Dr. Musaddak M. Abdul Zahra Al-Mustaqbal University, Babylon, Iraq GNSS spoofing over the Middle East is usually told as an aviation story. It is also a telecommunications story: every TDD cellular network that takes its time from satellites inherits the same weakness, and its failure would arrive without a single packet being hacked. The aircraft that believed it was elsewhere In September 2023, crews flying airway UM688 over northern Iraq saw their GPS position jump by about 60 nautical miles. Within minutes, their inertial reference systems, which are updated from GPS, had lost position too [1]. This was spoofing, not jamming: a counterfeit signal that the receiver accepts as genuine. IATA’s 2024 safety report recorded a 500% rise in spoofing between 2023 and 2024, and named Türkiye, Iraq and Egypt as the areas where interference is most prevalent [2]. Yet aircraft are only the most visible receivers in the sky’s line of sight. Thousands more sit quietly on telecom towers, and they use GPS not to know where they are, but when. Time is a network resource A timing receiver turns the atomic time carried by each satellite into a one-pulse-per-second (1PPS) edge. Base stations, broadcast transmitters and power-grid sensors discipline their oscillators to it. It is cheap and accurate to roughly 100 ns anywhere on Earth, so it quietly became the default time reference for mobile networks. Its fragility was demonstrated in January 2016, without any adversary. A ground-software error during the retirement of satellite SVN 23 shifted the UTC data on legacy GPS signals by about 13 µs. Timing receivers raised alarms worldwide, and UK digital broadcasting was disrupted for around 12 hours [3]. A whisper from 20,000 km At 1575.42 MHz and an orbital range of about 20,200 km, the free-space path loss is: L = 20 log10(4πd / λ) ≈ 182.5 dB The civil L1 signal therefore arrives at around −128.5 dBm, some 17 dB below the thermal noise of a 2 MHz receiver (≈ −111 dBm). It is recovered only through the processing gain of its spreading code. A modest 1 W transmitter 10 km away arrives near −86 dBm, about 40 dB stronger than every satellite combined. And the civil signal carries no authentication. The silent failure In a TDD network, neighbouring cells must switch between transmitting and receiving at the same instant. 3GPP TS 38.133 allows 3 µs between overlapping cells, which ITU-T G.8271 translates into ±1.5 µs from a common reference [4]. Light travels only about 450 m in that time. A spoofer that does not jump the clock but drags it by 10 ns per second (an illustrative figure) exhausts the entire budget in 150 seconds, while the receiver still reports a healthy fix. The misaligned tower keeps transmitting while its neighbours listen, and tens of watts of downlink bury handset uplinks of about 0.2 W. Calls drop and throughput falls, yet there is no intrusion to detect. The network is not attacked; it is simply told the wrong time, and it obeys. Designing for the day the sky lies Resilience comes from layers that fail independently: holdover oscillators such as rubidium and OCXO; time delivered over fibre with PTP (IEEE 1588) from protected caesium-based core clocks that stay within ±30 ns of UTC [5]; multi-constellation receivers; Galileo’s OSNMA authentication; antennas that reject signals from the horizon; and monitoring that alarms when time sources disagree, not only when the signal disappears. The principle is simple. GNSS should be one witness among several, never the sole authority. Timing sovereignty for Iraq Iraq sits in one of the most contested electromagnetic environments on Earth, while its mobile networks, banks and power grid grow more dependent on precise time. Three decisions would change the equation: a national time reference independent of GNSS; time distributed over the national fibre backbone as a regulated service; and holdover and spoofing-detection requirements written into operator licences. The aircraft over Iraq did not know where they were. Engineering must ensure that our networks never forget what time it is.