FAQs – STIR/SHAKEN

What is Caller ID spoofing?

Caller ID spoofing is used by robocallers to mask their identity or to make it appear that the call is from a legitimate source. Often, robocallers use a nearby phone number with the same area code and exchange, or numbers of well-known agencies like the Internal Revenue Service. Caller ID spoofing is common for calls originating from voice-over-IP (VoIP) systems located anywhere in the world. According to some reports, there are 3 to 5 billion robocalls made each month, and research suggests that more than 40% of those calls are fraud-related.

1. What is STIR/SHAKEN?

STIR/SHAKEN is a software framework meant to restore trust in voice communications, via a set of protocols and procedures intended to combat caller ID spoofing on Voice-over-IP (VoIP) calls.

2. How does STIR/SHAKEN work?

STIR/SHAKEN enables phone companies to “attest” to their confidence that someone with a bona fide right to use the number made the call by placing a digital signature on every call. Companies that terminate calls use this signature as part of their broader efforts to identify spam.

STIR/SHAKEN relies on messaging capabilities inherent to VoIP. Therefore, it will function properly only on calls carried entirely via Internet Protocol (IP) networks.

3. How is 800response protecting my call traffic?

Beginning in June 2021, 800response will receive information via STIR about the level of trust accorded the caller by their phone company (i.e., the voice service provider where the call originated). At this early stage in the game, we have decided to err on the side of connecting suspect calls, rather than risk blocking otherwise bona fide callers. Nonetheless, we will continue to exercise our normal anti-spam operations: blocking calls from invalid area codes, and, at customers’ requests, defeating robocallers by requiring a keypress to route calls.

At the same time, we will be responsible for providing digital certificates, or signatures, for all calls that we send to our customers. These digital signatures will remain on the call as it traverses other carriers’ IP networks until it reaches its destination. Once it reaches the destination, the terminating carrier will assess the ownership and level of trust based on the Caller ID and route the call accordingly.

4. How will STIR/SHAKEN impact my business?

As mentioned above, we recommend that you confer with your phone company to assure that they will label your outbound calls as highly trusted.

In addition, you may be using a toll-free number from 800response as the Caller ID for lines used for certain outbound calls, making it easier for customers to call you back and track their return call. If you think your business is using toll-free or local tracking numbers from 800response in this way, we recommend that you contact your phone company about using third-party services designed to prove your right to use your toll-free numbers as your Caller ID.

Click here to visit the website of one of these service providers.

5. Where can I find out more about the TRACED Act, FCC’s rules, and STIR/SHAKEN?

Here are some additional resources:

TRACED Act

FCC

STIR/SHAKEN