Without carrier permission, they might be violating some type of interference regulations, but I would also think the fake cell device itself and maybe its operator would need FCC licenses regardless of carrier permission.  As an Ars Technica post I linked in another comment shows, the cell sites are probably being used outside of the constraints of their FCC licenses.