E10 
E10 YL Version 1st voice.

E10 YL Version 2nd voice.

STATUS- INACTIVE Last known transmission 1 MAR 11

E10 Frequency table
A unique recording of E10 station Tango Hotel Foxtrot on 20 AUG 09 TANGO HOTEL FOXTROT

Thanks to Alpha Vax.

From Marek Sęk 2 recordings.

6840 kHz USB numbers station two voices at once.
3415 kHz, later the same at 2743 kHz, MOSSAD E10, received on 16 FEB 2010 at 0030 UTC, globaltuners, receiver in Kristianstad, Skane, Sweden, strong interferences from Volmet broadcasting on 3417 kHz

On 2 SEP 08 at 1700 UTC 9130 kHz EZI 1 was being jammed whereas 6840 kHz was in the clear.

E10 Echo Zulu India 1 being jammed on one of its two frequencies. VIDEO 

Poacher in Russia's video of EZI being jammed on 9130 kHz VIDEO  

E10 Victor Lima Bravo 2 on 7605 kHz 1058 UTC 17 APR 1984

E10 Victor Lima Bravo 2

Yankee Hotel Foxtrot on 9202 and 10648 kHz on 29 MAY 08 at 1833 UTC. VIDEO 


The first known plaintext message of a number station! 
At 2200 UTC, 15 MAR 06 on 5339 kHz, Kilo Papa Alpha sent the following string:
KPA G1O2O3D4N5I6G7H8T - remove the numbers and the message is revealed as 
GOODNIGHT! 
Seems someone at the MOSSAD has a sense of humour.

Thanks to Poacher in Russia for the clip.
KPA G1O2O3D4N5I6G7H8T wma
(Poacher in Russia)

E10 interference with R. Belarus.   (DX in Russia) Dec 07
FTJ 2 
E10 YHF being jammed by mystery "Chinese Music Station". 11 DEC 06 (Poacher in Russia) 
Apparently, this jammer has been dubbed the Chinese Firedragon Jammer and supposedly comes from Hainan Island which is located in the Gulf of Tonkin and is a part of the PR of China.
Report on Firedragon jammer. (Adobe document)


E5 + E10 5435 kHz 10 OCT 07 2100 UTC mixing together. (DXer in Russia)
E10 ART mixing with unid Link 11 data bursts. 25 NOV 06 (Poacher in Russia) 
E10 ART mixing with unid ALE data bursts. 19 NOV 06 (Poacher in Russia) 
E10 JSR mixing with unid broadcast station. 11 NOV 06 (Poacher in Russia) 
E10 EZI mixing with Russian Diplo CROWD 36. 10 NOV 06 (Poacher in Russia) 
E10 ART with data bursts and possible jamming 21 APR 06 (Thanks to Vera Era) 
E10 MIW with interference JUL 06 (Poacher in Russia) 
E10 SYN with interference JUL 06 (Poacher in Russia)
E10 SYN A1ZZ2B132  (Poacher in Russia) 23 MAR 06
E10 VLB  A1Z2B8Z2    (Poacher in Russia) 23 MAR 06
Yankee Hotel Foxtrot transmission wma (Garry in Wales)
Echo Zulu India complete message mp3 7m 45s (Garry in Wales)
Echo Zulu India complete message  (Poacher in Russia)
Echo Zulu India  repeat message with abrupt ending (Poacher in Russia) 31 JUL 05
2 messages format. E10 always ends its repeat message if it will go over the 30 minute slot.
Echo Zulu India with apparent jamming on 9130 kHz (Poacher in Russia) 1 SEP 05
Juliet Sierra Romeo with very fast delivery (Poacher in Russia) 25 OCT 05
Mike India Whisky A10B11C10  5230 kHz 1900 UTC  (Poacher in Russia) 6 MAR 06
Echo Zulu India 26 SEP 99 from Alex in Italy.
E10 Uniform Lima X-Ray OCT 04 from Jason C. in Canada      
E10 Uniform Lima X-Ray OCT 04 (2)from Jason C. in Canada.
E10 Yankee Hotel Foxtrot OCT 04 from Jason C. in Canada.
MOSSAD station MIW 2 on 5339.5 kHz 
(rare 0.5kHz offset)
VIDEO  0.8 MB

SOUND FILES AVAILABLE 
Alpha Bravo Charlie  Alpha Bravo Charlie (2)
Alpha Romeo Tango
Charlie India Oscar
CIO 18T 27F 38Z 15R 46
Echo Zulu India
Foxtrot Delta Uniform
Foxtrot Tango Juliet
Hotel November Charlie
Juliet Sierra Romeo
Kilo Papa Alpha
Mike India Whisky
November Delta Papa
Oscar Echo Mike
Papa Charlie Delta
Sierra Yankee November
Tango Mike Sierra
Uniform Lima X-Ray
Victor Lima Bravo
VLB 96B 29B 2330 428

Yankee Hotel Foxtrot
Zulu Whisky Lima
"Zulu Whisky Lima 3" wma
* ABC was first heard during the night of 2-3 MAY 00 by Ary Boender ,NL  (wav recording)
  Also by myself on 22 JUL 00 on 10352 kHz and then on 6528 kHz.  (MP3 recording is of AM mode on 10352 kHz)

MOSSAD NATO Alphabet Stations (E10) 
High Traffic ART EZI FTJ JSR KPA PCD SYN ULX VLB YHF  
Low Traffic CIO MIW
Non Traffic ABC BAY FDU GBZ HNC NDP OEM ROV TMS ZWL
Many thanks to AlphaVax for update

ART    
2456
3415

4165

6986

 
        

EZI 
6840
7960
9130
11565
13533
15980
17410
19715
20474
23739

FTJ
2626
3360
4461
5339
6930
7358
7918

JSR
2270
3230
4015
4648
5091
6912
7540

PCD
2515
3150
4270
5170
6498
8805

ULX
2743
3270
4880
5230
6270
7760

YHF
2844
3840
4560
5820
6370
7918
9202
10648

CIO KPA MIW SYN VLB and GPO draw on a pool of frequencies below.

Transmission times----CIO h+45 KPA h+15 MIW h+15 SYN h+45 VLB h+45.

1735 2120 2515 2540 2953 3090 3270 3485 3640 4165 4360 4665 4780 5170 5230 5380 5435 5530 5629 6370 6658 6745 6930 6986 7445 7605 7613 7690 7811 8025 8127 8465 8641 8805 9270 9382 10125 10352 10820 10970 12376 12747 12950 13190 13921 14000 14750 14866 15016 17170 17966 18177.

ABC
6428
6528
10352

BAY
5530

FDU
4418
6211

GBZ
5170

HNC
4110
6575

OEM
5339
6911

NDP
6658

ROV
4604
6438
6911

TMS
4015
5000
5339
14000

ZWL
3940


Latest schedule from DX in Russia here.
Many thanks to AlphaVax for schedule below. 

Alpha Romeo Tango

UTC Frequencies

0000 3415 5435
0030 3417 5437
0100 -
0130 3415 5435
0200 3415 5435
0230 -
0300 -
0330 -
0400 5435 6986
0430 5435 6986
0500 3415 5435
0530 5435 6986
0600 5435 6986
0630 5435 6986
0700 5435 6986
0730 5435 6986
0800 5435 6986
0830 5435 6986
0900 5435 6986
0930 -
1000 5435 6986
1030 -
1100 5435 6986
1130 5435 6986
1200 5435 6986
1230 5435 6986
1300 5435 6986
1330 5435 6986
1400 5435 6986
1430 5435 6986
1500 3415 5435
1530 3415 5435
1600 3415 5435
1630 3415 5435
1700 3415 5435
1730 3415 5435
1800 3415 5435
1830 3415 5435
1900 5435 6986
1930 3415 5435 6986 1
2000 3417 5435
2030 3415 5435
2100 3415 5435
2130 3415 5435
2200 3415 5435 
2230 3415 5435
2300 3415 5435
2330 3415 5435

1) 1930=0430
2) 2200=0100
Echo Zulu India
UTC Frequencies

0000 -
0030 -
0100 6840 9130 11565
0130 6840 9130 11565
0200 6840 9130 11565
0230 6840 9130 11565
0300 9130 11565
0330 6840 9130 11565
0400 11565 13533
0430 6840 9130 11565
0500 11565 13533
0530 6840 9130 11565
0600 17410 19715
0630 9130 11565
0700 9130 11565 13533
0730 11565 13533
0800 -
0830 17410 19715
0900 13533 17410
0930 17410 19715
1000 11565 13533
1030 -
1100 -
1130 11565 13533 3)
1200 13533 15980
1230 13533 15980 17410
1300 13533 17410 19715
1330 15980 17410
1400 19715 23740
1430 11565 13533
1500 13533 15980
1530 17410 19715
1600 11565 13533
1630 11565 13533
1700 11565 13533
1730 9130 11565 13533 1
1800 6840 9130 11565
1830 9130 11565 13533
1900 6840 9130 11565
1930 6840 9130 11565 4)
2000 9130 11565 13533
2030 6840 9130 11565
2100 11565 13533
2130 6840 9130 11565 2)
2200 6842 9130 11565
2230 9130 11565
2300 -
2330 6840 9130 11565



1) 1730=2330
2) 2130=0130
3) 1130=1800
4) 1930=0100
Foxtrot Tango Juliet

UTC Frequencies

0000 -
0030 -
0100 2626 4461
0130 -
0200 -
0230 -
0300 2626 4461
0330 2628 4463
0400 4461 7358 
0430 2626 4463
0500 4461 7358
0530 2626 4463
0600 2626 4461
0630 4461 7358
0700 4461 7358
0730 4461 7358
0800 4461 7358
0830 4461 7358
0900 4461 7358
0930 -
1000 4461 7358
1030 4461 7358
1100 4461 7358
1130 -
1200 4461 7358
1230 4461 7358
1300 4461 7358
1330 4461 7358
1400 4461 7358
1430 4461 7358
1500 4461 7358
1530 2626 4461 
1600 4461 7358
1630 2626 4461 
1700 4461 7358
1730 2626 4461
1800 2626 4461
1830 2626 4461
1900 2626 4463
1930 2626 4461
2000 2626 4461
2030 2626 4461
2100 4461 7358
2130 2626 4461
2200 2626 4461 1
2230 - 
2300 2626 4461
2330 2626 4461

1)2200=0100

Juliet Sierra Romeo

UTC Frequencies

0000 -
0030 -
0100 -
0130 -
0200 -
0230 -
0300 -
0330 2270 5091 
0400 -
0430 -
0500 -
0530 -
0600 -
0630 -
0700 -
0730 -
0800 -
0830 -
0900 -
0930 -
1000 -
1030 -
1100 -
1130 -
1200 5091 7540
1230 5091 7540
1300 5091 7540
1330 5091 7540
1400 5091 7540
1430 5091 7540
1500 2270 5091
1530 5091 7540
1600 5091 7540
1630 2270 5091
1700 5091 7540
1730 2270 5091
1800 2270 5091
1830 2270 5091
1900 5091 7540
1930 2270 5091
2000 2270 5091
2030 5091 7540
2100 2270 5091
2130 2270 5091
2200 2270 5091
2230 2270 5091
2300 -
2330 -

Papa Charlie Delta

UTC Frequencies

0000 3150 4270 2)
0030 3150 4270 6498
0100 -
0130 -
0200 -
0230 3150 4270
0300 3150 4270
0330 3150 4270 6498
0400 3150 4270
0430 4270 6498 8805
0500 4270 6498
0530 4270 6498
0600 - 
0630 - 
0700 6498 8805
0730 6498 8805
0800 6498 8805
0830 6498 8805
0900 6498 8805
0930 6498 8805
1000 6498 8805
1030 6498 8805
1100 -
1130 6498 8805
1200 -
1230 6498 8805
1300 6498 8805
1330 6498 8805
1400 4270 6498
1430 6498 8805
1500 4270 6498
1530 6498 8805
1600 4270 6498
1630 4270 6498
1700 4270 6498 8805
1730 6498 8805
1800 4270 6498 1
1830 3150 4270
1900 3150 4270
1930 3150 4270
2000 3150 4270
2030 3150 4270
2100 4270 6498
2130 3150 4270 6498
2200 3150 4270
2230 4270 6498
2300 3150 4270
2330 3150 4270

1) 1800=0030
2) 0000=0230

Uniform Lima X-ray

UTC Frequencies

0000 - 
0030 2743 4880
0100 6270 7760
0130 - 
0200 2743 4880
0230 2743 4880
0300 - 
0330 2743 4880
0400 2743 4880
0430 4880 6270
0500 4880 6270 1
0530 6270 7760
0600 4880 6270
0630 6270 7760
0700 6270 7760
0730 6270 7760
0800 6270 7760
0830 6270 7760
0900 6270 7760
0930 6270 7760
1000 -
1030 6270 7760
1100 6270 7760
1130 -
1200 6270 7760
1230 6270 7760
1300 6270 7760
1330 6270 7760
1400 6270 7760
1430 4880 6270
1500 6270 7760
1530 6270 7760
1600 4880 6270 7760
1630 4880 6270
1700 4880 6270
1730 2743 4880
1800 2743 4880
1830 4880 6270 7760
1900 2743 4880
1930 4880 6270
2000 2743 4880
2030 4880 6270
2100 2743 4880
2130 2743 4880
2200 4880 6270
2230 2743 4880
2300 4880 6270 2)
2330 - 

1)0500=0600
2)2300=0400
Yankee Hotel Foxtrot

UTC Frequencies

0000 2844 3840
0030 - 
0100 - 
0130 5820 7918
0200 5820 7918 9202
0230 4560 5820 7918
0300 -
0330 3840 4560
0400 3840 5820
0430 7918 10648
0500 10648 14530
0530 5820 7918
0600 4560 5820
0630 5820 7918
0700 10648 14530
0730 5820 7918
0800 -
0830 7918 10648
0900 5820 7918
0930 5820 7918
1000 7918 9202
1030 5820 7918
1100 5820 7918
1130 5820 7918
1200 9202 10648
1230 -
1300 5820 7918
1330 5820 7918
1400 5820 7918
1430 7918 10648
1500 5820 7918
1530 5820 7918
1600 7918 10648
1630 4560 5820
1700 4560 5820
1730 3840 4560 1)
1800 5820 7918
1830 9202 10648
1900 4560 5820
1930 5820 7918 4)
2000 5820 7920 3)
2030 7918 9202
2100 4560 5820 2)
2130 4560 5820
2200 3840 5820
2230 3840 4560
2300 3840 4560
2330 - 

1) = 1730=0330
2) = 2100=0400
3) = 2000=0200
4) = 1930=0530


  ------------------------------------------------------------------------------------------------------------------                                  
  A LOOK AT E10  Courtesy of ENIGMA group.
Where to begin ? A review of E10 stations and special message strings. We are always told to begin at the beginning. If only things were that simple. Available information on the early dawning of E10 stations is sadly lacking. Indications are that the network was born in the aid 1970s but we really would appreciate any old loggings for each of the callsigns in this large network. The first real attention these stations received was in a book entitled Guide to Embassy and Espionage Stations by Tom Knietel neatly entered under the pages concerning State of Israel.

"According to Greg Mitchell in the July, 1984, issue of Popular Communications magazine, within Israel (and any territories it may occupy), the General Security Service (Sherut Bitkhon usually called Shabak) handles counter intelligence activities. A similar organisation, Sherutt Bitakhon (better known as Shin Bet)' looks after other security matters. Another group, Reshud, guards against international terrorism. Abroad, the main intelligence agency (Israel's agency that is roughly equivalent to the American CIA) is the National Security Institute (MOSSAD Ha Bitakhon Leumi). An organisation called Agaf Modi'in (usually called Aman) collects military intelligence abroad. No information is available on whether or not there are any embassy personnel around the world connected with these activities, however Israel's intelligence agencies have been noted on short-wave.

Stations have been monitored with female operators (live, or automated voice recordings) reading coded 5 - Letter groups. These stations have been monitored since the mid -1970's. Transmissions primarily appear to be one-way broadcasts and are usually identified with a tactical call-sign consisting of 3 phonetic letters (such as Charlie India Oscar. or Victor Lima Bravo, etc.). sometimes followed by a suffixed digit; the suffix "1" is indicative of a test transmission; a "2" means " no message." Broadcasts are often simulcast over several frequencies by a given call-sign. -
So wrote Tom Knietel. I will be re-examining the "suffix" theory a little later.

Indeed the MOSSAD link is very strong in the minds of American monitors. Larry Van Horn writing in the November 1990 issue of Monitoring Times - The Israeli MOSSAD is a world-wide operation from US military spies to the intelligence needed for the raid on Entebbe, MOSSAD agents have had a hand in each operation. No doubt the mystery 'Phonetic Alphabet' stations heard throughout the short-wave. spectrum have played a major role in getting messages out to their agents world-wide.

The headquarters of the MOSSAD is located in Tel Aviv. From atop an office building in this city, signals are sent out by microwave and UHF to short-wave. transmitters located throughout Israel. (This information has never been confirmed.) Several years ago, short-wave. listener Greg Mitchell, while staying at a hotel just outside Tel Aviv, noted signals from the 'Alphabet Stations' blasting through on his short-wave. receiver. He noted up to twenty different transmissions during the hour. These transmissions consisted of long lists of letters. These letters are spoken phonetically (Alpha, Bravo, Charlie, etc.). The announcers of these broadcasts are female and probably like the U.S. numbers stations, automatic machines do the actual announcing

According to Mitchell, the tapes with the messages are prepared and sent via telephone, UHF or microwave links to over 20 short-wave. transmitting sites in Israel. These transmitters range in power from 10 to 20 kW and use suppressed AM carriers or sideboard depending on where the messages are destined for. (Again this is unconfirmed.) Most call-signs can be heard on two or more frequencies simultaneously, higher frequencies being used during daylight hours. Just prior to scheduled broadcast time, one can hear the frequencies to be used keyed up using the appropriate callsign or just part of it.

Sometimes a callsign not relevant to that particular frequency is used, whether in error is not certain, but at the scheduled transmission time the correct callsign will be sent.
What does a phonetic alphabet broadcast sound like and what is the format of their messages ?
Callsigns are repeated for four to five minutes. All messages consist of five-letter groups and are given in the following format:

"VLB" - repeated for about three minutes
1) "Message, message"
2. "Group 34, group 34
3. "Text, text"
4. "APKNC BNVGT OLIUY GFDVP...."
5. "End of message
"Repeat, repeat"
(Items 1 through 5 then repeated once more)
6. "End of transmission"

Single figure codes are often given after the callsign - usually a two which indicates no message (usage much like a marine DE/CQ station marker). It has been reported that 1 in the call suffix indicates a transmission for test purposes. The number may also be 0, 3 or 9 or indeed any other numbers. There also have been suffixes noted with number/letter or letter/number combinations ( e.g. - 1D and X2 ). The meaning of these calls and others are as yet unclear.

When codes are given after the callsign NO MESSAGES are sent. When only the three-letter callsign is heard then a message will follow. The same messages are transmitted at exactly the same time each day, and may run for several days before they are changed. Occasionally a callsign will be transmitted continuously including a special code, ( e.g. - CIO 80886 or SYN 97144 ). Also, other Callsigns may be heard On a particular frequency as well as the expected call-sign. When these are heard they are nearly always much weaker in strength. This may be a fault at the transmitter site or is an indication, as I mentioned earlier, of various power levels and more than one transmitter site in use.

Larry Van Horn wrote a good summary of the E10 stations, but again, the question of "suffix transmissions remained unanswered- Simon Mason writing in his book Secret Signals - The Euronumbers Mystery only gives the E10 stations a brief mention and refers readers to Tom Kneitel's book mentioned earlier in this feature Simon does, however. say, "apart from the 1 and 2 suffixes, other, more elaborate headings have been sent. The purpose of these is unknown". 'Langley Pierce' sets out with good intention in his book." Intercepting Numbers Stations, to explain the purpose of E10 "suffix" transmissions but falls short of a full explanation. Mr Pierce' makes the following statements on the subject in section 5 - Decoding Special Codes.

"CIOTlBlBl4ZlIZ55 decodes to 1, 1, 14, 11 and 55

The exact purpose of individual letters is unknown, although the letter N has had high precedence traffic associated with it. And the meaning of individual number codes are as equally mysterious. Over the years a variety of these special codes have been aired, each more exotic than its predecessor. I would now like to analyse point by point the facts previously stated in the articles mentioned above.

Is it Israel ?

This would seem the most obvious question. Certainly the earliest reports suggest that Israel is the source of the E1O stations. American monitors seem convinced and now prefer to refer to the station as simply 'MOSSAD' in logs and features. Information received by ENIGMA in 1993 from two independent sources suggests that some of these transmissions do originate from Israel. In May 1994 ENIGMA's own Mike Chace visited the Greek Islands (see issue 6.).

Mike wrote - "The MOSSAD stations provided some useful base line signals as they are assumed to be transmitted from Israel. Sure enough, all day round, no matter what the frequency, EZI, YHF, CIO and co. provided MASSIVE signals. As an illustration, the midday EZI transmission on 17410 and 19715 kHz are pretty poorly received in the UK. Over at the holiday QTH, these signals were very strong with just a foot of the set's internal whip antenna extended!. So strong in fact, that the mains hum on the transmitter could be heard. * Could this suggest possible ground wave from Cyprus ?

And in January 1996 following the publication of John Griffith's article "Radio by Numbers" in Short-wave. Magazine, ENIGMA received an anonymous letter from London which clearly stated that transmissions from E10 stations were of Middle East origin, notably Israel. Some time ago reports began to circulate about an E10 transmission on 8127 kHz with the familiar call VLB. Transmissions from the Medium Wave station Galei Zahal, the Israeli Defence Forces Radio Station were breaking through onto VLB transmissions and could be clearly heard when the VLB message ended but the VLB transmitter remained keyed. Cross modulation from the powerful HF transmitter was the probable cause of the short lived problem.

Before closing on the location information I will give a quick mention to a small point which was raised at the 1994 'Monitoring Times' Numbers Station Convention (see review in ENIGMA 10). Under E10 station locations in Israel & Cyprus were discussed. It is also possible that other 'friendly' countries transmit E10 messages. The suggestion of a 'friendly' country also relaying number station messages is not as far fetched as it may sound. Who would have ever thought that Radio Free Europe would transmit from the Czech Republic or the American run Radio Free Asia would send over Russia's Far East transmitters ! Why not number stations working hand in hand ? A South African connection ? ENIGMA has monitors in South Africa and Zimbabwe who regularly supply reception reports. A common theme (and some bizarre signal strength readings) runs through reports received.

CIO EZI KPA VLB & YHF all seem to reach Southern Africa with very high signal strengths on frequencies ranging from as low as 2 MHz up to 11 MHz. Southern Africa is over twice the geographical distance from Israel as the UK is from the same point. The quality of reception of transmissions in the 4 & 5 MHz band at similar signal strengths contrast with the rather indifferent signal strengths monitored in the UK. By comparison other European number stations certainly do not reach this part of the world.

Little is known about the South African Security Services, the main organisation was the now infamous BOSS (Bureau of State Security) which, under the leadership of General Hendrick Van der Bergh, had their headquarters in Pretoria. Rhodesian Intelligence was known as CIO-Central Intelligence Office-coincidence !

They were extremely active in the struggle to uphold the Apartheid system. even to the point of sending parcel bombs to Black Activists, bugging and sometimes ransacking the offices of various Anti-Apartheid groups in London - including Amnesty International whose offices they burgled. They were also responsible for the systematic de-stabilising and general undermining of Black workers' unions. P.W. Botha disbanded BOSS in 1978 and removed Van der Bergh from his post, replacing BOSS with the NIS (National Intelligence Service), but they made international news in 1983 with the abortive attempt to overthrow the Seychelles Government.

The group involved in the affair was led by one Colonel Michael Hoar. The South African Government remained tight-lipped about the whole thing, admitting to the press that only one of Hoar's men, Martin Dolinchoek, was actually a member of the NIS. The NIS are renowned for their use of prolonged interrogations, beatings and torture, and were allegedly responsible for 300 deaths in detention between 1980 and 1982. What has become of the MIS in the post-apartheid South Africa is unclear, but it is almost certainly the case that Nelson Mandela has restructured the Intelligence Services as he has done with the Armed Forces in the country. They probably all employ the same methods as before, but now it's just to different ends. Rest assured, however, that the South African Intelligence Services, in whichever guise they may adopt, are, as always, a force to be reckoned with.

Some 42 km South of Johannesburg at Mayerton, there is a huge transmitting station which belongs to the SABC (South African Broadcasting Corporation). It is used far various internal broadcast stations and was home to the old "Radio RSA" - at present it is also carrying transmissions from Radio Kudirat an anti-government propaganda station opposed to the present Nigerian Government (this is using a 250 kW unit), As the SABC is a Government concern, it stands to reason that the site may also be used for 'other purposes' than broadcast output. Indeed rumours of a South African based numbers station operating on 5990 kHz USB have continued to circulate, The suggestion that Israel & South Africa may 'cooperate' is not such a bizarre idea.

Size & Structure

It seems like a good time to take a step back from looking at the E10 stations. Rather like the old saying 'you can't see the wood for the trees'. The problem with E10 stations is that they all seem to be thrown together, the truth is that there are three distinct family members which each seem to have a separate purpose. More on this shortly.

As I said at the start of this feature it is difficult to know just when the beginning was. The earliest comprehensive list appeared in Tom Knietel's book. At that time the following callsigns were reported to be active.

ART CIO EZI GBZ GPO JSR KPA MIW NDP PCD SYN ULX VLB YHF

ART CIO EZI JSR KPA MIW PCD SYN ULX VLB & YHF all seem to have remained stable in terms of the three letter identifications used. GPO which was a very active station at one time seems to have ended but new callsign FTJ seems to have taken its place. Several other call-signs have also appeared between 1984 and the present day. These are OEM TMS and ZWL. To be absolutely honest the whole of the archives information is something of a minefield, mainly due to poor logging techniques and inaccurate and spurious information which has crept into various other publications over the years

So where do we go from here? Well I must admit that 'Langley Pierce had the right idea when he tackled the subject in his book, he concentrated on just two callsigns and headed everything else special broadcasts - - However I am not going to follow this route and at the risk of producing a long article intend to give you all the known facts - A little earlier I mentioned the habit of throwing all the callsigns together under one heading, So now I would like to break the stations down into the three headings. Before doing so I feel it is worth mentioning that I am dealing with the present operating position - Going back to some of those unconfirmed callsigns will likely confuse both you and me. The following is based on monitored information received from ENIGMA readers and our own efforts

Three station types.
1) High traffic stations Day to day operations ?
2) Low traffic stations General alert transmissions ?
3) Non traffic stations Deep cover/mission specific ?
Lets look at each type and its particular habits.

1) High traffic stations - These are perhaps the ones you hear most often and follow the standard message operating format described in the example of VLB at the start of our feature. Stations of this type have a regular schedule and follow predictable time lines.
Type one stations are ART EZI FTJ JSR KPA PCD SYN ULX VLB& YHF ( & the now defunct GPO )

2) Low traffic stations - These stations do not send regular standard messages but do still maintain a regular schedule. These appear to have a different purpose to type 1 stations.
Type two stations are CIO & MIW

3) Non traffic stations. These stations are somewhat more difficult to pin down and do not seem to send any standard traffic messages. They also do not appear to have a set schedule and finding them is more a matter of luck than of judgement.
Type 3 stations are BAY GBZ OEM NDP TMS ZWL ROV and HNC

Having now identified the 3 types of station it is possible to move onto traffic analysis. This is perhaps the most enlightening part of the mystery. Type 1 stations are the 'bread & butter' of the communications system, sending out a seemingly endless number of rota style messages. It is not possible to ascertain whether traffic is sent for individuals or groups but messages do stay on the system for a period of time and would appear to be repeated until such time that HQ is satisfied that they have been received.

Type 2 stations do not send regular traffic and are prone to long periods of idling followed by bursts of activity The purpose of CIO and its sister station MIW are of course unknown but monitoring would suggest that these two stations arc some type of general alert system and may serve to communicate more blanket information in the of both traffic messages and special message strings Certainly in the case of both callsigns, when traffic does occur it is not unknown for a single message to be transmitted continuously for 24 hours per day non-stop.

Type 3 stations are perhaps even more incomprehensible in nature and could best be described as inverted version of type 1 stations. Type 3 stations have never been heard to send traffic messages. Moreover they appear without warning arid send peculiar message strings consisting of additional letters and numbers added to a repeating call sign before disappearing into the wilderness until discovered again by a bit of chance tuning. Just before we move on to message strings, it may well be worth writing a few lines about the phonetic code system. Some time ago we received a report that the system used was called Aroflex, a crypto system of 5 Letter groups developed by Siemens for NATO wide use. Any further information on this would be appreciated.

It would seem unlikely that all field agents decrypt their messages by hand and some in less sensitive situations would probably use equipment similar to the Gretacoder DH-26 hand held .encryption unit. The equipment's algorithm assures maximum security with 10 to the power of 52 user selected code combinations. It is of course the case that any agent found with such equipment in their possession would be presumed guilty of clandestine activity. Such equipment uses the triple key principle An elementary key is the first secret element and is periodically changed by the user himself.

A Combiner key is the second and independent secret element. It determines the encryption algorithm and may be reprogrammed on longer terms. An auxiliary key generated automatically by a random generator for each new synchronisation eliminates the need for a frequent change to the elementary key without impairing the cryptological security. Not only would these be used to decrypt an incoming message but such units also have a Message Key which is used to generate the mathematical programme to encipher a message ready for sending back to H.Q. These messages can then be sent on to the intended recipient by any transmission medium without fear of compromise. Intermediate intervention is not a concern. Only the recipient with another DH-20 and knowledge of the unique code can decipher the message.

So far so good, we have identified the three types of station and given a broad outline of their operating characteristics. So just what can we learn from traffic analysis ? Back again to the three types of stations, I'm afraid. We are now heading into a black hole - if I could answer some of my own questions I would probably get a job at GCHQ but I regret to say that much of I-tie following is 'calculated guesswork. Type 1 & 2 High & Low Traffic Stations. Most readers will be familiar with the well known suffix numbers e.g. VLB 1 VLB2 & VLB3 etc. It would seem to he the case that these numbers do not, as previously mentioned, indicate no-message' or 'test transmission' but are in fact a shorter version of the more common stutter groups (11111,22222,33333 etc.) used by many other number stations to convey a fixed response.

Example only:
11111 We require you to re-transmit your message.
22222 We have received your incoming message.
33333 Await further message string.
In the case of E10 stations the number has been reduced to a single digit rather than three or five digits.
So what are all the VLB 28 P14Z36B53T20's all about.

These are not now in fact believed to be messages as such, not at least of something to be decoded . They do not convey something along the lines of Meet Cazab at the Research Station
So what are they ?
VLB 28 P14 Z36 B53 T20
Station callsign unknown 9119kHz 8341kHz 7447kHz 6855kHz
The letter indicates a frequency, the numeral indicates a time. These are used to create a window for the return of the burst message to HQ. It would seem a strong possibility that these message strings are in fact operational instructions to field operatives to send burst transmission messages back to HQ. The system operates a coded format of the familiar Maritime RTTY set-up that continuously churns out the frequency (letter code P for example) & time (numeral 14 for example) used for the transmission of incoming messages from field operatives. It would seem likely that the system is based upon giving the operatives numerous opportunities to transmit a message back through an 'open window' . The time/frequency given in code would be available to the listening station who would attempt to 'catch' the incoming message.

Clearly this would take the form of a very brief burst message which would be transmitted at low power by the field operative. High gain antennas, diversity reception and very high quality receiving equipment situated in an electrically quiet area would process the weak a signals which are then usually automatically decrypted. The need to send out long strings of options such as CIO 13 B22 A14 P25 R39 M11 would be required in the event that it was not possible for the field agent to transmit at a particular time We can presume that strings of options are sent until such time as an incoming message has been successfully received. The only station which seems to buck the trend is SYN which is prone to sending number strings such as SYN 7Z 9180500 or SYN 81. The purpose of these is unknown.

Type 3 Non-traffic stations. These are even more difficult understand. Non traffic stations, as we previously mentioned, are never heard to send messages as such. Traffic examples consist of the 3 Letter Callsign repeated over and over; this is more often than not followed by further letters or several numbers.
Actual examples NDP-A NDP-R NDP-X TMS-22 OEM-4 OEM-8 GBZ-J ZWL-3 HNC-A HNC-Z HNC-J

Some of these callsigns are so rare that literally years can go by without even a mention. TMS is a good example of this. The station was noted recently but prior to this the last log in the late 1980s
Clearly Type 3 Stations have a totally different purpose to the main communication systems. It is possible that these agents receive their main messages via a different communications system, but that they do send information bock to HQ. Although It is pure speculation it is possible that these rare type three stations are conducting a similar function in confirming the receipt of incoming information by whatever means.

It would seem sensible to suggest that such brief information as TMS-22 or OEM-8 can only indicate a very limited amount of information and that these are simply status indicators of some kind. We could speculate forever as to why a Type 3 Station does not send any traffic or apparent message strings, but we must never be disheartened - little by little we are putting the pieces of the jigsaw together and I hope you have found this update on the E10 stations of interest.