As a service provider, remain in compliance with STIR/SHAKEN by vetting and validating the authenticity of originating traffic on your network
enterprise call authentication
Vetting, Verifying, and Delivering STIR/SHAKEN Calls
Service providers have the responsibility to vet and validate the authenticity of the callers originating traffic on their networks, and attest to the authorized usage of the phone numbers to be displayed.
Now that the June 30th deadline has passed, the industry is now in the execution phase of STIR/SHAKEN deployment and Robocall Mitigation Plan fulfillment.
If you are a service provider who is currently signing enterprise calls with B or C-Level looking for a solution to elevate these calls to A-Level, a KYC process has to be implemented to authenticate each intermediary along the call chain down to the calling party brand in order to fulfill the due diligence requirements as set forth by the FCC. Implementation of a KYC-based local policy solution, such as the Aegis Mobile + Numeracle solution, supports service and platform provider’s ability to assess the level of attestation achievable based on the availability of information to vet and verify down to the enterprise or calling party brand, with confidence.
Step 1
Verified Identity™
The process begins with Numeracle's Verified Identity™ entity vetting and verification process. This is a compliance-based due diligence solution to validate call intent, and consent-based competence in compliant calling.
This is the first step in voluntarily disclosing to the network that you are not a bad actor.
Next, Numeracle validates the relationship between your Verified Identity and your authorized phone numbers via our Entity Identity Management platform.
We then confirm your relationship to any vendor partners (BPOs, technology platform providers, etc.) and add rich call data (RCD) for branded call identification.
With your Verified Identity successfully associated with your phone numbers and RCD (rich call data), Numeracle then passes this information to your originating service provider or other authority for call signing, such as NetNumber’s Guaranteed Caller Enterprise STIR/SHAKEN Solution.
To complete the process, the call is assigned a level of attestation relational to the level of validation completed. The call is passed to the terminating service provider.
The result is a call delivered as STIR/SHAKEN authenticated, displayed with a verified caller display and optional RCD information available.
Calls meet the STIR/SHAKEN criteria to be delivered as verified calls with optional RCD (rich call data) info to show branded information such as calling party name and company logo.
stand apart
Legitimate enterprises will stand out from the bad actors traversing the network by meeting the KYC 'know your customer' requirements outlined within the TRACED Act.
'Easy button'
Utilizing Numeracle and Aegis Mobile's local policy vetting and validation solution provides a streamlined, compliance-based pathway for enterprise callers to participate in the STIR/SHAKEN trust network.
STIR/SHAKEN, here we come
Ready to start the process of ensuring your legitimate business calls meet the requirements to achieve the 'Verified' call display via STIR/SHAKEN?
Aegis has been a trusted channel "verification" partner for wireless carriers, aggregators, and enterprise businesses, providing vetting and compliance services that ensure the safe and beneficial growth of the digital content market for mobile consumers. To fulfill the rigorous requirements of the service provider to verify the source of traffic delivered across the public switched telephone network, Aegis’s extensive identity verification and authentication services have been integrated into Numeracle’s Verified Identity solution to create a dually authenticated risk assessment tool.
Numeracle’s Entity Identity Management™ platform enables service and technology platform providers, BPO organizations, and contact centers to manage brand identity and phone number usage on behalf of enterprise clients for business communications. This KYC-based platform supports service providers’ ability to implement local policies to attest to the legitimacy of phone number usage per the SHAKEN Standard. In alignment with the FCC’s continued focus on combatting illegally spoofed calls, this solution enables communications providers to verify a business’s identity and legal operational status.
My carrier completed STIR/SHAKEN, so why are my calls still being labeled?
External to the STIR/SHAKEN call authentication framework are 3rd party algorithms deployed at the wireless carrier level which are known as call reputation analytics. These analytics have been deployed across mobile networks since late 2017 and are responsible for calls labeled as “Potential Spam,” “Spam,” “Scam,” “Scam Likely,” “Fraud Alert,” etc.
These technologies will continue to be deployed in parallel with STIR/SHAKEN, so if you’re hearing reports from your agents that your calls are ringing through as a “Spam” or equivalent, this is due to reputational analytics, not STIR/SHAKEN.
Numeracle can help clean up your number reputation and addressing phone numbers labeled as 'Scam' or 'Spam'.
Will STIR/SHAKEN stop all robocalls?
While STIR/SHAKEN will help identify harmful robocalls, it will not completely eliminate all illegal robocalls for good. It's important to note that not all robocalls are bad. Many legitimate companies communicate all sorts of information via 'robocalls’ especially automated communications such as appointment reminders, delivery notifications, school closures, etc. While the STIR/SHAKEN framework allows authentication of call originators and their numbers, it is not a silver bullet solution and it cannot determine the illegitimacy or legitimacy of the intent of an incoming call. It can validate that an incoming call is originating from a real phone number, which is not being 'made up' or stolen from a legitimate business, organization, or consumer. The STIR/SHAKEN framework does not have the ability to weigh in on whether or not the content of the call itself is potentially malicious or unwanted, making call blocking and labeling analytics are still relevant despite the framework.
Will Numeracle's Platform take care of STIR/SHAKEN for me?
While the Platform itself does not ‘attest’ or ‘sign’ calls, it can be used by service and platform providers to implement a local policy solution to manage the verification of calling identity and the authorization of phone numbers in order to elevate an enterprise brand into the STIR/SHAKEN framework.
What do "calls with a checkmark have been verified by carrier" mean?
Calls that display a checkmark at the time of call or in the call history log represent the establishment of the caller as a legal and verified calling party confirmed via STIR/SHAKEN. The identity of the caller has been vetted and validated and you can trust that the caller is who they say they are, and that the call has not been spoofed by a bad actor.
Is there a way to test? How is it working so far?
Numeracle has a client currently using a wide provider that has implemented the BASE STIR/SHAKEN and we had them call our number to see how those calls were displayed, keeping in mind that our number is on one of the three major carriers. What we found was the calls came through as we would make any other calls without attestation. It also depends on the terminating service provider and how they’re accepting certificates. Call validation treatment and analytics will continue to play a role in the solution and they are still on the network. How the actual call gets displayed on the device is based on how the CVT is done by the terminating service provider. Attested calls currently do not show an attestation level, but we expect this will change over a period of time as more begin to implement the standards.
How does Numeracle price their services?
Pricing for Identify Verification and Number Reputation starts with us gaining an understanding into your calling structure. How many entities/brands do you represent, how many numbers do you use, etc.
STIR (Secure Telephone Identity Revisited) / SHAKEN (Signature-based Handling of Asserted information using toKENs) is a framework designed to assign a certificate of authenticity to each phone call for use across the telecom network. These certificates act as a digital signature of trust passed from carrier to carrier to improve traceable call delivery.
STIR/SHAKEN is a requirement of the TRACED Act, and the FCC has also mandated that both originating and terminating voice service providers were to implement the STIR/SHAKEN caller ID authentication framework by June 30, 2021.
The execution of STIR/SHAKEN deployment requires that the relationship between the identity of the caller and the authorized use of its phone numbers be verified in order to pass STIR/SHAKEN authentication and achieve the "Verified Caller" display. If a service provider hasn't filed its certified Robocall Mitigation Plan with the FCC, its call may be blocked based on the upcoming September deadline.