Skip to content
Naked Security Naked Security

US Federal Communications Commission (FCC) Commissioner Jessica Rosenworcel asks us to picture this…

You and your family are sitting down to dinner. It’s a sacred slice of your busy day: a “reprieve from the unrelenting chaos and hubbub of everyday life.” She knows it well, she says, because it’s true for her family, just like as with so many others.

But then, like clockwork, that happy time gets shattered by the ringing of a phone. Who could it be? Why, it’s “Rachel from cardmember services.” Or gosh, it’s someone claiming to be from the IRS – you owe back taxes! Or hey, how about this: you’ve been selected to receive a line of low-interest credit for small businesses. Or golly, a cruise!

Gosh, honey, don’t pass me the mashed potatoes yet. Sweetie, I’ll have to hear about your science fair project later. This call is important: it’s from an important robot!

…said no one ever.

All those shattered evenings are why the FCC on Thursday unanimously passed (PDF) a resolution that lets phone carriers block illegal robocalls.

The new rules enable voice service providers to block certain calls before they get to our phones, the FCC said in its ruling. Specifically, providers now have the go-ahead to block calls from phone numbers on a Do-Not-Originate (DNO) list and spoofed calls: those numbers that show up in Caller ID that are “invalid, unallocated, or unused numbers.”

In other words, service providers will now be able to block calls from numbers with tell-tale signs that they’re fraudulent: for example, numbers with area codes that don’t exist or that can’t make outgoing calls.

Such calls are probably up to no good, FCC Chairman Ajit Pai said in a statement (PDF):

These calls are very likely to be illegal or fraudulent; there’s no legitimate reason for anyone to spoof caller ID to make it seem as if he or she is calling from an unassigned or invalid phone number.

It’s understandable if your first thought is deja vu: hasn’t the FCC already enabled carriers to block these calls?

No, though both the FCC and the Federal Trade Commission have been fighting against robocalls for years. A few years ago, the FTC said it was going to name and shame robocallers, for one.

Hefty sanctions on robocallers have hit the headlines, while FTC competitions to find new technological solutions have uncovered some innovative thinking.

The big tech players are also trying to fight robocalls: Last year, Google added “do-not-answer-that!!” robocall warnings on its Phone app on Nexus and AndroidOne devices, so as to warn about potential spam callers and give users the ability to block and report spammy numbers.

But still, the robocalls keep coming. The FCC notes that one of the most pernicious of this ilk are robocalls placed by scammers, including IRS scams that are out to steal consumers’ cash or their identities.

A typical IRS scam is one in which robocallers pretend to be representing the IRS and claim the called party owes back taxes. IRS scams are particularly deceptive if the illegal robocaller can spoof the number so the Caller ID display makes it look like the call is really, truly coming from the IRS. Another scam involves crooks trying to trick people by claiming a young family member is in jail and needs bail money. The FCC says that since 1 August 2016, it’s received nearly 185,000 complaints about calls that consumers didn’t want.

What effect will this move have on legally spoofed calls? As RoboKiller’s Ethan Garr has noted, reasons to spoof a calling number do exist:

Many of the calls you receive are legitimately spoofed for very good reasons – when you get a call from an extension at your bank, but your caller ID shows the bank’s main number, for example, it came through a PBX, and that is a “spoofed” call.

Other legal reasons to spoof a phone number include when people have legitimate reasons to hide their information: for example, it’s legal to spoof numbers of investigators working on cases, of victims of domestic abuse, or of doctors who need to discuss private medical matters.

The newly passed proposal shouldn’t affect these legal spoofs. Under the FCC’s Truth in Caller ID Act, spoofing is only illegal when it’s done to defraud, cause harm or wrongly obtain anything of value. Breaking the law can rack up fines of up to $10,000 per violation.

The FCC’s new resolution to allow carriers to block robocalls might be a step in the right direction, but it’s got some strings attached. Specifically, our wallet strings, given that the proposal doesn’t stop carriers from charging us for the luxury of not being pestered and scammed.

Commissioner Rosenworcel, who voted to approve the proposal but says it didn’t go far enough, had this to say in a statement (PDF):

While the agency offers carriers the ability to limit calls from what are likely to be fraudulent actors, it fails to prevent them from charging consumers for this service. So this is the kicker: the FCC takes action to ostensibly reduce robocalls but then makes sure you can pay for the privilege. If you ask me, that’s ridiculous.


4 Comments

A good first step, but they really need to REQUIRE carriers to block them. They said it themselves: there’s no good reason for those calls.
And, allowing carriers to charge people is wrong. But, there’s hope: if they’re allowed to block, and choose not to (with or without a fee), then customers who get scammed can sue them.

I would suggest that competition would ensure the telcos won’t charge, but there’s no competition in vast tracts of the US market thanks to state-legislated local monopolies that have helped AT&T almost completely reassemble itself without the pesky universal service requirements.

Having the *option* to block ALL Voice-Over-Internet calls would go a long way to shutting down the overseas telephone-boiler-rooms. Good bye most of the scams.

There may be something that prevents an end telco from knowing the call originated via VOIP. That would make my suggestion unworkable. Sigh.

I’ve noticed that my mobile phone OFTEN gets incoming calls from numbers that begin with my own area code and CNA, but a different line number (since it would have to be). These are all spoofed calls. I don’t have ANY contacts with the same first 6 of 10 digits as my own cell phone number.
Our land-line also received a spoofed call that showed MY OWN name and phone number! Since it was RINGING, it was obviously not ME making the call. We didn’t answer.
The funniest, most honest spoofed call I ever got, was simply logged on our caller ID box as “PHONE SCAM” which was actually the name the caller had to have spoofed into the called ID signals. We weren’t there when it was incoming. We now have our land-line using an answering machine where we can hear the incoming voices. 99.9% of the time, the incoming callers hang up when the machine answers.

But today, we’d been shopping a lot and I got a call from “TOLL FREE CALLER” that I didn’t recognize, but they started leaving a message and it was from our bank whose card I had just been using lots, so I picked up. It was our bank, checking to make sure it was really me who had used our charge card at so many places in one day, three times at Wal-Mart, once at Jack in the Box, then at home for an online purchase from a merchant in the UK (that last one, they declined and I used a different card just before the phone rang.) The man identified himself effectively, let me know the call was being recorded, and HE told ME each of the pending charges so I could confirm them. He did NOT ask me for any personal information except to verify my name. Since he had called me on my land-line, at the number associated with my card, it would have been hard for anyone else to pretend to be me. I thanked him for the bank’s watchfulness over my card’s security.
But for all the incoming calls that nobody leaves messages on our machine with unknown numbers showing on the caller-ID? I’m not calling them back.

Comments are closed.

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!