Chasing Security Services
By Grant Searle
Now that Police are about to
disappear from a lot of people's monitoring lists, one might be at a loss to
what to do. One particular group of scanning targets that might interest you is
Scanning the Security Services.
Security services are a
bit like armies of ants and also like masons.
Ants in the sense that
you see them everywhere ..... they
are right through most of the commercial and trunking frequencies. Masons in
the sense in that they attempt to communicate each other quite often via secret
codes and rituals.
But if you take the time it is possible to track who is who and to develop an understanding of the meaning of their codes. In fact it is very hard to scan the airwaves at night without hearing security firms
They tend to give themselves away
by reference to phonetic call-signs, code words and references to alarm
response etc. They are on conventional frequencies, they are on trunking networks,,and for one location
jobs like pubs or housing estates they tend to use UHF CB with their own chosen
tone.
This basic short
article has been written from a scanning point of view - it is not a security
training document, nor is it exhaustive. I am setting out to listen to the
security services - not be a security guard. So while understanding how a security
guard approaches their job (via training) is useful, it is not the end all and
be all, you can pick a lot up just from listening to them
So what equipment do
you need to track security successfully ?
Any
scanner that can decode CTCSS / DCS and preferably be capable of trunking eg like a Uniden 780 would be ideal. You need a scanner that can
determine what code is being used in order to re-identify that same user, otherwise there is just a maze of voices on a
frequency
Does one need a digital capable scanner
?
Not really - to date I
only know of one security user that employs APCO25 and possibly a second one in
the near future. While there are a handful of scrambled users I believe that
most of these folk are towies. As well as having a
reasonable scanner (and obviously a good antenna to go with it) I have found an
exercise book and a pen is a necessity if you want to compile an accurate
security list of frequencies, call-signs and codes.
Basic security radio
procedures
Security firms as a
general rule insist on strict radio procedure, whether it be
a handheld, vehicular mobile or base station. They do this to preserve the
security of the information being transmitted, they work on the principle that
somebody could be listening. Therefore the names of security personnel and
locations tends to be disguised by the used of code words and call-signs.
Call-signs perform a number of
functions. They protect the identity of the persons transmitting,
they help to simply matters when communicating with a large group of people on
a security net. Procedurally it is easier to assign phonetic or location based
call-signs based on their specific location or job tasking than use somebody's
first name (especially if there are more than one having the same name). A commonly
employed practice in
Code words are used for similar reasons
- to prevent the true nature of the subject from being overheard by uninvited
listeners. Security operations frequently involve the protection of cash or
cash-related activities, so the use of code words can help prevent the basic
criminal element from working out what is happening. Really Sensitive
information that needs to be communicated, as a rule is phoned in to the
security operator eg: "Please Landline me"
So a cash escort from
the cashier to the club safe in a gaming club may go something like this:
Coded:
Cage to Delta 1. We
require a Code Foxtrot
Delta 1 to Cage. Roger
Sierra 1 enroute
(At the end of the
escort)
Sierra 1 to Delta 1. Code
Kilo - returning to location.
Decoded:
Cashier to Security
Manager, we require a cash escort from the Cashier's Cage to the Club Safe.
Security Manager to
Cashier. Roger I am sending you Security Guard #1 for your uniformed cash
escort
Security Guard #1 to
Security manager: Uniformed cash escort completed - returning to assigned
duties
Every security company
has different procedures, call-signs and code words
Some standard ones
Roger = means message
understood
Over = Call-sign has
transmitted and is now awaiting reply
Out = Call-sign has
finished transmitting at this time
Landline me = Call me
on the public telephone system
Many security companies
have a regular welfare check every hour. While most are mundane, channel
operators frequently get annoyed with folk who are inattentive or clip their
call-sign. At the start of shifts many call-signs will carry out radio checks
on allocation and when on site at their tasking. As a rule conversations are
kept to a minimum to prolong battery life. Chit Chat is normally not tolerated.
Example of a random
unknown security company monitored
This is an example of
one I first heard on a Sunday on the hour and it turned out to be on every hour
on the hour over the day.
It was on 472.7000Mhz
I was scanning
462-512Mhz
Looking up ACMA I found
that 472.7000 was a Vertel Rental Frequency with
the50w transmitter at Dural
Reading the tone off my
scanner I found it to be 114.8Hz (aka as CTCSS or PL), so I could re-identify
it.
"Granville to all
stations
Commencing green calls
Green call Blacktown -
Acknowledged
Green call Greenacre
1,- Acknowledged
Green call Greenacre 2-
Acknowledged
Green call Waverley -
Acknowledged
Green call Rose Bay
Green call Rose Bay
Nothing heard from Rose
Bay - will call by Mobile phone
Granville out"
So how do you start
listening to Security?
Have a strategy
Firstly you will find them mainly on
communication rental frequencies in your area. Very few companies register
under their own names, look up the ACMA database for sites in your general area
and make a list. Invariably the security folk will make themselves known
especially at night
Secondly look up and list the
trunking sites you can hear .... Motorola Type 2, LTR and MPT1327. If you live
in a large city like City or town, MPT trunking might be used. While somewhat
difficult to follow, MPT programs like trunkview make
it easier to follow the users, commercial MPT1327 can be found on VHF and on
the 400Mhz UHF band. Motorola Type 2 and LTR are largely confined to
Thirdly don't forget to check UHF CB
between 476.425 and 477.400Mhz. There is an increasing number of security users
on this free to use band using CTCSS/DCS to carry out single-site security like
pubs, private estates etc
Lastly you can simply punch in a
frequency range to search (I find most security between 160-165.2Mhz and
462-512Mhz)
Set it to decode
CTCSS/DCS
Doesn't matter where you
live.
When you find something
interesting, look it up on the ACMA database to see what the likely frequency
users are. They are normally a comms rental company.
And if you are bored
don't forget unique security users like Railcorp Transit Security (Talk group
18320) on the GRN.
There is rarely a quiet
moment on the rail system and Friday and Saturday nights tend to be out and out
bedlam.
Other Security users on the GRN include RailCorp’s contract security guards as well as the John
Hunter Hospital Security near Newcastle
Share what you hear,
you can email us, or join the Monitoring Security Services Yahoo group that you
can see on the links below.
Here is a sample of radio codes and call-signs being used by security services http://lakescan.customer.netspace.net.au/thecodes.html
The Security Industry and the communications used are always changing. If you have any alterations or additions to our lists, please email us at lakescanslist@netspace.net.au
Please feel free to email me any photos of NSW Security Officers or their patrol vehicles
Join the email group of Security Monitors around NSW at http://groups.yahoo.com/groups/MSS_NSW/
RETURN TO LAKESCAN’S LIST http://lakescan.customer.netspace.net.au/list.html
