NIST Flags Risks from Fake 5G Towers in New Draft Security Paper

The US National Institute of Standards and Technology (NIST), through its National Cybersecurity Center of Excellence (NCCoE), has published a draft white paper looking at 'false base stations': fake cellular towers built from low-cost hardware and software that mimic real carrier equipment. The paper, part of NIST's broader 5G security research, tested how 5G devices respond to six simulated false base station scenarios and reviewed possible defences, including settings that can be configured on devices themselves.

These rogue base stations work by impersonating a legitimate carrier network, broadcasting signals that look like a genuine 5G cell to trick nearby phones and devices into connecting. Once a device connects, attackers may be able to degrade service, track a person's location, or access private information. NIST notes that while 5G includes stronger security protections than earlier mobile generations, networks can still be vulnerable to denial-of-service style disruption from this technique.

The white paper is intended to help network operators and other stakeholders understand these risks and apply practical mitigations, drawing on testing done through NCCoE's 5G security testbed. The draft is open for public comment until 31 October 2026.