Fake voices are already being used to steal millions (https://www.bbc.com/news/technology-48908736). I co-authored the paper linked here, which goes into some detail about why this all matters, particularly for voice cloning... https://medium.com/@aviv/reducing-malicious-use-of-synthetic...
https://craphound.com/spamsolutions.txt
(I just came up with a version for robocalls but I don't want to post it here because it's a giant wall of text that I don't think pays for itself in terms of contribution to the discussion.)
It’s incredible in a world were we’re all being forced to move to RealIDs so our every move can be tracked, that criminals can continue to scam the elderly and disabled anonymously by phone.
SHAKEN/STIR is the (technical) answer to this, though I'll be interested to see to what extent it's adopted.
There is, at least for foreign calls: assuming US provider A gets an incoming call from the country B's operator C, then A has to verify if the phone number supplied by C is in the country phone number range of country B. If there's a mis-match, deny the connection.
(And that's not even mentioning the issue of how you'd map providers to prefixes. It's somewhere between non-trivial and impossible in practice.)
There's a bunch of solutions. I received 19 spam calls spoofing cell numbers. That's a felony
I suggest everyone that get an illeagl robo call to call your rep Everytime. Ask them to block India entirely. The problem would be solved very quickly. Or block all calls from Florida and Texas. The nuclear option
The basic one is just waste their time. Ask a lot of questions. And then tell them you were doing that
IOW: They have so many resources available, and it is so cheap for them to make the calls, that even after they knew I was going to waste their time, they continued the calls.
This was after I had tried their options for "press 1 to be removed" and talking to someone and saying "please remove me from your list".
The thing they may not have been anticipating: I had 3 numbers forwarding to my cell phone. Up until this call I didn't know which of them was on their list. I cancelled that phone number, and the calls dropped to almost 0.
Until the scammers figure this out and respond with their own bot. Then, just like Twitter, it'll be bots spamming each other..
Fuck your ban.
It would be easy enough for a regulator to simply fine any company whose products are advertised or sold through telemarketing.
Make it the companies problem that some of their marketing contractors or affiliate schemes lead to illegal calling.
- which regulator has the power to fine a company when it didn't do anything wrong?
- how would you prevent abuse, e.g. if I want to destroy your small business, I can just spend a few thousand dollars on a robocall campaign selling your products (not even claiming to be you)
Small fines, for the issuer of the number used to make calls reported by more than N consumers, should do the trick. Small to accommodate false positives. Fine to create an incentive to vet before issuing numbers. Number issuers because they’re less numerous and clearly in the FCC’s jurisdiction.
If one wanted larger fines, N could be lowered but only count complaints with a recording of the call and proof it came from that number (e.g. a telephone bill). Harder to make a complaint, but also harder to turn the mechanism into a home for general grievances.
Spoofing numbers could be considered a criminal organization
Take down every single person
If the callers (who LE can get to already with enough questions) are safe now, they'd be safe after the change. Sure, the hn crowd will easily set up appropriate filtering, but we were never a viable target to begin with, so that's actually helping the spam calls reach better targets quicker.
It would maybe reduce the number of scam calls though. Spam, not do much.
Sounds great, lets do that.
STIR/SHAKEN has the potential to help here, but there are still shortcomings, e.g. when originating calls with source numbers obtained from other carriers[2].
1. https://tools.ietf.org/html/bcp38
2. https://support.bandwidth.com/hc/en-us/articles/360025664313...
These calls are largely preying on the elderly. They're despicable and it's disgusting it's taken us so long to stop them—there's no excuse, it's not like human beings don't control every part of what's happening, this isn't some force of nature. Nuke them from orbit.
In the past she'd been scammed by the "your grandson is in jail" scam and the bank stopped her.
One day she was really worked up because she was sure someone was going to come to her facility at 4pm and demand their money from her, and it was all tangled into my family needing money or something. Luckily she has no direct access to funds anymore.
Enough was enough. I found a product that I could put on her phone line that lets me white list her calls. It also suppresses the first ring because with Alzheimers, the last thing you need is the phone ringing once constantly.
It isn't perfect -- it has to be configured over bluetooth and only from a cell phone. I'd prefer a device that lets me do this remotely over the web, but this is what we're using for now:
https://www.amazon.com/Call-Control-Home-Automatically-Telem...
For ourselves, I have a linux box running ncid. I just wish I could find a first ring suppressor that works on POTS. The FRS22100 I tried resulted in a fast busy for any caller -- didn't conform to whatever the central office required.
Payments are kind of a world of their own, but basically there are 5 parties involved in a credit card purchase:
1. The party that receives the payment. For example, a retailer like Amazon or Target. In payments lingo: "merchant".
2. The merchant's bank. This is where funds are going to end up. In payments lingo: "acquiring bank" or "acquirer" (because they're acquiring funds I guess).
3. The customer's bank. This is where funds are going to come from. Usually on credit. For example, Citi, Capital One, Chase, HSBC, Bank of America. In payments lingo: "issuing bank" or "issuer" (because the customer has an account with them and they issue the actual card).
4. The customer, the person who makes the purchase. This person's name is printed on the credit card. In payments lingo: "cardholder".
5. A payments network. These arrange payments (including operating computer networks as well as defining rules and policies) and facilitate the purchase. For example, Visa, Mastercard, American Express. In payments lingo: "credit card association".
Back to something vaguely relevant, one way you can instantly detect these scams is that they always seem to claim they're from Visa or Mastercard, then try to talk about lowering your interest rate. Your interest rate is between you (the customer) and your issuing bank (Citi, Capital One, etc.), not between you and the card association. Visa or Mastercard doesn't care about your interest rate. The scammers are not even claiming to be from the right type of organization!
I assume they do this because they get a higher hit rate. If they claimed to be from, say, Chase, then lots of people would think "I don't have an account with them" and hang up. If they say Visa or Mastercard, odds are good that you'll think "yes, I have one of those".
A scammer using a domain may be able to conceal their identity, but they can't hide the domain name itself.
The reality is that no one should care. The telephone system is broken when most of the calls we get are fraudulent. I want my phone to be useful; I don't care if fixing it breaks some phone system set up by a sketchy IT wannabe.
You can have the "I don't care" attitude when you have one telephone number in your life. You have to care when you have a couple hundred thousand telephone numbers in your life, like I do, working for a Class 3 ITSP.
Isn't "call forwarding" another name for "caller ID spoofing"?
Since the act itself is illegal, blocking cannot be contested.
† Why just among your friends? Cos we all know that the minute you make it open to everyone, the marketing and MBA folks will get their fangs in it and monetize and data-mine.
I never get calls from the same number. I've had the same scammer call me 3 times in one day from 3 different numbers.
This is the scammer that has called me 100s of times in the last 2 years: http://www.caribbeandiscountsinternational.com/about/
I tried to contact Tucows to complain, no way to do that. Then, I filed a report with ICANN that Tucows was violating their contract (because I can't report abuse), and that case was closed after two weeks.
The entire system is supporting the scammers.
This shared block list is basically how Nomorobo works and it’s quite effective for me.
AT&T's seemed to work OK for the first few months. Then calls started slipping through. Then AT&T started trying to sell me an "enhanced" version for $x/month.
So now the telcos have found another way to make money from phone spam.
The problem is scammers spoof numbers. So, even if you share the number and try to call it, the number will be dead.
It has made phone calls probably the worst way to reach me, though. Not sure why I don't receive more text spam, which is nearly nonexistent—must be some technical reason.
On my cell phone, the biggest annoyance is that I have to turn on Do Not Disturb when traveling internationally which means only the specific numbers in my contacts list can reach me in an emergency at all hours.
I installed the public beta for that alone because I get so many of these types of calls, and it's saved me 19 interruptions so far this week.
Obviously blocking all unknown numbers isn't an option for everyone, but it's been great for me.
I will just continue to block and report spam for calls from all numbers which I did not myself enter into my contacts.
