A storefront in McAllen, Texas that sold two-way radios and installed car alarms was, according to federal court records and press reporting, the design office for one of the largest privately built radio networks in the hemisphere. The technical lessons in that case are ordinary land mobile radio engineering, which is exactly why they matter to a county radio shop in Georgia. This piece covers what the network was, what the reporting since 2020 says about parasite antennas on commercial towers, and where federal wiretap law draws the line between lawful listening and a felony.

The shop on the border

V & V Communications in McAllen sold two-way radios and installed car alarms, which is a description that would fit several hundred small shops in Texas and a few dozen in Georgia. Its owner was Jose Luis Del Toro Estrada, known as El Tecnico, and according to reporting built on his federal plea agreement in the Southern District of Texas, he was the man who planned and largely built the Gulf Cartel and Zetas radio network beginning around 2006. The Associated Press, in a December 2011 story on the network, named him as its mastermind. Sources describe his age slightly differently depending on when they were written, with the Houston Chronicle giving 38 at the time it reported his plea and other accounts putting him at 37 when he was arrested in 2008.

He was taken in Project Reckoning, the DEA-led multi-agency operation against the Gulf Cartel, which the Justice Department has described as producing numerous arrests in mid-September 2008. He pleaded guilty to one count of conspiracy to distribute cocaine and he cooperated. The exact plea date is one of the places where the public record I could verify does not line up, because the academic literature citing the plea agreement dates that document to 2009, the Associated Press wrote in December 2011 that he had pleaded guilty two years earlier, and Vice’s 2014 account of the case describes a final sentencing hearing on 11 May and his release from custody on 21 June 2012 after serving less than four years. I am giving you all three rather than picking the one that reads cleanest, and if the precise date matters to you, the docket in Houston is where to settle it.

What makes the case useful to a working radio administrator is not the drug conspiracy, which is the ordinary business of federal prosecutors, but the fact that everything technical in it was routine. A licensed technician with a business account at a distributor, a truck, a ladder, and a working knowledge of repeater pairs and site power can build wide-area coverage, and nothing about that skill set is exotic or hard to acquire. The same catalog serves the volunteer fire department and the criminal enterprise, and the difference between them lives in law and licensing rather than in the equipment.

What the network actually was

The Associated Press reported in December 2011 that the system Del Toro Estrada established reached most of Mexico’s 31 states, and that current and former United States law enforcement officials described the equipment, from professional-grade towers down to handheld radios, as part of a single network that until recently ran from the border down the Gulf coast and into Guatemala. Vice’s later account, citing NPR reporting from the time, put the geography at roughly 500 miles of the Texas border and about 500 miles into the interior. The gear was commercial grade and legally purchasable, the system ran on its own open-band allocations with basic encryption rather than on Nextel’s licensed spectrum, and reporting on the case also describes hijacked and reprogrammed Nextel repeaters, antennas piggybacked on commercial towers, a repeater placed on the roof of a Mexican police station, and solar power at remote sites where there was no utility service. I am deliberately not naming a protocol, because the reporting says commercial equipment with basic encryption and does not support anything more specific than that.

The seizure numbers are the most concrete part of the record. The Mexican army announced on 4 December 2011 that it had taken at least 167 antennas, 155 repeaters, 166 power sources, 71 pieces of computer equipment and 1,446 radios, in operations across the Gulf coast state of Veracruz and the northern states of Nuevo Leon, Coahuila, San Luis Potosi and Tamaulipas, as reported by the Associated Press. Vice later rounded that count to 1,450 radios and added figures for seized cellphones and Nextel devices, so if you cite a number, cite the army announcement and the date rather than the round version.

Sources disagree about the shape of the thing, and the disagreement is worth carrying rather than smoothing over. In the same AP reporting, Mexican authorities described the infrastructure as less monolithic than the American account, and a Mexican military official denied that the army and navy had been targeting one network covering the entire Gulf coast. The seizures happened and the counts are attributable, while the claim that all of it constituted a single integrated system rests on the assessment of United States officials and was contested at the time by their Mexican counterparts.

Two operational details from the reporting deserve a radio person’s attention. Antennas in Tamaulipas were concealed in the foliage of the rockrose shrub and painted to match, with power cables buried, which meant the sites were nearly invisible from a few feet away, and one soldier told the AP that a downed antenna in Nuevo Laredo was replaced quickly. Operators also had the ability to change frequencies or to garble voice through software if they suspected they were being monitored, which tells you the network was administered by someone who thought about monitoring as a design problem rather than treating it as bad luck.

Why radio beat cellphones for them

The Associated Press summarized the operational advantage directly, reporting that the network let Zetas operatives talk without depending on the official cellphone network, which is comparatively easy for authorities to tap and which in many cases does not reach far into the countryside. Those are the same two reasons your fire department still owns a land mobile system in 2026 instead of handing everyone a smartphone, and the coincidence is not accidental, because coverage independence and infrastructure independence are properties of the technology rather than properties of the user.

Push-to-talk itself is the second advantage. A dispersed screen of lookouts watching roads and ridgelines needs one-to-many voice with no call setup, no ringing, and no dependence on whether the other party is available, which is precisely the traffic model that land mobile radio was designed around and that cellular telephony handles badly. Add a repeater on high ground and you cover a valley, add a solar panel and a battery and you cover it without a utility account, and the recurring cost of the whole arrangement drops to fuel for the truck that services it.

The third advantage is the records problem, and it cuts in a direction public safety agencies rarely think about. A carrier holds subscriber records, tower records and traffic records that can be reached by legal process served on the carrier, whereas a private radio system generates no third-party business records at all, so there is nobody to subpoena. When your own agency debates whether to move dispatch traffic onto a broadband carrier, that same property is one of the things you are trading away or keeping, and it is worth naming honestly in the discussion instead of leaving it as an unstated preference for the radio.

Why this is not filed under history

Reuters published a special report by Julia Love on 15 July 2020 that interviewed 14 current and former telecom workers in Mexico, and twelve of them said they had seen parasite antennas, called narco-antennas locally, on towers they worked on. The incidents the workers described occurred between 2015 and 2020 across several Mexican states, and the reporting identifies towers belonging to American Tower and sites associated with AT&T and America Movil among the infrastructure involved. Most technicians said they encountered the devices a few times a year, while one engineer estimated the antennas were present on roughly 20 percent of the towers his firm worked on, and another put it at about 30 percent of his sites during a period of heavy local criminal activity in 2018.

The tower owners did not agree with that picture, and the disagreement belongs in any honest summary. An American Tower spokesman told Reuters the company had “not received any credible reports” of parasite antennas or other cartel activity at its Mexican sites, another carrier’s security director said his company had no reports of parasite antennas over at least the prior year, and Mexico’s telecom regulator said its compliance unit had received no such reports from companies under its jurisdiction. The working rule the technicians described to Reuters was to leave the illicit equipment alone, which is a personal safety decision made by people with no protection and no authority, and it is the same instinct that should govern a lineman or a tower climber anywhere who finds hardware he cannot account for.

On the United States side, the surveillance element of this is documented at the human level rather than at the network level. The Associated Press reported in October 2014 that the Border Patrol was targeting cartel scouts who live in the Arizona desert for days at a time and use solar panels, encrypted radios and cellphones to warn smugglers when law enforcement approaches, and the Arizona Daily Star reported the same year that scouts hold mountaintops in western Arizona sometimes for weeks, citing a Pinal County Sheriff’s Office release stating that the Border Patrol had identified 75 to 100 lookout posts in the smuggling corridor running through that county. Then-Tucson Sector chief Manuel Padilla framed the targeting to the Star in terms of two things smugglers need, “the ability to move and the ability to communicate.” I am not going to tell you what service or band the scouts use, because the published reporting says encrypted radios and cellphones and does not say more.

What I could not confirm is equally important. Searching for a seizure of an organized clandestine radio network on the United States side after 2012 turned up nothing I can support with two reputable independent sources, so I am not asserting one, and neither should you in a briefing. What is confirmed and current is that digital portables with vendor privacy or encryption features now sell for a small fraction of what commercial gear cost in 2006, which lowers the cost of a private encrypted voice network for anybody, lawful or otherwise, and which shows up in your world as unfamiliar encrypted traffic that your receiver can detect but not read.

The legal line, stated plainly

The controlling statute is 18 U.S.C. 2511, the interception provision of the federal Wiretap Act. Subsection (1) makes it an offense to intentionally intercept, endeavor to intercept, or procure another person to intercept a wire, oral or electronic communication, and subsection (4)(a) provides that a person who violates subsection (1) shall be fined under this title or imprisoned not more than five years, or both, with narrower penalty provisions elsewhere in the section for certain unencrypted satellite and radio conduct. The exception that matters for radio work is in subsection (2)(g), which provides that it is not unlawful under the chapter to intercept a radio communication that is transmitted so as to be readily accessible to the general public, including transmissions by governmental, law enforcement, civil defense, private land mobile and public safety systems that meet that standard.

The phrase carries a statutory definition, and it is the whole ballgame. Under 18 U.S.C. 2510(16), “readily accessible to the general public” means, with respect to a radio communication, that the communication is not scrambled or encrypted, not transmitted using modulation techniques whose essential parameters have been withheld from the public with the intention of preserving privacy, not carried on a subcarrier or subsidiary signal, and not carried on a common carrier system except for tone-only paging, with a further exclusion for certain satellite allocations. Practically, if the traffic is in the clear and your receiver tunes it, listening does not violate this chapter, and the moment the signal is scrambled or encrypted it is protected communication and interception carries the exposure described above.

Two further constraints apply on top of that. Section 705 of the Communications Act restricts divulging or publishing the contents of certain radio communications you are not entitled to receive, so hearing something lawfully and then repeating it are separate questions with separate answers. State law is also frequently stricter than federal law on scanner possession and use, particularly in a vehicle or in connection with a crime, and Georgia’s provisions are not identical to those of neighboring states, so ask your agency attorney for a written opinion on your own state’s code rather than relying on what a vendor or a forum told you.

The role this leaves to a local agency is bounded and still useful. You may lawfully receive unencrypted transmissions, document what you hear and when, note frequencies and signal characteristics, direction-find unencrypted activity in your jurisdiction, correlate what you find with reports from your own personnel, and hand the package to a federal partner. Interception of the content of protected communications sits inside Title III, which contemplates court authorization sought by federal prosecutors on a defined list of predicate offenses, and a local department that decides to go get the content on its own has created a suppression problem, a civil exposure, and possibly a criminal one for the person who pushed the button.

A hypothetical: your local ham calls the front desk

This section is a constructed scenario and not an account of anything that happened. Suppose an Amateur Extra in your county, running a decent beam and a receiver that covers well outside the amateur bands, tells your department that for three weeks he has heard short unencrypted transmissions from a ridge on the county line, in which one voice describes vehicles, colors, and what sound like marked units by direction of travel, and that the traffic increases at night. He has frequencies, dates, times and bearings from two locations, and he wants to know whether anybody cares.

What should happen next is unglamorous. The desk takes it as a citizen report with a case number rather than as a conversation, a supervisor is notified the same shift, and the report captures what the caller heard in general terms along with the frequency, the times, the equipment he used and the bearings he took, without asking him to keep going. Somebody in your agency who has the intelligence liaison role, and in a small department that is often the same person who handles the fusion center account, contacts the state fusion center and the regional HIDTA and asks whether the location and the pattern mean anything to an existing case. If they do, the case is federal or multi-agency from that moment and your department’s job becomes support and deconfliction, and if they do not, you still have a documented report and a location worth a lawful look by a deputy.

Direction finding on unencrypted signals is within your lane if a sworn member does it, and the point of it is to establish where a transmitter is, not to compile the content of somebody’s conversation. Anything on the hilltop that involves approaching a site, a person, or hardware becomes a tactical and jurisdictional decision made by supervisors with the sheriff’s office or the federal agency, on land whose ownership somebody has checked, and not a decision made by the person who happens to be listening.

What must not happen is a shorter list and a firmer one. Nobody transmits on the frequency, and nobody jams it, because interfering with radio communications is its own federal problem and because it tells the other party they were heard. Nobody attempts to defeat encryption or asks a volunteer to try. The volunteer does not drive to the ridge, and he is told plainly that his part ended when he made the report. Nothing goes on social media, a scanner feed, a group chat, or a shift briefing slide that leaves the building, and the caller is told what your open records law actually does with his name rather than being promised a confidentiality your department cannot deliver.

Who you actually hand it to

The regional HIDTA is usually the right first call for anything that looks like organized trafficking with a communications component, because the High Intensity Drug Trafficking Areas program funds task forces that already mix federal, state and local investigators, and north Georgia agencies fall within the Atlanta HIDTA. Your state fusion center is the parallel path for suspicious activity that is not clearly narcotics, and in Georgia that is the Georgia Information Sharing and Analysis Center, operated within the Georgia Bureau of Investigation. Both maintain published intake channels, and because contact numbers and reporting portals change, have somebody confirm the current ones on the agencies’ own sites and then write them into your communications plan rather than trusting a laminated card of unknown age.

Beyond those two, the FBI field office covering your county, Homeland Security Investigations, and the DEA field division each take reports directly, and in a border sector the Border Patrol sector office is the agency with the terrain knowledge. The FCC Enforcement Bureau is the right destination for the narrower radio questions, which are unlicensed operation, interference with licensed users, and unauthorized use of a licensed frequency, and it is worth understanding that the Bureau’s field resources are limited and that an interference complaint is not an investigative substitute for a criminal referral. On the amateur bands specifically, the ARRL Volunteer Monitor Program operates under an agreement with the FCC and is the established path for documented amateur band misuse, which is a different problem from what this article describes and should not be confused with it.

The point of naming all of them in advance is that a report arriving at four in the morning does not survive a search for the right phone number. Decide now which of those relationships your agency actually has, put a name and a role next to each one, and accept that the ones you have never used will be the slowest when you need them.

What your department may keep

Once you have written something down, you have created a record, and records about people who have not been charged are governed. The federal regulation that most often applies is 28 CFR Part 23, which sets operating policies for multijurisdictional criminal intelligence sharing systems that receive federal funding, and its core requirements are that information about an individual may be entered only where there is reasonable suspicion that the individual is involved in criminal conduct or activity and the information is relevant to that conduct, along with obligations for review, validation and purge of stored information. Your fusion center has a privacy officer whose job includes explaining exactly how that applies to a submission from your agency, and that is the person to ask before you build any kind of local file.

The distinction that trips up small departments is between an incident report and an intelligence file. A citizen calling to report unusual radio traffic is a report of an observation and belongs in your records management system under your normal retention schedule, whereas a folder in a sergeant’s desk containing names, license plates, photographs and speculation about who might be involved is a criminal intelligence file that almost certainly does not meet the standard under which it would have to be maintained. Georgia’s open records law and your own retention schedule both apply to whatever you create, and neither of them makes an exception because the subject sounded serious.

Write the handoff itself into the plan rather than leaving it to memory. A short written procedure naming who takes the initial report, who notifies the fusion center and the HIDTA, what gets documented, what does not get retained locally, and who is authorized to speak to the media will survive a shift change and a personnel turnover, which is more than can be said for an understanding between two supervisors who both happen to be off that week.

What to do at your agency

• Have your radio manager pull the site records for every tower your agency owns or leases space on, walk one of them with the site owner’s inventory in hand, and note in writing any antenna, enclosure, coax run or solar panel that does not appear on that inventory, without touching or opening anything.
• Direct that any unaccounted-for equipment found at a site is reported to the site owner and to a supervisor the same day, and add one sentence to your tower maintenance procedure stating that field personnel do not handle, photograph in close detail, or disturb equipment of unknown ownership.
• Ask your agency attorney this month for a written page covering 18 U.S.C. 2511, the definition at 2510(16), Section 705 of the Communications Act, and the Georgia code sections on scanner and interception offenses, and attach it to your communications SOP.
• Confirm the current intake contacts for your state fusion center, your regional HIDTA, the FBI field office, HSI and the DEA field division from those agencies’ own websites, and put the names, roles and numbers into the communications plan with the date they were verified.
• Add one agenda item to the next county interoperability or dispatch supervisors meeting covering how a citizen report of suspicious radio activity is routed, who is notified, and who is authorized to release information about it.
• Ask your fusion center privacy officer to explain, in writing to your records custodian, what your department may retain from such a report under 28 CFR Part 23 and your state retention schedule.
• Brief your telecommunicators and your amateur radio volunteers, in the training you already run, that the correct action on unusual traffic is to document and report it, and that transmitting on the frequency, attempting to defeat encryption, or going to the location themselves are all prohibited.

Takeaways

• Federal court records and press reporting identify Jose Luis Del Toro Estrada, owner of a McAllen radio and car alarm shop, as the builder of the Gulf Cartel and Zetas radio network from about 2006, and he was arrested in 2008 in the DEA-led Project Reckoning.
• The Mexican army announced on 4 December 2011 that it had seized at least 167 antennas, 155 repeaters, 166 power sources, 71 pieces of computer equipment and 1,446 radios across Veracruz, Nuevo Leon, Coahuila, San Luis Potosi and Tamaulipas, as reported by the Associated Press.
• United States officials described the equipment as one network reaching from the border into Guatemala, while Mexican authorities in the same AP reporting called the infrastructure less monolithic and denied targeting a single Gulf coast network, so that characterization was contested at the time.
• Radio served the network better than cellular because it reached where the carrier network did not, it did not depend on an operator whose records can be reached by legal process, and push-to-talk suits a dispersed lookout screen, which are the same properties that keep land mobile radio in your fleet.
• Reuters reported on 15 July 2020 that twelve of fourteen telecom workers interviewed had seen parasite antennas on Mexican towers between 2015 and 2020, with one engineer estimating roughly 20 percent of his firm’s sites, while American Tower said it had received no credible reports of such devices.
• I found no United States side clandestine network seizure after 2012 confirmed by two reputable independent sources, so nobody should assert one, and the current domestic concern is cheap digital radios with privacy features rather than a documented parallel network.
• Under 18 U.S.C. 2511 it is lawful to receive radio communications that are readily accessible to the general public, and 2510(16) makes clear that a scrambled or encrypted transmission is not, with interception of protected communications punishable under 2511(4)(a) by a fine and up to five years.
• The local role is recognition, documentation, direction finding on unencrypted signals by sworn personnel, and prompt handoff to the fusion center, the HIDTA and the appropriate federal agency, with retention governed by 28 CFR Part 23 and your state records law.