The definitive field guide to 3GPP LPWA for real-world IoT deployments in our NB-IoT vs LTE-M Guide.
Executive summary
NB-IoT and LTE-M are 3GPP’s licensed-spectrum LPWA workhorses. Both deliver years-long battery life, SIM-grade security, and nationwide coverage — but they’re tuned for different jobs:
- NB-IoT: ultra-narrow (180 kHz), engineered for tiny, infrequent payloads, deep indoor penetration, and mostly static devices. Great for metering and environmental sensing. Mobility and downlink responsiveness are limited by design.
- LTE-M (Cat-M1; Cat-M2 on paper): 1.4 MHz channel, supports mobility, handover, SMS, and VoLTE, with lower latency and higher practical throughput. Best for moving assets, two-way control, alarms, wearables, and sensible FOTA.
If it moves (ever), needs interactive downlink, or may cross borders, pick LTE-M (or dual-mode). If it’s buried, static, and sends drips of data, NB-IoT can be ideal. When in doubt, ship dual-mode modules + eUICC — one hardware SKU, many futures.
1) What these technologies actually are (minus the fluff)
1.1 Radio and spectrum
- NB-IoT uses a single PRB (≈180 kHz) carrier. It can be deployed in-band (inside LTE carriers), guard-band (at the edge), or standalone (often refarmed GSM). The narrow channel plus repetition yields high maximum coupling loss (MCL) and excellent penetration.
- LTE-M uses a 1.4 MHz channel (still light vs LTE), nearly always in-band. It inherits a lot of LTE’s network plumbing, which keeps rollouts software-centric in many markets.
Why you care: NB-IoT’s narrowness squeezes range from noise. LTE-M’s width buys features (mobility, voice) and better burst transfers. In decent low-band LTE networks, LTE-M’s practical penetration can rival NB-IoT. Don’t assume specs guarantee your basement — test with your antenna and enclosure.
1.2 Device categories
- NB-IoT: Cat-NB1 (Rel-13) and Cat-NB2 (Rel-14); half-duplex FDD, tiny transport blocks, very limited throughput.
- LTE-M: Cat-M1 (Rel-13) (today’s workhorse). Cat-M2 exists spec-wise but is uncommon in the wild.
1.3 Latency, throughput, and interaction style
- NB-IoT: tens of kbps typical; seconds to tens of seconds latency depending on eDRX/PSM cycles and repetition. Suitable for store-and-forward telemetry; less suited to chatty control loops.
- LTE-M: hundreds of kbps practical; sub-second to a few seconds latency depending on sleep settings. Comfortable for ACKs, commands, moderate uplink bursts, and MB-scale FOTA (with chunking).
1.4 Mobility and handover
- NB-IoT: engineered for static or very slow-moving endpoints. Connected-mode mobility is limited; idle reselection is slow. Works for bins and meters, not lorries.
- LTE-M: proper mobility + handover. If it moves, this matters more than any other single spec.
1.5 Power-saving mechanics
Both support PSM (Power Saving Mode) and eDRX (Extended Discontinuous Reception):
- PSM: device detaches from paging; the network “remembers” it. Lowest quiescent draw (µA). Device is unreachable until its next wake window.
- eDRX: device sleeps between paging cycles; reachable on a schedule. Longer eDRX = lower power, higher command latency.
Reality check: For one tiny uplink/day, NB-IoT can eke out marginally longer life. For burstier jobs (telemetry + occasional config/FOTA), LTE-M’s faster TX means the radio is on for less time, often equalising or beating NB-IoT on battery.
1.6 Transport choices
- NB-IoT: IP and Non-IP Data Delivery (NIDD) via control plane (through SCEF/NEF). NIDD slashes overhead for tiny payloads. SMS support varies per operator.
- LTE-M: IP-native, SMS widely available, VoLTE for voice/alarms/wearables. Easier to reuse existing TCP/UDP/MQTT/CoAP stacks.
1.7 Firmware updates (FOTA)
- NB-IoT: feasible for small delta patches only. Anything large takes ages and risks brown-outs.
- LTE-M: viable FOTA for a few MB with chunking, resume, rate limits, and sensible scheduling.
1.8 Cost profile
- Module BOM: NB-IoT-only is usually cheapest; dual-mode (NB-IoT + LTE-M) costs a little more but saves you later (roaming, FOTA, operator independence).
- Plan pricing: both are LPWA-priced; the commercial delta is often less impactful than OPEX from truck rolls and debugging.
2) 3GPP evolution and 5G context that actually affects you
- Release-13: Introduced NB-IoT & LTE-M (Cat-NB1, Cat-M1).
- Release-14: Cat-NB2 (more throughput/features), positioning, multicast for firmware.
- Release-15/16: Maturity, power features, network slicing concepts (more relevant for eMBB/URLLC).
- Release-17: Non-Terrestrial Networks (NTN) specs for NB-IoT/LTE-M — satellite augmentation appears in early commercial form. Useful for ultra-remote coverage; still emerging; expect higher latency & cost.
- RedCap (NR-Light): 5G “mid-tier” IoT. More bandwidth and lower latency than LPWA, but higher power/complexity. If your device is battery-powered and doesn’t need video-grade uplink, LPWA remains the sweet spot.
3) Coverage, roaming, and the “freedom to leave”
3.1 UK snapshot (engineering-relevant, 2025–26)
- Vodafone UK: commercial NB-IoT and LTE-M with business coverage tools. Strong enterprise posture.
- Virgin Media O2 (O2 UK): LTE-M nationwide program announced/rolled out since 2020; network modernisation ongoing through 2025.
- EE (BT Group): commercial NB-IoT offering with ~97% population coverage announced in 2024; no commercial LTE-M at present.
- Three UK: no widely available nationwide NB-IoT/LTE-M product (as of this writing).
Design implication: If you need LTE-M in the UK, plan for Vodafone and O2 paths (direct or via IoT MVNOs). For NB-IoT, Vodafone and EE are primary. Dual-mode modules + multi-IMSI/eUICC gives you redundancy across both LPWA flavours.
3.2 Selected Europe snapshot
- Germany: Deutsche Telekom and Telefónica Germany offer NB-IoT + LTE-M at national scale.
- Netherlands: KPN runs LTE-M nationwide with robust roaming; VodafoneZiggo provides LTE-M; NB-IoT availability is more program-specific/urban.
- Belgium: Orange Belgium provides nationwide LTE-M & NB-IoT.
- France: Orange offers LTE-M very broadly for enterprise; NB-IoT remains selective/regional.
- Spain: Telefónica and Vodafone support NB-IoT & LTE-M in portfolios.
- Italy: Vodafone Italy operates NB-IoT and nationwide LTE-M.
- Nordics: Telia and Telenor support both NB-IoT and LTE-M across markets; 2G/3G sunsets underway.
3.3 Roaming reality
- LTE-M roaming is well-established across Europe and North America (historic AT&T–KPN–Orange–Swisscom agreement opened the floodgates).
- NB-IoT roaming exists but is more operator-specific and contractual; plan to test early and often.
3.4 eUICC (eSIM) and operator independence
- Use SGP.02 / SGP.32 IoT profiles to switch providers without hardware swaps.
- LTE-M stacks (with SMS and IP) tend to make bootstrap and remote reprovisioning less fraught than NB-IoT with NIDD-heavy designs.
- Don’t lock yourself into a single network on day one unless you own the SLA and geography.
4) Deep dive: power, latency, payloads (with numbers you can use)
4.1 Quick power math (sanity-check model)
Let’s suppose:
- Sleep current (PSM) ≈ 4–8 µA (module-dependent)
- Attach + TX at +23 dBm for NB-IoT ≈ 180–250 mA
- Attach + TX for LTE-M ≈ 180–250 mA but shorter on-air time
Scenario A (NB-IoT meter): 1 uplink/day, 100 bytes payload, 2s TX @ 200 mA + 30s attach @ 60 mA, sleep 24h minus activity
- Active mAh ≈ (0.002 h × 200 mA) + (0.0083 h × 60 mA) ≈ 0.4 + 0.5 = 0.9 mAh/day
- Sleep mAh ≈ 24 h × 0.006 mA ≈ 0.144 mAh/day
- Total ≈ 1.04 mAh/day → With 2000 mAh cell, naïve life ≈ ~1920 days (~5.3 years) (before temp/aging/safety margin)
Scenario B (LTE-M tracker): 12 bursts/day, 1 kB each, 1s TX @ 220 mA + 10s attach @ 60 mA per burst
- Active mAh per burst ≈ (0.00028 h × 220) + (0.0028 h × 60) ≈ 0.0616 + 0.168 = 0.2296 mAh
- Daily active ≈ 2.75 mAh, sleep ≈ 0.144 mAh → ~2.9 mAh/day → ~690 days (~1.9 years) on 2000 mAh
Takeaway: duty cycle dominates. LTE-M’s faster transfers keep radio “on-time” low, so it often holds its own on battery even with larger payloads.
4.2 Payload design and protocols
- Use binary (CBOR/Protobuf) over chatty JSON.
- Prefer UDP + app-level ACKs for tiny payloads; if you must use TCP, dial back keep-alives and Nagle issues.
- LwM2M works well on both; with NB-IoT you can run LwM2M over NIDD via vendor stacks for tiny control-plane payloads.
- Keep state at the edge. Report deltas, not raw streams.
4.3 Downlink expectations (set them!)
- NB-IoT: downlink often only in DRX windows; control messages can wait seconds to minutes.
- LTE-M: downlink usually available quickly if you keep reasonable eDRX.
4.4 FOTA patterns that don’t hurt
- NB-IoT: only delta patches (tens–hundreds of kB) during maintenance windows; stagger fleet updates; strict battery and retry guards.
- LTE-M: chunk (128–512 kB), support resume, rate-limit, and apply firmware only after full validation; schedule overnight or when externally powered.
5) Capacity, scaling, and the “too many meters at 09:00” problem
- RACH congestion: avoid synchronising wake-ups (e.g., 00/15/30/45 minutes). Randomise offsets across fleets.
- Repetition & CE levels: the network may push repetitions to reach poor-signal devices; your effective throughput plummets. Use local queueing and patience — don’t rage-retry.
- APN separation: keep IoT APNs separate from consumer APNs for predictable QoS and security policy.
- Backoff logic: exponential backoff with jitter; cap retries to prevent battery bleed and cell overload.
6) Security you’ll actually implement
- SIM/eSIM-based mutual auth on licensed spectrum is your first wall.
- Add end-to-end encryption (DTLS/TLS with modern AEAD; or object security like COSE/OSCORE for CoAP/LwM2M).
- Secure boot + signed firmware + rollback protection.
- Least privilege APN (private IP, NAT-ed, no inbound), device firewall defaults deny.
- Rate-limit control channels; log management actions to your backend with device identity and integrity proofs.
7) Hardware: RF and layout decisions that make or break you
- Antenna first: NB-IoT/LTE-M lives in low bands (e.g., 700/800/900 MHz). Give the antenna volume, clearance, ground plane, and proper matching. Cheap bendy whip ≠ tuned.
- Enclosure detuning: IP67 plastics detune antennas; test with the real lid, gasket, screws, and the battery in place.
- Diversity: LTE-M modules may support antenna diversity; useful in mobile scenarios for link resilience.
- ESD/EMC: LPWA + long battery life means noisy DC/DC can ruin your day; filter properly; keep RF paths short and clean.
- Certifications: choose modules with GCF/PTCRB and common operator approvals to shave months off time-to-market.
- GNSS combo: for trackers, prefer modules with integrated GNSS and AssistNow/EPH-like features to cut TTFF power drain.
8) Migration from 2G/3G (don’t cargo-cult your old stack)
- Ditch chatty keep-alives: 30-second TCP pings will nuke your battery. Move to event-driven updates with long PSM.
- Voice/SMS: if you relied on CS voice/SMS, plan VoLTE on LTE-M and store-and-forward fallbacks.
- APNs: you can’t just drag your consumer APN across; IoT APNs often use private addressing and different firewalls.
- Antennas: legacy 900/1800 whips might be mediocre at 700/800 MHz; re-tune or replace.
9) RedCap vs LTE-M/NB-IoT — when to move up the stack
- Choose RedCap when you need consistent 10s of Mbps, low latency, or 5G slicing hooks, and you have the power budget (mains, vehicle, or large battery).
- Stick to LTE-M/NB-IoT when you’re battery-first, tiny payload oriented, and cost-sensitive at scale.
- Many fleets will be hybrid: RedCap gateways aggregating local sensors over BLE/RS485, while edge nodes remain LPWA.
10) Use-case mapping (no waffle, just choices)
- Utilities / AMI (static, deep indoor, daily payload): NB-IoT on a proven operator SLA. Consider dual-mode modules if BOM allows (future-proof).
- Asset tracking, logistics, micromobility: LTE-M with GNSS, dual-mode module as default.
- Alarms, telecare, wearables: LTE-M with VoLTE, SMS as secondary path, strict eDRX/PSM.
- Smart cities (mixed estate): Policy-based selection: NB-IoT for sleepy sensors; LTE-M for controllers/gateways that need commands and updates.
- Rural/remote: Favour the operator with lowest-band LTE density. Consider NB-IoT standalone deployments where available; keep an eye on NTN pilots for dead zones.
11) UK & Europe operator planning aid (plain-English, 2025–26)
United Kingdom
- NB-IoT: Vodafone UK, EE (BT)
- LTE-M: Vodafone UK, O2 (Virgin Media O2)
- Practical note: Three UK has no nationwide LPWA product advertised for general enterprise. For national redundancy across both LPWA types, go dual-mode with eUICC.
Germany
- Deutsche Telekom — NB-IoT & LTE-M nationwide; claims >99% pop coverage for LPWA.
- Telefónica Germany (O2 DE) — NB-IoT & LTE-M in portfolio; national LTE/5G footprint.
Netherlands
- KPN — LTE-M nationwide since 2018; early leader in LTE-M roaming.
- VodafoneZiggo — LTE-M available; NB-IoT more limited or program-specific.
Belgium
- Orange Belgium — NB-IoT & LTE-M nationwide.
France
- Orange — LTE-M broadly available for enterprise; NB-IoT selective; LoRa coexists for some use cases.
Spain
- Telefónica / Vodafone — both support NB-IoT & LTE-M offerings.
Italy
- Vodafone Italy — NB-IoT & nationwide LTE-M.
Nordics
- Telia, Telenor/Net4Mobility — NB-IoT & LTE-M across markets; aggressive 2G/3G sunsets in progress.
Always validate postcodes and indoor targets with on-site pilots. “Nationwide” hides basements, lift shafts, and steel enclosures.
12) Operations: designing fleets that don’t wake you at 2 a.m.
- Telemetry cadence: default to event-driven; schedule catch-up heartbeats daily/weekly.
- Clock discipline: drift during PSM matters. Use RTC + periodic GNSS/NITZ trims so your windows line up.
- Alert paths: if your alarm must arrive now, use LTE-M with short eDRX and SMS fallback; NB-IoT can deliver, but not predictably within seconds.
- Observability: capture RSRP/RSRQ/SINR, TA, attach time, paging cycles, retries in device logs; stream to your platform.
- Fleet updates: feature flags + staged rollouts + canary groups + kill switches. Never “big bang” a firmware.
13) Security and compliance checklists
Device
- Secure boot; immutable root of trust.
- Signed firmware; anti-rollback.
- Unique device identity; rotate keys on profile swaps.
- Local firewall; rate-limit mgmt ports.
Network
- Private APN; no inbound from Internet.
- VPN to cloud or private interconnect.
- IMEI/SUPI locking policies; eUICC audit trails.
Cloud
- Per-device keys, short-lived tokens.
- Zero-trust service segmentation.
- Tamper-evident logs; FOTA signatures verified server and device side.
Regulatory
- RED/UKCA radio + EMC; safety where relevant.
- Battery transport (UN 38.3) if shipping internationally.
- Cyber essentials/IEC 62443 posture for industrial tenders.
14) Comparing to unlicensed LPWAN (when it’s not NB-IoT/LTE-M)
- LoRaWAN: brilliant for private networks and very low payloads; you own coverage and duty cycle. But at national scale you inherit backhaul, NOC, interference, and no SIM-grade auth.
- Sigfox: once strong in ultra-narrowband; now a patchwork after restructuring — check local operator health.
- Cellular LPWA wins when you need nationwide SLAs, roaming, SIM security, and eUICC flexibility.
15) Hardware you can actually buy (multi-vendor, dual-mode where possible)
Industrial routers & gateways
- Teltonika: RUT241, RUT951, RUTX11 (SKUs with LTE-M/NB-IoT support); TRB2xx gateways for edge serial/IP.
- Robustel: R2000-M2M, EG5120 variants with LPWA.
- MultiTech: Conduit/Conduit AP with LPWA cards; Dragonfly embedded.
- Advantech: ICR-4xxx series with LPWA modules on certain SKUs.
- Digi: IX / EX series with optional Cat-M/NB-IoT modules on select models.
Embedded cellular modules (OEM)
- u-blox: SARA-R4/N4 families (Cat-M1/NB-IoT; dual-mode SKUs), LARA-R6.
- Quectel: BG95, BG77, BG600L, EG915M variants (dual-mode; some with GNSS).
- Sierra Wireless (Semtech): HL7800 series (global Cat-M/NB-IoT).
- Nordic Semiconductor: nRF9160 SiP (Cat-M/NB-IoT + GNSS, low power, huge ecosystem).
- Sequans: Monarch 2 platform (ultra-low power LPWA).
- Thales (Cinterion/Telit): MV31/MV32 (Cat-M/NB-IoT with VoLTE).
Trackers / wearables (reference classes)
- Teltonika: TAT100 asset tracker (Cat-M/NB-IoT + GNSS).
- Digital Matter: Oyster/Remora families (Cat-M/NB-IoT).
- Sercomm: LTE-M IoT device lines (sensors, safety, metering).
Always verify the exact regional bands (e.g., Band 20 / 800 MHz in Europe) and the operator certification list for your target markets.
16) Decision framework (print this; argue later)
- Will the device ever move?
→ Yes: LTE-M (or dual-mode).
→ No: continue. - Do you need downlink responsiveness (<~2–5 s)?
→ Yes: LTE-M.
→ No: continue. - Will you push firmware/config updates in the field?
→ Yes: LTE-M strongly preferred.
→ No: continue. - Is your entire workload tiny, infrequent payloads in rough RF (meters, pits, basements)?
→ Yes: NB-IoT may be optimal.
→ Otherwise: LTE-M or dual-mode. - Will you cross borders or change operators mid-life?
→ Yes: dual-mode + eUICC as the default.
17) Deployment checklist (steal this)
- Dual-mode module with Band 20 (and other local low bands)
- eUICC profile strategy (bootstrap + local fallbacks)
- PSM/eDRX matrix per SKU (alerting vs sleepy)
- Payload: compact binary, delta reporting
- FOTA: chunked/resumable; staged rollout; rollback plan
- APN: private; VPN to cloud; no inbound
- Observability: RSRP/RSRQ/SINR/TA/attach time logs
- RF: tuned antenna in final enclosure; chamber test if possible
- Security: secure boot, signed FW, E2E crypto, rate-limits
- Scale: randomised wake-ups; backoff with jitter
- Sustainability: battery chemistry vs temp; UN 38.3 docs ready
18) FAQs your ops team will ask you anyway
Q: Can NB-IoT do FOTA?
A: Technically yes; practically only small deltas, staggered over time. For anything substantial, use LTE-M.
Q: Is NB-IoT’s coverage always better?
A: No. Penetration depends on band plan, cell density, repetition, NF, and your antenna/enclosure. LTE-M on Band 20 can match NB-IoT coverage in many locales.
Q: Do I need SMS?
A: For bootstrap and wake-ups, SMS on LTE-M is handy. On NB-IoT, SMS support varies; design without relying on it unless your operator confirms.
Q: Will 2G/3G sunsets hurt me?
A: They’re why LPWA exists. Don’t design new products that require legacy fallbacks.
Q: Should I jump to 5G RedCap?
A: Only if you need higher throughput/low latency and have power budget. LPWA remains king for battery IoT.
19) Conclusion (no sugar-coating)
- NB-IoT is the right hammer for static, tiny-payload, deep-indoor nails.
- LTE-M is the everyday multi-tool for mobility, responsiveness, and manageable operations.
- Dual-mode + eUICC is how grown-up fleets avoid being trapped by someone else’s roadmap.
- Test in your basements, with your antenna, on the actual operators you’ll pay. Power budget, payload design, and duty cycle matter far more than brochure speeds.
Sources
- Vodafone UK: business network status checker referencing NB-IoT and LTE-M availability for postcode checks.
- BT/EE: NB-IoT launch announcements stating ~97% UK population coverage for outdoor areas; EE/BT business NB-IoT SIM pages.
- O2 (Virgin Media O2): LTE-M national rollout announcement (2020) and ongoing 2025 network investment communications.
- KPN Netherlands: nationwide LTE-M since 2018; early LTE-M roaming consortium with AT&T, Orange, Swisscom (2019).
- Orange Belgium: nationwide LTE-M and NB-IoT enterprise communications.
- Deutsche Telekom Germany: >99% LTE-M and NB-IoT population coverage messaging.
- Vodafone Italy: nationwide LTE-M positioning; NB-IoT in utilities.
- GSMA Mobile IoT deployment maps; 5G Americas Release-13 Cellular IoT brief; operator press and enterprise pages summarising LPWA status.
- Telenor/Telia white papers on 2G/3G sunsets and LPWA migration for the Nordics.
