MIT Technology Review Subscribe

The Do-Not-Call List Has a Gaping Hole

Illegal robocalls that try to scam you out of money are flourishing. Can the phone companies figure out how to stop them?

The “Do Not Call” list isn’t working anymore.

Sure, legitimate telemarketers will refrain from calling you if you’ve put your phone number on it. But criminal telephone spammers will call you anyway because it’s become so easy for them to evade U.S. law enforcement.

Advertisement

Now the Federal Communications Commission is hoping phone companies can fix the problem. “The bad guys are beating the good guys with technology right now,” FCC Commissioner Tom Wheeler said last month at the initial meeting of an industry-led team his agency has assembled to help beat back the robocall “scourge.”

This story is only available to subscribers.

Don’t settle for half the story.
Get paywall-free access to technology news for the here and now.

Subscribe now Already a subscriber? Sign in
You’ve read all your free stories.

MIT Technology Review provides an intelligent and independent filter for the flood of information about technology.

Subscribe now Already a subscriber? Sign in
Illustrations by Nicholas Little

Unwanted calls are the top source of consumer complaints to the FCC, with the agency fielding more than 200,000 a year, according to Wheeler. In one common illegal robocall, “Rachel from card services”—just an automated voice—says you qualify for a new credit card in an attempt to get financial information out of you. In one common extortion scheme, a voice claims to be from the Internal Revenue Service.

These calls are easy for scammers to make thanks to inexpensive automatic dialing machines and spoofing tools that hide the source of the call from your phone company and make your phone’s caller ID display a bogus number.

The charge of the “Robocall Strike Force,” which is headed by AT&T CEO Randall Stephenson and includes representatives from more than 30 technology companies, is to develop “comprehensive solutions to prevent, detect, and filter unwanted robocalls.” The group has until October 19 to submit a plan to the FCC.

We already have some tools for blocking and preventing unwanted calls. In addition to the National Do Not Call Registry (which is run by the Federal Trade Commission) there are smartphone apps that can block known spammers or send their calls straight to voice mail. If you have certain landline and mobile services, you can use a product called Nomorobo, which screens incoming numbers against a database of known spam callers.

But spammers can easily get around these defenses by spoofing other numbers, using standard software on voice-over-Internet phone systems, says Henning Schulzrinne, a professor of computer science and electrical engineering at Columbia University, who served as the chief technology officer for the FCC from 2011 to 2014 and will return to that role next year. Spoofing not only gives phony information to you, but also to the telephone service providers, who currently have no way of determining the actual source either. Complicating things further is that many spammers call from other countries, out of the reach of U.S. law enforcement.

That’s why the Internet Engineering Task Force, a group of engineers that develop and upgrade open-source technical standards for the Internet, is working with communications companies on a new way to verify the source of voice-over-Internet calls. The service provider originating the call would add a cryptographic signature to indicate that the caller is legitimately using the number. Separate carriers along the way could then validate the signature and catch spoofed numbers.

How aggressively will telecom companies work on this? Many carriers have little incentive to participate in anti-spam efforts because they profit from increasing traffic of any kind on their networks, says Gail-Joon Ahn, director of Arizona State University’s Laboratory for Security Engineering for Future Computing. But that could change, Schulzrinne says, as the number of customer complaints about robocalls keeps rising.

Advertisement
This is your last free story.
Sign in Subscribe now

Your daily newsletter about what’s up in emerging technology from MIT Technology Review.

Please, enter a valid email.
Privacy Policy
Submitting...
There was an error submitting the request.
Thanks for signing up!

Our most popular stories

Advertisement