How did Chris Paget's IMSI catcher demo at Defcon a few years ago work then? http://blog.marinetelecom.net/2010/08/01/ham-radio-operator-...
Oh, it's actually not too difficult to modify transceivers to work outside their regional prescribed bands. There are usually internal jumpers or, more recently, firmware modifications to expand their tuning ranges to include bands normally only allowed in other regions. Some of the software defined radios are surprisingly malleable. I was actually mostly just thinking about the possibility of getting a GSM phone to hit an amateur band freq or vice-versa without a lot of hacking.