Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.mobile.android > #154149

Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner

Show all headers | View raw

Andy Burns <usenet@andyburns.uk> wrote:

> VanguardLH wrote:
> 
>> Isn't this whole RCS scheme to validate the Caller ID which is what is
>> getting spoofed?  The caller isn't being spoofed.  It's the CID they
>> send that could be spoofed.
> 
> Apparently the scammers *are* faking the voice as well as the caller ID.
> 
> So you get a call from an AI version of your relative, saying they've 
> been robbed while on holiday, asking if could you send them some money 
> so they can get home again ... enough people fall for this when it's 
> just faked email/text.

https://signalwire.com/blogs/industry/caller-id-vs-cnam

I thought just CNAM (Caller ID Name) was getting spoofed.  Apparently
the phone number, part of Caller ID, can be spoofed, too.  More
pernicious than I knew.

https://en.wikipedia.org/wiki/Caller_ID_spoofing
  "Starting in mid-2017, the FCC pushed forward Caller ID certification 
  implemented using a framework known as STIR/SHAKEN.[45][46] 
  SHAKEN/STIR are acronyms for Signature-based Handling of Asserted 
  Information Using toKENs (SHAKEN) and the Secure Telephone Identity 
  Revisited (STIR) standards. The FCC has mandated that telecom 
  providers implement STIR/SHAKEN-based caller ID attestation in the IP   
  portions of their networks beginning no later than June 30, 2021."

  "Congress passed the TRACED Act in 2019 which makes Caller ID 
  authentication mandatory."

https://en.wikipedia.org/wiki/STIR/SHAKEN

That was over 5 year ago (2021) for large providers with over 100K
subscribers, and 3 years ago (2023) for providers with under 100K
subscribers (e.g., C Spire).  These are service-side measures.  Nothing
needed on your end.

https://techoutreach.extension.msstate.edu/news/2022/04/take-steps-avoid-caller-id-spoofing-scams
  "The SHAKEN/STIR caller ID authentication system is also stopping many 
  unwanted calls from being completed. These acronyms stand for 
  Signature-based Handling of Asserted Information using toKENs and the 
  Secure Telephone Identity Revisited standards. The system allows a 
  phone number to be verified by both the carrier from which the call is 
  placed and the carrier receiving the call."

If these service-side measures worked, why would Google be trying to
come up with an alternative client-side validation scheme using RCS to
attest the caller of a call?

All of this is to eliminate spoofed calls, not specifically to eliminate
spam calls initiated by humans or robocallers.  However, if *no* spoofed
calls could complete a connection to a callee, then block lists of bad
phone numbers would be feasible, and not end up blocking innocents that
were spoofed.

Back to comp.mobile.android | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner "Carlos E.R." <robin_listas@es.invalid> - 2026-06-10 11:44 +0200
  Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner Jörg Lorenz <hugybear@gmx.net> - 2026-06-10 17:59 +0200
  Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner VanguardLH <V@nguard.LH> - 2026-06-10 14:29 -0500
    Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner "Carlos E.R." <robin_listas@es.invalid> - 2026-06-10 23:19 +0200
    Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner Theo <theom+news@chiark.greenend.org.uk> - 2026-06-11 22:32 +0100
      Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner VanguardLH <V@nguard.LH> - 2026-06-11 20:18 -0500
        Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner "Carlos E.R." <robin_listas@es.invalid> - 2026-06-12 12:16 +0200
          Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner VanguardLH <V@nguard.LH> - 2026-06-12 15:13 -0500
            Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner Andy Burns <usenet@andyburns.uk> - 2026-06-13 08:29 +0100
              Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner VanguardLH <V@nguard.LH> - 2026-06-13 15:52 -0500
                Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner Jörg Lorenz <hugybear@gmx.net> - 2026-06-14 07:35 +0200
      Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner Jörg Lorenz <hugybear@gmx.net> - 2026-06-12 07:19 +0200
      Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner "Carlos E.R." <robin_listas@es.invalid> - 2026-06-12 12:19 +0200
        Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner VanguardLH <V@nguard.LH> - 2026-06-12 15:59 -0500
      Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner Theo <theom+news@chiark.greenend.org.uk> - 2026-06-12 23:11 +0100
        Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner "Carlos E. R." <robin_listas@es.invalid> - 2026-06-14 15:05 +0200
          Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner VanguardLH <V@nguard.LH> - 2026-06-14 20:18 -0500
            Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner "Carlos E. R." <robin_listas@es.invalid> - 2026-06-15 09:24 +0200
              Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner VanguardLH <V@nguard.LH> - 2026-06-15 08:14 -0500
                Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner Theo <theom+news@chiark.greenend.org.uk> - 2026-06-15 16:29 +0100
                Re: Android will detect calls with spoofed numbers by sending a real-time RCS message to the legitimate owner "Carlos E. R." <robin_listas@es.invalid> - 2026-06-15 21:21 +0200

csiph-web