Web-Based CallerID Spoofing

And we tought email phishing was bad, just wait!

I have all ready received phone calls at my house using some type of caller-id spoofing. I can't say who/what company it was for.

When they asked for me, I said "Sorry this person isn't here" - Of course this person/company had called almost every day for at least 2 weeks, so I was angry and wanted them to stop. I said "Who is this, I can take a message" they replied "We will call back" I said "No who is..." the hung up. I HATE THAT.

So of course I have caller-ID, I tried calling the number back, It was a local call (I live in the 847 area code) and it was "Disconnected" - WTF is that

I believe this will be the wave of the future. don't expect this to stop any time soon.

The word that comes to my mind is Harrasment, if they called everyday and spoke to someone, they are now harrasing you. Find out the company name, and make a complaint to the FTC.

Yet another reason answering machines are better than caller id

You don't talk to my machine you don't talk to me. I don't recognize you, you don't talk to me. You're a machine, you don't talk to me. ...and no monthly fee :P

Yeah, I do the same. I don't have caller ID, the answering machine method is more effective. If it's someone I wanna talk to I pick it up. Sometimes it might be someone who has something important to say, but a caller ID doesn't tell me that.

Yep, I have my Nextel phone in "PRVT only" mode 80% of the time, meaning people can only direct connect me, calls are sent straight to voicemail with something along the lines of:

You've reached > at xxx-xxx-xxxx if you need to reach me, leave a message after the tone or call my office at xxx-xxx-xxxx

Although most people would not go this route, my Norstar PBX has an automated attendant feature that always gets rid of these types of calls...

I simply don't answer if I don't recognize the name and number. My answering machine screens the calls for me. If it's important they can leave a message.

I was doing this long before the do not call list existed. The bottom line is that if I don't know you I don't answer, period.

How about if call display indicates that it is your kid's daycare center or school, or your local police? Would you recognize the voice?

And sure impersonating a police officer is some sort of crime in most places, but this outfit is maintaining no records of who does what.

That's why I always ask for all their info before telling them anything. Usually I get a name, company, contact number before they hang up, sometimes I get the mgr too.

Just an idea:

Check your state/local laws before doing this, but you could use a digital voice recorder like one from Olympus, Panasonic, Sony, etc. (or your PC if you have a DI563x Modemblaster or other similarly featured brand/models). When they call, start recording, answer and listen to their sales pitch, get what information you can about them, and turn the recording over to the FTC (particularly if you can get multiple recordings telling them to leave you alone)?

Not quite sure how the law applies to "interstate" calls even if your state law allows it so do your legal homework before you put your neck on a block.

If it is a recording I think you have consent, just to be sure make sure to annouce that you are recording the call.

Some states permit recording with the consent of only one party. Others require both. A few apparently require zero party consent.

»www.pimall.com/nais/n.te ··· or373433
»www.pimall.com/nais/n.te ··· or377360 (these links may or may not be accurate).

I'd say everyone agrees it will be harder to get someone to say something that's going to get them in trouble if they know they're being recorded, thus if law in a particular instance permits one-party consent, it will probably make it easier to bust some of these companies.

I guess we can contact them here to address our concerns;):

[whois.regiSTAR.com]

Registration Service Provided By: Registerfly.com
Contact: support@registerflysupport.com
Visit: »www.RegisterFly.com

Domain name: camophone.com

Administrative Contact:
Registerfly.com
Domain Registration (support@registerflysupport.com)
+1.9737362545
Fax: +1.9737362545
623 Eagle Rock Avenue
West Orange, NJ 07052
US

Billing Contact:
Registerfly.com
Domain Registration (support@registerflysupport.com)
+1.9737362545
Fax: +1.9737362545
623 Eagle Rock Avenue
West Orange, NJ 07052
US

Technical Contact:
Registerfly.com
Domain Registration (support@registerflysupport.com)
+1.9737362545
Fax: +1.9737362545
623 Eagle Rock Avenue
West Orange, NJ 07052
US

Registrant Contact:
Registerfly.com
Domain Registration (support@registerflysupport.com)
+1.9737362545
Fax: +1.9737362545
623 Eagle Rock Avenue
West Orange, NJ 07052
US

Status: Locked

Name Servers:
ns7.hostingfly.com
ns8.hostingfly.com

Creation date: 17 Oct 2004 13:23:16
Expiration date: 17 Oct 2005 13:23:16

Look closely -- they were smart enough to do a "private" registration.

-SC

214-658-8200

This is the number the calls originate from.

Hope it's of some use.

-l0

I have never used VOIP, so here's a question does Call Trace (dialing *57 after a nuisance call around here) work with VOIP?

I just signed up with Camophone...I can tell you, one could have a lots of fun with this service. "Allo, my name is Hiladio Muteranchentmedtrian, I am callwing you to tell you dat you hab just won a millwon dawers!" Oh yeah.

The Telcos need to block the passing of any digits you don't legally have routed to you at the line level.

This would fix the problem, the only people it would hurt is Call Centers....LOL

And add administrative overhead.

For example at a company I use to work at, we would transmit our corporate number in Denver, but we were in Omaha. We should have to prove to OUR phone company we had permission to send that ANI from the owner of the Denver #

quote:

---

For example at a company I use to work at, we would transmit our corporate number in Denver, but we were in Omaha. We should have to prove to OUR phone company we had permission to send that ANI from the owner of the Denver #

---

Wow - you had a way to spoof ANI?

Or did you mean CLID?

(the two are VERY different. go to a PRI line that is spoofing caller ID and call 1-800-444-4444 - it reads the ANI info, which will be the BILLING NUMBER, not the caller ID info, which is what you set the PRI to send out)

Would you know what *57 reads?

Gee what a great web site camophone has. Looks really pro

Hmm, I wonder if it is a coincidence that star38.com and camophone.com are both registered through Registerfly.net ?

A former co-worker had used to call hundreds of kids in the community and do a Santa Clause bit at the request of the kids parents. He did this for about 20 years and then caller-ID started upsetting kids because caller ID told them who was on the phone and it was not Santa. So he worked out a deal with the phone company and his Caller ID is permanently set to Santa Clause now. That is rather neat in my book.

It never occurred to me that services would abuse the system in this way. Obviously this should be stopped, unfortunately things like Santa are probably going to be affected by whatever all encompasing policies result from this.

Ok, I tried the service, basically cost $5.00

Results:

1) Payment by paypal only (no problem for me)
2) Service then lets you log in, but it's not secure (no encryption, wth!) so choose a temp password that you wouldn't mind someone stealing
3) You enter the "target" number, your number then 10 digit caller ID string
4) As soon as you hit submit, it does call you, calls the other number and bridge them together.
5) But!! The caller ID string does not work. I've tested this with several land line phones, cell phones, etc. I always show up as "unknown".

Conclusion:

Allows bridge calls but does not produce the caller ID string you put in. So this service is a bust in my opinion.

Case closed

Sounds the same as *67

quote:

---

4) As soon as you hit submit, it does call you, calls the other number and bridge them together.
5) But!! The caller ID string does not work. I've tested this with several land line phones, cell phones, etc. I always show up as "unknown".

---

sounds as if you did not enter a valid caller ID string. Generally caller ID must be exactly 10 digits with no dashes, spaces, parenthesis, etc.

1 (212) 555-1212 will not work
212-555-1212 will not work
(212)555-1212 will not work
2125551212 will work.

A little more expensive than the old fashoined answering machine, but if I don't recognize the number on the caller ID, I'm not picking up. If they don't leave a message on the voicemail, must not have been to important anyway.

I let the answering machine do my screening too...when Caller ID is something unrecognizable. If it says "Out of State", I let it ring through. If it is a friend or family member, i.e., legit, they will leave a message. I will also not answer "unavailable".

The real concern is when it says "Chase Bank" and someone happens to have a Chase bank account or credit card. They might surrender info because their Caller-ID "verifies" the caller's claimed identity.

This service seems nefarious at best, dishonest at least. Is there a good, legitimate reason to want to seek out this type of service? I can't think of any, but might there be?

Since you can make your Caller ID, "private" if you wanted, it can give you anonymity if you wanted it. Being able to modify or misrepresent your Caller ID is something different.

Oh, but the fun that you can have with it. You can get it to dial someone's number, then it will dial someone else's number, hey, imagine the fun you can have with this. You can have your neighbour calling the IRS in no time with the service! All from the comforts of your computer.

People have ALWAYS been able to spoof caler ID if calling from an isdn line.

Do you think organized telemarketing scammers that already have a call center with an ISDN PRI line are going to use this service? No. They can spoof the caller ID themselves.

Are bill collectors, which also have the same capability going to use this service? No.

Is law enforcement, aho also has this capability already, going to sue this service? No.

Kids making prank calls will use it. Pissed of ex-girlfriends will use it. Things like that.

But you could do *57 to have the caller logged, and then the police could retrieve the log.

With this service, all that would be logged would be Camophone.com, and they boast they are not maintaining records.

Dunno how it works where you are, but here in former SNET (now part of SBC) territory, if call comes in interlata, *57 relies on caller ID. So in most cases *57 does no good at all. (it will play a message saying the call was out of area and cannot be logged)

I don't know the mechanics of how *57 works here. Our phone book does say *57 works even if the caller has call blocking (permanent or one time).

Someone pretending to be God should be punished to the fullest extent of the law. What is some innocent old church lady see's that and is delighted to get a call from God and picks up the phone and hears a death threat. I mean yeah never know someone might actually think it is a miracle.

This shows the mind set they expect many of their customers to have:

quote:

---

Q. Why can't I set the Caller ID Name?
A. Caller ID Name is not sent through the telephone network as Caller ID Number is. When you receive a call from 2145550000 (for example), your local phone company uses an SS7 (signalling system) database to look up the name associated with that number. This is called the CNAM database, and CNAM is only updated by the telcos.

Some telephone companies (particularly Competitive carriers) will allow you to choose your own CNAM when you order telephone service. If you order 9095559999 from the telco and tell them you want the CNAM of "George W Bush", that CNAM will show up whenever you make a call out from 9095559999. If someone spoofs your 9095559999 number, "George W Bush" will show up on the Caller ID name to the receipient party.

---

I am sure this will work scary well.

Tried it and it works. A great way to confuse people with cell phones. Most cell phones only receive a Number ID and match it with the name stored. So I confused a few family members in other states making the number come up as some one else.