GPS as a Secret 'Numbers Station': What the Evidence Shows

A security researcher has put forward a striking claim: for nearly two decades, the GPS satellites that guide your cab, time your stock trades and sync the power grid may have doubled as a quiet, planet-wide numbers station for the U.S. military. The argument is that a small, overlooked slice of the public GPS signal has been carrying encrypted military traffic in plain sight, beamed down to billions of receivers every few minutes. Nothing has been cracked open. But the evidence, as the headline carefully says, suggests something hiding in the open.

It is the kind of story that sounds like spy fiction and yet rests on dry, verifiable signal data. Here is what is actually being claimed, why it is plausible, and why it matters even for readers in India who have never thought twice about the satellites overhead.

What a 'numbers station' actually is

During the Cold War, shortwave listeners kept stumbling onto eerie broadcasts: a flat voice reading strings of numbers, or bursts of Morse, with no station name and no explanation. These were numbers stations - one-way radio messages aimed at spies in the field. The genius of the format is its openness. Anyone can listen, but only the person holding the matching codebook or one-time pad can turn the gibberish into meaning. Secrecy comes not from hiding the signal, but from hiding the key.

The new claim, presented by Steven Murdoch, a security engineering researcher at University College London, is that GPS has been doing the digital equivalent. Instead of a creepy voice on shortwave, the carrier is the world's most trusted navigation system, and the "numbers" are bursts of ciphertext riding alongside the ordinary timing data.

The signal hiding in 'Subframe 4, Page 17'

Every GPS satellite constantly streams a slow data message at just 50 bits per second. Most of it is housekeeping - orbits, clock corrections, health flags. Tucked inside is a field the official specification politely describes as reserved for special messages "at the discretion of the operating command." Its technical address is Subframe 4, Page 17.

That field carries a 176-bit block that is rebroadcast roughly every 12.5 minutes, on the same public L1 C/A signal your phone already listens to. To a normal receiver it is meaningless noise, so it gets discarded. Murdoch's work, building on a student project by Ahmed Kamruddin, took the opposite view: what if that "noise" is structured?

Why researchers think it is encrypted military traffic

The team pulled from public GNSS archives - open recordings of satellite signals that hobbyists and scientists have collected for years. The scale is the impressive part:

• More than 12 million observations of that single field were analysed.
• The data spanned roughly 19 years, going back to recordings from 2007.
• After filtering, the work isolated about 3,994 unique 176-bit messages.
• Repeating patterns surfaced around February 2010 and rolled out across dozens of satellites for over a decade.

The leading explanation is a system called OTAD, short for Over-the-Air Distribution. Military GPS receivers don't just read position; the precision, jam-resistant military signal is encrypted, and those receivers need fresh cryptographic keys. Historically a technician had to physically plug a loader into each unit. OTAD lets the next key be pushed over the air instead - which is exactly the kind of short, high-value, encrypted payload you would expect to find in that mysterious field.

The December 2023 clue

One detail makes the case harder to wave away. Starting in December 2023, on the satellite known as PRN 8, the format of these broadcasts visibly changed. The messages began with a literal four-byte tag spelling TEXT, followed by roughly 18 bytes of encrypted payload.

That shift matters because random noise does not suddenly grow a human-readable label and then a consistent ciphertext block. A deliberate change in structure is the fingerprint of an operator tweaking a real system - not an artefact of bad data. It is the moment the "hiding in plain sight" reading goes from intriguing to genuinely persuasive.

What this is - and what it is not

It is worth being precise, because online the story has already mutated into wilder versions. The careful summary:

1. Nothing has been decrypted. The payloads remain unbroken ciphertext. Researchers measured entropy, timing and patterns; they did not read a secret message.
2. It is evidence, not confirmation. No agency has acknowledged the system. The conclusion is an invitation to the security community to dig further.
3. It does not break GPS. This rides a field civilian positioning ignores. Your navigation, ride-hailing and bank-grade time sync are untouched.
4. It is arguably not even a "leak." The field is openly specified for command-discretion messages. Using a public broadcast to ship encrypted keys is clever engineering, not a flaw - the secrecy was always in the key, never the channel.

In other words, the surprise is not that GPS is broken. The surprise is that one of the most studied signals on Earth had a two-decade-old secret correspondence running through it, and almost nobody looked.

Why this matters for India

India runs on the same satellites. GPS underpins everything from UPI timestamping and stock-exchange clocks to railway signalling, telecom towers and disaster-alert systems - all of which lean on the ultra-precise timing GPS provides, not just the maps. A foreign military quietly controlling key-distribution over that signal is a reminder of how much critical national infrastructure depends on a system another country owns and operates.

That dependence is exactly why India has been building NavIC, its own regional navigation constellation run by ISRO, and pushing for NavIC support in phones and official receivers. Stories like this one strengthen the strategic case: sovereignty over positioning and timing is not paranoia, it is resilience. If the controller of a signal can hide an encrypted channel inside it for 19 years, the controller can also degrade, spoof or switch it off.

What comes next

Expect three things. First, scrutiny: other researchers will now re-examine the same archives, looking for more structure or more format changes like the 2023 one. Second, silence from officials, which is the default response to questions about military cryptographic systems and tells us little either way. Third, a quieter, more useful conversation among engineers about how much blind trust civilian infrastructure places in a single foreign-run constellation.

The romance of the story is the image: a Cold War spy trope reborn in orbit, whispering coded messages over the same beam that tells your phone you've reached the right turn. The substance is more sober but no less important - a reminder that the invisible signals holding modern life together are never quite as simple, or as neutral, as they appear.