How the TRACED Act impacts international inbound calls
May 26, 2021at7:00 AM
The world gets smaller each day. International calls are more common than ever before. However, with a looming June 30th compliance deadline, it’s important to understand how the TRACED Act impacts international inbound calls. Luckily, with Prescott-Martini, we’re the leading compliance and authentication solutions provider. Our cumulative 150 years of industry experience means you’re in good hands.
Here’s how the TRACED Act will affect international inbound calls:
International gateways and rules
Unfortunately, there is no protocol under the current STIR-SHAKEN framework that enables international gateway providers to authenticate calls from foreign provider companies. This is mostly due to discrepancies in international authentication standards.
These standards are in varying developmental stages in each country. However, international gateways are still permitted to authenticate calls if they conform to industry standards. This enables them to procure pertinent data from customers to meet attestation standards.
While most gateway providers aren’t currently permitted to obtain an SPC token, providers can now acquire SPC tokens if they acquire a robocall mitigation program certification.
What happens to calls?
The current STIR-SHAKEN framework will require some growing pains. While it’s engineered to be used for international calls, until every country adopts STIR-SHAKEN implementation, it’s important to anticipate complications.
Essentially, a call originating from outside the country entering through an international gateway is impossible to authenticate to a satisfactory standard. You don’t know who the caller is. All that’s known is that a call is coming in.
Under such circumstances, calls are designated Attestation Level C. Basically, when calls are relegated to Attestation Level C, it’s because 3rd party entities are sourced as off-network but still emerge on your vendor network.
No one knows the originator or their intentions. Consequently, these calls are identified as spam. This means that, for many international calls, they will fall under Attestation Level C and be mislabeled.
While it’s not ideal, the TRACED Act and these precautions are necessary for maintaining sound authentication measures and improved security against malicious actors.
What to expect
STIR-SHAKEN will be implemented on a country-by-country basis. Currently, countries that have adopted or are in the process of adopting this framework and these compliances include:
The United States
The United Kingdom
There are, however, two proposed alternatives. These technical report road maps are crucial to consider.
Firstly, there’s the International Cross-Border Mechanism. This enables countries with aligning interests and compatible regulatory environments to develop a federal SHAKEN infrastructure and extend and cohabitate these trust environments.
These two countries then synthesize their list of trusted Certification Authorities, enabling them to establish a mutual understanding and trust in their respective authentication procedures.
However, there’s also the Mechanism for International SHAKEN. This broader approach establishes an international SHAKEN compliance registry that coordinates country codes with STIR trust anchors.
Each country’s respective Policy Administrator would use CVT application to establish international calling number reputations. This determines who can be trusted and who can’t. Afterward, trusted countries can exchange lists of trusted countries.
Neither of these proposed roll-out solutions necessitates modifications to SHAKEN specifications. However, they do provide new functions and channels to exchange information between countries.
Contact us now to book a consultation!
If you’re concerned about how the TRACED Act will impact your international, inbound calls, Prescott-Martini is the premier service to answer all your questions. With over 150 years of cumulative experience, there’s no question we haven’t had to answer ourselves. The June 30th compliance deadline is imminent. That means these changes are, too. Contact us now for a consultation! We guarantee seamless compliance and STIR-SHAKEN implementation to put you ahead of the curve.