<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Having been at the receiving end of mad customers (not ours) and even having the LEOs show up at our front office asking us to stop our customer from spamming some poor entity/person (at one point an emergency center in another state, not 911 directly). I have seen two problems emerge.<BR>1. Numbers can be spoofed, there is nothing we can directly or quickly do about it.<BR>2. Law enforcement need training on how to properly address this problem, they are clueless.<BR> <BR>Dealing with 1, when we receive a call from an upset customer that one of our numbers is spamming them (as often as not they only found the 10k block not if we owned the 1k block) we check the problem and find it is actually not from our network (it has never been yet). I give them one of these lines every time:<BR>"What you are seeing is a call party number. This is the number being shown but not actually the number calling. Unfortunately we cannot help stop this because the call is not actually coming from our switch. You need to contact your phone provider and ask them to block the actual number that is calling. Provide them with your number, the number that called, and when they called. Ask them to find the "real" number and ask them to block it" <BR>alternatively if they only looked up the 10k block and we don't own that 1k block we tell them <BR>"We requested this block of numbers for our area and only kept 2000 (whatever value it really is) of those 10000 numbers. We do not own that block but here is the company that does. Please contact them and also contact your carrier as you are probably only seeing a call party number. Ask them to find the "real" number calling and block it, provide them with your number, the number that called, and when they called." <BR>These actually have a positive effect on the customer (we will never end up with their service as it always seems they are out of area, lol) and it gives them a new purpose and new tools to fight with. I also throw out there <a href="http://localcallingguide.com">http://localcallingguide.com</a>.<BR> <BR>Dealing with 2, whenever we deal with them we point them to <a href="http://localcallingguide.com">http://localcallingguide.com</a> and give them a similar rundown to how call party works as we do customers. We also explain to them how number blocks work (they are as bad about only finding the 10k blocks) and what portability with phone lines looks like. We tell them the best way to get results from a Telco is to provide the calling, called, and time. There is a limit to the amount of information we can give back out even to LEOs without a subpoena but if we can help mitigate a problem (assuming it is from our network) we will at least stop it.<BR>Other than our contact with the law enforcement we deal with we cant do much about their overall training.<BR> <BR>Community question: Would it be viable/worthwhile for law enforcement to have an agent in each department with access to tools (NPAC and others) to look up a number and contact the correct Telco? Is this something we even want?<BR> <BR>Brian<br> <BR><div><hr id="stopSpelling">Date: Tue, 17 Dec 2013 10:44:45 -0500<br>From: scott@sberkman.net<br>To: voiceops@voiceops.org<br>Subject: Re: [VoiceOps] Spoofed Traffic<br><br>
If there is money behind the effort, you might want to try reaching
out to a Internet Security consulting firm for a "vishing
takedown". They can help put pressure on the right carriers and
assist in working with local LEOs.<br>
<br>
<br>
<div class="ecxmoz-cite-prefix">On 12/11/2013 08:25 PM, Ryan Delgrosso
wrote:<br>
</div>
<blockquote cite="mid:52A910A4.70705@gmail.com">
LOL @ the FOIA request bit. <br>
<br>
Seriously he hit the nail on the head. Weve seen this before and
there is honestly little that can be done. <br>
<br>
<div class="ecxmoz-cite-prefix">On 12/11/2013 03:20 PM, Peter Beckman
wrote:<br>
</div>
<blockquote cite="mid:alpine.BSF.2.00.1312111814410.40807@nog.angryox.com">You tell the customer that there is nothing you can
do. There are so many <br>
resellers of resellers, spoofing CallerID is practically
brainless, and bad <br>
actors will complete millions of calls, maybe even billions,
using anyone's <br>
ANI they want. Best you can do is offer to block calls from
people who are <br>
being jerks complaining to your customer who didn't make the
calls. <br>
<br>
The phone system is decentralized, and while that is generally
great, it <br>
sucks for this. <br>
<br>
There is nothing that can be done that will be effective. You
can complain <br>
to lots of places, but unless the call is going through their
network, and <br>
how could you possibly know what network the call is going
through, they <br>
can't help. Even if it is, they might decide not to help. <br>
<br>
A non-profit independent organization would have to get all the
carriers <br>
involved to allow for tracking who sent what calls where and
when. And us <br>
little guys won't get access, so we'll have to cut a ticket to
our carrier <br>
to their carrier before we get a response a week later. <br>
<br>
Or you could ask for an FOIA request from the NSA. Pretty sure
they'd know. <br>
<br>
Beckman <br>
<br>
On Wed, 11 Dec 2013, Jared Geiger wrote: <br>
<br>
<blockquote>One of our customers is reporting that
their ANI is being used to make <br>
calls. I've verified that the traffic isn't traversing our
network, but I'm <br>
not sure of where to look next. <br>
<br>
The customer doesn't necessarily want to know who is making
the calls, but <br>
wants them to stop. I know I can contact Verizon, who owns the
number, but <br>
since the calls aren't being originated from us or our
customer, I'm not <br>
sure how they can help. <br>
<br>
Does anyone have ideas of how to go about blocking this since
we aren't the <br>
LEC owner of the DID? <br>
<br>
~Jared <br>
<br>
</blockquote>
<br>
---------------------------------------------------------------------------
<br>
Peter Beckman
Internet Guy <br>
<a class="ecxmoz-txt-link-abbreviated" href="mailto:beckman@angryox.com">beckman@angryox.com</a>
<a class="ecxmoz-txt-link-freetext" href="http://www.angryox.com/" target="_blank">http://www.angryox.com/</a> <br>
---------------------------------------------------------------------------<br>
<br>
<fieldset class="ecxmimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
VoiceOps mailing list
<a class="ecxmoz-txt-link-abbreviated" href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a>
<a class="ecxmoz-txt-link-freetext" href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a>
</pre>
<br>
<fieldset class="ecxmimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
VoiceOps mailing list
<a class="ecxmoz-txt-link-abbreviated" href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a>
<a class="ecxmoz-txt-link-freetext" href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="ecxmimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
VoiceOps mailing list
<a class="ecxmoz-txt-link-abbreviated" href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a>
<a class="ecxmoz-txt-link-freetext" href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a>
</pre>
</blockquote>
<br>
<br>_______________________________________________
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops</div> </div></body>
</html>