Your phone isn’t just a phone—it’s the ultimate tracking device. And yes, that includes burner phones.

Your Phone Is a Digital Tracking Device

Think your phone is just a tool to call and text? Think again. Every phone—smartphone or burner—is a beacon broadcasting your movements, habits, and even your identity. It’s not a glitch or oversight; this is exactly how these devices are designed to work.

Every second your phone is on, it’s pinging nearby cell towers, connecting with the closest one to ensure a signal, this is where the “connectivity bars” come from.

That connection isn’t just a one-way handshake. It’s tied to your IMSI (International Mobile Subscriber Identity), a unique code baked into your SIM card. These IMSIs are logged by cell towers and can triangulate your location in seconds.

It’s how Google Maps knows there’s a traffic jam and how advertisers figure out what coffee shop you visit every morning.

A burner phone is a prepaid, disposable mobile device often used to maintain privacy or anonymity by keeping it unlinked to your personal identity or accounts.

And while burner phones have a reputation as the end-all-be-all cloak of invisibility for the digital age, that’s more Hollywood fiction than reality. If you use a burner phone carelessly—logging into Wi-Fi networks you’ve connected to before, carrying it alongside your personal phone, or logging into personal accounts—you’ve already compromised your anonymity.

Your Phone Is a Goldmine for Surveillance Tools

Here’s the terrifying part: It doesn’t even take government agencies to track you. Tools like Locate X make your location data available to anyone with a budget. These programs aggregate cell tower and Wi-Fi data to paint a detailed map of where you’ve been and when—data that’s sold to companies, advertisers, or even bad actors like stalkers.

Why Even Law-Abiding Citizens Use Burner Phones

Privacy is a fundamental human right, yet the phones we carry every day are designed to strip us of it. Law-abiding citizens might need a burner phone not because they’re hiding something, but because they value their right to privacy in an increasingly invasive digital world.

Whether it’s protecting yourself from data brokers, avoiding surveillance at a protest, or simply keeping your personal life separate from work, a burner phone offers a layer of control that our regular devices fail to provide.

In a world where your smartphone doubles as a surveillance device, reclaiming privacy isn’t a luxury—it’s a necessity.

How StingRays Turn Your Phone Into a Surveillance Tool

StingRays, also known as IMSI catchers, are surveillance devices frequently used by law enforcement at protests to monitor and control crowds. These tools mimic legitimate cell towers, tricking nearby phones into connecting to them instead of the actual network.

Once connected, a StingRay can intercept all cellular traffic in the area, allowing police to eavesdrop on calls, read unencrypted text messages, and monitor metadata like who’s calling whom and when.

If you think StingRays are only deployed against violent criminals or high-stakes targets, think again. These surveillance tools are frequently used at peaceful protests, meaning you don’t have to engage in any illegal activity to find yourself under their digital microscope.

Law enforcement agencies justify their use as a way to "maintain order," but in reality, StingRays are often employed to monitor the movements and communications of anyone in the vicinity—whether you’re holding a sign, chanting peacefully, or simply walking by.

StingRays are designed to sweep up all nearby cellular activity indiscriminately. At protests, they can collect the IMSIs of every phone present, creating a detailed log of who was there and when. This data can later be used to identify participants, map networks of activists, or even intimidate people into staying home from future demonstrations.

Worse, the device doesn’t stop at collecting identifiers. It can intercept unencrypted calls and messages, manipulate cellular traffic, and push malware onto phones, turning them into surveillance devices.

The issue is compounded by how StingRays exploit 2G technology. Even if your phone is 4G or 5G-capable, StingRays force it to downgrade to 2G, where weak or nonexistent encryption makes it vulnerable to interception. This means law enforcement can easily gather sensitive information without your knowledge, regardless of your intent or behavior at the protest.

The bottom line: being at a peaceful protest doesn’t shield you from this invasive surveillance. StingRays are designed to track and monitor everyone in their range, regardless of whether you’re engaging in violence or simply exercising your right to assemble. Or even if you’re accidentally in the area, not participating in the protest.

And don’t think upgrading to 5G makes you safer. Every new “G” doesn’t replace the old—it stacks on top of it. Your shiny new 5G phone still uses 2G, 3G, and 4G protocols to function.

These older systems, like SS7, are riddled with vulnerabilities that allow wiretapping, location tracking, and call manipulation.

The Evolution of 5G Technology

The evolution from 1G to 5G technology is less about replacing old systems and more about building layers of functionality on top of each other.

Think of it like a pyramid—each new generation adds advanced capabilities while still relying on the foundations of the previous ones.

1G, introduced in the 1980s, brought analog voice calls but was insecure and prone to eavesdropping. 2G upgraded this with digital encryption and SMS capabilities, making calls and texts more private (though still far from untraceable). 3G introduced data services like mobile internet, laying the groundwork for smartphones and GPS-based apps. 4G enhanced this with faster speeds and better video streaming, giving rise to today’s app-heavy digital world. Now, 5G brings ultra-low latency and massive device connectivity, powering innovations like autonomous vehicles and smart cities.

But here’s the catch: your 5G phone isn’t immune to vulnerabilities in 2G, 3G, or 4G networks. These older systems remain active in the background because modern networks still rely on their infrastructure for compatibility. This means that even with cutting-edge 5G, your phone is still vulnerable to tools like IMSI catchers and exploits targeting outdated protocols like SS7, which were designed for 2G but are still in use today.

The Security Flaw That Enables Both Surveillance and Exploitation

The Signaling System No. 7 (SS7) protocol, a backbone of global telecommunications, was designed in an era when security wasn’t a priority. Its vulnerabilities are now exploited by everyone from cybercriminals to state-sponsored hackers, turning it into a tool for eavesdropping, location tracking, and data theft.

With just a target’s phone number, attackers can intercept calls, read text messages (even 2FA codes; so ALWAYS use authenticator apps instead of SMS for 2FA), and manipulate network services.

These flaws stem from SS7’s implicit trust model, where incoming messages are automatically trusted without stringent authentication. This allows malicious actors to impersonate legitimate network components, gaining unauthorized access to sensitive communications.

So why does SS7 still exist? Because it’s an essential tool for law enforcement.

In countries like the U.S., laws like the Communications Assistance for Law Enforcement Act (CALEA) mandate that telecommunications companies provide access for lawful interception.

SS7 is a key enabler of wiretapping and surveillance, allowing agencies to monitor calls, texts, and even track locations under legal frameworks. However, this same capability makes SS7 a goldmine for hackers, who exploit its vulnerabilities to bypass permissions and access the same data.

Recent reports show Chinese hacking groups like Salt Typhoon using SS7 exploits to breach U.S. telecommunications networks. By leveraging these flaws, they’ve infiltrated private communications, targeting high-profile individuals and government officials.

The dual use of SS7—both for lawful surveillance and illegal espionage—highlights the urgent need to overhaul telecom security and address the risks baked into this outdated protocol.

The Illusion of Burner Phones

The idea of burner phones sounds great on paper: buy a phone, avoid tying it to your name, and stay off the grid. But here’s the shitty truth: a burner phone doesn’t automatically make you anonymous. It’s not what you have; it’s how you use it.

• Bought it at Walmart with a security camera watching? That’s logged.

• Used it near your personal phone? Now they’re linked.

• Logged into email or social media? You’ve just tied it to your identity.

• Used your home Wi-Fi or work network? Forget anonymity.

• Paid with your credit or debit card? Your name is now attached.

And here’s a little-known fact that seals the deal: under CALEA, all phones—including burner phones—must be registered in telecom logs, with their IMSI numbers logged and stored.

This means that even if you avoid attaching your name to a burner phone, the device itself is still traceable through its network activity.

The mistakes people make when using burner phones don’t just compromise their privacy—they often make them easier to track than if they had just stuck with their primary phone.

Why This Matters to You

The risks go beyond your phone being logged by some faceless agency. Your data is valuable to hackers, corporations, and even foreign governments. These actors don’t just want to know where you are—they want to control your device, monitor your communications, and exploit your habits.

Without understanding how to mitigate these risks, you’re not just losing privacy—you’re handing over control of your digital life. And if you think a burner phone will magically save you, you’re only making yourself easier to track.

What’s the solution? It’s not about abandoning technology—it’s about knowing how to use it properly.

Burner Phones Aren’t Anonymous—But They Can Be Used Securely

A Boeing whistleblower uncovered shocking safety violations and needed to share the information with a journalist without being tracked. They bought a burner phone anonymously, took every precaution—never activating it near their usual locations, avoiding any link to their personal devices, and keeping it powered off & in a faraday bag except when absolutely necessary.

By carefully following these steps, they successfully leaked the information without detection. Tragically, stories like this highlight the risks whistleblowers face, especially when they expose powerful organizations.

This scenario isn’t just theoretical; it’s a sobering reminder of the stakes involved in speaking out. Bur. ner phones don’t come with anonymity guaranteed, but when used correctly, they can provide a critical layer of privacy and security. The key is understanding how to acquire, set up, and use one without leaving a trace.

Here’s the solution: To protect your identity, you need to understand how surveillance works and meticulously follow these steps to acquire, set up, and use a burner phone securely.

Step 1: Buy the Phone Anonymously

The way you buy a burner phone is your first—and most crucial—line of defense. If you get this step wrong, every precaution you take afterward won’t matter.

• Go Off Your Routine Path: Walk to a store far from your usual locations. Don’t drive your car, take a rideshare, or call a taxi—license plates and rideshare records can be subpoenaed.

• Avoid Big-Box Retailers: Stores like Walmart and Target have extensive camera surveillance and often tie purchases to customer accounts. Choose small, local shops with minimal security.

• Disguise Yourself: Wear neutral, nondescript clothing, a hat, sunglasses, and a mask to minimize your appearance on security cameras.

• Pay in Cash: Credit cards, loyalty programs, or any form of digital payment will instantly tie the purchase to your identity. Use cash only.

• Separate Your Purchases: Buy the phone and prepaid minutes or data at different locations, at different times, and always pay with cash.

• Hire a Proxy Buyer: As Kevin Mitnick suggests, consider paying a random person to purchase the phone for you. Choose someone you don’t know and won’t cross paths with again, and give them cash to complete the transaction. This creates a further layer of separation between you and the device, making it harder to trace.

Step 2: Set Up the Phone Correctly

Even after buying the phone, the setup process can compromise you if you’re not careful.

• Don’t Insert the SIM Immediately: Turn on the phone without the SIM card inserted until you’re in a safe location. A SIM card broadcasts your IMSI as soon as it connects to a cell tower.

• Turn Off Tracking Features: Disable Bluetooth, location services, and automatic Wi-Fi connections. These features constantly send signals that can be tracked.

• Spoof Your MAC Address: Before connecting to Wi-Fi, use tools to change your device’s MAC address, a unique identifier that can link you to previous networks.

Step 3: Use the Phone Strategically

How and where you use your burner phone matters just as much as how you bought it.

• Never Carry Both Phones Together: If your burner phone and primary phone are seen in the same locations repeatedly, they’ll be linked. Turn your regular phone off and leave it at home.

• Avoid Familiar Locations: Don’t use the burner phone at your home, workplace, or any place you frequent. Stick to locations unrelated to your routine.

• Keep It Powered Off: Even when idle, phones ping nearby cell towers, creating a location trail. Only turn it on when absolutely necessary.

• Be Careful with Wi-Fi: Don’t connect to networks you’ve used with your regular phone. Use only public Wi-Fi, and ensure there are no cameras nearby when you connect.

Step 4: Minimize Usage

The longer you use a burner phone, the more opportunities there are to identify patterns in your behavior.

• Treat It Like It’s Disposable: Burner phones aren’t meant to last. Discard the phone after completing the purpose it was purchased for.

• Remove the battery: When not in use, make sure you remove the battery from the burner phone.

• Switch It Up: When buying a new burner phone, choose a different store and location to avoid linking your purchases.

• Avoid Using the Same Contacts: Calling or texting the same people repeatedly can link your burner activity back to your real identity. Use random, non-patterned communication methods.

Step 5: Advanced Tips for Maximum Security

For those serious about staying anonymous, these extra precautions can make all the difference:

• Use Faraday Bags: Store your phone in a Faraday bag when it’s not in use to block all signals.

• Avoid Cameras: Use the phone only in locations where you’re not in view of surveillance cameras.

• Limit Calls and Texts: The less you use the phone, the less data it generates.

• Understand SS7 Vulnerabilities: Even burner phones rely on outdated network protocols like SS7, which can allow hackers or law enforcement to intercept calls and texts. No phone is entirely secure.

Why a VPN Won’t Save Your Burner Phone from Stingrays

I’ve had multiple people ask, “Addie, what if I use a VPN on my phone??? Won’t that protect me from Stingrays and surveillance?”

Using a VPN might sound like a smart move to protect your privacy at a protest or when using a burner phone, but it won’t stop Stingrays or similar IMSI catchers from compromising your security.

A VPN encrypts your internet traffic, making it harder for third parties to intercept your online activity. However, it does nothing to hide your phone’s connection to nearby cell towers or prevent IMSI catchers from exploiting your device.

Here’s why: Stingrays don’t rely on your internet traffic. They impersonate legitimate cell towers, tricking your phone into connecting to them instead of a real tower. Once connected, a Stingray can capture your phone’s IMSI, track your location in real-time, and even intercept calls and texts. None of this relies on your data connection, so a VPN offers no protection against these attacks.

Moreover, using a VPN doesn’t obscure your phone’s physical signals. Your device still broadcasts its IMSI and other identifiers whenever it communicates with cell towers.

Stingrays exploit these signals, not your encrypted internet traffic, to monitor and track you. At a protest, where Stingrays are often deployed to surveil crowds, a VPN creates a false sense of security—it won’t stop your phone from being identified, logged, or tracked.

If you’re serious about privacy in these scenarios, the solution isn’t a VPN. It’s turning off your phone or using advanced techniques to minimize your digital footprint.

Take Back Control of Your Privacy

By following these steps, you’re not just using a burner phone—you’re taking a stand for your privacy. You’re learning how to operate outside the surveillance systems that track nearly every move you make. While no solution is perfect, these strategies make it significantly harder for anyone—be it law enforcement, hackers, or advertisers—to trace your activity.

Stay Disciplined, Stay Anonymous

True anonymity isn’t a one-time effort. It’s a commitment to vigilance and discipline. Every action matters.

A careless mistake—like using your burner near your regular phone or connecting to a familiar Wi-Fi network—can undo all your efforts. But with the right practices, you can stay a step ahead and take back control of your digital footprint.

So, are you ready to make the shift from being watched to being in control? Your privacy is worth it.

Stay Curious,

Addie LaMarr