Unwanted robocalls and phone scams have reached epidemic levels, causing frustration for consumers and businesses alike. Caller ID spoofing, where fraudsters disguise their phone numbers to appear as legitimate entities, has led to an erosion of trust in voice communications. In response, the telecom industry, backed by regulatory mandates, has implemented STIR/SHAKEN, a powerful framework designed to authenticate calls and restore confidence in phone communications.
Here, we’ll break down what STIR/SHAKEN is, how it works, why it matters, how businesses can ensure their calls are authenticated, and the latest developments from the FCC’s Eighth Report and Order that impact caller ID authentication.
What is STIR/SHAKEN?
STIR/SHAKEN is an industry-standard framework aimed at eliminating caller ID spoofing and fraudulent robocalls. It consists of two primary components:
- STIR (Secure Telephone Identity Revisited): A set of technical protocols that verify the authenticity of caller ID information and ensure that a call originates from a legitimate source.
- SHAKEN (Signature-based Handling of Asserted information using toKENs): A governance framework that ensures these protocols are applied consistently and effectively across telecom networks.
Together, STIR/SHAKEN allows service providers to digitally sign calls to indicate their authenticity. When implemented correctly, this technology helps prevent scammers from manipulating caller ID information to deceive recipients.
Understanding the FCC’s Eighth Report and Order
The FCC’s Eighth Report and Order, released in November 2024, introduced new measures to further strengthen the STIR/SHAKEN framework and close loopholes that allowed robocallers to exploit the system. Key updates include:
- Third-Party Authentication Rules: Providers can now use third-party services to authenticate calls, but only under strict conditions to maintain accountability.
- Enhanced Compliance and Enforcement Measures: The FCC has increased oversight and penalties for non-compliance, ensuring that service providers adhere to caller ID authentication standards.
- Tighter Restrictions on Gateway Providers: Intermediate carriers that facilitate international call traffic must now follow stricter STIR/SHAKEN authentication processes to prevent fraud.
- Clarified Attestation Requirements: The new order refines how service providers assign A, B, or C-level attestations, ensuring more accurate caller verification.
These changes are designed to further combat spoofed calls and increase transparency in telecom networks. For businesses, staying updated on these new rules is crucial to maintaining compliance and avoiding disruptions in outbound call campaigns.
Why is Caller ID Spoofing a Serious Problem?
Caller ID spoofing is not just an inconvenience—it’s a major security threat that facilitates fraud, identity theft, and financial scams. Here’s why it’s a problem:
Fraud and Scams
Scammers impersonate banks, government agencies, and businesses to trick individuals into revealing sensitive personal and financial information. Common scams include:
- Fake IRS or tax office calls demanding immediate payments.
- Fraudulent bank calls requesting account details or PINs.
- Tech support scams pretending to be from Microsoft or Apple.
Erosion of Trust in Phone Calls
Legitimate businesses rely on voice communication for customer interactions, but with so many spoofed calls, consumers have become wary of answering unknown numbers. This makes it harder for businesses to reach their customers, impacting sales, customer service, and brand trust.
Compliance with Regulatory Requirements
Government agencies like the FCC (Federal Communications Commission) and CRTC (Canadian Radio-television and Telecommunications Commission) are enforcing STIR/SHAKEN to protect consumers and hold telecom providers accountable. Non-compliance can lead to fines and restrictions on call traffic.
How Does STIR/SHAKEN Work?
The STIR/SHAKEN framework operates in three key steps:
Step 1: Call Origination and Attestation
When a call is made, the originating voice service provider assigns an attestation level based on how well they can verify the caller’s identity:
- A-Level Attestation: Full confidence in the caller’s identity and their right to use the displayed phone number.
- B-Level Attestation: Caller is known, but the number they are using is not fully verified.
- C-Level Attestation: Caller’s identity is unknown (e.g., international calls entering a network from an unverified source).
Step 2: Caller ID Authentication
Once the attestation level is determined, the originating provider digitally signs the call using cryptographic certificates. This signature is attached to the call and remains intact as it travels through the network.
Step 3: Call Verification at Termination
When the call reaches the terminating provider (the recipient’s carrier), the provider checks the digital signature against a trusted database. If the call is authenticated, it is delivered as verified. If the signature is missing or tampered with, the call may be:
- Flagged as potential spam
- Sent to voicemail
- Completely blocked
The Benefits of STIR/SHAKEN for Businesses and Consumers
The implementation of STIR/SHAKEN benefits both consumers and businesses in multiple ways:
- Reduces Fraud and Scam Calls – Prevents malicious actors from spoofing legitimate numbers to carry out fraud.
- Restores Trust in Phone Calls – Helps businesses reach their customers with verified calls, increasing answer rates.
- Regulatory Compliance – Ensures businesses and telecom providers adhere to government-mandated security measures.
- Better Call Deliverability – Reduces the risk of legitimate business calls being blocked or mislabeled as spam.
- Improved Customer Experience – Customers can trust that incoming calls from verified businesses are legitimate.
How Klearcom Ensures Reliable Call Testing for STIR/SHAKEN
At Klearcom, we specialize in IVR and number testing solutions to help businesses verify that their outbound calls are successfully authenticated and not blocked. Our solutions ensure that:
- Calls are authenticated correctly across different regions and telecom carriers.
- STIR/SHAKEN implementation works as expected without disruptions.
- Businesses maintain compliance with FCC, CRTC, and other global regulations.
- Organizations can detect and resolve call authentication failures before they impact operations.
By proactively testing call paths and authentication integrity, businesses can ensure their communications reach customers without interference.
Final Thoughts on STIR/SHAKEN and the FCC’s Eighth Report
The FCC’s Eighth Report and Order represents a significant step in strengthening the STIR/SHAKEN framework, making it more effective in fighting spoofed calls. For businesses, compliance is now more critical than ever.
Proper implementation and testing are essential. Businesses must ensure their calls are authenticated correctly to prevent call blocking and ensure regulatory compliance.
At Klearcom, we provide the tools and expertise to help businesses navigate these challenges. Our advanced call testing solutions ensure that your calls reach customers securely and reliably.
Want to ensure your calls are verified and reach your customers? Contact Klearcom today to learn more about our testing solutions and how we can help your business stay ahead in an evolving telecom landscape.
