STIR/SHAKEN has an exception for calls passing through TDM trunks, which don't support it. This created a small industry for passing spam calls through TDM trunks. Such calls can trivially have their caller ID spoofed.
Phone companies used to be monopolies, in Europe they were owned by the government as a public service. But when they become profitable politicians betrayed their citizens and sold them. Nowadays, phone companies are a source of scams, spam and everything wrong with big corporations. And all that profits are now private instead of helping to fund the country.
Much the same as e-mail, identity within the phone system was, historically, entirely built on trust (because only Ma Bell could make configuration changes, and they could verify that what their customer was asking them to do was legit). Those assumptions were carried through deregulation, and are very deeply entrenched in the technical design of the network. Changing them will hopefully become easier over the next few years as analogue service is turned off entirely (e.g., BT/OR in the UK are set to turn off all analogue phone service by the end of January 2027).
And there's a lot of telemarketing and scams happening across country lines.
I mean, they should still do it. It's just the first problem they'd face.
I think in both countries these methods are supported by actual laws, one via "advertising-exclusion systems" that the companies need to respect, and in Sweden via the Swedish Marketing Act which forces companies to not call people who've "clearly objected to that method" or something similar. I'm sure similar laws and lists exists in other countries too. Obviously hospitals, doctors, utility companies and similar don't cross-reference against these lists, as they have actual relationship with you already.
Both in Sweden and in Spain I used to receive a lot of spam calls, like multiple per week, and once enrolled on these lists, the calls are non-existent, the only telemarketing calls I get now are from the companies I already have relationships with, which happens maybe once a month.
If you suffer greatly by the constant spam calls, like I did once before, do take a look and see if there are similar opt-out lists in your country :) They may take a month or two before actually eliminating all calls, but they do work, apparently.
> In January 2009, numerous media and consumer advocacy organizations reported that anyone can use false information pretending to be a telemarketer and download a set of numbers from the list for a $50 fee. It took their reporter ten minutes to do so. It has been proposed that list may be being downloaded and used as a telemarketing list overseas, where there's little that can be done as the CRTC has no jurisdiction outside of Canada
[1] https://en.wikipedia.org/wiki/National_Do_Not_Call_Registry [2] https://en.wikipedia.org/wiki/National_Do_Not_Call_List
And the rest are political calls, which are exempt. This the most annoying, come election time, I get 5-6 texts or calls per day asking for money or votes.
I suppose many people would wonder what the difference is between a legitimate caller you don't want and a fake one.
If you're the sort of person that is too polite to just hang up and you might get hooked by a scam caller because you let them talk to you, then it's a big difference
I am not sure why it works so well here. I have vague recollections of news articles about it being ignored in the past. I guess they just struck down hard on those. Also, I imagine if you put yourself on that list you would be really grumpy if someone called to try to sell you something.
I'm guessing (since Norway and Sweden tends to be more similar than different) that Norway also have something similar to the Swedish "Marknadsföringslagen" ("The Marketing Act") that effectively outlaws companies from calling people who obviously don't want to be called. They quite literally get fines if they call people on these lists, hence the companies actively cross-reference against them.
I've worked in cold-calling telemarketing in both Sweden and Spain in my previous life, both companies I worked for were deadly afraid of accidentally calling people on these lists, and actively instructed employees to basically say "Sorry", hang up and flag the number if someone mentioned the name of the lists.
So it worked for a time, legit companies stoped calling; however most people didn't knew about Bloctel as it was little advertised.
Meanwhile, spam calls turned into scam calls, and a real issue especially with the elderly.
So I think that banning all unsolicited calling kills two birds with one stone, spam becomes illegal and scams as a consequence becomes easier to spot as there are no more unsolicited calls.
I've even heard stories of some scammers exclusively using such lists, as they are pre-verified!
What country are you in that it doesn't work in? I know for a fact it works in Spain and Sweden, but it'll really depend on the country. You'd help by others by being a bit more explicit :)
> I've even heard stories of some scammers exclusively using such lists, as they are pre-verified!
That does suck and seems counter-productive indeed! Even more curious what exact country you're talking about now.
Worth knowing for people who might not know; large telemarketing companies have campaigns on the internet to spread FUD about the effectiveness of these lists, so less people enroll. I'm not claiming that you is one of these, but unless we're being clear what lists/countries we're talking about here, it's borderline FUD rather than helpful to the conversation.
Maybe he's in France, since this article is about France having to ban all telemarketing calls since the block lists apparently don't work.
Don't let your regional indignation get in the way of doing basic logic.
Speak with your local politicians to fix the issues that bothers you. They don't listen, out on the streets and protest. Same way civilians communicate with their governments in every other democracy :)
Protests have never once seemed effective my entire life, honestly
If the threat of an 999999 $£€ fine per call isn't enough.
I opted in to a block list and after a few months received much less calls, but still more than zero. I think that now that everyone is on the block list by default companies will have to be more careful and it will be easier to report any issue.
There has been some waves of spammer calls, more like "fake job offer calls" or things like that, coming from cell phone numbers, and there's still some telemarketing, but it is way way lower than, say, ten years ago. Orders of magnitude .
In my life I have literally never legitimately had a call from an unknown number outside of the country. I guess it could be different if you have many connections or business deals internationally. But I feel like the average person could restrict inbound international calls to contacts only and be better off for it.
There are a ton of us who are from one country, but moved to another, maybe more in EU than other places (not sure), but I really wouldn't say it's uncommon or even out of the ordinary. And I think most of us in this situation, have received/made international calls at least once in our life.
More relevant to the topic at hand, it’s extremely rare to receive an unsolicited call to an American phone number from a number outside the +1 country code. So I’m sure when an immigrant in the US gets an unknown call from their home country code, they can be pretty sure the call’s intentional and worth answering
Can't be THAT rare, can it? Isn't 15% of the current population in the US immigrants? Most of us immigrants do receive and make calls to our "mother country" every once in a while, even introverts like me. Or maybe you were excluding immigrants in that as you mention immigrants later?
1. when travelling, hotels or car rentals may need to call or update me with some information
2. friend/family member was abroad and had issues with its own phone
3. some service I was paying for had customer care in a different country
4. buying something from a seller abroad, especially in the nicher categories (like a custom made standing desk) required the seller to call me a bunch of times
So it turns out we really do need a technical solution, which is unforgeable and easily traceable access to the telephone network. Plus robust enforcement of consumer laws, something wildly out of fashion in the US.
We have that, but it's insufficient.
https://en.wikipedia.org/wiki/STIR/SHAKEN#Limitations
Although STIR/SHAKEN is frequently described as a "caller ID authentication technology", it does not authenticate any caller ID per se. Instead, it authenticates the originating carrier, but that solves a different problem. [...]
It critically relies on a set of trusted certificate authorities (CAs) to manage digital certificates. In the USA, several telecom companies were appointed by the FCC as the CAs. They serve as the root of the trust. All other telcos, must not only trust these CAs but also pay them for compliance with STIR/SHAKEN, typically based on a percentage of their annual revenue. The reliance on trusted third parties severely limits STIR/SHAKEN to work across borders.
> Plus robust enforcement of consumer laws, something wildly out of fashion in the US.Quite.
https://en.wikipedia.org/wiki/TRACED_Act#Criticism
The act requires FCC referrals to DOJ for willful robocall fraud. In the half-decade since enactment, with billions of scam calls and billions of dollars in consumer losses, the FCC made less than a dozen referrals.First, I am 100% for this legislation, but, as has been mentioned numerous times, here, it needs to be enforced.
We probably also need to marry it with a technical solution, that ensures that unverified numbers cannot be used (no spoofing possible).
Maybe a national "blacklist" of bad numbers, with a "three strikes and you're out" kind of thing.
But, human nature, that nasty old spoiler, is likely to raise its ugly head. I suspect this would be a great place for corruption to take hold.
This kind of happens today, but I think the problem is too big. You'll need to employ thousands to process all the complaints and by the time you issue a fine, the company has closed and a new one has started.
I wonder how enforceable that France thing will be
What do you report to the police if the act isn't illegal?
Any number on that list is effectively a honeypot. I guess you could even distribute an app that automates the whole process: put your number on the list, log incoming calls, aggregate the data and report them in batches large enough to catch the government's attention.
I mean, everyone can call anyone and name any company already.
I haven't had too much trouble with telemarketers lately but there is a crowdsourced app in France called Saracroche that can be easily installed on your phone and blocks spam numbers by becoming the caller id service. You can also use the app to report a number and help build the huge database.
Alas, last time I checked numbers were something that was announced in-band, so it could be trivially faked by the caller. But I'm not sure if that's still true.
Even if there's no explicit laws around that, who's getting billed for the calls?
Phone calls are essentially end to end voip these days so we have the ability to deliver that metadata.
they can continue to send me junk mail and unsolicited texts which already gets filed correctly
friends and family only
I’ve been thinking how to turn the table so that you could allow only certain parties to reach you if you allowed them to (say you are waiting for a call from the auto repair shop).
I like the idea of a whitelist. But there needs to be a way for you to also manage that white list so that you can allow that repair shop to call you in the next few weeks.
For me, all unknown calls are screened. Which means if someone who’s not in my contacts calls me, they get some automatic voice saying something like “this is apple screen calling, please let me know who you are and why you are calling” The person calling then either hangs up or says something, if they say something I can see the live transcription and answer the call immediately if it’s important.
It’s been incredibly effective. I’ve been using it for a couple of years now with no complaints from anyone for not being able to reach me, and not once have I answered a scam call during that period.
I’ve had a few situations similar to what you describe, some service I’m using like a doctor, realestate agent etc called me and I immediately recognised who they are and why they are calling and answered.
Jokes aside, besides just outlawing telemarketing as a whole, there are "bigger" solutions that can help more, like the opt-in "do not call" registries that bunch of countries have, that actually work, and works across landline/mobile phones, regardless of OS or manufacturer :) I'm not sure those lists exists in every country, but every country I've lived in (so far) has had a variant of those, that works.
- After a call from an unknown number concludes, the phone could offer an option to the user to mark it as "spam" (blocking the number in the history would have the same effect).
- The spam mark would then go into the central database. If a phone number was marked as "spam" too many times, it would no longer be able to ring the phone (maybe it gets diverted into the "spam folder", like e-mails).
Or am I being too naive here? What are the obstacles for something like this actually happening?
Most spam calls I get is shown as legit numbers. If I call them back they will go to an innocent and unsuspecting user.
Google is already collecting this information and shows numbers as "probably spam". It is hard to enforce this harder even with collateral damage as you cannot trust the number which is signalled.
Legislation is in this case a good thing which might get the telcos to take this more seriously. This needs to be handled on an operator level. Nothing will happen without legislative incentives.
The world is run on SS7 which has a lot of problems which inertia and lacking incentives makes hard to overcome.
Most of the above exists - the problem is political & regulatory capture constantly undermines and weakens a lot of it.
All emergencies from unknown numbers that I can thank of will be from local numbers.
I personally answer all phone calls but I have very little of those spam calls (on average once a month perhaps?) And I have learned to just rudely stop the call without saying "sorry, I'm not interested".
Do so, and 99% of telemarketers no longer have the incentive to call anybody.
I'm a telemarketer who calls you up, sells you on something, and charges your card.
What changes in that scenario?
Same thing with door-to-door salespeople. Seems like in the past the percentage of people selling useful stuff like cleaning products, Avon, or yard service was higher. Now it seems to be out of town companies selling solar scams, roof inspection, or some other multi-thousand dollar thing sold via high-pressure sales.
There are places that list businesses, like the yellow pages of old, or place ads in publications that are relevant to the services or products you offer.
If you sell tires, and I don’t need tires, I don’t want to hear or see anything about tires.
You don't.