STIR/SHAKEN: a new tool to combat spam calls

[sheytoon]

Canadian operators have started implementing STIR/SHAKEN, which is a new method of authenticating incoming caller ID.

Normally we should never trust incoming caller ID because it is very easy to spoof by scammers.

However, with STIR/SHAKEN, newer phones will now tell you if incoming caller ID is valid. Look for a checkmark and an indicator saying "Verified".

Below are a few examples on a Bell phone. I have seen this feature on PM as well, so it is available on the Telus family also.

1. The first is a traditional incoming call where the caller ID is not verified. I would not trust this number. If it's a potentially important call (CRA or bank), you can always take a brief message and hang up. Then look up the real number online and call them back.
2. The second one is a verified incoming caller ID, which can be trusted.
3. The last one is the same as the second, also showing what it looks like if the number is already in my contact list.

    

STIR/SHAKEN will start intra-operator, and eventually expand to inter-operator. That means initially, you will see it when receiving calls from other PM/Telus/Koodo callers, and later with Bell, Rogers, Videotron, etc. Landlines should be supported one day as well.

It's important to note that STIR/SHAKEN will not stop scam calls, but it will help you detect them. So look for that checkmark and use it to your advantage!

My hope is that one day all Canadian operators will implement this and coordinate with each other, so that all caller IDs from Canadian area codes will be authenticated. Once that happens, operators can either stop allowing unauthenticated callers for Canadian area codes, or phones can have a setting to automatically reject such calls.

[hTideGnow]

---

@CityCrow wrote:

I would love for PM to implement Telus'  call control

With Call Control on, when a caller phones you for the first time, they’ll be prompted to enter a number on their keypad. If they enter it successfully, the call will go through to you and they won’t be prompted again (as long as they’re one of your 25 most recent callers).

If they fail to enter the correct number, they’ll hear an automatic message that they’ve been prevented from reaching you. This screening process prevents robocalls from getting through and is simple enough for real-life callers to pass.

You can add phone numbers to your
Accepted list
to avoid having them screened when they try to reach you.

---

HI @CityCrow 

doubt it would come here, no Tier 3 carrier has Call Control feature

[CityCrow]

I would love for PM to implement Telus'  call control

With Call Control on, when a caller phones you for the first time, they’ll be prompted to enter a number on their keypad. If they enter it successfully, the call will go through to you and they won’t be prompted again (as long as they’re one of your 25 most recent callers).

If they fail to enter the correct number, they’ll hear an automatic message that they’ve been prevented from reaching you. This screening process prevents robocalls from getting through and is simple enough for real-life callers to pass.

You can add phone numbers to your

Accepted list

to avoid having them screened when they try to reach you.

[sheytoon]

@DennyCrane that is a great feature on Pixel phones for sure.

@hTideGnow phone does need to support it, I don't know what took so long for this to finally catch on.

[hTideGnow]

hi @sheytoon 

earlier, someone said to have STIR/SHAKEN to work,we need a newer phone, is that true?

and STIR/SHAKEN was supposed to be a requirement couple years ago, why carriers able to delay till now?

[DennyCrane]

I just use the 'screen call' option on my Pixel. Google dictates to the caller that the call is being screened and asks the caller to tell me what they want. Their response is transcribed to me on my screen, and if it's a legit response I can choose to answer the call. 95% of scam callers just hang up.

 

[sheytoon]

Yes it's been in development for a few years, but becoming mainstream lately on a lot of phones.

How can scammers abuse it?

[umnikke8]

This has been active for a couple years already, but it's barely been deployed despite being required. It's helpful but it doesn't do much, it just means someone sorta trusted put a signature on the caller ID. Scammers can still abuse this, just takes more work. Very similar to the systems used to sign websites or email, both of which are easily obtained by scammers these days. On iPhones you can't even see this till after the fact as it only shows in the call log, not when the call is ringing. I checked through my call log for 2025, so far only 2 calls have had it.

[sheytoon]

This is a network feature, unrelated to Google's AI spam detection. It is supported on iPhone, Samsung and other phones as well.

[farmbot1]

Anyone with a Pixel 7 and up  maybe 6??  not sure I have Pixel 7

Received  a pixel  phone drop update  March 5 2025 that has google spam calling monitoring built in the phone and massaging  app.

Just make sure to enable in settings.