Caller ID spoofing is the practice of causing the telephone network to display a number on the recipient’s caller ID display which is not that of the actual originating station; the term is commonly used to describe situations in which the motivation is considered vicious by the speaker. More info click here!
Just as e-mail spoofing can make it appear that a message came from any e-mail address the sender chooses, caller ID spoofing can make a call appear to have come from any phone number the caller wishes. Because of the high trust people have tended to have in the caller ID system, spoofing can call the system’s value into question. More info click here!
Technology
Caller ID is spoofed through a variety of methods and different technology. The most popular ways of spoofing Caller ID are through the use of Voice over IP or PRI lines.
Another method of spoofing is that of emulating the Bell 202 FSK signal. This method, informally called orange boxing, uses software that generates the audio signal which is then coupled to the telephone line during the call. The object is to deceive the called party into thinking that there is an incoming call waiting call from the spoofed number, when in fact there is no new incoming call. This technique often also involves an accomplice who may provide a secondary voice to complete the illusion of a call-waiting call. Because the orange box cannot truly spoof incoming caller ID prior to answer and relies to a certain extent on the guile of the caller, it is considered as much a social engineering technique as a technical hack. More info click here!
Other methods include: switch access to the Signaling System 7 network; and social-engineering telephone company operators, who place calls for you from the desired phone number. Another method that is not used as often is VXML, which was gaining popularity before VoIP took over.
In the past, caller ID spoofing required an advanced knowledge of telephony equipment that could be quite expensive. However, with open source software (such as Asterisk PBX and almost any VOIP company), one can spoof calls with minimal costs and effort. More info click here!
Law
On June 27, 2007, the United States Senate Committee on Commerce, Science and Transportation approved and submitted to the Senate calendar S.704, a bill that would make it a crime to spoof caller ID. Dubbed the “Truth in Caller ID Act of 2007″, the bill would outlaw causing “any caller identification service to transmit misleading or inaccurate caller identification information” via “any telecommunications service or IP-enabled voice service”.
Law enforcement is exempted from the rule. A similar bill, HR251, was introduced and passed in the House of Representatives. It had been referred to the same Senate committee that approved S.704. You should prevent and protect againtst fake caller id. More info click here!
