Phone number spoofing is a plague: fake bank advisor scams, telemarketing with falsified numbers, various frauds. The technological response is called STIR/SHAKEN. But will it really change everything?
What is STIR/SHAKEN?
STIR/SHAKEN is a set of technical protocols developed in the United States to authenticate the origin of phone calls.
- STIR (Secure Telephone Identity Revisited) — Technical authentication standard
- SHAKEN (Signature-based Handling of Asserted information using toKENs) — Implementation framework
How it works
- The originating carrier digitally signs the call with a certificate
- This signature attests that the displayed number is legitimate
- The receiving carrier verifies the signature before presenting the call
- If the signature is invalid or absent, the call can be blocked or flagged
MAN: The French version
In France, ARCEP developed MAN (Number Authentication Mechanism), inspired by STIR/SHAKEN but adapted to the European context.
Deployment timeline
| Date | Milestone |
|---|---|
| July 2023 | NPV obligation for automated systems |
| 2024 | Progressive MAN deployment by carriers |
| 2025 | Extension to all VoIP calls |
| 2026 | Full coverage expected |
Impact for legitimate call centers
Good news
- Less unfair competition — Fraudsters can no longer spoof your numbers
- Better reputation — Your authenticated calls will be better perceived
- Restored trust — Consumers will answer more
Constraints
- Technical compliance — Your systems must support MAN
- Number verification — Each number used must be legitimate and declared
Will STIR/SHAKEN kill spam?
What it solves
- Scams with number spoofing
- Use of non-existent numbers
- Massive robocall fraud
What it does NOT solve
- Legal but abusive telemarketing
- User reports — Your number can be legitimate and still flagged
- Phone reputation
FAQ
Is STIR/SHAKEN mandatory in France?
MAN (French equivalent) is becoming progressively mandatory. ARCEP imposes deadlines on carriers.
Will spoofing disappear completely?
Number spoofing yes. But phone spam with legitimate numbers will persist.
