This was written back in 2001 when I was 17 I'm guessing. I can't quite remember. But, what I will say is this. This is *highly* illegal. I wrote this article to make people aware of this fact. Do *not* buy a cordless phone. This piece of hardware pretty much reminds me of wireless access points. Manufacturers of both cordless phones and 802.11b access points do not get any extra income from adding security features into them, so they don't bother! This is the result. If you do have a cordless phone, make sure you do not do telephone banking over it at the very least! Cordless phones, even these so called digital ones are still at risk - I don't care what the manufacturer writes on the box, they still are. Buy an old school phone with a cable, or use your mobile for anything you don't want to be sharing with the whole world. Again, I cannot stress how illegal it is if you listen to a cordless phone. Do *not* do it. I do not listen to cordless phones. As always, I carry out these tests in my own little lab - I have a few cordless phones laying about therefore I can experiment. This article is to raise awareness into the average household user. It does not exist for incitement of any kind. That is not it's purpose. Anyways, enough of my ranting, on with the show.
---
Cordless phones... great ain't they? They allow us to talk while walking around the house, laying in bed, soaking up the sun in the garden, etc. We don't have to sit in a restricted area around the phone, with that annoying lead that always (and I mean always...) gets tangled up. However, they also allow us to broadcast all our telephone calls to all the nice noisey neighbours up the street, in the area, and beyond.
Yes, not so great...
It is a well known fact that many radio systems are moving over to secure digital communications - the Police, Fire Services and many other government users are gradually disappearing from our scanners with virtually no known way of being able to decode the transmissions. The same would be true of cordless telephone technology, with the release of DECT digital phones in the past few years and the benefits of using this technology you would expect analogue usage to be on the decline.
Not so! In fact, more than ever the analogue cordless phone band is crammed full of users! Why would this be happening? Let's take a look at a few possibilities.
The first reason is cost. DECT telephones are quite a lot more expensive than analogue equivalents and as such many people, unaware of the differences, for example security, go for a cheaper model as it 'does just the same job'. I saw some cordless phones in a shop during a January sale, they were priced at £19.99 which is an absolute give-away price. Is it any wonder they sold?
The other reason for the popularity of analogue is the release of a whole batch of relatively new frequencies in the 31 MHz region (introduced 1996) - these devices promise a greater range than the standard 47 MHz analogue band (the original 8 channel specification here in the UK known as CT1). The analogue phone system works by operating on two frequencies known as full-duplex operation. This means that the device is capable of transmitting and receiving at the same time, as you would expect! The base uses one frequency for TX and the other for RX and vice-versa at the handheld end of things.
Ranges quoted in the specifications of cordless phones usually state something like 50 metres from the base for the 47 MHz variety and anything up to 300 metres in open air from a 31 MHz base station. In total there are 16 standard analogue channels within the UK cordless phone system. The main difference between the two systems is that the original 47 MHz variety of base stations transmit to the handheld on a very low frequency just above the medium wave broadcast band. Take a look at the table below: All channels operate on NBFM.
CT1 - 31 MHz System
Channel 1: 31.0375 MHz (base) | 39.9375 MHz (mobile)
Channel 2: 31.0625 MHz (base) | 39.9625 MHz (mobile)
Channel 3: 31.0875 MHz (base) | 39.9875 MHz (mobile)
Channel 4: 31.1125 MHz (base) | 40.0125 MHz (mobile)
Channel 5: 31.1375 MHz (base) | 40.0375 MHz (mobile)
Channel 6: 31.1625 MHz (base) | 40.0625 MHz (mobile)
Channel 7: 31.1875 MHz (base) | 40.0875 MHz (mobile)
Channel 8: 31.2125 MHz (base) | 40.1125 MHz (mobile)
CT1 - 47 MHz System
Channel 1: 1642.00 kHz (base) | 47.45625 MHz (mobile)
Channel 2: 1662.00 kHz (base) | 47.46875 MHz (mobile)
Channel 3: 1682.00 kHz (base) | 47.48125 MHz (mobile)
Channel 4: 1702.00 kHz (base) | 47.49375 MHz (mobile)
Channel 5: 1722.00 kHz (base) | 47.50625 MHz (mobile)
Channel 6: 1742.00 kHz (base) | 47.51875 MHz (mobile)
Channel 7: 1762.00 kHz (base) | 47.53125 MHz (mobile)
Channel 8: 1782.00 kHz (base) | 47.54375 MHz (mobile)
There is also another less heard of system in the UK which is a variant of the above CT1 system but designed for long range communications up to 2 km with extra power primarily designed for use in rural areas.
CT1 - Extended Range
Channel 1: 47.43125 MHz (base) | 77.5125 MHz (mobile)
Channel 2: 47.41875 MHz (base) | 77.5500 MHz (mobile)
Monitoring these frequencies with a scanner will provide surprising results. Not only will you be able to hear phones around your immediate area - eg. your own analogue cordless phone but also many others in your neighbourhood because the signals carry much further than the average phone owner would imagine.
The actual handsets and bases supplied with most phones are quite insensitive to low signals, most likely this is the manufacturer's intention to keep the range down to avoid possible interference problems with neighbouring telephones. However, with a sensitive scanning receiver and antenna system some of these phone can be picked up over distances of 1.5 km and above! Of course, this depends on a number of factors, these being the site the base station is installed in. If a user installs a base station on high ground (eg. upstairs in a house) then the signal will be carried further. I recommend monitoring the base station frequencies because you can hear these much clearer than the held held, they appear to be louder usually and from experience I know that some users don't extend the telescopic antenna when they answer the call, therefore the signals from these are weak. Normally there is sufficient 'cross talk' to hear both sides of a conversation when monitoring the base.
If you have access to a HF receiver, try tuning just above the medium wave broadcast band to monitor telephones around the 1.6 MHz region. These base stations carry a long way on medium wave and sometimes can even be received on a domestic MW radio if it will tune up high enough. I always thought this was a bad choice of frequency for a telephone service since it was accessible to quite a number of people! Be aware when monitoring this range, it is highly likely that you will pick up several base stations in use on the same frequency and as a result you will hear much interference as one base station swamps the other with a strong signal. I have monitored times when you hear one conversation only to be wiped out by another stronger signal straight over the top!
Another surprising finding is to go mobile with a scanner tuned to these frequencies (be it cordless phone driving, or even, gasp the thought... walking!). You will hear many frequencies in use and you will marvel at the range of these telephones. That's about everything you need to know to get started monitoring cordless phones but please note that it is actually illegal to monitor these frequencies in the UK. The information provided in this article is for information purposes only so don't get yourself into trouble!
For further information regarding cordless telephone regulations in the UK read the RA Fact Sheet RA193.
---
Cordless phones... great ain't they? They allow us to talk while walking around the house, laying in bed, soaking up the sun in the garden, etc. We don't have to sit in a restricted area around the phone, with that annoying lead that always (and I mean always...) gets tangled up. However, they also allow us to broadcast all our telephone calls to all the nice noisey neighbours up the street, in the area, and beyond.
Yes, not so great...
It is a well known fact that many radio systems are moving over to secure digital communications - the Police, Fire Services and many other government users are gradually disappearing from our scanners with virtually no known way of being able to decode the transmissions. The same would be true of cordless telephone technology, with the release of DECT digital phones in the past few years and the benefits of using this technology you would expect analogue usage to be on the decline.
Not so! In fact, more than ever the analogue cordless phone band is crammed full of users! Why would this be happening? Let's take a look at a few possibilities.
The first reason is cost. DECT telephones are quite a lot more expensive than analogue equivalents and as such many people, unaware of the differences, for example security, go for a cheaper model as it 'does just the same job'. I saw some cordless phones in a shop during a January sale, they were priced at £19.99 which is an absolute give-away price. Is it any wonder they sold?
The other reason for the popularity of analogue is the release of a whole batch of relatively new frequencies in the 31 MHz region (introduced 1996) - these devices promise a greater range than the standard 47 MHz analogue band (the original 8 channel specification here in the UK known as CT1). The analogue phone system works by operating on two frequencies known as full-duplex operation. This means that the device is capable of transmitting and receiving at the same time, as you would expect! The base uses one frequency for TX and the other for RX and vice-versa at the handheld end of things.
Ranges quoted in the specifications of cordless phones usually state something like 50 metres from the base for the 47 MHz variety and anything up to 300 metres in open air from a 31 MHz base station. In total there are 16 standard analogue channels within the UK cordless phone system. The main difference between the two systems is that the original 47 MHz variety of base stations transmit to the handheld on a very low frequency just above the medium wave broadcast band. Take a look at the table below: All channels operate on NBFM.
CT1 - 31 MHz System
Channel 1: 31.0375 MHz (base) | 39.9375 MHz (mobile)
Channel 2: 31.0625 MHz (base) | 39.9625 MHz (mobile)
Channel 3: 31.0875 MHz (base) | 39.9875 MHz (mobile)
Channel 4: 31.1125 MHz (base) | 40.0125 MHz (mobile)
Channel 5: 31.1375 MHz (base) | 40.0375 MHz (mobile)
Channel 6: 31.1625 MHz (base) | 40.0625 MHz (mobile)
Channel 7: 31.1875 MHz (base) | 40.0875 MHz (mobile)
Channel 8: 31.2125 MHz (base) | 40.1125 MHz (mobile)
CT1 - 47 MHz System
Channel 1: 1642.00 kHz (base) | 47.45625 MHz (mobile)
Channel 2: 1662.00 kHz (base) | 47.46875 MHz (mobile)
Channel 3: 1682.00 kHz (base) | 47.48125 MHz (mobile)
Channel 4: 1702.00 kHz (base) | 47.49375 MHz (mobile)
Channel 5: 1722.00 kHz (base) | 47.50625 MHz (mobile)
Channel 6: 1742.00 kHz (base) | 47.51875 MHz (mobile)
Channel 7: 1762.00 kHz (base) | 47.53125 MHz (mobile)
Channel 8: 1782.00 kHz (base) | 47.54375 MHz (mobile)
There is also another less heard of system in the UK which is a variant of the above CT1 system but designed for long range communications up to 2 km with extra power primarily designed for use in rural areas.
CT1 - Extended Range
Channel 1: 47.43125 MHz (base) | 77.5125 MHz (mobile)
Channel 2: 47.41875 MHz (base) | 77.5500 MHz (mobile)
Monitoring these frequencies with a scanner will provide surprising results. Not only will you be able to hear phones around your immediate area - eg. your own analogue cordless phone but also many others in your neighbourhood because the signals carry much further than the average phone owner would imagine.
The actual handsets and bases supplied with most phones are quite insensitive to low signals, most likely this is the manufacturer's intention to keep the range down to avoid possible interference problems with neighbouring telephones. However, with a sensitive scanning receiver and antenna system some of these phone can be picked up over distances of 1.5 km and above! Of course, this depends on a number of factors, these being the site the base station is installed in. If a user installs a base station on high ground (eg. upstairs in a house) then the signal will be carried further. I recommend monitoring the base station frequencies because you can hear these much clearer than the held held, they appear to be louder usually and from experience I know that some users don't extend the telescopic antenna when they answer the call, therefore the signals from these are weak. Normally there is sufficient 'cross talk' to hear both sides of a conversation when monitoring the base.
If you have access to a HF receiver, try tuning just above the medium wave broadcast band to monitor telephones around the 1.6 MHz region. These base stations carry a long way on medium wave and sometimes can even be received on a domestic MW radio if it will tune up high enough. I always thought this was a bad choice of frequency for a telephone service since it was accessible to quite a number of people! Be aware when monitoring this range, it is highly likely that you will pick up several base stations in use on the same frequency and as a result you will hear much interference as one base station swamps the other with a strong signal. I have monitored times when you hear one conversation only to be wiped out by another stronger signal straight over the top!
Another surprising finding is to go mobile with a scanner tuned to these frequencies (be it cordless phone driving, or even, gasp the thought... walking!). You will hear many frequencies in use and you will marvel at the range of these telephones. That's about everything you need to know to get started monitoring cordless phones but please note that it is actually illegal to monitor these frequencies in the UK. The information provided in this article is for information purposes only so don't get yourself into trouble!
For further information regarding cordless telephone regulations in the UK read the RA Fact Sheet RA193.