Phishing phone call spoofing local numbers

[Ditto]

Yesterday morning I received 2 clearly phishing phone calls reporting suspicious activity on a bank account. It's clearly dodgy as it is both pre-recorded and doesn't name a bank or card but invites press 1 or 2 for 'cancel' or 'speak to someone' . What is something new for me, is that the first number is reported as a local one, down to the village level, ignoring portability. The second is also local at the STD level. I'm sure this is number spoofing, but to note 1471 returns the same. We are on a digital line (Fully BT Gigabit). Is this something anyone else has had and is there any way to defend against it - might have to implement that system where someone has to announce who they are in advance.

I'm interested to know if digital lines are more hackable that the old analogue lines - I guess so!

[andy_b]

Had it in the past where they spoofed numbers eerily close to the number they were calling - like one or two digits away.

[Garacesh]

Scam calls have been spoofing your number but changing the last digits for quite some time now, I've had them years ago. It's presumably so that you get the same area codes and it looks like a local call. For a start, it probably has a higher success rate of getting people to actually answer the phone, and second, it avoids automated number checking software like Hiya et al.

[SchoolsBroadband]

It's incredibly easy to spoof your number via some SIP trunk providers. Yes its against the law to do so and the carriers should ensure that any customer has signed an agreement saying they won't do it but fraudulent companies sign up, spoof loads of calls then don't pay their bills and do a runner.

 

Dave

[mavhc]

Are there any plans to introduce authentication into the system in the uk?

[SchoolsBroadband]

Are there any plans to introduce authentication into the system in the uk?

 

not to my knowledge no...

[mavhc]

There's this for SMS https://eandt.theiet.org/content/articles/2021/09/smishing-and-spoofing-targeted-for-eradication-by-sms-protection-registry/

 

2021 from Ofcom:

n the USA, where more calls are carried over VoIP networks, the Federal Communications Commission (FCC) has mandated that phone companies introduce caller authentication by 30 June2021, using a particular technical standard called STIR/SHAKEN. The implementation of CLI authentication in the UK using this approach will take more time as it is only effective when voice services are migrated to IP, which is due to be completed in the UK by the mid-2020s. We are working with industry to explore whether some aspects of CLI authentication could be introduced sooner

 

https://www.ofcom.org.uk/__data/assets/pdf_file/0025/216439/nuisance-calls-joint-action-plan-2021.pdf

 

However https://commsrisk.com/uk-regulator-delays-stir-shaken-decision-pretends-to-launch-an-anti-scam-crackdown/

[6Foot2]

5Foot2 was just called by "Help for Heroes" (it wasn't them) asking for money.

 

She gave them "what for" and hung up.