Slashdot Mirror


Robocalling Scourge May Not Be Unstoppable After All (arstechnica.com)

Dan Goodin, writing for Ars Technica: New data shows that the majority of robot-enabled scam phone calls came from fewer than 40 call centers, a finding that offers hope the growing menace of robocalls can be stopped. The calls use computers and the Internet to dial thousands of phone numbers every minute and promote fraudulent schemes that promise to lower credit card interest rates, offer loans, and sell home security products, to name just a few of the scams. Over the past decade, robocall complaints have mushroomed, with the Federal Trade Commission often receiving hundreds of thousands of complaints each month. In 2013, the consumer watchdog agency awarded $50,000 to three groups who devised blocking systems that had the potential to help end the scourge. Three years later, however, the robocall problem seems as intractable as ever. On Thursday at the Black Hat security conference in Las Vegas, a researcher said that slightly more than half of more than 1 million robocalls tracked were sent by just 38 telephony infrastructures. The relatively small number of actors offers hope that the phenomenon can be rooted out, by either automatically blocking the call centers or finding ways for law enforcement groups to identify and prosecute the operators. "We know that the majority of robocalls only come from 38 different infrastructures," Aude Marzuoli, research scientist at a company called Pindrop Labs, told Ars. "It's not as if there are thousands of people out there doing this. If you can catch this small number of bad actors we can" stop the problem."

13 of 236 comments (clear)

  1. We should call everyone by jfdavis668 · · Score: 3, Funny

    and let them know.

  2. Low cost by wbr1 · · Score: 3, Insightful

    The cost of setting up a line and the equipment is extremely low now. I think that more will mushroom up when others are culled. Hail hydra.

    --
    Silence is a state of mime.
  3. Re:Would love to see something done by lawaetf1 · · Score: 4, Interesting

    Several calls a week? I'm envious. I get a minimum of several a day.
     
    You know, murder is a crime because you rob someone of the remaining time they might have had on this planet. Robo callers steal the equivalent of lifetimes every single day and our useless FTC seems utterly incapable of doing a damned thing about it.

    --
    CommentBot 0.7a running with args "-module irritate,disagree -target random"
  4. Of course it's not unstoppable by Theaetetus · · Score: 5, Insightful
    Sure, they use caller ID spoofing so that we, the recipients, can't block the number, but you know who knows exactly who the spammers are? The phone company, for two reasons: first, they're routing the calls from end to end, so they know the real source rather than the spoofed one. Second, and more importantly, they're billing them for the calls. They're not sending out bills for thousands of calls to the spoofed IDs, but the real ones. And while individually, those calls are cheap, the tens of thousands a day add up and the phone company makes a lot of money from the spammers, all while telling the FCC and consumers that their hands are tied.

    Freeze their assets until they release the billing information to the state AGs. That'll untie their hands really quick.

    1. Re:Of course it's not unstoppable by 110010001000 · · Score: 4, Insightful

      It isn't hard at all. You are missing the point. These voip calls aren't free. They are paying someone to make them, they are being billed by the phone companies. The phone companies know exactly who these people are.

    2. Re:Of course it's not unstoppable by Anonymous Coward · · Score: 3, Informative

      No. They're not "routing the calls from end to end".

      They get a call from a 3rd party, the call has ID in it, but they only deal with that 3rd party they don't know or care who actually has the phone initiating the call. The rules for how that works are set by the International Telecommunication Union or ITU which governs how telephone networks connect between countries.

      Like the Universal Postal Union, and like the IANA, this can only work if everybody agrees. But if you don't agree, you have to be cut off completely. If people start making up their own rules the network fragments and everybody loses.

      So, what happens out on the Internet so we don't get spoofed? Well, two things

      1. In theory we refuse sources that shouldn't be possible. If a Comcast system in Texas claims to be Zimbabwe, that's probably bullshit, let's ignore it. But in practice a mixture of incompetence and malice means this doesn't work very well so

      2. We don't trust the alleged "source" of anything without proof. That's why you're visiting Slashdot over HTTPS right now, if you use HTTP you will get spoofed, and everybody knows that, so we stopped using protocols that can't defend themselves.

  5. Re:Would love to see something done by Jason+Levine · · Score: 3, Informative

    Our main "Home Phone Number" is a Google Voice line. One of the nice features they have is "spam filtering" for phone calls. If a person calls us and it's a robocall/scammer, we can block the number. Then, when they call again, they get a "this number has been disconnected" message. If enough people do this, calls from that number automatically are blocked. Often, Google Voice will alert us that we missed a call when our phones didn't ring. When we look into the number, it's invariably a scammer trying to get through.

    --
    My sci-fi novel, Ghost Thief, is now available from Amazon.com.
  6. Re:Would love to see something done by Scoth · · Score: 3, Informative

    It comes and goes in cycles. For awhile I was getting several a day from the same company shilling security systems. I finally got them to stop when I worked my way through their system getting farther and farther along each call until I managed to get a tech dispatched to an abandoned house not far from me. They stopped calling at that point.

    Depending on what I was doing at the time, I also enjoyed just letting them ramble on for awhile about their spiel, then give them an address in Canada or Australia or something. Really pissed them off.

    Nowadays they're almost all initially handled by an automated speech thing (albeit some are scary good) so it's harder to have fun with them.

  7. Cut'em off at the root. by TheHawke · · Score: 3, Insightful

    The FCC and FTC need to be going after the telecoms selling the phone numbers and trunks to them instead. I know CenturyLink is infamous for that, leasing numbers and trunks to them up in Portland with little or no regard for national security or respect for the law. Only then being an accessory to the crime by shielding their identity information from the law.

    Yeah, the ILEC's and CLEC's need to be held accountable for that.

    --
    First rule of holes; When in one, stop digging.
  8. The common carriers by siamesevodka · · Score: 5, Insightful

    The NSA can tap every phone in the country, but they can't find Rachel from cardholder services. The sad truth is these creatures prey on the elderly, and people who may not have the sophistication to deal with these solicitors. So it is far from harmless or victimless, and sometimes with little recourse. Now that may sound like small potatoes. But thousands of calls are placed, and they only have to be right a small percentage of this to make money and to ruin lives. The common carriers like them because of the revenue stream. I'm sure they have the capability to stop them, but that is not in there best interest to do so as they are making money as well. The FTC provides lip service they are out to get them, but I'm sure the lobbying efforts keep them from doing anything. So you can bet the carriers and the telemarketing industry are lobbying hard to keep the status quo. I think to myself that I'm to smart to fall for these scams, but now that I'm older I keep thinking someday I might not have as good of faculties and fall for something that could wipe me out financially. It does happen.

  9. Re: Drones. by NoNonAlphaCharsHere · · Score: 3, Insightful

    I say we dust off and nuke the site from orbit. It's the only way to be sure.

  10. Re:Why? by Grishnakh · · Score: 3, Funny

    2) All the directors of the cold calling firm are imprisoned for 3 years and finned $1,000,000 each
    3) All the directors of the origitaing company (ie those who instructed the cold calling company) are imprisoned for 5 years and finned $1,000,000 each

    This stuff won't work. The beings who are doing all this stuff are humans, not sharks. Humans don't have any fins, so finning them doesn't even make sense. Finning a shark is indeed a horrible and painful way to kill it, but since humans don't have any fins, what you propose is completely nonsensical.

    Disemboweling, however, does seem like an appropriate punishment for these people. I also like that one where they tie someone's limbs up to four horses and then make the horses pull them apart.

  11. Re:Would love to see something done by Albanach · · Score: 4, Interesting

    I still believe that regulators should require that, if a caller ID is to be presented, it should be traceable to an individual in the originating country (with the carrier responsible if it's not). A carrier should be able to warrant this to its interconnects - if it can't, that carrier's calls will all be presented with no caller ID.

    Customers can then reject calls without caller ID or from other countries if necessary.,Where caller ID is presented it is then traceable to a person, enabling existing state rules about such calls to be enforced.

    There is no good reason that I should be able to buy a VOIP account for a couple of dollars a month and spoof any caller ID.