ICdetection

ICdetection is an open-source tool for auditing the cellular environment from Android, without root.

It shows what Android's public telephony APIs report (cell identity, MCC, MNC, TAC, PCI, ARFCN, signal and Timing Advance when available) and combines conservative heuristics to flag anomalous behaviour. Alerts need temporal confirmation to reduce false positives.

It does not guarantee IMSI-catcher detection: Android apps cannot inspect RRC or NAS traffic or the modem. An alert is an anomaly worth reviewing, not proof of surveillance.

Works without Internet: no Internet permission, no ads, analytics or trackers. History stays on the device unless you export it.

Permissions:
• Location: Android requires it for cell information; also used for geographic checks.
• Phone state: reads the network and visible cells.
• Network state: only to know if data uses Wi-Fi or mobile data.
• Foreground service, notifications and wake lock: keep monitoring running and visible.
• Run at startup: only for the optional reminder after a reboot (off by default).

Results depend on the phone, modem, firmware and Android version. Requires Android 12 or later.

3.1.1 — bug fixes for 3.1.0. Installs over 3.1.0 and keeps its data; no rule changes.

- Clean install: the welcome screen no longer warns about data from another install.
- Welcome screen: title without a version number, no longer under the status bar.
- Notifications show the app's own icon instead of a generic one; alarms keep the warning triangle.