Battling the Robocall Epidemic: Is STIR/SHAKEN the Answer We’ve Been Waiting For?

Zakwan Jaroucheh
LastingAsset
Published in
2 min readNov 2, 2023
(Spiderstock / Getty Images)

In an era where our smartphones are an extension of our hands, the inundation of robocalls, spam, and scam calls feels like a betrayal of our trust in technology. It’s a scenario we know all too well: the incessant ringing from numbers promising too-good-to-be-true offers or masquerading as legitimate institutions. But before you consider disconnecting from the digital world, let me introduce you to a solution that may turn the tide in this telecommunication war: STIR/SHAKEN.

The Inner Workings of STIR/SHAKEN

STIR/SHAKEN is more than just a government-endorsed initiative; it’s a technological fortress designed to restore faith in our caller IDs. Imagine a club with a guest list; STIR/SHAKEN is the bouncer verifying credentials. STIR “signs” the call with a digital signature, while SHAKEN checks it against a database of trusted identities. This check can lead to one of three attestation levels:

  1. Full Attestation: A verified identity and right to use the number.
  2. Partial Attestation: Verified call origin, but uncertain if the caller is authorized to use the number.
  3. Gateway Attestation: Verified call origin location but ambiguous regarding the original source.

The Real-World Challenges

Yet, a critical eye reveals a few chinks in this digital armor. STIR/SHAKEN operates predominantly within IP networks, leaving calls from non-IP networks vulnerable. Also, while international cooperation is necessary to tackle global phone number spoofing, STIR/SHAKEN’s reach is currently limited to North America.

The Inherent Limitations

  • International Call Dilemma: International numbers can bypass STIR/SHAKEN’s guard.
  • The Double-Edged Sword of Authentication: Legitimate calls might be flagged incorrectly, while some spoofed calls might pass through.
  • Not a Cure-All Solution: It’s ineffective against other forms of telephone scams that don’t rely on caller ID spoofing.
  • Privacy Paradox: The sharing of call details necessary for STIR/SHAKEN can raise privacy concerns.
  • Overhead and Complexity: The framework introduces complexities and costs into the telecom infrastructure.
  • The Deepfake Threat: The emerging deepfake technology could outmaneuver STIR/SHAKEN by cloning voices convincingly.

Despite these limitations, STIR/SHAKEN shines as a pioneering step in the right direction. However, it’s clear that this isn’t the be-all and end-all solution.

Enter LastingAsset

This is where LastingAsset comes in, fortifying the groundwork laid by STIR/SHAKEN. LastingAsset ensures that calls originating from your business are authenticated, and any that aren’t, are flagged. This proactive stance safeguards your brand’s reputation and maintains customer trust.

To experience the impact of LastingAsset on your business communications, reach out at hello@lastingasset.com. Together, let’s usher in an era of secure, trustworthy customer interactions.

--

--

Zakwan Jaroucheh
LastingAsset

Associate Professor. PhD in Software Engineering. Entrepreneur, Co-Founder of LastingAsset. Crypto, AI, & Blockchain enthusiast.