Hacker News Reader

I had this exact same scam a couple months ago! I never figured out how they spoof the courthouse’s number though — any idea how they do that?

View on HN

I don't know the technical details, but as I understand it with today's infrastructure "caller's phone number" might as well be a free field where you can enter anything you like. There is no authentication or verification going on there

same as email from header

The sibling comment is correct, but to be a little more specific, when a carrier transmits a call into the phone system, one of the metadata fields in that transaction is the Caller ID of the calling party. It may sound asinine, but the infrastructure we've built for the PSTN basically requires it.

If you're interested in what's being done about it and the history of how it got this way, the STIR/SHAKEN wiki article has good details: https://en.wikipedia.org/wiki/STIR/SHAKEN

Reply on news.ycombinator.com