News for hackers. Stuff that matters.
Re:US breaks up IRS phone scam operation by jonathanmayer on Monday July 23, 2018 @11:39PM (#17597954)
I worked on countering phone scams and robocalls at the Federal Communications Commission for over a year. This operation was a big win and an impressive international collaboration.

That said, the robocall problem is getting worse, not better. Robocall volume is at an all-time high: https://robocallindex.com/

In many respects, the problem of telephone spam today is similar to the problem of email spam in the early 2000s. Litigating against spammers had limited efficacy, so the community developed blacklists, better filtering, and stronger authentication (SPF, DKIM, and DMARC).

Until the major carriers get serious about similar steps, especially filtering and authentication (i.e. SHAKEN and STIR), these fraudulent calls won't stop. And, in the interim, vulnerable populations will continue to be disproportionately victimized.

Re:US breaks up IRS phone scam operation by anonymous5133 on Tuesday July 24, 2018 @01:39AM (#17598374)
I think the problem has gotten so serious that the traditional voice-based phone system is pretty much unusable. I don't even bother to answer the phone. Instead I have a voice mail message that tells people to send a text message instead. I can't be the only one who does something like this or has some other system in place to not have to deal with robocalls/scam callers.
Re:US breaks up IRS phone scam operation by r00fus on Tuesday July 24, 2018 @03:14AM (#17598761)
Not sure what carrier you're using but T-Mobile in the US just released "scam block" ( I had "scam ID" turned on previously).

In addition to marking calls as scam, now they simply block them outright. Getting approximately 0 scam calls in the past 2 days.

Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:04AM (#17601087)
Job seekers and those with medically needy relatives are among those who cannot tolerate any false positive especially if calls are entirely rejected and cannot even leave a voicemail.
Re:US breaks up IRS phone scam operation by nacs on Tuesday July 24, 2018 @01:22PM (#17603122)
TMobile has 2 levels of it. One just labels the Caller ID for those suspected numbers as "Scam Likely". An additional feature (which OP is referring to) blocks the calls automatically.
Re:US breaks up IRS phone scam operation by kurthr on Tuesday July 24, 2018 @10:28AM (#17601309)
I hope it works... it's kinda terrifying that getting no scam calls for 2 days is significant!

I have a test/dev phone that I used for a project several years ago with an associated ph#. I forgot about it (don't think about the charges accrued 8^) for several years, but just charged it and turned it on.

It's a number that was never used or answered for 3 years and it gets several scam calls a day. They must be calling every valid number.

Re:US breaks up IRS phone scam operation by bpicolo on Tuesday July 24, 2018 @09:51AM (#17600972)
I didn't realize they had added the block feature too, nice! Just went and enabled that
Re:US breaks up IRS phone scam operation by toddh on Tuesday July 24, 2018 @10:31AM (#17601333)
Does this work for the sweepstakes type scams where they try to induce the elderly send money for a fabulous prize they supposedly won? Just curious in general how they ID a scam?
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @12:54PM (#17602829)
The simplest and most powerful definition of "spam" is "whatever our users report as spam."
Re:US breaks up IRS phone scam operation by toddh on Tuesday July 24, 2018 @04:39PM (#17604714)
People don't mark calls as spam so I wonder how they do the training?
Re:US breaks up IRS phone scam operation by chiefalchemist on Tuesday July 24, 2018 @06:09AM (#17599571)
I believe Google recently released something similar for Android.

These calls are spam for phones. Certainly, there's an obvious pattern that can be identified and then neutralized.

Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:05AM (#17601101)
Email spam became tractable on the end user side with domain and IP address risk scoring. Caller IDs are so easily spoofable it's like open relay email servers of the past.
Re:US breaks up IRS phone scam operation by chiefalchemist on Sunday July 29, 2018 @03:52PM (#17639932)
When they spoof are they using otherwise valid numbers? That is, if you returned the call you'd speak to someone's grandmother?

None the less, can't the phone providers detect the excessive outgoing traffic? And if it's a residential number can't that raise a red flag?

Re:US breaks up IRS phone scam operation by daveFNbuck on Tuesday July 24, 2018 @11:41AM (#17602015)
Do you have a link for that? I have an Android phone, but I received a call marked as spam yesterday. I'd love to be able to just block those.
Re:US breaks up IRS phone scam operation by Fnoord on Tuesday July 24, 2018 @10:27AM (#17601301)
I never get any robocalls. I do get robots when I initiate the call though (which is very annoying). Then again, we got privacy and telemarketing laws here.
Re:US breaks up IRS phone scam operation by skate22 on Tuesday July 24, 2018 @07:12AM (#17599899)
No voicemail and no picking up for random numbers. Works well for me
Re:US breaks up IRS phone scam operation by njarboe on Tuesday July 24, 2018 @01:57PM (#17603448)
The world could have such a wider set of solutions to many problems on the internet if there were just a good system of micropayments. Any idea why the US government or some other government does not create such a system? If people not in my contact list were immediately sent to voicemail and charged 10 cents to leave me a message, spam would basically go away. Similar for email spam. One can dream.
Re:US breaks up IRS phone scam operation by theandrewbailey on Tuesday July 24, 2018 @03:42PM (#17604269)
> Any idea why the US government or some other government does not create such a system?

The US government isn't in the business of running the internet or phone or micropayment systems, and it's not interested.

Re:US breaks up IRS phone scam operation by njarboe on Thursday July 26, 2018 @12:06AM (#17614994)
Its into supplying its citizens with a useful currency. Micropayments of dollars is just usefully currency online. Seems like microdollars would be a natural monopoly, ideal for the US government to produce.
Re:US breaks up IRS phone scam operation by nojvek on Tuesday July 24, 2018 @11:46AM (#17602079)
Yeah I do the same. I only pick up phones if it’s from a contact I know. 99% it’s my wife. Most of my friends use some form of text messages.

Most people leave a voicemail. Thanks to technology, the voice mails get transcribed and I can quickly decide whether I should return the call.

I also see “Spam Likely” for a whole range of numbers. Not sure if it’s Apple or T-mobile but I sure do appreaciate the heads up.

Re:US breaks up IRS phone scam operation by mdhen on Tuesday July 24, 2018 @12:03PM (#17602276)
I have do not disturb turned on always, but my contacts are exempt, so for people I know it will ring. If I get a call from a non contact they can leave a voicemail. But most of the time it's a robocall. Not having to deal with my phone ringing all the time has been a big improvement.
Re:US breaks up IRS phone scam operation by nacs on Tuesday July 24, 2018 @01:21PM (#17603111)
"Scam Likely" is a T-Mobile thing. I get it also. It can be toggled from the Tmobile website.
Re:US breaks up IRS phone scam operation by duxup on Monday July 23, 2018 @11:51PM (#17597993)
My wife gets a call every day about how she is being sued..... every day a new nasty VM.

I'm talking to random scammers more now because I'm looking for a job and I feel like I have to answer the phone even if I don't recognize the number. Man it is annoying.

Re:US breaks up IRS phone scam operation by voodooranger on Tuesday July 24, 2018 @04:13AM (#17599027)
The workaround I used for this was Google Voice. I put the Google Voice number on my resume and in settings told it to use my own GV number as the caller id. If I saw a call coming from the GV number I knew it was a response to my resume. For some reason my GV number doesn’t attract scammers.
Re:US breaks up IRS phone scam operation by nasredin on Tuesday July 24, 2018 @10:16AM (#17601192)
Pro tip for you: you can "port" out your number to your cellular provider.

Zero spam for me for a long time. Yes, zero!

Also see the T Mobile spam service. There's two you have to turn on IIRC.

YouMail for voicemail is good too.

Re:US breaks up IRS phone scam operation by duxup on Tuesday July 24, 2018 @08:49PM (#17606135)
Thank you!
Re:US breaks up IRS phone scam operation by Sangermaine on Tuesday July 24, 2018 @10:17AM (#17601201)
I have a GV number as my work number on my cards, site, etc. and I still get spam through it, though admittedly less than through my personal number.
Re:US breaks up IRS phone scam operation by duxup on Tuesday July 24, 2018 @08:49PM (#17606133)
That is a great tip, thanks!
Re:US breaks up IRS phone scam operation by sureaboutthis on Tuesday July 24, 2018 @06:19AM (#17599626)
How about the FCC get serious about the problem and force the telcos to stop it. Obviously, as you say, they have no interest in doing it themselves.
Re:US breaks up IRS phone scam operation by viraptor on Tuesday July 24, 2018 @08:58AM (#17600561)
Pretty much this. With the current tech stack in telcos, the only way anything can change is if they're put in a "you're responsible for this call, unless you can point to who sent this call" situation. While the receiving / forwarding party can't validate the originating number, they can always point at the telco that sent the call in. Repeat until you find a company / person to fine.
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:21AM (#17601241)
Just like airlines get fined for carrying passengers who violate immigration policy. Thus they are effectively deputized to enforce the rules.

That would root out domestic telcos who enable bad behavior. What happens when the origin telco is in another jurisdiction?

Re:US breaks up IRS phone scam operation by bluGill on Tuesday July 24, 2018 @11:07AM (#17601667)
Then it has an international caller id. Most people get so few international calls that they will quickly figure out that it can't be real. If it had a locale caller id it is obviously spoofed because otherwise the call wouldn't have come in from the foreign telco.

Once someone does this, legitimate telephone companies elsewhere will become interested as well, and may "play nice" so long as local laws allow it.

Re:US breaks up IRS phone scam operation by viraptor on Tuesday July 24, 2018 @12:44PM (#17602735)
> If it had a locale caller id it is obviously spoofed because otherwise the call wouldn't have come in from the foreign telco.

That is not correct. You can send legitimate calls with spoofed caller id between different countries. Many providers will let you do that. (as in, you can assign a caller id from country A to a call originating from country B to A)

Re:US breaks up IRS phone scam operation by bluGill on Tuesday July 24, 2018 @01:52PM (#17603403)
I'm saying that those become automatically illegitimate and Country A should reject them. The only exception is IF the telco in country B agrees to assume legal responsibility in country A.
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @02:14PM (#17603600)
Problems are international calls are already in a technically deficient state. e.g. caller IDs are not sent properly and a generic dummy is sent. Telco 1 uses Telco 2 to connect to Telco 3 which finally terminates on Telco 4's network and rings the phone.

There are literally treaties that govern phone traffic that would have to be updated. Most telcos are a monopoly or oligopoly and don't care about customer dissatisfaction. It's not like there's a substitute to the PSTN ready to go. Are you going to tell all of your contacts you are only reachable through Skype/Hangouts/Facetime? Cutting off a spammy foreign telco would also hurt revenue.

Frankly, the definition of telecom fraud should include corporations ripping off their customers not just petty criminals getting free calls.

Re:US breaks up IRS phone scam operation by viraptor on Tuesday July 24, 2018 @07:13PM (#17605678)
You can't just remove this - it's a legitimate use case.

For example if you go to another country with your mobile phone, your call will be international, but the caller id would not match the source.

Re:US breaks up IRS phone scam operation by bluGill on Thursday July 26, 2018 @11:58AM (#17618461)
But there are plenty of ways for my phone company to verify that it was my phone. (they might verify a clone of my sim, but that is a different problem that they already have to handle)
Re:US breaks up IRS phone scam operation by viraptor on Tuesday July 24, 2018 @10:35AM (#17601370)
It costs a lot more internationally, so I'm not sure how much of a problem it really is. While many people would hate this, the same rule could be applied with "if you're forwarding international connections, you're responsible". Bad interconnects would probably drop immediately with a moderate amount of chaos, while legit foreign partners are found who can filter traffic on their end.
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:39AM (#17601405)
My service provider offers <$0.01/min. calls to many countries.

I have a hunch that no telco wants to entirely block a foreign telco because they would lose money and because of the ensuing chaos.

Robocall friendly service providers intentionally mix robocalls with legitimate traffic to avoid terms of service enforcement. e.g. Robocalls are laundered by splitting across n carriers so spam (identified by bad ASR/ACD stats) stays below each carrier's threshold. https://news.ycombinator.com/item?id=12339739

Re:US breaks up IRS phone scam operation by raarts on Tuesday July 24, 2018 @02:51AM (#17598664)
Since you have expertise, maybe you can explain why this seems to happen in the US only, while SS7 (which many commenters mention as the culprit) is used all over the world.

I live in Europe, but do not receive robocalls at all (zero), while when I enter the US, and put in my US SIM, I immediately start getting multiple per day.

Re:US breaks up IRS phone scam operation by netsharc on Tuesday July 24, 2018 @06:55AM (#17599800)
Maybe there's no market in Europe. Only the UK speaks English, and in the UK it seems not many have to do tax returns (from http://taxaid.org.uk/guides/taxpayers/tax-returns/im-not-sur...):

> Most taxpayers in the UK are taxed at source and so do not need to complete a Self Assessment Tax Return. ‘Taxed at source’ means that the money you receive has already had tax taken off, such as the wages you get from your employer when paid under the Pay As You Earn (PAYE) system, or UK bank interest taxed at source.

Re:US breaks up IRS phone scam operation by martinald on Tuesday July 24, 2018 @09:50AM (#17600962)
They definitely do happen in the UK.

Later versions of Android really help with the 'spam call' filtering, though I've noticed that callers tend to just recycle through nonsense caller IDs and/or unknown numbers (which is really annoying if you have clients phoning you from unknown numbers).

At one point I was getting 10+ a day, which seems to have calmed down now. Everything from tax scams, to PPI, to car accidents.

Re:US breaks up IRS phone scam operation by daveFNbuck on Tuesday July 24, 2018 @11:45AM (#17602066)
How do you filter spam calls in Android? I keep getting calls where my screen turns red and it warns that the call is spam. I'd love to stop having my phone ring and stop getting all the voicemails.
Re:US breaks up IRS phone scam operation by martinald on Tuesday July 24, 2018 @07:15PM (#17605686)
Phone app -> top right three vertical dots -> settings -> filter spam calls
Re:US breaks up IRS phone scam operation by daveFNbuck on Wednesday July 25, 2018 @12:49AM (#17606969)
Thanks! That has really been bugging me for a long time.
Re:US breaks up IRS phone scam operation by raarts on Tuesday July 24, 2018 @08:36AM (#17600418)
Just to make it clear: Not only do I get IRS robocalls in the US but all kind of scams.

Also: 96% of the Dutch speak English, and the Scandinavian countries aren't far behind.

Re:US breaks up IRS phone scam operation by viraptor on Tuesday July 24, 2018 @08:51AM (#17600518)
There's a difference between speaking English and expecting a local call to be in English. Sure they could have the conversion, but trying to do a tax scam on a Dutch person in English has ~0% chance of succeeding.
Re:US breaks up IRS phone scam operation by raarts on Tuesday July 24, 2018 @08:57AM (#17600551)
Tax ok, but I think many would fall for a crypto, or investment scam.
Re:US breaks up IRS phone scam operation by skykooler on Tuesday July 24, 2018 @10:40AM (#17601417)
As I understand it, in Europe to register for a phone number you have to give some identifying info to the telecom so they know who the number is registered with. In the US, however, you can get phone numbers anonymously.
Re:US breaks up IRS phone scam operation by raarts on Tuesday July 24, 2018 @11:17AM (#17601766)
I'm from the telecom industry myself, and it's real easy to spoof callerid here as well. Also anonymous burner phones do exist here as well.

So I don't think this is the reason.

Re:US breaks up IRS phone scam operation by nojvek on Tuesday July 24, 2018 @11:51AM (#17602138)
I’m sure you’ll find more “get rich quickly even if it’s dirty” kinda people here. We literally worship our millionaires and billionaires.

I’m probably going to get downvotes but this is what I’ve experienced in the US, at-least in the hyper growth Silicon Valley.

Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @12:57PM (#17602866)
Get rich quick and clawing over others to get to the top is also relatively prevalent in poorer countries, those with great wealth/income inequality, and societies undergoing rapid economic transformation.

It's part legal enforcement and part culture. There are dishonest individuals in every country.

Re:US breaks up IRS phone scam operation by alberts00 on Tuesday July 24, 2018 @03:39PM (#17604243)
There are countries in EU where that is not the case. I do not think this is an EU policy.
Re:US breaks up IRS phone scam operation by tpxl on Tuesday July 24, 2018 @03:25AM (#17598816)
Afaik they are mostly illegal, at least where I live.
Re:US breaks up IRS phone scam operation by dragonwriter on Tuesday July 24, 2018 @10:02AM (#17601067)
They are illegal in the US and often originate abroad, anyway, so legality under the law of the target country (or the source country, as most are illegal where they originate, too) doesn't seem to be a controlling factor.
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:07AM (#17601117)
Fraud and wire fraud are illegal in most countries. The limiting factor is effectiveness of enforcement and probability of being caught.
Re:US breaks up IRS phone scam operation by thunfischbrot on Tuesday July 24, 2018 @03:46AM (#17598913)
You mean that they do not happen in the EU as they are illegal there? They are illegal in the US as well.
Re:US breaks up IRS phone scam operation by soundwave106 on Tuesday July 24, 2018 @10:13AM (#17601164)
Although no law will prevents all scams, some European governments do have much stricter laws on when you can "cold call" period. In Germany, for instance, thanks to legislation passed a decade ago, I believe the customer needs to grant explicit permission in order for a business to be able to cold call, and no telemarketer can impersonate your phone number -- https://www.thelocal.de/20090804/21021.

It would be interesting to see if there is a correlation with these sorts of laws, and the prevalence of phone scams.

Re:US breaks up IRS phone scam operation by tremon on Tuesday July 24, 2018 @05:37AM (#17599386)
The EU regulators still have teeth.
Re:US breaks up IRS phone scam operation by majos on Monday July 23, 2018 @11:43PM (#17597963)
What's keeping major carriers from getting serious about these steps already?
Re:US breaks up IRS phone scam operation by jonathanmayer on Monday July 23, 2018 @11:52PM (#17598000)
My experience was that the major carriers had little economic incentive to invest in improving telephone service, which they viewed as a legacy line of business. They were focused on selling data plans, building their networks, and entering new markets (especially online services and advertising).
Re:US breaks up IRS phone scam operation by cma on Tuesday July 24, 2018 @01:13AM (#17598266)
Spam calls are actually a cash cow. Uses your minutes and Verizon also makes money selling a subscription spam blocking service that would be worthless without the annoying calls:

https://www.theverge.com/2017/6/30/15906800/verizon-anti-spa...

Re:US breaks up IRS phone scam operation by jjeaff on Tuesday July 24, 2018 @01:20AM (#17598305)
What percentage of US cell plans aren't unlimited minutes these days? I'm thinking it has to be a tiny amount.

Seems like they would like to unclog their Network not to mention their servers have to handle and store all the voicemails.

Re:US breaks up IRS phone scam operation by Scoundreller on Tuesday July 24, 2018 @01:38AM (#17598372)
The receiving provider usually gets paid to terminate the call.

It may only be a fraction of a cent per minute, but these are the same telecoms that will gladly send you a bill every month because you owe them 1 cent.

Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:09AM (#17601132)
In the past, cellular network operators earned revenue based off minutes sold. That's why voicemail has very verbose instructions that are read to you every single time. It's a way of inflating average call duration and thus revenue.

These days with unmetered calling, the receiving telco still makes some money off incoming calls through termination charges.

Re:US breaks up IRS phone scam operation by lotyrin on Tuesday July 24, 2018 @01:06AM (#17598242)
If they truly aren't interested in it, that'd be great, they could just stop, open up to become dumb data pipes and create a market of competitive third-party service for the telephony part.
Re:US breaks up IRS phone scam operation by dredmorbius on Tuesday July 24, 2018 @03:03AM (#17598715)
Are the telcos trying to kill the system outright then?
Re:US breaks up IRS phone scam operation by imron on Monday July 23, 2018 @11:48PM (#17597980)
They indirectly make money from the fraud, so incentives are not aligned for them to stop it.
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @12:27AM (#17598114)
And there are insufficient dis-incentives. There are no competitors who offer a superior spam filtering solution and market it.

If carriers became financially liable for robocalls by a government mandated date, e.g. 2020, they would find a solution. Even if was as simple as not getting paid to carry spam traffic (as opposed to an EU level % of global revenue fine).

Re:US breaks up IRS phone scam operation by SOLAR_FIELDS on Tuesday July 24, 2018 @01:48AM (#17598420)
Another trivial solution would be to offer some sort of voice CAPTCHA for phones - get asked question and provide answer in order to connect. Someone on here posted awhile back that they implemented their own and said it completely eliminated robocalls.
Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @01:54AM (#17598441)
I have done this. I have my own VoIP system. One of my DIDs picks up and is a recording of me saying "I'm screening my calls for telemarketers and scams. enter code 5300 any time to be connected to $myname". If 5300 is entered, it dials out to the DID for my cellphone and transfers the call. No code, or no action, call goes nowhere.

You can fairly easily make the code whatever you want or make it a multi step process.

Re:US breaks up IRS phone scam operation by swandog46 on Tuesday July 24, 2018 @03:23AM (#17598808)
Did you find a way to do this that didn't require paying per-minute to (e.g.) Twilio for the call forwarding back to your cell phone?
Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @09:34AM (#17600828)
I do pay per minute in 6 second increments but the price is so small to be barely noticeable.
Re:US breaks up IRS phone scam operation by swandog46 on Tuesday July 24, 2018 @09:55AM (#17601002)
Really? You end up having to pay per minute for the entire duration of every forwarded (non-spam) inbound phone call...
Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @10:03AM (#17601071)
Yes, costs average less than $6 a month. Wholesale SIP termination and origination is remarkably cheap if you are dealing with the US48 states and Canada.

I believe I'm at something like 6/10ths of 1 cent per minute.

Re:US breaks up IRS phone scam operation by swandog46 on Tuesday July 24, 2018 @10:14AM (#17601173)
Yes, that's about right. It's just a matter of whether you're willing to pay $6/month for this. :)
Re:US breaks up IRS phone scam operation by SOLAR_FIELDS on Tuesday July 24, 2018 @02:23PM (#17603691)
$6 a month is more than a fair price for me to eliminate robocalls; I receive about 5-10 on average in any given day.

The collateral damage are systems that have you mark your place in line and call you back. It seems like these could be manually whitelisted though with some ingenuity.

Re:US breaks up IRS phone scam operation by SOLAR_FIELDS on Tuesday July 24, 2018 @02:29AM (#17598585)
If I remember correctly from the conversation I mentioned above: this is only implementable yourself with a VOIP solution and not an actual phone line?
Re:US breaks up IRS phone scam operation by tremon on Tuesday July 24, 2018 @05:41AM (#17599412)
As long as you have a programmable PBX with POTS support (e.g. Asterisk with a telephony expansion card [1]), you can do this with landlines too.

[1] https://www.asterisk.org/products/telephony-interface-cards

Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @10:06AM (#17601110)
I really recommend against introducing analog anything into a modern VoIP system in 2018. Better to port your landline's DID to a VoIP service and route it from there. If you need a physical landline looking phone, good quality sip desk phones are $50 (assuming you don't care about huge color screens).
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:19AM (#17601223)
Definitely. End-to-end digital is best for fidelity and reliability. Running your own PBX is another point of failure for a service most people expect very high uptime out of, and opens you up to toll fraud. It's only worth it if you have a lot of phone or want call recording or transferring.
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:16AM (#17601197)
DTMF based challenge is probably easier. Even requiring callers to dial 1 to ring through is enough to keep robocall campaigns from ringing your physical phone.

I've been thinking about issuing my friends and family priority access PINs. If they save it to their contact entry for me after the number, I can entirely gate access. e.g. "5558675309,9876" Especially if combined with a time condition e.g. 11 p.m. to 6 a.m.

Re:US breaks up IRS phone scam operation by DINKDINK on Tuesday July 24, 2018 @12:07AM (#17598046)
SS7 is so broken that there's little telco could do even if they put effort into it.
Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @12:32AM (#17598129)
Fixing ss7 at this point would be like polishing the brass doorknobs on the Titanic.
Re:US breaks up IRS phone scam operation by eftychis on Tuesday July 24, 2018 @01:01AM (#17598226)
This is a good analogy unfortunately. SMS is the worst culprit there from my standpoint, given companies use it to send short term credentials (yes they do...) or for 2fa.
Re:US breaks up IRS phone scam operation by utefan001 on Tuesday July 24, 2018 @03:12AM (#17598752)
I either disagree or am ignorant about SS7. See my other post on this page. Interested to read others thoughts about implementing a "opt-in, call back only or GTFO system".
Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @09:38AM (#17600859)
If I have full control of a DID, implementing callback isn't hard. That would be a bandaid type solution built on top of the existing phone network, however. Fixing ss7 at a systemic level so that all call routing in and outbound is verifiable, CID spoofing is impossible, is what is nigh impossible.
Re:US breaks up IRS phone scam operation by supertrope on Tuesday July 24, 2018 @10:12AM (#17601156)
Are there any proposed replacements? Even SIP has vulnerabilities, foot gun features, and fundamental design problems like use of MD5 digest, NAT intolerance, and vendor and device specific bugs.
Re:US breaks up IRS phone scam operation by jimmydddd on Tuesday July 24, 2018 @10:08AM (#17601123)
@jonathanmayer Any idea why the landline companies don't address this issue? Do they make money from spam calls? I signed up for the Nomo Robo service, that I believe won an FCC sponsored contest to provide a partial solution. And I think the landline providers actively faught against its use.
Re:US breaks up IRS phone scam operation by deelowe on Tuesday July 24, 2018 @10:39AM (#17601407)
I imagine a significant number of POTS lines are used by robocall/scammer operations, if not directly through third party VOIP services. Make not qualms about it, ATT still treats POTS as it's bread and butter. They will do whatever it takes to keep that cashflow coming in.
Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @12:31AM (#17598127)
The problem with fixing this is that, to extend your analogy, SS7 is like how SMTP worked in 1992 before anything like spf, dkim, dmarc, SSL/TLS. Adding extensions to it will break interoperability with the truly gargantuan installed base of old ss7 equipment around the world that nobody wants to pay to replace. It needs to be burnt to the ground and started over from first principles. But really, everything that we need can be implemented with pure VoIP.

I just don't answer my phone anymore unless I recognize the incoming number. And caller ID is trivially easy to spoof. Thankfully nobody spoofs any of the numbers of my top 50 contacts.

Re:US breaks up IRS phone scam operation by Fjolsvith on Tuesday July 24, 2018 @10:35AM (#17601372)
Last year, a spammer spoofed with my business phone number as their caller ID. Mid-day, I start getting phone calls from people yelling at me to stop calling them, stop harassing them. Every 2-3 minutes, someone new and angry. After about 3 hours I had figured out what had happened and got ahold of my carrier and had them change my phone number.
Re:US breaks up IRS phone scam operation by utefan001 on Tuesday July 24, 2018 @03:08AM (#17598728)
I don't know enough about SS7 to understand if this is feasible, but it is clearly time for a call back based system. Millions of people signed up for the do not call registry. I am sure millions would sign up for a system where incoming calls trigger a call back. If your out bound call system doesn't support call back, don't worry because nobody wants to talk to anyone hiding behind the cloak of invisibility.
Re:US breaks up IRS phone scam operation by walrus01 on Tuesday July 24, 2018 @09:39AM (#17600873)
Building a callback system doesn't fix ss7 and is a bandaid slapped on top.
Re:US breaks up IRS phone scam operation by toss1 on Tuesday July 24, 2018 @01:10PM (#17602992)
This is getting way out of hand, and I don’t know anybody who hasn’t the same observation, and has already changed their behaviour to NOT answer the phone by default.

If the major carriers don't soon understand the magnitude of the telephone spam/scam problem and treat it seriously, They will soon be crippling their business. While this is been likened here to the email spam problem in 2000, back then, everyone in the computer industry took the spam problem much more seriously telephone industry does now. E.,g., Verizon gleefully offers a blacklist where you can block 20 numbers (nevermind that the spam calls typically have spoofed caller IDs) -- they think they’re good, and it’s utterly useless.

They really need to implement a true Source ID (regardless of the presented caller ID), and a way to instantly flag calls as spam then do targeted tracking and prosecution. If they fail to do this or implement another effective solution, I expect they will lose a century-old line of business to new habits that work around the established habits.

Re:US breaks up IRS phone scam operation by cascom on Tuesday July 24, 2018 @09:59AM (#17601039)
Did you all have a sense for the scope of the problem in terms of number participants and market share? Is the bulk of the calls from a few larger networks, or is the bulk of the market one man shows?
Re:US breaks up IRS phone scam operation by Waterluvian on Tuesday July 24, 2018 @12:07AM (#17598047)
So what am I doing that I've never once had a telemarketer call me, other than my car dealership or phone company. Canada can't be special. Is it because I use a cell phone for everything?
Re:US breaks up IRS phone scam operation by Scoundreller on Tuesday July 24, 2018 @01:44AM (#17598394)
Canadian here. The CRA has called me about their criminal warrants for my arrest many times. The Chinese consulate keeps telling me to call them back.

But these are all on my work-phone and government agencies don't pay taxes anyway.

My personal phone has been relatively safe for unknown reasons that I'm happy about.

Re:US breaks up IRS phone scam operation by joecool1029 on Tuesday July 24, 2018 @02:35AM (#17598608)
Not canadian but used to travel there a lot and had a nice collection of prepaid sim cards. Every new prepaid line I registered got tons of calls from debt collectors, to telemarketers, to scammers.

So yeah it happens, though probably less blindly than US and more from information sharing.

Re:US breaks up IRS phone scam operation by iamshs on Tuesday July 24, 2018 @12:42AM (#17598167)
Numerous calls here. Lately SMSes have started too. Sometime back, even WhatsApp messages from Philippines, but that spam stopped pretty quickly.
Re:US breaks up IRS phone scam operation by peterlk on Tuesday July 24, 2018 @12:18AM (#17598082)
Does Google voice work for Canadian numbers?
Re:US breaks up IRS phone scam operation by joecool1029 on Tuesday July 24, 2018 @02:37AM (#17598613)
I don’t believe you can register a canadian number. You can sign up and use it as a voicemail though I think.

If you are asking whether you can call and be called by canadians for free from american gvoice, the answer to that is yes.