STIR/SHAKEN and Robocall Mitigation Database filing deadlines
STIR/SHAKEN is a robocall mitigation framework designed to reduce fraudulent robocalling and illegal phone number spoofing in the U.S. The deadline for STIR/SHAKEN compliance was June 30, 2021. Smaller providers (less than 100K subscribers) have an extension to June 30, 2022.
The FCC has also launched the Robocall Mitigation Database (RMD) for service providers to formally register and confirm the status of their STIR/SHAKEN implementation. Service providers were required to complete their registration in the RMD by June 30, 2021.
Important: The FCC has directed carriers and service providers to block calls they may receive, including internationally originated traffic, from voice service providers not registered in the RMD after September 28, 2021.
Who’s impacted by STIR/SHAKEN and the upcoming deadlines?
Voice service providers that route traffic to or from the US phone numbers, including internationally-based providers.
What do I need to do?
- Register in the FCC’s RMD. Companies that have completed full STIR/SHAKEN implementation need to confirm this with their registration, while those that haven't must also include an RMD. For more information on how to register and confirm your STIR/SHAKEN implementation status, see the Robocall Mitigation Database External Filing Instructions from the FCC.
- Be prepared to manage network and traffic exchange arrangements with new carrier blocking behaviors in mind.
How does Bandwidth sign calls?
- Outbound IP-based calls from Bandwidth customers using Bandwidth U.S. phone numbers are signed with “A” or full attestation.
- Outbound IP-based calls from Bandwidth customers using non-Bandwidth U.S. phone numbers are signed with “B” or partial attestation.
- Any IP-based calls from Bandwidth wholesale customers without STIR/SHAKEN ID Header information are signed with "C" or gateway attestation.
We strongly recommend that our customers consult with legal counsel to determine if the above, combined with registering in the FCC's Robocall Mitigation Database, satisfies their regulatory requirements for STIR/SHAKEN.
Want to learn more about STIR/SHAKEN and new features available with Bandwidth? Please see our full support article or contact your Account Manager.
What if I’m signing my own calls for STIR/SHAKEN?
Approved STIR/SHAKEN service providers who authenticate and verify their own traffic can use Bandwidth as an intermediate service provider at no charge. You can enable our Transit Identity Service directly in the Bandwidth App. Bandwidth will act as an intermediate service provider and convey the SIP header information for both inbound and outbound traffic.
Bandwidth International (formerly Voxbone) customers who are also approved STIR/SHAKEN service providers should contact their Account Manager or Customer Success Manager to migrate their accounts to the Bandwidth App in order to enable this service.
Does Bandwidth provide the verification results on inbound traffic?
U.S. Origination customers can enable our Inbound Verification Service in the Bandwidth App. This feature provides STIR/SHAKEN verification results to service providers in order to make decisions to either block calls or terminate them to the end user.
A similar capability is currently in development for Bandwidth International customers and will be enabled in the Bandwidth International platform at the account level. Please contact your Account Manager or Customer Success Manager for more information.
Some of my calls will be signed with “B”. Are they going to be blocked?
Call blocking determinations are made in several different ways, including via proprietary call analytics services. While Bandwidth is focused on avoiding inappropriate blocking by downstream terminating providers, we don't anticipate that signing calls with “B” will be the sole factor in such call blocking treatment.
Nevertheless, to better ensure that false-positive blocking is minimized, Bandwidth remains a strong proponent of Certificate Delegation. Certificate Delegation would allow our customers to reference a valid certificate from the owner of the phone number so the call could be signed with “A” attestation. Bandwidth’s product team is currently working within ATIS to push for the adoption of the industry standard this year. If you'd like to learn more, click here to download additional information from ATIS.
To report call delivery or blocking issues with a specific Bandwidth phone number or carrier, please open a support ticket. Our Technical Assistance Center (TAC) will investigate and may be able to provide options to help address the problem with the specific terminating carrier.
What else is Bandwidth planning for STIR/SHAKEN?
Diversion
Features, like call forwarding or the ability to ring multiple devices simultaneously, change the destination called number and break the STIR/SHAKEN authentication process. The ATIS standard for “div” PASSporT allows service providers to confirm whether a call has been legitimately retargeted. Bandwidth is committed to implementing additional STIR/SHAKEN standards as they emerge.
STIR/SHAKEN Canada
Canada’s deadline for STIR/SHAKEN is November 2021. Please note that the certificates required to sign calls originating from Canadian providers are issued from different Certificate Authorities than in the U.S. Bandwidth is currently developing a solution to meet Canada’s deadline.
Article is closed for comments.