Fake mobile towers that scoop up data from passing phones are routinely being used in London, an investigation by Sky News suggests. Working with German security company GMSK Cryptophone, it claims to have uncovered direct evidence, the first in the UK, of at least 20 instances of the use of these cell site simulators.
These portable Stingray boxes could be used to track police suspects. The Metropolitan Police Service refused to confirm or deny it was using them. All the data captured by the investigation has been put in a Google document.
By mimicking a legitimate mobile tower and tricking every phone in range into connecting to them, the boxes "catch" the international mobile subscriber number (IMSI) and electronic serial number (ESN) of each and reveal the exact location of its user.
Met Commissioner Bernard Hogan-Howe told Sky News: "We’re not going to talk about it, because the only people who benefit are the other side, and I see no reason in giving away that sort of thing."
Privacy International (PI), which has been campaigning for more transparency about the use of surveillance equipment, described the Met’s stance as "laughable". Advocacy officer Matthew Rice said: "We can’t be sure that all these are used by law enforcement agencies.
"They can be used by criminals, and are easily bought from the internet for about £1,000. "The police need to explain what they are doing to protect the public from criminals using such equipment as well as explaining how they use it.
"Even when used by police, IMSI catchers are very difficult to use in a targeted manner, meaning when used in urban areas thousands of people’s mobile phones would be swept up in that dragnet. What police do with that data, we don’t know."