These aren't passive devices. They have to "stomp" on AT&T's signal to get your phone to associate with them, then spoof as the carrier.

There is a loophole though - if you target a phone with the correct bands, one of the european bands is a ham radio band in the US, so licensed operators can play around that way.

Also, the DIY version is about $1000.