The Federal Communications Commission yesterday took another step in its ongoing battle against illegal robocalls by moving to address the non-IP network loophole, which has allowed robocallers to bypass authentication tools that protect consumers.
Why it matters: Robocalls continue to burden consumers, draining millions from the economy annually due to fraud and wasted time. The STIR/SHAKEN framework, a key tool in verifying caller IDs, has been largely effective but doesn’t work when calls pass through non-IP networks. This gap has left consumers vulnerable to scams.
What’s new:
- Proposal: The FCC is proposing that voice service providers still using non-IP technology adopt non-IP caller ID authentication frameworks. These frameworks would ensure that calls retain their digital “fingerprints” for verification, even when passing through older networks.
- Timeline: Providers would have two years to comply if the proposal is finalized.
- Certification: Providers would be required to certify their compliance regularly.
What’s at stake:
- TRACED Act compliance: The TRACED Act, passed in 2019, directed the FCC to require STIR/SHAKEN for IP networks and a solution for non-IP networks. While most providers have adopted STIR/SHAKEN, non-IP networks remain a vulnerability.
- Impact on robocalls: The new rules aim to close the gap that robocallers exploit, offering a more comprehensive defense against fraudulent calls.
What they’re saying: “We applaud the FCC for voting unanimously to issue a proposal to tighten call authentication rules,” said Paul Benda, Executive Vice President, Risk, Fraud & Cybersecurity of the American Bankers Association. “The proposal requiring voice service providers that use a non-IP network to implement a caller ID authentication framework is a step that ABA has urged the Commission to take since 2022. Voice calls that impersonate banks and other legitimate businesses harm consumers and undermine those businesses’ ability to communicate with their customers. While the FCC has made strides to limit criminal access to the nation’s calling network, bad actors have exploited this gap in our caller ID authentication framework to commit consumer fraud.”
What’s next: Final rules: The FCC is seeking comment on the proposal, with a decision expected in the coming months. If adopted, it would require compliance within two years, marking a significant shift in how non-IP networks are regulated for call authentication.
