A wireless device (and method of) and a network node (and method of) are described herein for improving security for positioning without ciphering. In one embodiment, the wireless device is configured to: receive, from a network node, a paging request for a positioning event and a subsequent RRLP PDU; and perform, in response, an MTA procedure comprising a plurality of instances. When performing each instance, the wireless device transmits, to the network node, a RLC data block comprising at least a first field indicating a position of the instance in a sequence of the plurality of instances, and a second field indicating whether the instance is a last instance in the sequence of the plurality of instances. The network node upon receiving the RLC data block will be able to confirm whether the MTA procedure has been compromised by a fake wireless device.