Telecom fraud threats and legacy protocols
According to the CFCA Global Fraud Loss Survey, global losses from telecom fraud have reached approximately $41.82 billion. A significant portion of these threats is linked to vulnerabilities in legacy signaling protocols like SS7 and Diameter, which are still used by many mobile networks. Attackers exploit these systems to manipulate Caller ID, perform spoofing, and intercept calls, directly threatening enterprise VoIP communications.
STIR/SHAKEN as an authentication tool
The STIR/SHAKEN standard was developed to combat caller ID spoofing. This technology provides cryptographic call verification. When a call is initiated, the originating carrier signs the Caller ID digitally, and the receiving carrier verifies it using a public key. This allows verified calls to be labeled, minimizing the risk of fraud.
The effect on the market
The adoption of STIR/SHAKEN protects enterprises from devastating financial and reputational damage caused by voice fraud. By eliminating caller ID spoofing, businesses can restore customer trust in voice communications, improve call answer rates, and ensure seamless integration with secure 5G networks.
Recommendations
To successfully implement new security standards, companies need to take a comprehensive approach:
- Assess the compatibility of current VoIP infrastructure (PBX, gateways, SIP trunks) with the new protocols.
- Integrate authentication systems with corporate directories and CRM.
- Update internal business processes and train staff to handle verified calls correctly.
- Establish cooperation with telecom operators that support STIR/SHAKEN.
The future of security in 5G networks
According to the Ericsson Mobility Report, 5G technology will become the dominant mobile communication standard by the end of 2027. The deployment of 5G Standalone networks lays the foundation for more secure communications, yet voice traffic security will still depend on integration with authentication protocols. Timely implementation of STIR/SHAKEN is a strategic step to protect business communications in the coming years.
Prepared by a Software Ukraine member. Original publication.