Meaconing explained for everyone

Meaconing: your navigation hears an echo and believes it.

Say it: MEE-kuh-ning · from "masking beacon"

Meaconing means capturing real satellite navigation signals and playing them back from somewhere else. A GPS receiver hears the replay, trusts it, and calculates the wrong position. Every built-in check still says the position is correct.

This site explains it from zero. No prior knowledge needed.

Incident replay · drone survey flightT+02:06
1 · NormalReal sky signals
2 · Echo onAttacker starts relaying
3 · CaptureReceiver switches to echo
4 · DeceivedWrong, yet "valid"

The receiver now reports the attacker's location. All checks stay green. A GNSS-only drone has no way to tell.

What the GPS receiver says
1.9 km off
Satellites tracked11 ✓
Signal authenticationPASS ✓
Integrity check (RAIM)PASS ✓
Fix quality3D ✓
What Navion Terra says
8 m off
GNSS vs terrain belowDisagree
GNSS vs own motionDisagree
GNSS weightRejected
Terrain + vision fixesActive ✓

Satellite navigation is under attack. Every day.

1,500

commercial flights a day were being fed fake GPS signals by August 2024.

OPSGROUP, 2024
41,000

flights spoofed in a single month, mid-July to mid-August 2024.

OPSGROUP, 2024
970

ships a day had GPS jammed in the Gulf and Strait of Hormuz in June 2025.

Windward, 2025
10,000

drones a month lost by Ukraine in 2023, mostly to electronic warfare.

RUSI, 2023

Start here · GNSS in 60 seconds

How your GPS knows where you are

GNSS (Global Navigation Satellite System) is the family name for GPS and its cousins: Europe's Galileo, Russia's GLONASS and China's BeiDou. Together they have well over 100 satellites in orbit.

Each satellite carries an atomic clock and keeps broadcasting one simple message: "This is satellite 12. The time is exactly this. I am exactly here."

Your receiver notes how late each message arrives. Radio travels at the speed of light, about 300 km every thousandth of a second, so a delay converts into a distance. With distances to several satellites, the receiver works out where it is.

One detail matters for everything on this site. The receiver's own clock is cheap and inaccurate, so it needs a fourth satellite just to work out its own clock error. Remember that. It is exactly the gap that meaconing slips through.

Four satellites each send time and position. The receiver turns travel time into distance. sat 1 sat 2 sat 3 sat 4: fixes the clock d₁ = c × delay your receiver solves x, y, z + clock error
≈ 20,200 km

Altitude of GPS satellites. The signal spends about 0.07 seconds travelling to you.

300 m

Distance error caused by a timing error of just one millionth of a second.

Below noise

By the time it reaches Earth, the signal is weaker than the background radio noise around it.

Every way GNSS can fail · the short version

Eight things that break satellite navigation

A signal this faint is easy to drown, fake, copy or block. Meaconing is one threat among several. Here is each in a sentence, with an everyday comparison and whether you would notice it.

You notice

Jamming

A transmitter blasts noise on GNSS frequencies so the receiver hears nothing at all.

Hard to notice

Spoofing

A transmitter fakes satellite signals and gradually walks the receiver to a false position or time.

Hardest to notice

Meaconing

An attacker records real satellite signals and replays them. The content is genuine, so it passes authenticity checks.

Deep dive below ↓
You notice

Blockage

Tunnels, buildings, forests and roofs cut the line of sight to the satellites.

Sometimes

Multipath

Signals bounce off glass and concrete, so the receiver measures the wrong distances. Common in city "canyons".

Sometimes

Space weather

Solar storms disturb the upper atmosphere and make signals flicker or fade, especially near the poles and equator.

Sometimes

System faults

The satellite systems themselves can fail. Galileo's public service was down for about six days in July 2019.

Sometimes

Accidental interference

Faulty electronics and illegal in-vehicle "privacy jammers" leak noise onto GNSS bands, sometimes near airports.

Want the full picture of every GNSS threat, with incident data from aviation and shipping? Visit our sister site gnssdenial.com.

Meaconing deep dive

The attack that tells the truth, at the wrong time and place

Spoofing forges. Meaconing copies.

A spoofer has to build fake satellite signals from scratch. That takes skill, and the result can contain small mistakes that a careful receiver might catch.

A meaconer doesn't make anything up. It listens to the real satellites with one antenna and re-transmits what it hears from another, a little louder. The messages, codes and digital signatures are all authentic, because they are the real thing.

The only false part is where and when the signal is coming from. A receiver locked onto the copy computes the position of the attacker's listening antenna, not its own.

What the receiver getsReal skySpoofingMeaconing
Signal originSatellitesAttacker's generatorSatellites, re-sent by attacker
Message contentGenuineForgedGenuine
Digital signatureValidFails, if checkedValid
Satellites agree?YesUsuallyYes
Position computedYour ownAttacker's choiceAttacker's antenna
Skill neededNoneHighLow to moderate

An old trick from the Second World War

In 1940 and 1941, German bombers found their way over Britain at night using radio beacons. Britain's No. 80 (Signals) Wing of the Royal Air Force answered with "masking beacons", or meacons. Stations in England picked up the German beacon signals and re-radiated them from British soil.

A navigator taking a bearing on what sounded like his own beacon was pointed somewhere else. Accounts from the period describe German aircraft getting lost, and some landing at British airfields by mistake.

Eighty years later the principle is the same. The beacons are now satellites, and the navigator is often a computer with no window to look out of.

The meaconer listens to the satellites and rebroadcasts them louder. The drone computes the meaconer's position. real signal, faint meaconer listen · delay · re-send copy, louder + later drone: real position computes: "I'm at the tower"

Three ways to meacon

Live relay

The repeater

One antenna receives the sky, another re-transmits it a few microseconds later. Cheap repeaters sold to bring GPS indoors work exactly this way, which is why using them without authorisation is restricted.

Result: victims nearby compute the receiving antenna's position.

Record and replay

The recording

The attacker records raw signals at one place and time, then plays them back later. If the recording was made on a moving vehicle, the replay produces a smooth, believable path.

Result: victims relive someone else's journey, at the wrong time.

Long-distance relay

The tunnel

Signals captured in one city are streamed over the internet and re-broadcast in another. Research shows this can even re-create authenticated messages at the far end.

Result: victims compute a position hundreds of kilometres away.

Why the receiver believes it

The data is genuine

Every navigation message really did come from a satellite. There is nothing false inside the signal to find.

The signatures check out

Authentication such as Galileo's OSNMA proves a message came from a satellite. A copy of that message did. In field tests, OSNMA receivers reported meaconed signals as authentic.

All satellites agree

Integrity checks such as RAIM look for one satellite that disagrees with the others. In meaconing they all arrive through the same relay, so they agree perfectly.

Louder wins

Receivers lock onto the strongest matching signal. The real one is fainter than background noise, so the copy only needs a modest boost.

The delay hides in the clock

Remember the fourth satellite that fixes the receiver's clock? The relay adds the same extra delay to every satellite. To the receiver, that looks exactly like its own clock running slightly late. It quietly corrects "its clock" and reports a clean fix.

The extra delay never shows up as an error. The position simply becomes the attacker's antenna, and the time becomes slightly wrong.

Each satellite distance gets the same extra delay, which the receiver treats as clock error sat 1sat 2sat 3sat 4 distance to attacker's antenna + same delay → "my clock is off"

Why it's so hard to detect · in real time

Inside a meaconing incident, second by second

After the event, analysts can often reconstruct a meaconing attack from logs. The hard part is catching it while it happens, from inside the aircraft, with only the receiver's own view. Here is what a drone and its ground station experience.

  1. Normal flight

    The drone navigates by GNSS on a survey line. Everything is genuinely fine.

  2. Meaconer switches on

    A relay on a hilltop 2 km away starts re-sending the sky at low power. Nothing visible changes yet.

  3. Power creeps up

    The copy rises gently above the real signal. Signal-strength readings move a little, within normal flight variation.

  4. Capture

    The receiver's tracking slides from the real signal to the copy. Its clock estimate jumps by a few microseconds, and the clock filter smooths that over.

  5. Wrong position, clean fix

    The receiver now reports the hilltop. Eleven satellites, valid signatures, integrity check passed.

  6. The autopilot "corrects"

    It believes it has drifted 2 km and steers to fix an error that doesn't exist, flying away from its real route.

  7. Failsafe makes it worse

    Return-to-home and geofencing both rely on the same false position. The drone heads for a "home" computed from the attacker's location.

Ground station display at T+20 s
GNSS fix3D ✓
Satellites in use11 ✓
Position dilution (HDOP)0.8 ✓
OSNMA authenticationPASS ✓
RAIM integrityPASS ✓
MapPlausible ✓
Reality: the drone is 2 km from where every indicator says it is. The operator may be kilometres away, watching a screen that looks normal.

Which checks catch meaconing as it happens?

Most anti-spoofing tools were designed to catch forged signals. Against a genuine signal replayed, most of them have little to grab onto.

CheckHow it worksCatches meaconing in real time?
Integrity monitoring (RAIM)Flags a satellite that disagrees with the rest.No. All satellites arrive through the same relay and agree.
Signal authentication (OSNMA, Chimera)Verifies a cryptographic signature in the message.No. The signatures are real.
Multi-constellation, multi-frequencyCompares GPS, Galileo, BeiDou and several bands.Partly. A wideband relay copies every band at once.
Signal-strength monitoringWatches for signals that are suspiciously strong.Sometimes. A careful attacker keeps power close to normal.
Clock-jump monitoringWatches for sudden steps in the receiver's clock.Sometimes. A gradual takeover hides inside normal clock noise.
Direction finding (antenna arrays)Detects that every signal comes from one direction.Often. Heavy, costly and rare on small drones.
Inertial sensors onlyCompares GNSS with measured motion.Sometimes. Small-drone sensors drift quickly and get pulled along by the GNSS.
Independent absolute navigationCompares GNSS with terrain, imagery and inertial motion.Yes. The terrain below doesn't match the reported position.

Tell-tale signs for operators

Position stuck in place

GNSS reports almost no movement while airspeed and motor data say the vehicle is flying.

A suspiciously fixed location

Several vehicles report the same point, often a hilltop, building or vessel.

Small clock or time jumps

The receiver's time steps by microseconds, or log timestamps don't match other systems.

Every satellite equally strong

Real satellites vary with elevation. A relay makes them look similar.

Map vs camera mismatch

The video feed shows a road or coastline that shouldn't be there.

Failsafes acting oddly

Geofence alarms, or return-to-home heading in an unexpected direction.

Crewed aircraft vs autonomous platforms

Piloted aircraft cope with skill, and lots of backup

Crewed aircraft meet GNSS interference every day and keep flying safely. They have trained people on board, layers of independent instruments, ground infrastructure and air traffic control behind them.

Wide-body airliners

Long-haul twin-aisle jets carrying roughly 250 to 500+ passengers across oceans and continents.

Narrow-body airliners

Single-aisle jets for short and medium routes, roughly 120 to 240 seats. Most of the world's flights.

Regional jets and turboprops

Smaller airliners linking regional airports, often at lower altitudes.

Business jets

Private and corporate aircraft flying the same airspace with airline-grade avionics.

Helicopters

Offshore transport, air ambulance, search and rescue, police and utility work.

Military transports and tankers

Large crewed aircraft that routinely fly near conflict zones.

General aviation

Light piston aircraft and training flights. They have fewer backups, but a pilot who can look outside.

Crewed special missions

Patrol, surveillance and calibration aircraft with mission crews and extra sensors.

Human instinct and judgement

Two trained pilots who notice when something doesn't add up: "The screen says we're over the sea, but the coast is right there."

Inertial reference systems

Airliners carry high-grade inertial systems. Modern units drift about 0.6 nautical miles per hour without any satellite help.

Ground radio aids

VOR, DME and ILS stations give position and approach guidance that don't depend on satellites.

Air traffic control radar

Controllers see the aircraft on radar and can give headings and warnings.

Procedures and training

Industry and regulator guidance, briefings on known hotspots, and checklists for GNSS loss.

A window

Coastlines, runways and cities give an instant reality check in good weather.

But how does your autonomous platform handle it?

Layer of protectionCrewed aircraftTypical autonomous drone
Who notices?Pilots on board, cross-checking constantlyNobody on board. An operator, if any, watches a plausible-looking map from far away.
Backup positionNavigation-grade inertial systemsSmall, low-cost motion sensors that drift quickly without correction
Ground radio aidsVOR, DME and ILS along routes and at airportsUsually none, and few reach low altitudes or remote areas
Outside helpAir traffic control and radarOften beyond controlled airspace and radar cover
ReactionJudgement, procedures, diversionAutopilot logic that trusts GNSS by design
FailsafeCrew decides where to goReturn-to-home steers by the same corrupted position
Against meaconingHumans spot implausible positionsEvery automated check passes, so the drone carries on

Drones are already being lost to this in large numbers. In 2023 the Royal United Services Institute estimated Ukraine was losing about 10,000 drones a month, mostly to electronic warfare that targets navigation and control links.

Every class of drone is exposed, from hand-launched to MALE

Military and civil operators often group uncrewed aircraft by size using NATO's classes. All of them rely on GNSS, and the larger they are, the more is at stake when it lies.

Class I · microMicrounder 2 kg

Quadcopters for inspection, filming and short-range scouting.

Class I · miniMini2–20 kg

Survey, mapping, delivery trials and hand-launched reconnaissance.

Class I · smallSmall20–150 kg

Long-range fixed-wing and VTOL survey, border and pipeline patrol.

Class IITactical150–600 kg

Runway or catapult launched, many hours aloft for surveillance.

Class IIIMALEover 600 kg

Medium-altitude, long-endurance aircraft flying for a day or more.

Navion Terra coversmicro to MALE

Frequently asked questions

Meaconing questions, plainly answered

What is meaconing in simple terms?

Meaconing is recording or capturing real satellite navigation signals and re-broadcasting them. A receiver that listens to the copy calculates the position of the attacker's antenna instead of its own, while believing the result is correct.

How do you pronounce meaconing?

MEE-kuh-ning. The word comes from "meacon", short for "masking beacon".

Where does the word meaconing come from?

From the Second World War. In 1940–41 the Royal Air Force's No. 80 (Signals) Wing used "masking beacons" that picked up German navigation beacon signals and re-radiated them from Britain to mislead Luftwaffe bombers.

Is meaconing the same as GPS spoofing?

It is a type of spoofing, but a special one. Ordinary spoofing creates fake signals. Meaconing re-sends genuine ones. That is why it passes authenticity checks that can reveal ordinary spoofing.

Why doesn't signal authentication like OSNMA stop meaconing?

Authentication proves a message came from a real satellite. A replayed message did come from a real satellite. Tests have shown OSNMA-enabled receivers reporting meaconed signals as authentic.

Why doesn't the relay delay show up as an error?

The relay adds the same delay to every satellite's signal. A receiver already solves for its own clock error, so it treats the delay as its clock running late and reports a clean position fix.

How far off can meaconing put a drone?

With a live relay, the drone's reported position becomes the attacker's receiving antenna. The error equals the distance between the drone and that antenna, from metres to kilometres. With record-and-replay or long-distance relay it can be hundreds of kilometres.

Can meaconing be detected in real time?

It is very hard with GNSS checks alone, because the signals are genuine and consistent. Clues like clock jumps or uniform signal strength can be hidden by a careful attacker. The reliable method is comparing GNSS with independent absolute navigation such as terrain referencing and scene matching.

Are drones more at risk than airliners?

Yes. Airliners have trained pilots, navigation-grade inertial systems, ground radio aids and air traffic control. Most drones rely on GNSS as their only absolute position, have no one on board, and run autopilots and failsafes that trust GNSS.

Is meaconing illegal?

In most countries, transmitting on GNSS frequencies without authorisation is illegal, and GNSS repeaters are tightly regulated. Most large-scale interference today is attributed to military electronic warfare.

How can drone operators protect against meaconing?

Fit navigation that does not depend on GNSS for absolute position, cross-check GNSS against it, avoid relying on GNSS alone for return-to-home and geofencing, and log receiver data so incidents can be analysed.

What is Navion Terra?

Navion Terra by Ultrakinematic is a resilient navigation system for drones from small multirotors up to the MALE class. It fuses inertial, visual, scene-matching and terrain-referenced navigation, rejects jammed, spoofed or meaconed GNSS, and outputs position with a confidence estimate at 100–250 Hz.

Glossary

Words you'll meet

Global Navigation Satellite SystemGNSS
The family of satellite navigation systems: GPS, Galileo, GLONASS and BeiDou.
Receiver
The chip in a phone, car, drone or aircraft that listens to satellites and calculates position and time.
Clock error
How far the receiver's cheap clock is off. Solved using a fourth satellite, and where meaconing's delay hides.
Meaconing
Capturing genuine GNSS signals and re-broadcasting them to mislead receivers.
Meaconer
The equipment that performs meaconing: a receiving antenna, an amplifier and a transmitting antenna.
Replay attack
Recording signals and playing them back later. A form of meaconing.
Spoofing
Broadcasting fake GNSS signals to make a receiver report a false position or time.
Jamming
Broadcasting noise on GNSS frequencies so receivers cannot hear satellites.
Navigation Message AuthenticationOSNMA
Galileo's digital signature for its open signal. Stops forged messages, not copied ones.
Receiver Autonomous Integrity MonitoringRAIM
A receiver check that spots one satellite disagreeing with the others.
Inertial Measurement UnitIMU
Accelerometers and gyroscopes that measure motion. Can't be jammed, but drift over time.
Terrain-Referenced NavigationTRN
Finding position by matching measured ground height to an elevation map.
Scene matching
Finding position by matching camera images to satellite imagery.
Medium Altitude Long EnduranceMALE
Large uncrewed aircraft flying at medium altitude for a day or more. NATO Class III.
Return-to-homeRTH
A drone failsafe that flies back to the launch point, usually guided by GNSS.

Page last reviewed .