Silent SMS vs IMSI catcher
Silent SMS (Type 0 SMS) is a legitimate protocol feature abused to ping a device without user notification. IMSI catchers are rogue base stations that force nearby devices to attach. Both are used to locate subscribers.
| Attribute | Silent SMS | IMSI catcher |
|---|---|---|
| Access needed | SS7 / Diameter interconnect | Radio proximity + hardware |
| Notification | None on device | None on device |
| Location resolution | Cell-level via network response | Cell-level, sometimes finer |
| Cost | Low if signaling access exists | Hundreds to tens of thousands of USD |
| Detection | Operator-side signaling monitoring | Rogue-cell detection apps / SDR |
Verdict
Silent SMS is the industrial-scale tracking technique — no hardware, remote, cheap per query. IMSI catchers are the tactical technique — local, targeted, expensive. Operator monitoring of silent SMS bursts catches the first; SUCI in 5G SA blunts the second.