One of the scam methods The one that has expanded the most in recent times is identity theft. They call from a phone that we have saved, we answer and the voice on the other end is different. How is it possible? Caller ID Spoofing is one of the methods that from Android allows you to fake phone calls and can make you fall into a scam.
With the advancement of technology, Smartphones have become the favorite gateway for hackers. From a telephone with Internet it is possible to carry out almost any procedure, and that is why so many scams originate on mobile. If we also add to this the misuses of artificial intelligence, today the Smartphone can become a great threat if we do not use it with caution.
The phenomenon of Caller ID Spoofing
When protect you from fake calls and scams, Caller ID Spoofing can be a big threat. You must always be careful and distrustful, because even if the number calling is known, it could be an attempt at deception. The methods to scam mobile users are very varied.
Stories abound on social media, such as the example of a man who receives a call from the bank alerting that his bank account has been accessed. On the other side of the cell phone a person claims to be from the bank. He tells you that unusual activity was detected on the account and requests some validation data. If you fall into the trap, they will end up stealing your access data. Mostly they offer a solution by approaching the bank physically or resolving it over the phone. In these dizzying times, the idea that is most followed is to talk on the phone. If you fall into the trap, you will be serving your access data on a plate.
How to spoof a phone number?
Caller ID Spoofing is part of the typical attacks carried out by hackers. It falls into the category of identity theft actions, and is used to steal private data of different kinds. In the cases that spread the most through social networks, the key is to steal bank passwords, document numbers and the like.
La Caller ID Spoofing technique It is part of the illegal mobile routines and can be done by anyone with at least a little technical knowledge. It is important to understand that the telephone network, like the Internet, is based on the interconnection of operating networks. Although they are conceived as closed environments, there are more touchpoints and security gaps than anyone cares to admit. That's why the technique works.
Telephone operators exchange calls using the SS7 signaling system. When you dial a number, the originating exchange sends you an IAM message (Initial Address Message) and there is the important information: CPN (Calling Party Number). This number identifies the subscriber making a call through identification (Caller ID). By using the SS7 switches as a route, the connection travels between the exchanges to reach the destination mobile. In the middle of this path, the hacker hijacks the number and impersonates it to take money, information and other data from you.
VoIP telephony
With the arrival of this new communication technology, the SS7 protocol that was designed in the 70s began to suffer different attacks and demonstrate vulnerabilities. Currently, using communications switchboard software such as Asterisk (designed in open source) and with a SIP trunk service that does not restrict the identification of the Caller ID, it is very easy to manipulate the lines and generate spoofed calls on the Internet.
Security measures in Spain
In Spanish territory, the practice of spoofed calls is illegal. Originating operators are required to enter the Caller ID. Even if we have the anonymous calling option activated, the identification data is shared with the operator. It is strictly prohibited to change the number for another, and in this way, taking into account legality, scams are significantly reduced. It is not that they have stopped happening, but thanks to technological work and attention, cases have decreased.
Calls with different numbers
In some very specific cases, when we receive an Emergency call for example, the number is different from the original one. This is because they have special permits from the Ministry, and this way communication is safer and faster.
Spain has, in any case, some vulnerabilities. Telecommunications companies domiciled in Spain, they cannot alter the CLI. But if they open their doors to international traffic and regulation does not apply there. So, be careful of calls from certain strange numbers, because you may be being scammed by people located thousands of miles away.