusts GNSS by design |
| Failsafe | Crew decides where to go | Return-to-home steers by the same corrupted position |
| Against meaconing | Humans spot implausible positions | Every automated check passes, so the drone carries on |
Drones are already being lost to this in large numbers. In 2023 the Royal United Services Institute estimated Ukraine was losing about 10,000 drones a month, mostly to electronic warfare that targets navigation and control links.
Military and civil operators often group uncrewed aircraft by size using NATO's classes. All of them rely on GNSS, and the larger they are, the more is at stake when it lies.
Quadcopters for inspection, filming and short-range scouting.
Survey, mapping, delivery trials and hand-launched reconnaissance.
Long-range fixed-wing and VTOL survey, border and pipeline patrol.
Runway or catapult launched, many hours aloft for surveillance.
Medium-altitude, long-endurance aircraft flying for a day or more.
Navion Terra coversmicro to MALE
Guides · one question per page
About this site, its sources and disclosures: meaconing.com/about.
Frequently asked questions
Meaconing is recording or capturing real satellite navigation signals and re-broadcasting them. A receiver that listens to the copy calculates the position of the attacker's antenna instead of its own, while believing the result is correct.
MEE-kuh-ning. The word comes from "meacon", short for "masking beacon".
From the Second World War. In 1940–41 the Royal Air Force's No. 80 (Signals) Wing used "masking beacons" that picked up German navigation beacon signals and re-radiated them from Britain to mislead Luftwaffe bombers.
It is a type of spoofing, but a special one. Ordinary spoofing creates fake signals. Meaconing re-sends genuine ones. That is why it passes authenticity checks that can reveal ordinary spoofing.
Authentication proves a message came from a real satellite. A replayed message did come from a real satellite. Tests have shown OSNMA-enabled receivers reporting meaconed signals as authentic.
The relay adds the same delay to every satellite's signal. A receiver already solves for its own clock error, so it treats the delay as its clock running late and reports a clean position fix.
With a live relay, the drone's reported position becomes the attacker's receiving antenna. The error equals the distance between the drone and that antenna, from metres to kilometres. With record-and-replay or long-distance relay it can be hundreds of kilometres.
It is very hard with GNSS checks alone, because the signals are genuine and consistent. Clues like clock jumps or uniform signal strength can be hidden by a careful attacker. The reliable method is comparing GNSS with independent absolute navigation such as terrain referencing and scene matching.
Yes. Airliners have trained pilots, navigation-grade inertial systems, ground radio aids and air traffic control. Most drones rely on GNSS as their only absolute position, have no one on board, and run autopilots and failsafes that trust GNSS.
In most countries, transmitting on GNSS frequencies without authorisation is illegal, and GNSS repeaters are tightly regulated. Most large-scale interference today is attributed to military electronic warfare.
Fit navigation that does not depend on GNSS for absolute position, cross-check GNSS against it, avoid relying on GNSS alone for return-to-home and geofencing, and log receiver data so incidents can be analysed.
Navion Terra by Ultrakinematic is a resilient navigation system for drones from small multirotors up to the MALE class. It fuses inertial, visual, scene-matching and terrain-referenced navigation, rejects jammed, spoofed or meaconed GNSS, and outputs position with a confidence estimate at 100–250 Hz.
Glossary
Page last reviewed .