Spoofing
Qu'est-ce que Spoofing?
Cette entrée n'est actuellement disponible qu'en anglais.
Spoofing is the practice of faking the identifying attribute a network uses to route and trust a communication — the caller ID on a phone call, the sender ID on a text, or the From address on an email — so it appears to come from someone other than the true origin. In telecom it is a broad umbrella covering caller-ID spoofing, SMS sender-ID spoofing, and email spoofing, and defenders and carriers assess each as a channel-specific variant of the same impersonation problem.
More detail
Spoofing is not inherently malicious: a call center displaying a company's main number instead of an agent's direct line is a sanctioned, everyday use, while displaying a number the caller has no right to use with intent to defraud is a crime in many jurisdictions, including under the US Truth in Caller ID Act. The defining line is authorized use versus deceptive impersonation.
Each channel has its own verification answer. On voice, STIR/SHAKEN attestation cryptographically marks how much the originating carrier could verify about the displayed number, feeding spam-likely labeling and call-blocking decisions. On email, SPF, DKIM, and DMARC authenticate the sending domain and tell receivers how to treat failures. On SMS, alphanumeric sender-ID registration and A2P 10DLC campaign registration narrow who can present a given sender identity in the first place.
Legitimate senders reduce spoofing risk by making their own traffic unmistakable: consistent sender identity across numbers and sender IDs, registered brands and campaigns, DMARC enforcement on email, and monitoring for lookalike domains and impersonating sender IDs so a spoofed wave impersonating your brand gets reported and taken down instead of teaching customers to distrust your real messages.
Questions fréquentes
- What is spoofing in telecom?
- Spoofing is faking the identifier a communication presents as its origin — a caller ID on a voice call, a sender ID on an SMS, or a From address on an email — so it looks like it came from someone else. It is an umbrella term covering caller-ID spoofing, SMS sender-ID spoofing, and email spoofing.
- Is all spoofing illegal?
- No — displaying a business's main line instead of an individual employee's number, or a registered alphanumeric sender ID you own, is authorized use and generally legal. Spoofing becomes illegal under laws like the US Truth in Caller ID Act when done with intent to defraud, deceive, or cause harm.
- How do networks detect and stop spoofing?
- Each channel has its own authentication layer: STIR/SHAKEN attestation on voice calls, SPF/DKIM/DMARC on email, and sender-ID registration plus SMS firewalls on messaging. The terminating network uses those signals to label, filter, or block traffic whose presented identity could not be verified.
See also
Build it on Orbit
Voice, messaging, email, video, and AI agents on one platform and one pay-as-you-go bill. Start free — no credit card required.