[ng55QPSK]

The point here is: if the owner of the IMSI catcher has some preknowledge about the target phone.

There is no way to avoid this.