Anti-fraud tools can't keep pace with scammers exploiting cheap internet calling
The Arms Race Against Robocalls: Why Anti-Fraud Tools are Falling Behind
WASHINGTON, July 29, 2026 — While the arsenal of tools designed to combat spam, phishing, and robocalls has expanded significantly over the last ten years, industry experts warn that criminals are evolving faster than the defenses. This was the central theme of a Broadband Breakfast Live Online panel held this Wednesday.
The consensus among panelists was clear: there is no "magic pill" for this crisis. Instead, a combination of authentication frameworks, traceback initiatives, call blocking, and strict enforcement is required—provided that consumers remain hyper-vigilant against the dual threats of AI and low-cost internet calling.
The Death of "Physical Trust"
According to Josh Bercu, the executive director of the Industry Traceback Group at USTelecom, the root of the problem is the democratization of internet-based calling.
"It's become cheap and easy for you and me to call anyone around the country and around the world," Bercu noted. "It's also cheap and easy for the bad guys to blow up our phones, call us from anywhere in the world."
In the past, the industry relied on physical wired networks to establish trust. If a carrier provided service to a bank, they knew the caller was actually the bank. Today, internet calling platforms allow anyone to claim any identity.
The Evolution of Trust
The Limits of STIR/SHAKEN
Much of the panel's technical discussion focused on the STIR/SHAKEN protocol (Secure Telephone Identity Revisited and Signature-based Handling of Asserted Information Using toKENs). While widely implemented, experts argue it has been oversold as a complete solution.
Joel Bernstein, VP and Head of U.S., emphasized that STIR/SHAKEN is merely one piece of the puzzle. He proposed a shift toward a "right-to-use" system.
Conceptual "Right-to-Use" Logic:
if caller.has_cryptographic_token == True and caller.is_vetted == True:
allow_call(status="Verified")
else:
flag_call(status="Suspicious")
Bernstein envisions a world where a bank recognizes both itself and the caller via cryptographic tokens. However, Bercu pointed out a critical flaw: scammers are now simply acquiring legitimate numbers, meaning they can pass authentication while still conducting fraudulent calls.
Comparing Communication Channels
Moderator Drew Clark (CEO of Broadband Breakfast) questioned why email spam is relatively contained while phone spam remains rampant. The panelists highlighted a few key differences:
| Feature | Email Spam | Phone/SMS Spam |
|---|---|---|
| Filtering | Centralized private algorithms | Fragmented across OS and carriers |
| Visibility | High visibility for providers | Split between SMS and RCS |
| Content Analysis | Deep scanning of text/links | Carriers see signals, not call substance |
John Nelson of Davis Wright Tremaine explained that while carriers can use analytics to see how fast a number is calling, they cannot legally or technically dive into the actual content of the conversation. This makes back-end vetting of callers essential.
The Economics of Fraud
The financial incentive for scammers remains massive. Bercu noted that losses to scams are increasing at a rate of:
Because these operations are often global, they view the entire world's wealth as their target market. Despite this, there is a glimmer of hope in enforcement. A federal executive order targeting transnational criminal organizations has encouraged local agents to pursue scam cases, knowing prosecutors are more likely to take them on.
The Liability Debate
The panel expressed skepticism regarding a proposal to hold carriers financially liable for phishing losses. They argued that:
- Fault is too diffuse to pin on one entity.
- Such a move would "swing the pendulum too far" and potentially stifle service.
Consumer Defense Strategy
For the average user, the best defense is a combination of technology and skepticism.
Your Anti-Fraud Checklist:
- Report every spam message to contribute to "group intelligence."
- Slow down when receiving an unexpected call.
- Verify the source: If a call feels "off," hang up and call the official number of the institution.
- Stay vigilant regardless of the caller ID.
As Bernstein recalled regarding his own father's experience as a victim: "If it seems a little off, take a breath."
Related Events & Links:
- America250 / Telecom150 (Oct 1, 2026)
- "Broadband and AI in the Next Congress" (Dec 1, 2026)
