Method and arrangement for detecting subscriber identity. The method includes: capturing in a fake base station at least one wireless message transmitted from a mobile subscriber apparatus interoperable with a mobile phone system; detecting an encrypted subscriber identity from the at least one captured wireless message; and retrieving an unencrypted subscriber identity from an entity inside an infrastructure of the mobile phone system based on the encrypted subscriber identity.