Cell-Site Location Information & Tower Dumps
How wireless networks generate location-related records as cellular devices communicate with towers—and what law enforcement should understand about historical CSLI, prospective location information, tower sectors, reverse identification, tower dumps, precision, carrier records, Carpenter, warrants, privacy, evidence, disclosure, and investigative safeguards.
What this explainer does
Cellular phones continually communicate with wireless networks. In the ordinary operation of those networks, carriers generate records identifying the cell site or sector used during calls, text messages, data sessions, or other network activity.
Those records can help investigators determine the general location of a known device at particular times. Over a longer period, the records can reveal patterns of movement.
A tower dump reverses the normal investigative direction. Instead of beginning with a known phone and asking where it connected, investigators begin with one or more towers near a crime and ask which devices connected to those towers during a specified period.
Traditional CSLI:
known device → carrier records → historical locations
Tower dump:
crime location → tower records → many devices → possible suspect
That difference is central to the Fourth Amendment and particularity analysis.
1. Overview
CSLI is location-related information created by the ordinary interaction between a cellular device and a wireless carrier's network.
When a device communicates with the network, carrier systems may record which tower and sector handled the communication. Depending on the carrier, network generation, record type, and available technical information, other location-related information may also exist.
These records are not the same as GPS coordinates generated by a phone's satellite-location system, and they are not the same as information obtained through a cell-site simulator.
2. How Cellular Networks Create Location Information
Cellular networks divide geographic areas into service areas supported by towers or other network infrastructure.
A phone connects to available network equipment so that calls, text messages, and data can be routed. The network must know enough about the device's relationship to the network to provide service.
3. What Is Cell-Site Location Information?
Cell-site location information commonly refers to records connecting a cellular device with particular cellular infrastructure at particular times.
Carrier implementations differ. One major carrier has described CSLI as including the street address and latitude/longitude of the cellular tower carrying a voice call, SMS message, or data session.
The date and time of the relevant network event.
The tower or network location associated with the connection.
Some records identify the directional sector involved.
Records may be associated with telephone numbers or other subscriber or device identifiers.
Calls, SMS activity, data sessions, or other network events may generate different records.
Additional technical measurements may exist depending on carrier architecture and service.
4. CSLI Is Carrier-Held Data
Traditional CSLI is generally obtained from the wireless carrier, not extracted directly from the physical phone.
This distinguishes CSLI from a forensic examination of the phone itself. A smartphone may contain GPS, application, Wi-Fi, map, photograph, fitness, browser, or other location evidence separate from carrier-generated CSLI.
5. How Precise Is CSLI?
CSLI does not inherently identify the exact location of a phone.
A tower may serve a broad geographic area. Sector information can narrow the general direction associated with a connection, but the device is not necessarily located at the tower or at the center of the sector.
Coverage depends on network engineering, geography, antenna orientation, capacity, obstructions, radio conditions, network optimization, and other technical factors.
6. Historical CSLI
Historical CSLI looks backward.
Investigators identify a known cellular account or device and seek previously generated network records for a defined period.
A sequence of records may help reconstruct general movement over hours, days, or longer periods.
Records may support or contradict witness statements, timelines, surveillance, or other evidence.
Records may assist investigators in excluding people or devices from locations relevant to an investigation.
7. Prospective or Near-Real-Time Location Information
Investigators may also seek location-related carrier information prospectively or near real time to locate a device.
That may involve different technical products and legal process from historical CSLI.
8. What Is a Tower Dump?
A tower dump is a request for information concerning devices that connected to a particular cell tower—or specified towers— during a particular time period.
The search therefore begins with a place and time rather than a known person or phone.
Tower dump: crime location → tower / sector → many devices → comparison / filtering → possible device of interest
9. Typical Tower-Dump Investigative Workflow
10. CSLI, Tower Dumps, Geofences, and Stingrays
| Technique | Starting Point | Source | Typical Goal |
|---|---|---|---|
| Historical CSLI | Known account or device | Wireless carrier | Reconstruct historical location or movement |
| Prospective CSLI | Known account or device | Wireless carrier | Develop current or future location information |
| Tower Dump | Known place and time | Wireless carrier | Identify devices connected near an incident |
| Geofence Search | Known place and time | Location-history provider or database | Identify devices represented within defined geographic area |
| Cell-Site Simulator | Typically known device identifier or search area | Government-operated equipment interacting with devices | Locate or identify a cellular device |
11. Carpenter v. United States
Carpenter v. United States is the foundational Supreme Court decision governing historical CSLI.
Investigators obtained historical CSLI associated with Timothy Carpenter's phone through orders issued under the Stored Communications Act. The records covered an extended period and placed the phone near relevant robbery locations.
The Supreme Court held that Carpenter had a legitimate expectation of privacy in the record of his physical movements captured through CSLI.
The Court rejected automatic application of the traditional third-party doctrine merely because the location records were held by wireless carriers.
12. What Carpenter Did Not Decide
Carpenter was deliberately narrow.
The Court did not attempt to resolve every question involving digital location information.
The Court expressly did not decide tower-dump requests involving information concerning devices connected to particular cell sites during a specified interval.
The Court did not establish a comprehensive rule governing prospective or real-time cell-site location tracking.
The Court did not clearly establish a precise minimum duration at which every historical CSLI request becomes a search.
The Court did not abolish the third-party doctrine for ordinary business records generally.
The Court emphasized that its decision did not call into question conventional surveillance techniques and tools.
The Court recognized that ordinary Fourth Amendment exceptions can still apply.
13. Tower Dumps After Carpenter
Tower dumps present a different constitutional problem from the historical CSLI request in Carpenter.
Instead of tracking one known phone over time, a tower dump can require a carrier to identify multiple devices that interacted with specified infrastructure during a relevant period.
Courts have not established one uniform nationwide rule governing every tower-dump request.
14. Drafting a Defensible CSLI or Tower-Dump Warrant
Digital-location warrants should describe the technology and requested records accurately enough for the issuing judge to understand what government will obtain.
Establish probable cause connecting the requested data with the offense under investigation.
Identify the relevant account, device, tower, sector, or geographic basis.
Explain why the requested time period is reasonably tied to the investigative facts.
Specify what carrier records are actually requested.
Explain what the records can and cannot establish about location.
For tower dumps, explain how the agency intends to narrow or analyze records involving multiple devices.
15. The Third-Party Doctrine After Carpenter
Traditionally, information voluntarily conveyed to a third party could receive reduced Fourth Amendment protection under cases such as Smith v. Maryland and United States v. Miller.
Carpenter declined to extend that doctrine automatically to the historical CSLI at issue.
The Court emphasized the distinctive privacy implications of comprehensive digital location records and the largely automatic nature of a phone's interaction with the cellular network.
16. Emergency and Exigent Requests
Location information can be critical during kidnappings, missing-person emergencies, threats to life, active violence, and other urgent situations.
Federal law permits providers to make specified voluntary disclosures in emergency circumstances involving danger of death or serious physical injury, and ordinary Fourth Amendment exigent-circumstances principles may also apply.
17. What CSLI Can—and Cannot—Prove
CSLI can help establish that a device interacted with network infrastructure serving a relevant area.
Multiple records can help show a general progression from one service area to another.
Network records can assist in testing investigative timelines.
A tower connection does not inherently prove the device was at one exact address.
Location of a phone does not automatically establish who possessed or used it at that moment.
Historical records may contain gaps and are not necessarily a continuous second-by-second location history.
18. Analytical Uses
CSLI becomes more powerful when combined with other evidence.
Compare phone movement with vehicles or people captured on camera.
Compare device-location patterns with vehicle detections.
Test reported travel, meetings, or timelines.
Evaluate communication timing alongside location information.
Compare transactions with location and timing evidence.
Evaluate whether multiple devices exhibit related travel patterns.
19. Evidence and Authentication
Carrier records used in investigation or prosecution should be preserved in a form that permits later reconstruction of the analysis.
Preserve the production received from the carrier.
Retain legends, tower lists, sector information, instructions, and technical materials supplied with the records.
Preserve spreadsheets, mapping outputs, filters, scripts, or other analytical work where relevant.
Preserve the warrant, affidavit, order, return, and provider communications.
Document whether a map shows tower locations, sector coverage, inferred device location, or another concept.
Be able to explain how the underlying records became the final location conclusion or demonstrative exhibit.
20. Discovery and Disclosure
Location analysis can produce substantial material beyond the final map shown in a report.
| Material | Why It Matters |
|---|---|
| Carrier Production | Establishes the underlying data used in the analysis. |
| Tower / Sector Information | Supports interpretation of network location. |
| Provider Legend | Explains fields, codes, timestamps, and record types. |
| Analytical Spreadsheet | Shows sorting, filtering, comparisons, and calculations. |
| Mapping Files | May show how raw records became visual location evidence. |
| Tower-Dump Device List | May reveal alternative devices or investigative filtering. |
| Reports / Notes | Document analytical conclusions and investigative steps. |
21. Privacy and Location History
Location information can reveal much more than simple geography.
A sufficiently detailed location history can expose patterns involving homes, workplaces, medical facilities, religious institutions, political activity, intimate relationships, travel, and other aspects of daily life.
22. Minimization in Tower-Dump Investigations
Tower dumps can expose information relating to numerous uninvolved users.
Agencies should therefore consider minimization at the design stage, not merely after records have been obtained.
Use the narrowest defensible period tied to the incident.
Limit infrastructure to what the investigative facts justify.
Where technically appropriate, request relevant sectors rather than unnecessary network areas.
Seek data needed for the investigative purpose rather than unrelated subscriber information.
Consider whether identifying subscriber information is necessary for every device or only for devices surviving lawful filtering.
Establish rules for information concerning uninvolved users.
23. Retention and Secondary Use
A tower dump may create a local agency copy of records concerning many devices that ultimately prove irrelevant.
Agencies should define whether that information may be retained, searched in unrelated cases, uploaded into intelligence systems, shared with other agencies, or used to develop additional analytics.
24. Agency Governance Framework
Distinguish historical CSLI, prospective CSLI, tower dumps, cell-site simulators, and device-derived location data.
Establish current warrant and approval requirements for each type of location request.
Maintain current knowledge of carrier production formats, emergency processes, and record types.
Ensure investigators understand what cell-site records can and cannot establish.
Describe the technology and requested data accurately to the issuing court.
Address time, towers, sectors, fields, filtering, identification, and innocent-user data.
Preserve original provider data and material needed to reconstruct analytical conclusions.
Coordinate disclosure practices with prosecutors before location evidence reaches litigation.
Define emergency approval, documentation, review, and termination procedures.
Establish what happens to information relating to uninvolved devices.
Define whether tower-dump or CSLI records may be redistributed to partner agencies.
Reassess policy as federal and state location-privacy law evolves.
25. Questions Every Agency Should Answer
26. Where Cellular Location Analysis Is Going
More network infrastructure can create additional location-related data points.
Newer network technologies and infrastructure can affect what technical records are generated and how they are interpreted.
Investigators increasingly combine carrier location with device, application, vehicle, ALPR, and video evidence.
Software can rapidly convert carrier records into maps, timelines, and visual movement analysis.
AI may identify relationships among devices, towers, vehicles, calls, and other data sources.
Tower dumps will remain part of the broader debate over reverse-search techniques involving large datasets.
27. Key Terms
28. Related ShieldPST.ai Resources
Device identification, cellular-network impersonation, location, warrants, minimization, and non-target devices.
Open explainer →Reverse location searching, device identification, provider data, particularity, privacy, and the Fourth Amendment.
Open explainer →Vehicle-location records, historical movement, hot lists, networked databases, and investigative searching.
Open explainer →Integrated sensor networks, databases, analysts, location information, and operational intelligence.
Open explainer →Fourth Amendment cases involving digital location, surveillance, devices, and emerging technologies.
Browse case library →Return to the Shield Technology Reference Library.
Browse explainers →29. Selected Primary and Authoritative Sources
Supreme Court decision holding that government acquisition of the extended historical CSLI at issue constituted a Fourth Amendment search and generally required a warrant.
Read Supreme Court opinion
Current federal Stored Communications Act provision governing governmental access to specified provider-held communications and subscriber records.
Read current statute
FCC materials documenting how major wireless carriers describe collection of CSLI and other network-based geolocation information.
Review carrier response
FCC information concerning carrier protection, disclosure, and treatment of customer location and other telecommunications information.
Review FCC resource
DOJ congressional testimony explaining cell-site information, carrier records, investigative use, and privacy considerations.
Review DOJ testimony
Federal judicial analysis addressing post-Carpenter tower-dump applications and the unresolved constitutional questions associated with reverse cell-tower searching.
Review court opinion
DOJ policy useful for distinguishing carrier-generated CSLI from government-operated cell-site simulator technology.
Review DOJ policy
30. Key Takeaways
- CSLI is carrier-generated location-related information created when cellular devices interact with wireless networks.
- CSLI is not the same as GPS data, application location history, geofence information, or cell-site simulator data.
- A cell-site record ordinarily identifies network infrastructure used by a device; investigators then infer location from that record.
- Tower and sector information do not inherently establish an exact street address or precise physical location.
- Historical CSLI begins with a known device and looks backward at that device's network history.
- Tower dumps reverse the investigative direction by beginning with a location and time and identifying devices that interacted with relevant cellular infrastructure.
- Tower dumps therefore can expose information associated with many people who have no connection to the crime.
- In Carpenter v. United States, the Supreme Court held that acquisition of the extended historical CSLI at issue constituted a Fourth Amendment search.
- The Court generally required a probable-cause warrant for that historical CSLI.
- Carpenter rejected automatic application of the third-party doctrine merely because a wireless carrier holds sensitive location records.
- The Court expressly did not resolve tower dumps, real-time CSLI, or every shorter-duration location request.
- Tower-dump law therefore remains more unsettled than the core historical-CSLI rule established in Carpenter.
- Agencies should strongly consider probable-cause warrant practice for tower dumps and should follow controlling jurisdictional law.
- Reverse-search warrants should explain the geographic, temporal, technical, and filtering limits of the request.
- Investigators should understand that a phone's location does not automatically establish the identity of the person possessing the device at that moment.
- Emergency location requests remain available when legitimate exigent circumstances exist, but the emergency should be documented and reviewed.
- Original carrier productions, technical legends, analytical spreadsheets, mapping files, and legal process may become important discovery material.
- Tower-dump programs should include minimization and retention rules addressing uninvolved devices.
- Location evidence becomes substantially more powerful when CSLI is combined with ALPR, cameras, GPS, applications, vehicles, and other data.
- The central governance question is therefore not merely “Where did this phone connect?” but “What can government reconstruct when cellular location is combined with every other available location source?”