История моделей
STIR/SHAKEN only works when the call originates on the public network. It fails miserably with international gateways and unregulated VoIP providers. Many spoofing apps route their traffic through countries with zero telecom oversight. By the time the call lands on your phone, the signature looks "unknown," but the spoofed number still passes through.
The answer is STIR/SHAKEN . In the United States and many other nations, regulators have mandated a framework to authenticate calls. When a call travels through carriers, it gets a digital signature. If the signature matches the number, the call is "attested."
Until carriers implement universal, cryptographically secure identity for every call—and until governments aggressively prosecute the developers of these apps for "computer fraud" rather than just the users—the mask will remain available.
Furthermore, the app stores themselves are complicit. Search for "spoof caller ID" on the Google Play Store. You will find dozens of apps that claim they are for "business privacy" or "dating safety." They bury the spoofing feature in a subscription menu. They are not stupid; they know the technology is dangerous. They are betting on plausible deniability. We tend to focus on the direct financial loss of spoofing scams (which the FTC estimates in the billions annually). But there is a deeper, more insidious cost: The erosion of epistemic trust.
The next time your phone rings and displays a familiar number, pause. Trust your instincts, not the screen. The screen has been lying to you for a very long time.
Law enforcement impersonation. The victim receives a call from what looks like the local police department's main number. The "officer" says a warrant has been issued, but a fine can be paid via gift cards. This is the most common gateway to financial ruin.