Fake mobile towers that scoop up data from passing phones are routinely being used in London, an investigation by Sky News suggests.
Working with German security company GMSK Cryptophone, it claims to have uncovered direct evidence, the first in the UK, of at least 20 instances of the use of these cell site simulators
These portable Stingray boxes could be used to track police suspects.
The Metropolitan Police Service refused to confirm or deny it was using them.
All the data captured by the investigation has been put in a Google document.
By mimicking a legitimate mobile tower and tricking every phone in range into connecting to them, the boxes “catch” the international mobile subscriber number (IMSI) and electronic serial number (ESN) of each and reveal the exact location of its user.
A police car
The police have said that they cannot confirm or deny the use of such technology
Met Commissioner Bernard Hogan-Howe told Sky News: “We’re not going to talk about it, because the only people who benefit are the other side, and I see no reason in giving away that sort of thing.”
Privacy International (PI), which has been campaigning for more transparency about the use of surveillance equipment, described the Met’s stance as “laughable”.
Advocacy officer Matthew Rice said: “We can’t be sure that all these are used by law enforcement agencies.
“They can be used by criminals, and are easily bought from the internet for about £1,000.
“The police need to explain what they are doing to protect the public from criminals using such equipment as well as explaining how they use it.
“Even when used by police, IMSI catchers are very difficult to use in a targeted manner, meaning when used in urban areas thousands of people’s mobile phones would be swept up in that dragnet.
“What police do with that data, we don’t know.
“With 20 IMSI Catchers now confirmed to be deployed across London – we need law enforcement to step up, have an honest conversation about their use, so we can ensure the public are being properly protected.”
The BBC contacted the Metropolitan Police but was told it was not something that it would comment on.
In the US, the American Civil Liberties Union has identified 53 agencies in 21 states that own Stingrays.
In some cases, police officers have withheld information about mobile phone tracking practices in court cases.
But last month the FBI denied preventing police forces from discussing their use, as long as they did not reveal their “specific capabilities”.
The Florida-based company that makes Stingrays – Harris Corporation – is reported to have signed non-disclosure agreements with police, preventing it from discussing its surveillance products.
Last month, Washington state passed legislation that required law enforcement agencies to apply for a warrant before using such surveillance equipment.
In Germany, use of Stingrays and similar devices must be reported to a parliamentary commission.
