Skip to main content
When do you need a STIR-SHAKEN certificate of authority?
September 24, 2021 at 7:00 AM
A STIR/SHAKEN certificate authority is helping reduce the number of robocalls and spam across the U.S.

Spam calls have become normalized. Unfortunately, these are more than just a nuisance. These callers often have insidious intentions, which is why the STIR-SHAKEN certificate of authority is a crucial initiative. However, mandated compliance is still new, as is the concept. If STIR-SHAKEN is still unclear, you are in luck. At Prescott-Martini, we are the leading token provider. We will help you retain your reputation and the trust of your clients.

Here is when you need STIR-SHAKEN certificates:

What is a STIR-SHAKEN certificate of authority?

Defining a STIR-SHAKEN certificate of authority requires understanding what it’s a solution to.

Robocallers, spam callers, and scammers have honed their abilities to contact people with malicious intent. Experts estimate robocallers make 3 to 5 billion robocalls each month. Over 40% of these are fraud-related.

This rise in robocalls and scams has impacted telecommunications companies and damaged public trust. STIR-SHAKEN is an industry-wide initiative to restore public trust in these companies. Requiring STIR-SHAKEN certificates of authority verifies callers are not only trustworthy but also who they purport to be.

Essentially, calls traveling through interconnected phone networks need their ID verified by originating carriers and legitimized by other carriers before reaching customers. This verification allows people to confirm the call is from the number displayed on the caller ID.

When do you need a STIR-SHAKEN certificate of authority?

Since compliance is federally mandated, you always need a STIR-SHAKEN certificate of authority when you generate a call with USA terminating traffic.

These certificates are a requirement for all US telecommunications companies. Specific instances that necessitate these certificates include:

  • Common carrier voice services
  • Interconnected voice over Internet Protocol (iVoIP)
  • One-way VoIP
  • Fax transmissions and services

Carriers do not apply these certificates until the terminating stage of the call. Furthermore, if someone’s carrier is Verizon and calls someone whose carrier is AT&T, the carrier for the party receiving the call needs to independently verify the caller's identity.

Every carrier needs STIR-SHAKEN certificates of authority because people with different carriers call each other all the time. Understanding when certificate authority is necessary requires examining attestation levels and their implications.

Anything less than full attestation damages your company and its reputation. Without a STIR-SHAKEN certificate of authority, it is impossible to obtain full attestation.

Full Attestation (A)

Full attestation means the service provider has authenticated the caller and attests they have the authorization to use the calling number. In essence, they have verified the subscriber identity and that they are using the associated number, so the carrier is certain the caller ID has not been spoofed.

Partial Attestation (B)

Partial attestation means the service provider has authenticated the call origination but cannot verify that the call source is authorized to use the number. Essentially, partial attestation means it is possible to confirm the subscriber identity but not the telephone number, and therefore they cannot be certain the caller ID has not been spoofed.

Gateway attestation (C)

Gateway attestation means the service provider has verified from where it received the call but cannot authenticate the source. This means it is only possible to confirm the point of entry to the IP network and that the carrier signing the call has no relationship with the call initiator, and therefore it's impossible to vouch for the caller ID.

Contact us now to solidify your reputation!

If you are a telecommunications provider, a STIR-SHAKEN certificate of authority is not optional. It is federally mandated, and failure to comply will result in more than just penalties. Failure to comply with STIR-SHAKEN protocols will damage your reputation and company. Luckily, at Prescott-Martini, we are the leading token provider, and we ensure the calls you originate always have full attestation. Get in touch now to get started!