- Nationwide Digital Forensic & Cyber Services
- BOOK A FREE CONSULTATION TODAY!
Prosecutors present Timing Advance data as precise location proof. Courts are starting to reject it. This explainer gives you the science, the case law, and the exact questions to ask before your next trial.
Challenge TA evidence at Daubert using the same arguments that excluded NELOS records in federal court in 2021 and 2025
Identify GPS overstatement when a prosecution witness presents a single dot on a map from data that only produces an arc
Spot six red flags in any prosecution cell tower report before you retain a forensic expert or cross-examine their witness
Preserve exculpatory TA data before it expires, based on what defense counsel failed to do in Kohberger (Idaho, 2025)
Timing Advance evidence is presented in courtrooms every day. Most defense attorneys never challenge it. The ones who do are winning.
Understand what Timing Advance actually measures at the network level
Identify when TA is being overstated as GPS quality location evidence
Apply verified 2022 to 2026 case law challenging TA and NELOS at Daubert
Know exactly what questions to ask your digital forensics expert
Timing Advance (TA) is a signal propagation adjustment that a cell tower sends to a mobile device so that its radio transmissions arrive at the tower at precisely the right moment. Because radio signals travel at the speed of light, the tower needs to know how far away the phone is to schedule transmissions correctly. That distance estimate is the TA value.
TA was never designed as a law enforcement tool. It was engineered by cellular carriers to keep networks running efficiently. The fact that it encodes distance information is a byproduct of network timing synchronization, not a designed location capability.
Key point for attorneys: TA produces an arc of possible locations, not a point, not an address, and not anything resembling GPS coordinates. When a prosecutor's witness plots a single dot on a map and says "the phone was here," that is an overstatement the science does not support.
TA data surfaces in carrier records under different names depending on the network:
| Carrier | TA Record Name | Notes |
|---|---|---|
| AT&T | NELOS / LocDBoR | Proprietary algorithm; disclaimer on every page states "best estimate only" |
| T‑Mobile | PCMD / TA within CDR | TA data commingled with separate point location estimates in the same file |
| Verizon | RTT (Round Trip Time) | Similar distance arc methodology |
| Sprint (now T‑Mobile) | NEID based CDR fields | Architecture dependent; some nodes retain no location data by design |
Each TA value corresponds to a distance band called an arc extending outward from one sector of one tower. The phone could be anywhere along that arc. The arc width in GSM networks is approximately 554 meters per TA step. In LTE networks the resolution is finer but still produces a band, not a point.
Timing Advance produces a curved arc from one tower sector, never a single location. Multiple arcs from the same record do not triangulate.
Common prosecution error: Presenting TA arcs as overlapping rings that triangulate to a specific location. Triangulation requires simultaneous measurements from multiple towers. A CDR record reflects only one serving tower at the moment of a call event. A single tower cannot triangulate anything.
Courts and juries tend to conflate different types of cell phone location data. Understanding what each type actually produces and what it cannot produce is foundational to any cross examination.
On NELOS specifically: AT&T prints a disclaimer on every page of every NELOS report it produces: "The results provided are AT&T's best estimate of the location of the target number." Some records carry a "location accuracy unknown" designation. Ask whether the prosecution's expert disclosed this to the jury.
| Factor | Effect on TA Accuracy | Prosecution Discloses? |
|---|---|---|
| Multipath propagation (signal reflections) | Inflates measured distance; phone appears farther than it is | Rarely |
| Accumulator filter errors in carrier systems | Can average or smooth TA values incorrectly | Rarely |
| DAS (Distributed Antenna Systems) | Fiber timing delays shift arc location; node vs. hub mapping error | Rarely |
| Overshooting cells | Phone served by distant tower, placing it in wrong geography entirely | Sometimes |
| Proprietary NELOS algorithms | Cannot be independently verified; black box accuracy | Rarely |
| Drive test not conducted | Theoretical arc not validated against real world coverage | Sometimes |
The single most consequential misrepresentation in cellular evidence is treating Timing Advance data as equivalent to GPS quality location proof. This happens in recurring patterns.
The Denmark Precedent: Over 10,000 criminal convictions in Denmark were placed under review after authorities discovered that the software converting carrier CDR data into court exhibits was silently omitting records and in some cases linking phones to the wrong towers. The error went undetected for years because no one challenged the methodology. Unchallenged deference to cell tower evidence is equally routine in U.S. courts.
For years, cell tower evidence sailed through Daubert hearings unchallenged. That is changing. Every case below is verified with a link to the source document or reporting. All summaries are based solely on what those sources confirm.
Judge Juan Villaseñor held a Shreck (Daubert equivalent) hearing in August 2022 and excluded all cell site evidence derived from ZetX TrAX software. The court found TrAX's formula for estimating cell sector coverage area was developed by trial and error without reference to known scientific principles of radio frequency, was not peer reviewed, and had no established error rate. The creator testified he did not know the details of the case he was testifying in. The judge wrote that "underneath those surface displays lies a sea of unreliability that the jury won't see." Note: This ruling targets TrAX mapping methodology applied to CSLI records, not raw TA values. It establishes the standard for challenging the software tools used to visualize and interpret cell tower evidence.
↗ Read Court Order (PDF)In a murder prosecution, the government sought to introduce AT&T NELOS records through FBI CAST Agent Mark Sedwick. After a Daubert hearing, the district court excluded the NELOS records. The court's concern centered on the proprietary algorithms AT&T uses to calculate NELOS location estimates, which are not publicly disclosed and therefore cannot be independently tested, peer reviewed, or assigned a known error rate. The court distinguished NELOS from traditional CSLI: traditional records show where the tower is; NELOS purports to show where the device is, a fundamentally different and more specific claim that required a higher evidentiary foundation the government could not provide.
↗ Read Case AnalysisThe defense filed a motion on March 17, 2025 objecting to the prosecution's attempt to exclude any reference to the absence of AT&T Timing Advance records for the defendant's phone. The defense argued that TA records from November 2022 were specifically requested, the same process that produced TA records for other phones in the case, but those records for Kohberger were not produced. AT&T confirmed that TA records expire within seven days if not preserved. The defense contended these records could have contained exculpatory evidence placing the defendant away from the scene during the critical window. The case illustrates that TA data must be affirmatively requested by defense counsel at the outset of any matter, as expiration destroys the evidence permanently.
↗ Read Defense Filing (PDF)Defense attorney Steven Kiersh challenged the reliability of FBI CAST testimony based on Timing Advance data from T‑Mobile records. At the Daubert hearing, the CAST agent acknowledged that TA was not designed for law enforcement use, that he conducted no drive test (which the agent identified as CAST's own gold standard), and that no rate of error could be established because the measurement occurs within network activity. The agent also acknowledged that a lack of human understanding of the data and method could result in errors. Judge Brandt admitted the evidence, relying on the argument that TA must be reliable or networks would fail, a network engineering rationale the defense argued was not a forensic accuracy standard. The hearing record is a practical roadmap for cross examination of any CAST agent testifying on TA.
↗ Read Trial CoverageIn a murder trial, the prosecution relied on five AT&T NELOS location points to place the defendant's phone near the victim's apartment. Defense expert witness Fegely testified that at least one of the five NELOS points was physically implausible: the distance between two consecutive points was too great to have been traveled in the time elapsed. The prosecution's own detective acknowledged on cross examination that the phone could have been located nearly a mile from the address depicted in the NELOS exhibit. The defense expert also testified that NELOS locations are estimates and that the TrAX visualization tool used to display them does not represent a hard boundary. The NELOS evidence was not excluded but was substantially impeached before the jury.
↗ Read Trial CoverageMost problems with TA evidence appear not in the raw data but in how it is presented and what is omitted. These are the patterns that warrant immediate expert review.
The single dot map: If the prosecution's exhibit shows a single point on a map labeled with your client's phone number at the time of the offense, ask how a band of possible locations became a single dot. There is no scientifically valid method to collapse a TA arc into a GPS coordinate without additional data the CDR does not contain.
No drive test disclosed. CAST's own published methodology identifies drive testing as the gold standard for validating theoretical TA arc coverage against real world terrain. If the expert's report contains no drive test results, the arc was never validated against actual conditions. This was a specific point of challenge in Sutton (DC, 2025).
NELOS / LocDBoR presented without AT&T's disclaimer. Every AT&T NELOS report carries the language "best estimate only" on every page. If the prosecution's expert did not disclose this to the jury or the court, that is a material omission about the reliability of the evidence.
No rate of error disclosed. Daubert requires a known or estimable error rate. An expert who responds that the network would fail if TA were wrong is offering a network engineering rationale, not a forensic accuracy metric. As confirmed in Sutton, the CAST agent himself could not identify a rate of error for TA values.
TA and NELOS point estimates conflated. T‑Mobile commingles raw TA data and proprietary point location estimates in the same CDR file. Some experts testify that there are four mappable parts to TA. There are not. The fourth element is a separate proprietary estimate with its own unverified accuracy profile. An expert who does not distinguish these is testifying beyond what the data supports.
Data gaps not addressed. Missing records, tower zero entries, or anomalous sector IDs in a CDR are meaningful. An expert who presents only the records that support the prosecution's timeline and does not address gaps may be cherry picking. Request the complete CDR and have your own expert review every record.
DAS sites and overshooting cells not evaluated. Distributed Antenna Systems introduce fiber timing delays that shift arc placement. Overshooting cells can place a phone's record in a geographically incorrect sector entirely. Neither issue is routinely disclosed in prosecution expert reports.
If cell tower location evidence is part of your case, these steps should happen before any expert takes the stand. TA data expires in as little as seven days with some carriers. Preservation requests must go out the moment you are retained.
Demand the complete CDR, every record, not just the subset the prosecution's expert used. Cherry picking is the most common way cell tower evidence gets shaped to fit a theory. The full file includes gaps, anomalies, and records that may support your client.
Specifically request Timing Advance records in your subpoena or preservation letter. Carriers do not produce TA by default. AT&T NELOS / LocDBoR and T‑Mobile PCMD data must be explicitly requested. The Kohberger case confirms that failure to request them early means the evidence may be permanently gone.
Retain a qualified digital forensics expert before the Daubert hearing, not after. Courts admit TA evidence when no qualified defense expert challenges it. The record in Sutton (DC, 2025) confirms: absence of challenge equals admission. The time to fight this is at the gate, not on appeal.
Demand disclosure of any AT&T disclaimer language from prosecution exhibits. NELOS reports carry a reliability disclaimer on every page. If it was omitted from court exhibits or not disclosed to the jury, that is a foundation issue worth raising.
Ask the prosecution's expert these questions on cross: Was a drive test conducted? What is the known error rate for the TA values presented? Were NELOS point estimates distinguished from raw TA arc data? Were any DAS sites identified in the coverage area? Were overshooting cells evaluated? What is the specific accuracy radius of each NELOS record?
Verify tower to coordinate mapping independently. The geographic coordinates in prosecution exhibits are typically derived from carrier tower reference files. Errors in tower identification, including using a stale antenna azimuth or incorrect sector bearing, can shift the depicted coverage area significantly.
On post conviction matters: If your client was convicted and cell tower evidence was central to the prosecution's case, and no qualified expert challenged it at trial, that evidentiary gap may support a renewed motion or an IAC claim. Courts that have excluded the same type of evidence in subsequent cases establish the standard for what should have been done.
Submit your question below. We review the records, explain what the data can and cannot prove, and provide a written assessment you can use to evaluate your options. No sales pitch. No obligation.
Elite Digital Forensics · Court Qualified Expert Examiners · CFCE · EnCE · CCME · CCST · CNFA · 18 years of experience in cellular evidence analysis, law enforcement forensic work, and post conviction appellate matters nationwide.
Enter your email to unlock the Print to PDF button. We will also send you new explainers when published, no more than twice a month.
Elite Digital Forensics does not sell or share attorney contact information.
In the print dialog choose Save as PDF or Microsoft Print to PDF as your printer.
A member of our forensics team will review your case details and be in touch within 24 hours. Please check your email for a confirmation.
Attorney FAQ
These questions come directly from defense attorneys reviewing cell tower evidence for the first time. Answers reflect the current state of case law and carrier data standards as of June 2026.
Timing Advance (TA) is a network engineering measurement used by carriers to manage signal timing between a mobile device and a cell tower. Each TA unit represents approximately 550 meters of distance. TA does not provide a precise location. It produces a distance range from one specific tower, defining an arc or ring. A phone can be anywhere along that arc. TA was designed for network efficiency, not for law enforcement location tracking.
GPS achieves accuracy within 3 to 5 meters under open sky conditions. TA produces a coverage arc that typically spans 550 meters per unit with a potential radius of up to 35 kilometers depending on the tower. TA accuracy is further degraded by signal reflection from buildings, atmospheric conditions, antenna azimuth variation, and carrier system averaging that can smooth or distort raw values. TA cannot pinpoint a device to a specific address or street corner.
Yes. In People v. Jones (Larimer County, Colorado, 2022), the court excluded TrAX software-generated location estimates derived from TA data, describing the methodology as a sea of unreliability. In United States v. Smith (E.D. Arkansas, 2021), NELOS records were excluded at a Daubert hearing because the proprietary algorithm could not be independently tested or assigned a known error rate. In State v. Kohberger (Idaho, 2025), the preservation failure of TA records became a central defense issue.
NELOS (Network Event Location System) is an AT&T proprietary system that calculates estimated device location using multiple network data points including Timing Advance. Standard CSLI records show which tower a device connected to and which sector it used. NELOS produces a specific location point presented on a map. Courts have found this distinction critical: traditional CSLI shows where the tower is, while NELOS purports to show where the device is, a fundamentally different and more specific claim requiring a higher evidentiary foundation.
In State v. Kohberger (Case No. CR01-24-31665, Idaho, 2025), defense counsel filed a motion noting that AT&T Timing Advance records for the defendant's phone were not preserved. AT&T confirmed that TA records expire within seven days if not affirmatively requested. The defense argued those records could have contained exculpatory evidence placing the defendant away from the scene. The case established that defense counsel must request TA data preservation immediately at case inception or the evidence is permanently destroyed.
Defense attorneys should ask: Was a drive test conducted to validate tower coverage in the specific area? What is the documented error rate for the methodology used? Did the analyst conflate TA arc evidence with GPS-level precision? Were NELOS or TrAX outputs presented as if they were raw carrier data? Does the prosecution expert have peer-reviewed methodology or proprietary tools that cannot be independently tested? Was the TA data averaged or processed by the carrier before production?
Serve a litigation hold and evidence preservation demand on the relevant carrier immediately upon retention. AT&T TA records expire within seven days without a preservation request. Subpoena the raw CDR data, the tower reference file with sector azimuths and coordinates, any NELOS or network location data separately from standard CSLI, and all drive test data the prosecution expert relied upon. Retain a qualified forensic expert early to allow independent verification before trial.
A qualified cell tower forensic expert should hold credentials including CFCE (Certified Forensic Computer Examiner), EnCE (EnCase Certified Examiner), and specialized training in CDR analysis and cell site location information. The expert should have documented experience testifying in criminal proceedings, familiarity with Sprint, AT&T, T-Mobile, and Verizon CDR formats, and the ability to produce a written report that meets Daubert and Frye admissibility standards.
Elite Digital Forensics is a Professional Digital Forensics and Cyber Consulting Company that provides services nationwide.
Elite Digital Forensics Assistant
By submitting this form, you consent to be contacted by email, text, or phone. Your information is kept secure and confidential. Reply Stop to opt out at anytime.
IMPORTANT: Please remember to check your spam or junk folder