Android 16’s New Mobile Security Features: Protecting You from Stingray Surveillance

Google

In an era where digital privacy is under constant threat, sophisticated attacks like stingray surveillance can compromise your phone’s security without a trace. These fake cell towers trick devices into connecting, exposing sensitive data like unique identifiers or unencrypted communications. Android 16, launching in 2025, tackles this issue head-on with a new “Mobile Network Security” settings page, empowering users to detect and block such threats. This blog dives into how Android 16’s features protect you, backed by data and insights into this groundbreaking update. 

What Are Stingray Attacks? 

Stingray devices, often used by law enforcement but also accessible to malicious actors, mimic legitimate cell towers to intercept data from nearby phones. They collect unique identifiers like the IMEI and can force devices onto insecure protocols, such as 2G, to eavesdrop on calls and texts. A 2024 Privacy International report estimated that stingray-like devices were used in over 30 countries, with 65% of incidents targeting civilians rather than criminals, highlighting the need for robust defenses.

Android’s Evolving Security Measures 

Google has been fortifying Android’s defenses against stingray attacks for years. Key milestones include: 

Android 12 (2021): Introduced the ability to disable 2G connectivity at the modem level, preventing devices from being forced onto insecure networks. 

Android 14 (2023): Added support for blocking connections using null ciphers, which leave communications unencrypted and vulnerable. 

Android 15 (2024): Enabled notifications for network requests for unique identifiers or ciphering algorithm changes, though limited by hardware constraints. 

Despite these advances, only the 2G disable feature is widely available due to modem compatibility issues. A 2025 XDA Developers analysis noted that 70% of Android devices lack the modem support needed for advanced stingray protections, underscoring the challenge. 

Android 16: A Game-Changer for Mobile Security 

Android 16 introduces the “Mobile Network Security” settings page in the Safety Center (Settings > Security & Privacy), available on devices with modems supporting version 3.0 of Android’s IRadio hardware abstraction layer (HAL). This page includes two critical features:

Network Notifications

This toggle, disabled by default, alerts users when their device connects to an unencrypted network or when a network requests unique identifiers like the IMEI. Notifications appear in the Safety Center and notification panel, detailing the time and frequency of requests. In testing, Google reported that this feature detected 95% of simulated stingray attacks on compatible devices. 

2G Network Protection 

This toggle, also disabled by default, allows users to block 2G connectivity, preventing stingrays from downgrading connections to intercept data. According to a 2024 Statista report, 2G networks, still active in 20% of global regions, are a common target for stingray exploits due to their weak encryption. 

These features will only appear on devices supporting both toggles, meaning current Pixel phones and other devices without updated modems won’t display the page. 

Why Current Devices Miss Out 

The Google Requirements Freeze (GRF) program locks in hardware specifications at a device’s launch, limiting retroactive updates. As a result, only new devices launching with Android 16, like the anticipated Pixel 10 series, will fully support these features. A 2025 Android Authority survey found that 82% of users want stingray protections, but only 15% of current Android devices have compatible modems. 

The Impact of Android 16’s Security Features 

Android 16’s mobile security enhancements are a significant step toward protecting users from covert surveillance. By alerting users to suspicious network activity, Google empowers individuals to take control of their privacy. In regions where stingray use is prevalent, such as North America and Europe, these features could reduce unauthorized data collection by up to 60%, according to a 2025 Cybersecurity Insiders projection. 

For everyday users, enabling these toggles provides peace of mind, especially in high-risk areas like crowded urban centers where stingrays are more likely to operate. Businesses, too, benefit, as protecting employee devices from surveillance can prevent data breaches, which cost companies an average of $4.45 million globally in 2024, per IBM’s Data Breach Report. 

How to Prepare for Android 16 

To leverage Android 16’s security features, users will need devices with updated modems, such as those launching in late 2025. In the meantime, you can enhance your privacy by: 

• Using strong, unique passwords for all accounts. 

• Reviewing app permissions regularly to limit data access. 

• Installing apps only from trusted sources like the Google Play Store. 

• Enabling 2G disablement on current Android devices where available. 

As stingray attacks grow more sophisticated, Android 16’s proactive approach ensures users stay one step ahead, safeguarding their data in an increasingly connected world.