"Where's the nearest cell tower?" sounds like a question with a simple answer. It isn't, because there's no single official map of every cell site in the US, and many sites don't look like towers at all. What you can do is combine four sources: the FCC's public records, crowd-sourced maps, the field-test data your own phone already has, and measurements you take on foot with a spectrum analyzer. Each one covers gaps in the others. This guide walks through all four, explains the numbers you'll see along the way, and ends with a step-by-step method for walking to a site you can't yet see.
What counts as a "cell tower"
People say "tower", but the industry says site: a place where a carrier has antennas and radio equipment. A site might be a lattice tower in a field, a few panels on an apartment roof, a box on a streetlight or a network of small antennas in a stadium ceiling. Knowing the main types tells you where to look and which records might list them.
Macro towers: lattice and guyed
The classic tower is a steel lattice structure, three- or four-sided, often 30–90 m tall. Very tall towers may be guyed, held up by steel cables anchored in the ground some distance from the base. These are the sites most people picture. They usually carry equipment for several carriers at different heights, each carrier on its own ring of antennas, and they serve wide areas. Tall towers are also the ones most likely to appear in the FCC's structure database, which we'll cover below.
Monopoles
A monopole is a single tapered steel pole, commonly 20–45 m tall, with antennas on a triangular frame or a ring near the top. They take less ground space than a lattice tower and are common beside highways, in industrial lots and behind shopping centres. A monopole with two or three rings of antennas at different heights is shared by two or three carriers.
Stealth sites
Where planning rules or landlords prefer the equipment out of sight, carriers disguise it. Common disguises include:
- Monopines and monopalms: a monopole dressed with artificial branches or fronds. In South Florida the palm version is the one to look for. Clues: it's taller than the trees around it, the trunk is perfectly straight and uniform, and the "fronds" near the top hide flat rectangular shapes.
- Flagpoles: a thick, smooth pole with the antennas inside a fibreglass section at the top. It's usually much fatter than an ordinary flagpole and the flag may be small for its height.
- Steeples, bell towers and clock towers: antennas sit behind panels made of radio-transparent material that's painted to match the masonry. Sometimes a section of the steeple looks slightly newer or a different texture.
- Water tanks, chimneys, billboards and light standards: panels are bolted around the top of a water tank, hidden inside a fake chimney or mounted on a sports-field light pole.
- Rooftop screen walls: a box-like enclosure on a roof that looks like a mechanical penthouse but is made of the same radio-transparent panels.
Rooftop sites
In dense neighbourhoods such as Brickell, Downtown Miami or Miami Beach, many macro sites sit on top of existing buildings. You'll see panels bolted to the parapet at each corner or face of the roof, sometimes painted the colour of the building, with equipment cabinets on the roof. From the street they're easy to miss; walk to the far side of the road and look up at the roofline edges.
Small cells
A small cell is a low-power site mounted at street level, usually 6–15 m up a streetlight, utility pole or purpose-built slim pole. It serves a radius of a few blocks at most and exists to add capacity where many people use data. A typical small cell has a cylindrical or box-shaped antenna at the top of the pole and one or two equipment boxes lower down, sometimes with an electric meter and a cut-off switch near head height. Some new "smart poles" hide everything inside a thicker pole shroud.
Indoor systems and DAS
Large buildings, stadiums, arenas, airports, convention centres and malls often have a distributed antenna system (DAS): many small antennas in ceilings or on walls, all fed from a central equipment room. Each antenna transmits at low power. Inside a venue with DAS, your phone may connect to an antenna a few metres away rather than to any outdoor tower. Outdoor DAS networks also exist, with nodes on poles that look much like small cells.
Temporary sites
For big events or after storm damage, carriers bring in cells on wheels (COWs) or similar trailer-mounted masts. They appear for days or weeks, then vanish. If you see a strong new cellular signal on a block that has always been quiet, and there's a festival or a repair underway, a temporary site is a likely explanation.
How to recognise the equipment
Once you know what each part looks like, you can identify a site from the street with reasonable confidence, and even tell roughly how many carriers share it.
| Part | What it looks like | What it tells you |
|---|---|---|
| Sector panel antennas | Flat, tall rectangles, often 1–2.5 m long, grey or white, mounted vertically | The main transmit and receive antennas. Their direction shows which way each sector points. |
| Remote radio units (RRUs or RRHs) | Smaller finned metal boxes mounted behind or below the panels | The radios themselves. More boxes usually means more bands. |
| Microwave dishes | Round, drum-like dishes with a flat or slightly domed cover, pointing sideways | A point-to-point link carrying data to another site. The dish points at its partner. |
| Fibre and power cables | Bundles of thin cables running up the structure, often in a protective conduit | Fibre backhaul and DC power. A site with fibre may have no microwave dish. |
| Equipment cabinets or shelters | Metal cabinets or a small building inside a fenced compound at the base or on a roof | Baseband units, batteries and power equipment. Each carrier typically has its own. |
| Generator | An enclosed engine unit in the compound | Backup power for outages. |
| Small-cell canister | A cylinder or slim box on top of a pole | An omnidirectional or multi-sector small cell antenna. |
| Notice signs | Small signs on the fence, door or pole near the equipment | Often name the site owner and give a contact number for workers. |
Reading sectors
Most macro sites divide the circle around them into sectors, most commonly three sectors of roughly 120° each. Look for antennas in three groups pointing in three directions. Each group is a sector, and your phone treats each sector as a separate cell. A site on a roof might use four sectors, one per face of the building, or just one or two if it only needs to cover a street. If you can see which way the panels face, you know which side of the site gets the strongest signal.
Counting carriers
On a shared tower, each carrier usually occupies its own height, called a rad centre, with its own ring of panels and radios. Three distinct rings at three heights usually means three tenants. Panel styles often differ between carriers, which helps when the rings are close together.
Microwave dishes and fibre
A site has to connect to the carrier's network. That link is called backhaul. In cities it's usually fibre, which you won't see except as cables entering the base. Where fibre isn't available, a microwave dish carries the data to another site in line of sight. Dishes are useful clues: a dish on one rooftop pointing across the bay means there's very likely another site where it's pointing. Many microwave links run at frequencies above 6 GHz, beyond the range of a HackRF, so you'll usually find a dish by eye rather than by measurement.
Coverage sites and capacity sites
Carriers build sites for two different reasons, and the reason affects where the site is and what you'll measure.
- Coverage sites fill gaps where there's no usable signal at all. They're tall, high-powered, use low bands such as 600, 700 and 850 MHz that travel far and penetrate buildings, and sit on towers or tall buildings. In rural areas almost every site is a coverage site.
- Capacity sites add more channels where there's already coverage but too many users. They're often lower, use mid bands such as AWS, PCS, 2.5 GHz and C-band that carry more data but travel less far, and include most small cells. Busy districts, transit hubs, beaches and stadiums attract them.
In practice this means that in a dense city neighbourhood your phone may be served by a nearby capacity site on a mid band while a distant coverage site provides the low-band layer. A survey shows both: the low bands change gradually across many blocks, while mid bands rise and fall sharply as you pass each small cell or rooftop.
Source 1: the FCC's Antenna Structure Registration
The FCC's Antenna Structure Registration (ASR) database exists for aviation safety, not to map phone networks. Owners must register structures that are more than 200 feet (about 61 m) above ground, or that are near an airport and tall enough to need FAA review. Registration comes with lighting and marking obligations, which is why tall towers have red lights or white strobes.
What an ASR record tells you
- The registration number, which is often printed on a sign at the tower base.
- The structure's coordinates and street address.
- Its height above ground and overall height above sea level.
- The structure type (lattice tower, guyed tower, monopole, building and so on).
- The owner, which is very often a tower company that leases space to carriers rather than a carrier itself.
- Lighting and marking requirements and the FAA study reference.
How to search it, in principle
- Go to the FCC website at fcc.gov and find the Antenna Structure Registration search, which is part of its wireless licensing tools.
- Choose a geographic search and enter your coordinates (you can copy them from any map app by long-pressing your location) and a radius, such as a few kilometres.
- Look through the results for structure types that suit antennas. Each record links to details and often a map position.
- Check the position on a satellite view to confirm a structure is really there. Records describe what was registered; a tower can be dismantled or replaced.
What ASR doesn't list
ASR is reliable for big towers, but it doesn't cover anything below the registration threshold, which is most of what's in a city: rooftop panels on buildings that were already registered or didn't need registration, stealth sites under 200 feet, small cells and indoor DAS. It also doesn't say which carriers use a structure. A tower in ASR may host three carriers or none.
A structure in ASR isn't proof of a cell site, and a cell site missing from ASR isn't hidden or unlicensed. Most urban sites are simply too short to need registration.
Source 2: licence records, and how they differ from ASR
The FCC keeps a separate system for radio licences, the Universal Licensing System (ULS). People often expect it to list every cell site, but for most mobile networks it doesn't. The difference matters:
| ASR | ULS licence records | |
|---|---|---|
| What it registers | Physical structures | The right to transmit on particular frequencies |
| Why it exists | Aviation safety | Spectrum management |
| Typical holder | Tower owner | Carrier or other licensee |
| Location detail for cellular | Exact coordinates of registered structures | Usually a licensed geographic area, not individual sites |
| Useful for | Finding tall towers | Learning which carrier holds which band in your area |
Most mobile licences cover a market or region. Within that area the carrier can add sites without listing each one in ULS, so a licence search tells you who may transmit on, say, the AWS band around Miami-Dade, but not where their antennas are.
There's one useful exception. Many licensed point-to-point microwave links are recorded with the coordinates of both ends. Searching ULS for fixed microwave licences near you can sometimes reveal a rooftop site you didn't know about. Plenty of links won't appear, because the site uses fibre or the link uses spectrum that isn't licensed site by site.
Source 3: crowd-sourced maps
Services such as CellMapper and OpenCelliD collect readings from volunteers' phones. Each reading records the cell the phone could hear, its identifiers, the signal strength and the phone's GPS position. From thousands of readings, the service estimates where each cell's antenna is. CellMapper also lets users move pins to confirmed positions and add photos.
Why they're useful
- They include small cells and rooftop sites that no public record lists.
- They show which carrier, band and identifiers each cell uses, which helps you match your phone's readings to a place.
- Coverage maps show where each site's signal has been heard, which hints at sector directions.
Their limits
- Estimated positions: an unconfirmed pin is a statistical guess. It's often pulled toward the roads where volunteers drove, and it can be off by hundreds of metres. Treat it as "somewhere near here".
- Uneven coverage: data depends on where volunteers have been, with which phones and which carriers. A quiet side street may have no data at all.
- Out of date: sites are added, upgraded and removed. A map may still show a cell that was switched off or miss one installed last month.
- Limited by phones: phones only record cells on networks they can see, so a carrier nobody in your area mapped may be missing.
Use these maps to make a shortlist of candidate sites, then confirm each one on foot.
Source 4: what your own phone knows
Your phone always knows which cell it's connected to, how strong and clean that signal is, and often which neighbouring cells it can hear. It just doesn't show you by default.
Android
- Settings: Settings → About phone → SIM status (the path varies by maker) shows signal strength in dBm and sometimes the network type.
- Testing menu: on many Android phones, dialling
*#*#4636#*#*opens a testing screen with more radio details. Some makers disable it. - Apps: free apps such as Network Cell Info and similar field-test apps show the serving cell's identifiers, band, channel number, RSRP, RSRQ and SINR, plus neighbour cells. Most need location permission, because cell data can reveal location.
iPhone
Dial *3001#12345# and press call to open Field Test Mode. Recent iOS versions show serving-cell information such as the band, channel and RSRP under menus that vary by version and model. Apple shows less than it used to, and third-party apps on iPhone can't read cell identifiers, so the field test is the only built-in option.
The limits of the phone view
A phone tells you about one carrier (yours), one serving cell at a time and whatever neighbours the network asks it to measure. It also switches cells to balance load, so the cell it uses isn't always the nearest or strongest. That's why the phone and a spectrum analyzer work best together: the phone names the cell, the analyzer shows everything on the air. If you are new to the second tool, what a spectrum analyzer is explains how a sweep works.
RSRP, RSRQ and SINR: what the numbers mean
4G (LTE) and 5G phones report several measurements. The three that matter most are below. The ranges are rough rules of thumb that engineers and field-test apps commonly use; phones and networks differ, and a "fair" reading can still give perfectly good service.
RSRP: how strong
Reference Signal Received Power is the power of the cell's reference signals, measured over one small slice of the channel (a single 15 kHz subcarrier). It's in dBm, and it's negative, so closer to zero is stronger. LTE phones report it over a range from about −140 dBm (barely detectable) to −44 dBm (extremely strong).
| RSRP | Rough rating | What it usually means |
|---|---|---|
| Better than −80 dBm | Excellent | Close to the site or in its main beam |
| −80 to −90 dBm | Good | Solid outdoor coverage |
| −90 to −100 dBm | Fair | Usable; indoors or some distance away |
| Weaker than −100 dBm | Poor | Cell edge, deep indoors or heavily shadowed |
RSRQ: how clean, relative to load
Reference Signal Received Quality compares the reference signal with all the power in the channel, including other cells and traffic. It's in dB and runs from about −3 (best) to about −20 (worst). As a rough guide, better than −10 dB is good, −10 to −15 dB fair, and worse than −15 dB poor. RSRQ drops when the cell is busy or when another cell on the same channel is nearly as strong, which happens between two sites.
SINR: how much signal stands above the interference
Signal to Interference plus Noise Ratio is the clearest single indicator of data speed. It's in dB; higher is better. A common rough scale is above 20 dB excellent, 13–20 dB good, 0–13 dB fair, and below 0 dB poor. Below zero means interference is stronger than the wanted signal, and speeds fall sharply.
Why a strong RSRP can still be slow
A reading of −75 dBm RSRP with an SINR of 2 dB means you're close to a site but another cell on the same channel is almost as strong. You'll see this at the boundary between two sectors of one site, or between two nearby small cells. Conversely, −105 dBm with 15 dB SINR can be slow for lack of signal but very stable.
Why the phone's dBm isn't the analyzer's level
RSRP is measured over one 15 kHz subcarrier. A spectrum analyzer measures the power across the whole channel, or across each frequency bin of its sweep. A 10 MHz LTE channel has 600 subcarriers, so the total channel power is roughly 28 dB higher than RSRP even before you consider traffic. On top of that, Consentiva shows levels in dBFS (relative to the receiver's full scale) unless you enter a calibration offset to convert to dBm. So don't expect the two numbers to match. Compare changes instead: if RSRP rises 10 dB as you walk a block, the analyzer's level for that band should rise by a similar amount. The dBm and dBFS guide explains the units in detail.
Cell identifiers: PCI, cell ID, eNB and gNB
Field-test apps show several identifiers. They let you tell cells apart and match what you see with crowd-sourced maps.
- PCI (Physical Cell ID): a short number the phone decodes directly from the signal. LTE has 504 values (0–503) and 5G NR has 1,008 (0–1007), so values repeat across a city. PCI is good for telling apart two cells you can hear at the same moment, not for identifying a cell uniquely.
- Cell ID (ECI in LTE, NCI in 5G): a longer number that's unique within a carrier's network. In LTE it's 28 bits long: the first 20 bits are the site's eNB ID and the last 8 bits identify the cell (usually a sector and band) at that site.
- eNB ID: identifies the LTE base station, which in practice usually means one site. All sectors and LTE bands at one site normally share it.
- gNB ID: the 5G equivalent. Its length varies between 22 and 32 bits by carrier choice, so the split between site and cell parts differs by network. Apps that know a carrier's scheme show it for you.
- TAC (Tracking Area Code): identifies a group of many sites. Useful only for noticing when you cross a large network boundary.
Worked example: decoding an LTE cell ID
Suppose an app shows an ECI of 31,604,738. Divide by 256: 31,604,738 ÷ 256 = 123,456.0078. The whole-number part, 123,456, is the eNB ID. The remainder is 31,604,738 − (123,456 × 256) = 31,604,738 − 31,604,736 = 2, the local cell number. Walk round the block and a neighbouring reading might show ECI 31,604,737 (same eNB, cell 1) or 31,604,739 (cell 3). Same eNB ID, different cell number: you're moving between sectors of the same site. A completely different eNB ID means you've handed over to another site. Most apps do this arithmetic for you; these numbers are only an illustration.
If you search a crowd-sourced map for that eNB ID on your carrier, you'll find its estimated position and the other cells seen from it.
Identifying the band
Field-test apps also show a channel number: EARFCN for LTE, NR-ARFCN for 5G. The channel number maps to an exact frequency and band, and most apps convert it for you, showing for example "Band 66" or "n71". If yours doesn't, the 3GPP specifications define the mapping, and many online calculators apply it. Knowing the band tells you where to look on the spectrum analyzer.
FDD and TDD bands
Most US cellular bands are FDD (frequency division duplex): towers transmit on one frequency range (downlink) and phones on another (uplink). Two important bands are TDD (time division duplex): 2.5 GHz (band 41 / n41) and C-band (n77). In TDD the tower and phones take turns on the same frequencies, so on a spectrum analyzer the band contains both. The tower's part is steadier and dominates near a site.
Downlink and uplink: where towers transmit
To find a site, look at the downlink: the frequencies the site transmits on continuously. The uplink carries phones' transmissions, which are bursty and low-power, and tell you about nearby phones rather than the tower.
Downlink bands (tower to phone)
| Band | Downlink | Notes |
|---|---|---|
| 600 MHz (band 71 / n71) | 617–652 MHz | Low band, long range |
| 700 MHz lower (band 12/17) | 729–746 MHz | Low band |
| 700 MHz upper C (band 13) | 746–756 MHz | Low band |
| 700 MHz FirstNet (band 14) | 758–768 MHz | Public safety broadband, also carries commercial traffic |
| 850 MHz (band 5 / n5) | 869–894 MHz | Low band |
| PCS (band 2/25 / n25) | 1930–1995 MHz | Mid band |
| AWS (band 4/66 / n66) | 2110–2200 MHz | Mid band, widely used for capacity |
| 2.5 GHz (band 41 / n41) | 2496–2690 MHz | TDD; uplink and downlink share it |
| C-band (n77) | 3700–3980 MHz | TDD; 5G mid band; needs a 6 GHz-capable plan |
Uplink bands (phone to tower)
| Band | Uplink |
|---|---|
| 600 MHz (band 71) | 663–698 MHz |
| 700 MHz lower (band 12/17) | 699–716 MHz |
| 700 MHz upper C (band 13) | 777–787 MHz |
| 700 MHz FirstNet (band 14) | 788–798 MHz |
| 850 MHz (band 5) | 824–849 MHz |
| AWS (band 4/66) | 1710–1780 MHz |
| PCS (band 2/25) | 1850–1915 MHz |
Two practical points follow. First, a burst in an uplink band means a phone or data modem nearby is transmitting, often your own phone or one in a passing car; it says nothing about where the tower is. Second, your own phone's uplink can show up strongly in the analyzer because it's centimetres from the antenna. Put your personal phone in your pocket, away from the analyzer's antenna, while you measure. The 5G bands guide covers the 5G layers, including millimetre-wave bands far above the HackRF's range.
Which Consentiva plan covers which bands
The HackRF One covers 1 MHz–6 GHz. Consentiva's Free and Standard plans sweep up to 2.7 GHz, which includes every band in the tables above except C-band. The Full plan sweeps to 6 GHz and adds C-band and the CBRS band at 3550–3700 MHz, which some carriers also use. Free covers 30 MHz–2.7 GHz but locks the analysis and keeps data for 7 days. See plans for details.
Walking to a site with a spectrum analyzer
This is the method that works when maps are vague and you want to know which antenna you're actually receiving. It relies on three facts: signals get stronger as you get closer (on average, not at every step), your body blocks part of the signal, and readings from several places point to one spot. If you haven't set up the hardware yet, start with HackRF One on Android.
Before you go
- Make a shortlist of candidate sites from ASR, crowd-sourced maps and anything you've noticed on the roofs.
- Use your phone's field test at home to note your carrier's serving band, PCI and eNB ID.
- Plan a loop on public sidewalks that passes each candidate on more than one side. Don't plan to enter fenced compounds, rooftops or private property.
- Pick a consistent time window; cell loading varies through the day, and the mid bands in particular change with traffic.
On the walk
- Start a recorded survey. Consentiva records each sweep with its GPS position so the route map shows how levels change street by street.
- Watch the downlink band you care about. Start with a mid band such as AWS (2110–2200 MHz) or PCS (1930–1995 MHz). Low bands change too slowly across a few blocks to point the way.
- Follow the rising level. At each junction, pause and compare the level a few metres into each direction. Take the direction that rises. Expect noise: levels jump several dB from step to step as reflections add and cancel, so judge the trend over 20–30 m, not the individual reading.
- Use body shadowing for a bearing. Stand still, hold the phone and antenna close to your chest, and turn slowly through a full circle. When your body is between the antenna and the site, the level drops, often by several dB and more at higher frequencies. The site is roughly opposite the direction you face at the lowest reading. Repeat once to confirm.
- Mark it. Say a voice mark such as "bearing north-east" so the note is tied to that place and time on the route map.
- Triangulate. Take bearings at two or three points at least a block apart. On the map, draw a line from each point along its bearing. Where the lines cross is your search area.
- Look up. Walk to the search area and scan roofs, poles and anything taller than its neighbours, using the equipment table above.
- Confirm by walking around it. Circle the candidate at a distance of one or two blocks. A real sector site gives a strong signal on each side its sectors face and weaker readings behind any blind side.
Stay on public sidewalks and legal paths throughout. Don't climb, enter compounds, or go onto roofs, and don't touch site equipment. You never need to get close to the antennas to identify a site; the street view and the levels are enough.
Combining phone and analyzer
While you walk, glance at your field-test app. When the analyzer level in your band peaks and the phone shows the same eNB ID with a much better RSRP, you're near the site serving you. If the analyzer peaks but the phone's eNB stays the same and RSRP doesn't improve, you've found another carrier's site, or a different band at a site your phone isn't using.
Worked example: a rooftop site in a dense block
This is an illustrative walk, not a measurement from a real location. It shows how the steps fit together.
- At home, the phone reports Band 66, RSRP −98 dBm and an eNB ID that a crowd-sourced map places "around" a four-block area with no visible tower.
- You start a survey at your front door and walk east. The AWS downlink in the analyzer rises by about 6 dB over the first block, then falls slightly at the next junction.
- At that junction you turn a full circle. The level dips by roughly 8 dB when you face south-west, so the site lies north-east. You say "bearing north-east".
- You walk one block north and repeat. The dip now points the site to the east. You mark it.
- On the route map, the two bearing lines cross over an eight-storey building. From across the street you spot three grey panels on the parapet, one at each visible corner, painted the colour of the walls.
- You walk around the building. The level is highest on the two streets the visible panels face and noticeably lower in the alley behind. The phone now shows RSRP −72 dBm on the same eNB ID.
- Back home, you open the report. The block nearest the building has the highest level for that band on the route, matching what you saw.
Why the signal isn't strongest directly underneath
Sector antennas concentrate their energy in a narrow vertical beam, often less than 15° tall, aimed just below the horizon. That downward aim is called downtilt. It's set either mechanically (the panel tilts) or electrically (inside the antenna), and engineers adjust it to control how far each sector reaches.
Simple geometry shows the effect. If an antenna is 30 m up with a 6° downtilt, the centre of its beam reaches the ground at about 30 ÷ tan 6° ≈ 285 m away. With 4°, it's about 430 m away. Standing at the base, you're well below the beam and receive only weaker side lobes. As you walk out, the level often rises before it falls again with distance. Small cells, being low and close, show this effect over a much shorter distance, while very tall towers can push the peak out further still.
Two other effects add to it. Directly under a rooftop site, the building itself blocks the antennas. And behind a sector, outside its horizontal beam, levels can be much lower than in front. So the strongest block may be one or two streets away in the direction the panels face. This is a common reason people misread a map: the reddest block isn't always the one with the site on it. For context on how levels relate to official limits, see RF exposure limits explained; Consentiva records signal levels and doesn't measure exposure.
Small cells and indoor systems
Small cells behave differently from macro sites in a survey:
- Their level rises and falls sharply over 50–100 m, because they're low and low-powered.
- They usually carry mid bands, so you'll see them in AWS, PCS, 2.5 GHz or C-band rather than in the 600–850 MHz bands.
- Trees, parked trucks and bus shelters between you and the pole make a big difference.
- A row of small cells along a busy avenue can make the whole street read high in the mid bands, with peaks every few blocks. The Miami street guide describes how this looks alongside the other signals on a city block.
Indoors, if a building has DAS, the level can be higher in a lobby than on the sidewalk outside. That's normal, and it's one reason to survey outdoors and indoors as separate routes. The survey method guide explains how to set up comparison routes.
Permits, zoning and who to ask
Whether a site needs a permit, and what kind, is decided locally, by the city or county and sometimes by a landlord or homeowners' association, within federal limits. Rules differ between municipalities, and they differ for macro towers and small cells. If you want to know about a particular site, the local planning or building department is the place to ask; permit files are often public records. The sign on a site usually names the tower or site owner and a contact number. This guide doesn't cover what any specific local rule requires.
Troubleshooting
| What you see | Likely cause | What to try |
|---|---|---|
| Level jumps up and down every few steps | Multipath: reflections adding and cancelling | Judge the trend over 20–30 m; use the route map's averages |
| Strong bursts in 824–849 or 1710–1780 MHz | Uplink from your own or a nearby phone | Move your personal phone away from the antenna; focus on downlink bands |
| Body-shadow dip is hard to see | Strong reflections from buildings, or a low band | Use a higher band, step into an open area, turn more slowly |
| Bearings don't cross in one place | Reflections from tall buildings, or two sites | Take a third bearing from an open spot; check two bands separately |
| Phone shows a different eNB than expected | Load balancing or a band the phone prefers | Note both; the nearest site isn't always the serving site |
| Nothing in C-band | Plan sweeps only to 2.7 GHz, or no C-band nearby | Check your plan range; C-band needs Full |
| Levels differ between days on the same route | Network load, time of day, parked vehicles | Walk at the same time window; compare against the block's baseline |
Common mistakes
- Trusting a crowd-sourced pin as exact. It's an estimate until someone confirms it.
- Assuming the strongest block holds the site. Downtilt and sector direction move the peak away from the base.
- Using a low band to find a nearby site. 600–850 MHz changes too gradually to steer by over a few blocks.
- Measuring uplink by mistake. Phone bursts in uplink bands are easy to confuse with a site.
- Comparing phone dBm with analyzer dBFS. They measure different things; compare changes, not values.
- Treating ASR as complete. Most urban sites aren't in it.
- Going where you shouldn't. Compounds, roofs and private property are off-limits, and you don't need them.
Once you've found your sites, reading a Consentiva report explains how the route map and the per-block levels present what you walked.
Glossary
- ASR: the FCC's Antenna Structure Registration, a database of tall structures registered for aviation safety.
- Backhaul: the fibre or microwave link from a site to the carrier's network.
- Body shadowing: the drop in level when your body blocks the path between antenna and source; used to take a rough bearing.
- DAS: distributed antenna system; many low-power antennas fed from one equipment room.
- Downlink: transmissions from the site to phones.
- Downtilt: the downward aim of a sector antenna's beam.
- eNB / gNB: the LTE and 5G base station, usually one site.
- FDD / TDD: separate frequencies for uplink and downlink, or shared frequencies taking turns in time.
- PCI: physical cell ID, a short, reused number decoded from the signal.
- RRU / RRH: remote radio unit or head; the radio mounted near the antennas.
- RSRP, RSRQ, SINR: signal strength, signal quality relative to the channel, and signal over interference plus noise.
- Sector: one directional slice of a site's coverage, usually about 120°.
- Small cell: a low-power site on a pole or building, serving a few blocks.
- ULS: the FCC's Universal Licensing System for radio licences.
- Uplink: transmissions from phones to the site.
Common questions
Is there an official map of every cell tower?
No. The FCC's Antenna Structure Registration database lists structures over 200 feet tall or near airports, which misses most rooftop sites, stealth sites, small cells and indoor systems. Crowd-sourced maps such as CellMapper and OpenCelliD fill many gaps, but their positions are estimates.
Is the signal strongest right under a tower?
Often not. Sector antennas aim a narrow beam slightly below the horizon, so the strongest street-level signal is usually some distance from the base, in the direction the panels face.
What is a good signal strength on my phone?
For 4G and 5G, phones report RSRP in dBm. Roughly, better than -80 dBm is excellent, -80 to -90 good, -90 to -100 fair, and below -100 dBm poor.
How do I see which cell my iPhone is using?
Dial *3001#12345# and press call to open Field Test Mode, which shows serving-cell details such as band and RSRP. Recent iOS versions show less than older ones did.
Why doesn't the FCC licence database show where cell sites are?
Most mobile licences in the FCC's Universal Licensing System cover a geographic area rather than individual sites, so carriers can add antennas without listing each location. Some licensed microwave backhaul links do list coordinates and can hint at a site.
Can a spectrum analyzer tell me which carrier a signal belongs to?
It shows which band is active and how strong it is, which narrows things down, but it doesn't decode cell identifiers. Pair it with a field-test app on your phone and a crowd-sourced map to match bands to carriers and sites.
Why does my phone connect to a tower that isn't the closest?
Networks balance load between cells and bands, and buildings or sector direction can make a farther site stronger where you stand. The serving cell is the best choice by the network's rules, not necessarily the nearest.