Finland's "Scam call and payment fraud prevention" has won 2025 European Crime Prevention Award:

https://www.eucpn.org/document/finland-scam-call-and-payment-fraud-prevention

While this scheme works it naturally hasn't prevented call-based fraud fully. However, at least the scammers can't easily call from outside of the country with forged #callerid

#fraudprevention #scamprevention #calleridspoofing

Finland: Scam call and payment fraud prevention | EUCPN

The intervention is based on the principles of situational crime prevention, aiming to reduce opportunities for crime through technological measures before offences occur.

📞 Caller-ID spoofing is rising fast!
Fraudsters now impersonate trusted sources to steal data.
Stronger KYC & authentication are the key to staying safe.

#CyberSecurity #TelecomFraud #CallerIDSpoofing #InfosecK2K #NetworkSecurity #DataProtection

📞 Caller ID spoofing is now industrialized.
Europol urges a unified European framework to stop “spoofing-as-a-service” kits enabling large-scale impersonation scams.

Losses exceed €850M annually, with law enforcement calling for cross-border cooperation and technical standards to trace calls.
Can telecoms realistically close this gap - or do we need new protocols at the network level?

💬 Share your take & follow @technadu for more global cyber policy coverage.

#CyberSecurity #Europol #CallerIDSpoofing #TelecomSecurity #ThreatIntelligence #NetworkDefense #CyberPolicy #InfoSec

Today's #TechIsShitDispatch is about telephone scammers and the shitty tech that enables them.
I have an eldery relative whom I help pretty extensively with managing his medical care and his everyday life. I currently have his home phone forwarding to mine while he's in rehab.
In the past 24 hours I have received no less than *** 17 *** scam/spam calls to that phone number. That's a typical, not at all unusual volume for these calls.
#telephony #infosec #CallerIDSpoofing #Vonage
🧵1/7

The last time I saw headlines fill with news of somebody trying to kill a current, former or would-be president was 1981. I would have liked to see that streak continue instead of ending Saturday with the attempted assassination of Donald Trump at his rally in Pennsylvania and the murder of attendee Corey Comperatore. The U.S. has all sorts of problems–some the fault of Trump and his ilk–but gunning down politicians will not solve them and will spawn more horrible problems.

7/9/2024: Inside Uber’s new plan to route around traffic at the Paris Olympics, Fast Company

My first reaction to Uber pitching me on news that it was adding crash and traffic reporting to its driver app was surprise that they didn’t already offer that feature. My subsequent conversation with an Uber executive about the company’s plans to scale up for the Paris Olympics revealed some other changes it’s been making to improve the pickup experience–and one possible improvement that is not on its road map.

7/11/2024: Mint Mobile Adds Free Roaming in Canada to All Plans, PCMag

I was going to invoke poutine in the lede of this post, but after seeing the advance copy of the press release that T-Mobile PR provided me lean on that Canadian culinary trope, I went with Canadian city scenery instead.

7/12/2024: Exploring L.A. in a Waymo Robotaxi: Peaceful, Cautious, Sometimes Tardy, PCMag

I didn’t file this story right after getting back from Southern California because I needed to get some details confirmed by Waymo before I could write the post. And then I missed one detail anyway, whether Waymo has the equivalent of Uber’s surge pricing. I was enlightened about that error by a comment in a discussion of the story on Reddit’s r/waymo subreddit that I had joined to invite feedback on the piece, after which I corrected that line. Afterwards, I posted extra photos of my Waymo rides to a Flickr album.

7/12/2024: AT&T Data Breach Fallout: Watch Out for Targeted Texts, Spoofed Calls, PCMag

After seeing the news of the theft of calling and texting records of AT&T wireless customers, I immediately thought of how much the National Security Agency values that kind of metadata, then thought about how it could be abused by scammers once it inevitably goes on sale. Unless that somehow doesn’t happen: Sunday afternoon, Kim Zetter reported for Wired that AT&T paid a little over $374,000 in Bitcoin to a member of the hacking team to delete the data and provide video confirmation of the deletion.

https://robpegoraro.com/2024/07/14/weekly-output-uber-in-paris-mint-mobile-in-canada-waymo-in-l-a-fallout-of-att-data-breach/

#ATTDataBreach #autonomousVehicles #CallerIDSpoofing #CanadaRoaming #internationalRoaming #JaguarIPace #LosAngeles #MintMobile #ParisOlympics #selfDrivingCars #socialEngineering #Uber #Waymo

Reagan Wounded in Chest by Gunman; Outlook ’Good’ After 2-Hour Surgery; Aide and 2 Guards Shot; Suspect Held

President Reagan was shot in the chest today by a gunman, apparently acting alone, as Mr. Reagan walked to his limousine after addressing a labor meeting at the Washington Hilton Hotel. The White House press secretary and two law-enforcement officers were also wounded by a burst of shots.

The New York Times

As I understand it there were quite some challenges in implementing this #calleridspoofing blocking. My understanding is that the global telephony system is an ancient #hack which can’t really be changed quickly or easily. Any solution that would require major changes or replacing hardware or software globally is unlikely to get much traction. So any relatively quick and robust solution to this problem has to be a local one, and cannot trust any outside co-operation. A major problem is also that the spoofing capabilities have legitimate use cases, which you don’t want to nuke in the process of implementing the spoofing protection.

In Finland, the telcos and #Traficom worked together: Number of different technical solutions were proposed, tested and the best solution(s) were selected, and eventually implemented. I’m sure that something like this has also been done elsewhere, too, or there are ongoing plans to implement something similar.

There are limitations to the solution too: It does not protect spoofing foreign numbers, nor does it protect attacks towards foreign users who are roaming in Finnish networks. It doesn’t not prevent abuse via hacking the #SS7 system itself. It does however block one major attack vector that has been exploited by international fraudsters.

In technical terms this #calleridspoofing blocking is allowlisting - rather than trying to block evil calls, only good ones are let through. As is well understood this is the more robust way to filter things. Doing blocklisting would only result be a game of whac-a-mole with the block lists always trying to catch up.
Finland has effectively stopped #calleridspoofing from faked Finnish phone numbers - "According to FICORA Regulation 28, the telecommunications operator of the call originating network must ensure that the calling party number it transfers in call origination and, in case of a forwarded (redirected) call, the forwarding number is valid and unambiguous." https://www.kyberturvallisuuskeskus.fi/sites/default/files/media/regulation/EN%20Recommendation%20to%20Telecommunications%20Operators%20on%20Detecting%20and%20Preventing%20Caller%20ID%20Spoofing.pdf #infosec #telcos

Neue Regeln: Mehr Schutz vor Spam-Calls, mehr "unbekannte Anrufer"

Am 1. Dezember treten neue Regeln aus der TKG-Reform in Kraft. Netzbetreiber müssen falsche deutsche Rufnummern blocken. Dabei wird Roaming zum Problem.

https://www.heise.de/news/Neue-Regeln-Mehr-Schutz-vor-Spam-Calls-mehr-unbekannte-Anrufer-7362394.html?wt_mc=sm.red.ho.mastodon.mastodon.-.-

#Bundesnetzagentur #Bundesregierung #CallerIDSpoofing #Cybercrime #Kriminalität #Mobilfunk #Netze #Regulierung #Roaming #Spam #TKG #Telefonie #Telekommunikation #News

Neue Regeln: Mehr Schutz vor Spam-Calls, mehr "unbekannte Anrufer"

Am 1. Dezember treten neue Regeln aus der TKG-Reform in Kraft. Netzbetreiber müssen falsche deutsche Rufnummern blocken. Dabei wird Roaming zum Problem.

heise online