Systems and methods are provided for encrypting a data transmission from a base station at the physical layer, such that the data transmission can only be decoded successfully by an intended UE. In an embodiment, a desired signal component, including a data signal for an intended UE, is combined with an interference component to generate a signal for transmission. The interference component is designed such that it falls in a null space of the channel from the base station to the intended UE and is therefore not received by the intended UE. In contrast, for an unintended UE, the interference component is designed to interfere with the desired signal component at the unintended UE, preventing the unintended UE from successfully decoding the data transmission.