Hacker News Reader

Step 1 - ignore the callerID and engage with scammer to get their real number. Because us carriers can't be bothered to tell you where a call is actually coming from.

View on HN

In 2023, if you're using a major commercial provider, and the caller ID is a US-originating number you're more likely to see accurate Caller ID than not. STIR/SHAKEN has been widely adopted, and networks now have permission to drop calls providing inaccurate digital signature.

Even as of last year caller ID accuracy was bad.

It is still ridiculously easy to spoof a number. I'm on Verizon with the enhanced caller ID, and it happens consistently on a weekly basis.

That's an issue with Verizon then. They should be able to see that the number is spoofed, as it will have a lower/lack of attestation from the originating carrier.

Stir shaken doesn't prevent spoofing but it lets terminating carriers validate that the number is legit before sending the call to their customer.

My old team implemented stir shaken for one of the large voip carriers.

Reply on news.ycombinator.com