Summary
More than a decade has passed since Edward Snowden’s revelations about mass surveillance programs in the U.S., yet one particular threat remains under-discussed outside of privacy circles: stingrays.
These surveillance tools, officially known as IMSI catchers, can silently intercept data from nearby phones without users’ consent.
While originally deployed by law enforcement and intelligence agencies, there are rising concerns that criminals are also leveraging the technology.
With Android 16 introducing new protections and iPhones still catching up, now is the time to understand how stingrays work—and what you can do to protect your phone against them.
What Is a Stingray, and How Does It Work?
IMSI catchers exploit hidden vulnerabilities in your phone’s cellular connection.
The term “stingray” refers to a specific product—the StingRay by Harris Corporation—but it has since become shorthand for all IMSI catchers.
These devices masquerade as legitimate cell towers, tricking nearby phones into connecting.
Once that connection is established, stingrays can extract sensitive data such as your IMSI (International Mobile Subscriber Identity) number, track your location, collect metadata, and in rare cases, intercept call or message content.
Worse yet, stingrays often downgrade your connection to less secure protocols like 2G, which lack modern encryption.
While phones normally switch networks to ensure consistent service, stingrays exploit this behavior to force weaker security settings.
Any phone within range of a stingray can be affected—even if it isn’t the intended target.
Privacy groups like the Electronic Frontier Foundation (EFF) and the American Civil Liberties Union (ACLU) have repeatedly raised the alarm, especially as the technology is increasingly used at public events or protests.
Android: The Best Stingray Protection—For Now
Android 16 introduces significant anti-surveillance tools, but with limitations.
Disable 2G Connectivity (Android 12+)
Go to:
Settings > Network & Internet > SIMs > Select SIM > Disable “Allow 2G”
Most modern carriers no longer rely on 2G, so disabling it won’t affect your coverage.
This simple action blocks one of the easiest paths for stingrays to intercept your data.
Block Null Ciphers (Android 14+)
Android 14 added a feature to prevent unencrypted communications—a critical defense against surveillance-grade data leaks.
Receive Network Integrity Warnings (Android 15+)
Android 15 can alert you when a network tries to access your phone’s unique ID or downgrades your connection security—telltale signs of IMSI catcher activity.
Use the Mobile Network Security Hub (Android 16)
Android 16 includes a centralized Mobile Network Security page under:
Settings > Security & Privacy > Safety Center
However, this option only appears on devices with compatible modems and IRadio HAL version 3.0+, meaning that even the Pixel 9 might not support it fully.
Best Practice: If you’re in a high-risk area, consider using apps like SnoopSnitch to detect rogue base stations.
But the only foolproof option? Disable cellular activity entirely.
iPhone: Limited Tools, But Lockdown Mode Helps
Apple has strong privacy features—but stingray defense remains limited.
Unlike Android, iOS doesn’t yet allow users to completely disable 2G unless they enable Lockdown Mode.
Manual Network Controls
Navigate to:
Settings > Cellular > Cellular Data Options > Voice & Data > Choose 5G On or LTE
Avoid “5G Auto,” as it allows your device to switch to less secure legacy networks.
You can also go to:
Settings > Cellular > Network Selection and disable Automatic, though this creates travel and roaming headaches.
You’ll need to manually select networks when abroad.
Lockdown Mode (iOS 16+)
Lockdown Mode, introduced in iOS 16, is intended for high-risk individuals such as activists, journalists, and political dissidents.
It disables 2G and severely restricts how your iPhone interacts with the internet and messaging.
Enable it under:
Settings > Privacy & Security > Lockdown Mode
Be warned: Many websites and Messages attachments won’t work while Lockdown Mode is active.
Use only if necessary.
Looking Ahead: iOS 26 and Beyond
Apple has not yet confirmed if iOS 26 (coming fall 2025) will include enhanced stingray protection, but given the company’s reputation for prioritizing privacy, parity with Android is likely on the horizon.
Know the Risks, Use the Tools
Stingrays represent a growing threat in a world increasingly concerned about data privacy.
Whether deployed by governments, hackers, or criminals, these devices can silently collect personal data from unsuspecting phones.
The good news is that newer Android versions offer robust defenses, while iPhones can still mitigate risk through Lockdown Mode and careful settings.
As always, keeping your device updated and staying informed is your first line of defense.
Pro Tip: If you’re attending a protest, traveling through politically sensitive regions, or just value your privacy—take time to configure your device. Your security could depend on it.