this post was submitted on 15 Nov 2024
295 points (98.4% liked)

Technology

59373 readers
3169 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] coolmojo@lemmy.world 9 points 21 hours ago (3 children)

The scammers can spoof any number, including one of your contacts.

[–] IphtashuFitz@lemmy.world 2 points 3 hours ago (1 children)

There are actually tools that can unmask spoofed calls and show the true number that a call originates from. I’ve never used them personally, but I worked in computer telephony years ago so I have an understanding of how these tools work.

Caller ID was created so that a company like a bank that might have 100 or more telephone lines could program them so they always show up as “1-555-ACME-BANK” if they wanted to. So it’s trivial to set Caller ID to whatever you want.

But there’s another identification baked into calls that goes way back to the days when long distance calls were expensive and charged by the minute. The telephone companies needed to ensure the calling number was passed along from one phone carrier to another for billing purposes, and since it involved collecting money you can be sure it was accurate and unchangeable. This is called Automatic Number Identification (ANI).

Typically ANI is only passed between phone companies, or over high capacity phone circuits like T-1 lines, so it’s not sent to the person receiving the call. But there’s a feature available to most mobile phone plans that, combined with ANI, can provide for a way to do just that.

Depending on your mobile provider there’s likely a way to forward calls you explicitly ignore to another number. This only happens when you click to ignore/disconnect the call, and not let it time out and go to voicemail. When you sign up with one of these unmasking services then you set up your phone to forward these calls to their service. Then, if you get a spoofed call or even one where the caller id says unknown or unavailable, you click to ignore it. The call gets rerouted to the unmasking service, which has access to the ANI data. It reads the ANI number, replaces the Caller ID data with the ANI, then immediately routes the call back to you again. This time it will show you the number the call originated from and would be billed to.

[–] coolmojo@lemmy.world 2 points 1 hour ago

Thank you. I did not know this.

[–] VintageGenious@sh.itjust.works 8 points 19 hours ago (1 children)
[–] coolmojo@lemmy.world 7 points 19 hours ago (3 children)

The scammers are usually are sitting in a call center (in Asia usually.) However if they would call from that number people won’t pick it up or would not believe that it is Amazon, Microsoft or your bank. This is the reason they are pretending to be calling from an another (local) number. They can do this using a loophole in the roaming system. So this why you can receive calls pretending by to be your contact’s number or even from your own number. This is why just blocking those numbers is not that effective. Also if you call the number back, it is not the scammer, just a normal person or business with that number. Hope this explains it.

[–] FooBarrington@lemmy.world 1 points 5 hours ago (1 children)

And how does a scammer get my contacts?

[–] coolmojo@lemmy.world 1 points 1 hour ago

If you are targeted they can get the number of your contacts by using OSI or other methods. But in most cases it is just a coincidence that it looks like that that someone you know is calling. All that said, if the call is coming from your contact named uncle Joe and some guy with a strange accent saying they are calling from Microsoft, you will know it is a scam.

[–] Mucki@feddit.org 4 points 11 hours ago (1 children)

An explanation without an explanation.

[–] coolmojo@lemmy.world 1 points 5 hours ago

If you want more details, let me refer to you to the Wikipedia article

[–] zerozaku@lemmy.world 1 points 12 hours ago (1 children)

They call me from my own number? How does that work out?

[–] coolmojo@lemmy.world 1 points 5 hours ago

They are not actually calling from your number. They just spoofing the caller ID. More on this in the Wikipedia article

[–] ClemaX@lemm.ee 3 points 20 hours ago

Ah least they would need to know it first.