The IMEI is the International Mobile station Equipment Identity It is composed of the following: IMEI = TAC + FAC + SNR + CD IMEI = International Mobile station Equipment Identity TAC = Type Approval Code FAC = Final Assembly Code SNR = Serial Number CD = Check Digit The composition of the IMEI is such that each individual mobile station equipment can be separately identified. Information is contained in the IMEI by which a GSM PLMN, after requesting it, can immediately decide whether or not to accept calls made thru this equipment. Therefore the manufacturer is responsible for ascertaining that each IMEI is unique and keeping records of produced and delivered mobile stations. The IMEI contains all information which is necessary for a network operator to make relations thru its administrative system to trace the equipment to its origin of production. The IMEI (14 digits) is complemented by a check digit. The check digit is not part of the digits transmitted at IMEI check occasions. The Check Digit shall avoid manual transmission errors, e.g. when customers register stolen mobiles at the operator's customer care desk. A network operator can make administrative use of the IMEI in the following manner: Three registers are defined, known as "white lists", "grey lists" and "black lists". The use of such lists is at the operators' discretion. The white list is composed of all number series of equipment identities that are permitted for use. The black list contains all equipment identities that belong to equipment that need to be barred. Besides the black and white list, administrations have the possibility to use a grey list. Equipments on the grey list are not barred (unless on the black list or not on the white list), but are tracked by the network (for evaluation or other purposes). Later, the IMEISV (International Mobile station Equipment Identity and Software Version Number) was introduced. It adds a 2 digit Software Version Number (SVN) to the end of the IMEI. IMEISV = TAC + FAC + SNR + CD + SVN IMEI = International Mobile station Equipment Identity TAC = Type Approval Code FAC = Final Assembly Code SNR = Serial Number CD = Check Digit SVN = Software Version Number The SVN allows the manufacturer to identify different software versions of a given type approved mobile. The SVN is a separate field from the IMEI, although it is associated with the IMEI, and when the network requests the IMEI from the mobile, the SVN (if present) is also sent towards the network. It comprises 2 decimal digits. The white list shall use the IMEI, The Black and Grey Lists may also use the SVN. NOTE: The Check Digit is not applied to the Software Version Number. Some Motorola mobiles display the SVN after the IMEI with check digit. ****** M A P P I N G T H E T Y P E A P P R O V A L C O D E ****** An IMEI consists of 15 numbers from 0 to 9 ( 111111-22-333333-4 ) -Numbers 1 to 6 are the Type Approval Code (TAC) This is the data that enables your provider to tell precisely what type of phone you are using ! All IMEI start with numbers 33,44,45,49 (Explanation ?) I am making a list of TAC's and FAC's The TAC is issued by a central body, the FAC is issued by the manufacturer. ***PLEASE CONTRIBUTE TO THIS LIST IF YOU HAVE A MOTOROLA PHONE NOT LISTED !!!!! 1000 450053 (D1-326) 2500 445000 3300 444556 5200 442742 5080 442716 .8 W 5200 6200 Flare GSM 445051 6200 Surf DCS 443441 6300 446723 Telefonica 6700 / d460 (MG1-4A11) 446790 known in Italy as "Handly"/Graphite d470 (MG1-4D11) 447090 Movistar 7200 442883 7500 / 1-888 445254 8200 444788 8200C 446205 8400 446072 8500 446158 Asian language 8200 with 8700 display 8700 / GC87 446620 87C 446954 Simplified Chinese display, with Chinese SMS (does not support Chinese Cellular Broadcast SMS) 8800 / MR601 447266 8900 447373 B310 (Surf DCS) 444042 GC-87CE 447265 Simplified Chinese display, with Chinese SMS (support Chinese Cellular Broadcast SMS), graphic Quick Access Key interface (like 8700), and an indicator light on phone top (like StarTAC). StarTAC 70 447264 Grey StarTAC 80 446203 Black StarTAC 70 (Royale) 447371 GSM-1800 StarTAC 80 444049 GSM-1800 StarTAC 130 448548 d160 447263 & d160 447262 d170/d170 447370 Slimlite 447070 d520 448114 d520 448118 d560 448114 Chinese market name for d520 d520 (MG2 B12) 448543 cd920 447768 cd928 447768 Chinese market name for db920 The cd928 is a 900/1800 Dual Band phone. It supports Simplified Chinese, Complex Chinese, Thai, Indonesia and Vietnam language. Support SMS by these languages. cd160 447766 cd930 447769 v3688 448835 v66 449276 m3688 448955 cd520 flip 448836 m3288 448951 m3788 449652 m3588 449174 7389 458962 TimePort 260 350029 Timeport 189 446790 Timeport 192 449279 Select 2000e 010014 Select 6000e 010016 StarTac 8600 010015 StarTAC ?? 010017 StarTAC 7000g 010025 M301 443050 one2one OEM - kind of between a 5200 and a 7500 Bosch M-Com 206 446402 Bosch M-Com 506 446840 OEM model of d460 Bosch Cartel 443023 OEM model of 5200 ***PLEASE CONTRIBUTE TO THIS LIST IF YOU HAVE A MOTOROLA PHONE NOT LISTED !!!!! -Numbers 7 to 8 are the Final Assembly Code (FAC) I am quite certain that: 06 = made in Flensburg, Germany (flare) 07 = made in Flensburg, Germany 08 = made in Flensburg, Germany 31 = ? 40 = made in Easterinch, Scotland (UK) 41 = made in Easterinch, Scotland (UK) 47 = Also a very popular fake IMEI. There are thousands of phones out there with IMEI=00000047000000 ! 49 = Was found on a 8700 from China with Fake IMEI 67 = made in Illinois, USA (most prototypes) 80 = made in Tianjin, China 81 = made in Tianjin, China 92 = made in China by EASTCOM in Hangzhou 93 = made in China by EASTCOM in Hangzhou PLEASE CHECK THIS AGAINST YOUR OWN FAC !!!!!! (and let me know if I am wrong) -Numbers 9 to 14 are the Serial Number (SN) -Number 15 is the Check Digit (CD) 0 on all older phones I have seen, on newer phones the checksum of the 14-digit IMEI Sometimes the check digit is left out, giving an IMEI of only 14 numbers The IMEI number is kept in the 8 K EEPROM of the Motorola International phones The information here has been confirmed for 6200,7500,8200,d460: The 8 bytes that holds the IMEI can be found at offset 52H (82 dec) - 59H (89 dec) Let's say we are dealing with a flare, which has the IMEI 445051-07-123456-0 To make that into EEPROM data you have to align the numbers in pairs, starting with number 2 and then take each pair and switch the numbers. The first number which is not paired with another number must be paired with the nibble (4 bits) A. 4 4 5 0 5 1 0 7 1 2 3 4 5 6 0 IMEI 4 45 05 10 71 23 45 60 Paired 4 54 50 01 17 32 54 06 Switched 4A 54 50 01 17 32 54 06 EEPROM data However there is a crc style checksum that has to be calculated ! Please report additions and corrections to jckrarup@image.dk (c)