--- title: STIR/SHAKEN & Call Spoofing Explained | Hiya description: Understand STIR/SHAKEN, how it combats call spoofing, and what extra steps businesses must take to protect their brand and customers. image: https://blog.hiya.com/hubfs/Stir%20shaken%201.jpg --- [![Hiya logo](https://blog.hiya.com/hubfs/hiya-new-purple.svg)](https://www.hiya.com/) Solutions Solutions [For Mobile Operators Protect your network](https://www.hiya.com/solutions/operators) [For Businesses Brand your calls](https://www.hiya.com/solutions/businesses) [For People Get the mobile app](https://www.hiya.com/products/apps/hiya-spam-blocker) ###### Webinar Branded Calling 101 Weekly Webinar Make your company's calls more recognizable. Learn how Hiya can drive value for your business. [Sign up today Arrow Right](https://www.hiya.com/lp/webinar-series-intro-to-hiya-branded-call) Products Connect ###### [Branded Call Display your branded caller ID](https://www.hiya.com/products/connect/branded-call) ###### [Number Registration Display your branded caller ID](https://www.hiya.com/products/connect/number-registration) ###### [View Plans Flexible pricing for teams of all sizes](https://www.hiya.com/products/connect/pricing) Protect ###### [Spam Analytics Stop spam & fraud on your mobile network](https://www.hiya.com/products/protect/spam-analytics) ###### [AI Voice Detection Real-time AI voice detection](https://www.hiya.com/products/protect/ai-voice-detection) Mobile apps ###### [Hiya Spam Blocker Fraud & AI voice protection](https://www.hiya.com/products/apps/hiya-spam-blocker) ###### [Hiya AI Phone Productivity for busy people](https://www.hiya.com/products/apps/hiya-ai-phone) ![](https://blog.hiya.com/hubfs/sotc-report.avif) ###### Report State of the Call 2026 86% of unidentified calls go unanswered. Read the benchmark report for what is happening in voice today, and what you can do to drive business. [Read the report Arrow Right](https://www.hiya.com/state-of-the-call) Why Hiya? Overview [Why Hiya Your voice innovation partner](https://www.hiya.com/why-hiya) [How it works Get started quickly & easily](https://www.hiya.com/how-it-works) [Customer Stories Real companies, real results](https://www.hiya.com/case-studies) [Voice Intelligence Platform Industry’s leading voice platform](https://www.hiya.com/why-hiya/voice-intelligence-platform) [Trust Center Compliance, security, & privacy](https://www.hiya.com/why-hiya/trust-center) Company [About Leadership and history](https://www.hiya.com/company/about) [Careers We're hiring!](https://www.hiya.com/company/careers) [Contact us Get in touch](https://www.hiya.com/contact-us) ![](https://blog.hiya.com/hubfs/bclc-hero-img.webp) ###### Customer Story BCLC increases business KPIs with Hiya With Hiya Branded Call BCLC was able to increase contact rates, campaign efficiency, and revenue. [Read their story Arrow Right](https://www.hiya.com/customer-stories/bclc) Resources Resources [Resource Center](https://www.hiya.com/resources) [Partner Program](https://partners.hiya.com/) [Get Support](https://hiya.com/support) [Developer Docs](https://developer.hiya.com/) [Hiya Blog](https://blog.hiya.com/) [Newsroom](https://www.hiya.com/newsroom) [Events](https://www.hiya.com/events) ###### eBook 10 Tips for customer-friendly phone calls Prevent caller reputation issues and complaints with customer-friendly calling practices. [Read eBook Arrow Right](https://www.hiya.com/resources/ebooks/10-tips-for-customer-friendly-phone-calls) [Get Started Arrow Right](https://www.hiya.com/#audience) [Log in](https://connect.hiya.com/login) [Get started](https://www.hiya.com/#audience) - [Home](https://hiya.com) - [Blog](https://blog.hiya.com) - [Understanding STIR/SHAKEN and call spoofing](https://blog.hiya.com/stir/shaken-does-it-reduce-illegal-call-spoofing) [Scam Trends](https://blog.hiya.com/tag/scam-trends) # Understanding STIR/SHAKEN and call spoofing [Laleh Hassibi](https://blog.hiya.com/author/laleh-hassibi) Mar. 8, 2021 [![](https://blog.hiya.com/hubfs/icon-fb.svg)](https://www.facebook.com/sharer/sharer.php?u=https://blog.hiya.com/stir/shaken-does-it-reduce-illegal-call-spoofing) [![](https://blog.hiya.com/hubfs/icon-x.svg)](https://twitter.com/intent/tweet?url=https://blog.hiya.com/stir/shaken-does-it-reduce-illegal-call-spoofing&text=Understanding+STIR%2FSHAKEN+and+call+spoofing) [![](https://blog.hiya.com/hubfs/icon-linkedin.svg)](https://www.linkedin.com/shareArticle?mini=true&url=https://blog.hiya.com/stir/shaken-does-it-reduce-illegal-call-spoofing) ## At a glance ![Stir Shaken image](https://blog.hiya.com/hubfs/Stir%20shaken%201.jpg) Millions of Americans own different types of mobile phones and all of these people know that fraudulent calls are already a huge problem in the US. It’s common for fraudsters to impersonate a trustworthy company in order to extract information from an individual or group of people. This is one of the reasons why [94% of people don’t answer](https://www.hiya.com/state-of-the-call?itm_medium=website&itm_source=blog) phone calls unless they are certain where they came from.  The good news is that the Federal Communications Commission (FCC) has required that all telephone carriers adopt STIR/SHAKEN technology, which makes use of [call authentication](https://www.fcc.gov/call-authentication) so the receiver can confidently identify a caller before picking up the phone. But, even though the adoption of STIR/SHAKEN does help identify callers, it doesn’t necessarily put an end to the illegal spoofing pandemic.  Below, we’ll define STIR/SHAKEN technology, what it means for businesses, and go over the additional steps that you have to take to protect your brand from being spoofed. ##### What is STIR/SHAKEN? STIR/SHAKEN is a framework created to reduce robocalls by verifying the digital signature of an outbound call. Network providers are able to identify if a call is coming from a legitimate business or a scammer and label the call accordingly.  STIR stands for Secure Telephone Identity Revisited. STIR is a working group which has developed protocols used to create digital signatures for calls. SHAKEN stands for Secure Handling of Asserted Information Using Tokens. It is a standard that ensures STIR is being deployed by service providers.  Together, STIR/SHAKEN are standards and protocols used to implement call authentication over the IP network. Carriers declare the validity of caller IDs and monitor for corruption along the way. It is important to note that this framework helps detect fraudulent calls but does not prevent them. This means that your customers may still be suspicious of unidentified calls and, as a result, not answer the phone. ##### How does illegal call spoofing impact business? Let’s take a look at the definition of illegal [call spoofing](https://blog.hiya.com/caller-id-spoofing-block-prevent-fraud-calls?hsLang=en). When a [spoofing attack](https://blog.hiya.com/what-is-spoofing-attack?itm_medium=website&itm_source=blog&hsLang=en) occurs, it appears as if the call is coming from a location that is not its real source. In other words, call spoofing allows callers to mask their phone numbers and make it seem like their calls are originating from somewhere else. This practice is common among companies that outsource some of their operations overseas and businesses that have remote team members. However, [when callers spoof their numbers](https://blog.hiya.com/how-to-stop-phone-spoofing-of-your-companys-numbers-and-brand?itm_medium=website&itm_source=blog&hsLang=en) and use a company’s identity without authorization, it’s called illegal spoofing. And, even though this practice targets the people who receive the calls, it can have a detrimental effect on your company’s reputation. When your numbers are used for fraudulent purposes, customers are hesitant to trust your calls even when they are legitimate. ##### Are robocalls and spoofed calls the same thing? Although both of them are extremely common, robocalls and spoofed calls are not exactly the same. [Robocalls](https://blog.hiya.com/robocalls-explained?itm_medium=website&itm_source=blog&hsLang=en) usually originate at a high volume through programmatic software and they can deliver a recording or open up interactions with live agents. These may sometimes be spoofed, but they need to come from dialing software to be considered robocalls.  [Caller ID spoofing](https://blog.hiya.com/caller-id-spoofing-block-prevent-fraud-calls?itm_medium=website&itm_source=blog&hsLang=en) can be performed on any type of call, whether it’s generated by a dialing platform or manually. So, even though a robocall can be spoofed, it doesn’t mean that all of them are. Illegally spoofed calls are dangerous regardless of where they come from, which is one of the reasons why telecommunications companies have adopted STIR/SHAKEN protocols to ensure caller numbers aren’t spoofed illegally. ## STIR/SHAKEN: The impact of VoIP and SIP technologies Before going over STIR/SHAKEN technology and how it helps identify illegal call spoofing, let’s go over the impact of session initiation protocol (SIP) and voice over internet protocol (VoIP).  VoIP and SIP are two types of protocols that allow individuals to make calls through the internet, without having to connect to the public telephone grid. In the early stages of VoIP calls, different methods were employed by different proprietors.  SIP was later introduced as a standardized way to connect VoIP calls, but this technology also allowed calls to carry identification information by using simple headers. That said, SIP also gave callers the ability to edit this information, making it easier to spoof numbers and make it seem as if calls were originating from a different source. ##### How does STIR/SHAKEN work? Now that we’ve covered the basics of VoIP, SIP, and illegal call spoofing, let’s discuss how STIR/SHAKEN technology works. As we mentioned previously, these are actually two types of technology, which stand for secure telephony identity revisited (STIR) and secure handling of asserted information using tokens (SHAKEN).  In simple terms, STIR technology allows for better caller identification because it verifies where the call is coming from at different points. Instead of actually preventing callers from changing their ID, it tells end users whether they should trust a call or not.  While STIR technology was developed to be compatible with VoIP calls, this system isn’t compatible with conventional telephone networks. This led to the development of SHAKEN, which serves a similar purpose to STIR but it’s compatible with telephone grids that don’t rely on internet connections. Below, we’ve detailed what happens during each stage of a call when STIR/SHAKEN technology is implemented.  ##### 1. Invite Is received When someone places a phone call, a SIP invite is sent to the carrier of the person or entity making the call. This is the very first step in the verification process and it’s important because it triggers a series of STIR/SHAKEN events designed to verify the identity of the caller.  ##### 2. Attestation level determination When the telecommunications provider receives the invite from a caller, the company reviews the request before accepting it. Carriers need to verify the call source and the phone number being used to determine how to qualify the call. This is important because this data will also be relayed to the receiver’s network, even if it’s not the same as the caller’s. The three levels of attestation in STIR/SHAKEN are full attestation, partial attestation, and gateway attestation, which are labeled as A, B, and C respectively in the network.   ### 2.1 Full Attestation (A) The best qualification you can get from STIR/SHAKEN is full attestation, which is represented with an A. This means that the telecommunications carrier has verified the identity of the caller and that the calling party has the authorization to use the number. A good example of this would be a member of the telecommunication provider’s softswitch.   #### 2.2. Partial Attestation (B) Partial attestation, which is represented by a B, is awarded when the carrier can verify that the call is coming from the location that appears on the STIR label. However, partial attestation also means that the carrier could not verify if the caller was authorized to use the number. This attestation is sometimes given to new company extensions that are not registered with the carrier.  #### 2.3 Gateway Attestation (C) Lastly, gateway attestation is given when the carrier was able to verify where it received the call from, but not its original location. Gateway attestation, which appears as a C on the receiver’s device, is usually given to international calls, but it can also be a red flag if the number is local. ##### 3. Identity header creation Once attestation has been awarded and a [phone call is properly verified](https://blog.hiya.com/why-does-my-number-show-up-as-a-spam-risk?hsLang=en), the carrier creates a SIP header that contains identity information. Keep in mind that the verification platform integration can come from a third-party provider that specializes in connecting to carrier softwitches.  The identity header includes data like caller number, basic call history, timestamp, attestation grading, and origination identifier.   ##### 4. Token verification Once the identity header is created, your call is ready to be sent out. Remember, all this process occurs in a matter of seconds, so you need to ensure that your SIP header contains the right information.  In the next step, the caller’s carrier sends out the SIP invite and identity header information to the receiver’s phone service provider. In some cases, the identity token is also sent to the call placement service of the receiver’s telecommunications company. This is an additional precaution that helps avoid tampering and improved data accuracy. ##### 5. Verification Initiation Once the receiver’s carrier gets the invite request and header information, they pass it on to the verification service. Remember, the verification service can be an in-house solution or a cloud-hosted third-party service, but the process takes seconds none-the-less. ##### 6. Certificate Reception and Authentication When the verification service receives an authentication request, it performs multiple checks in order to ensure that the call is not spoofed. During this step, the verification service provider pulls the digital certificate from the caller’s carrier and begins performing different tests. If all verification steps are passed properly, the call was not spoofed. In this step, the carrier’s verification service on the receiver’s end can check things like the identity header, the validity of the SIP signature through public keys, and the certificate chain of trust.  ##### 7. Final Verification and Call Connection  Finally, the verification process returns its results to the carrier. If the result is successful and the call was not spoofed, the call is passed on to the receiving carrier’s softswitch. If the process is completed and it seems like a call has been spoofed, it’s sent to the receiver along with a warning that it may be spoofed.  ##### Does STIR/SHAKEN eliminate illegal call spoofing? While STIR/SHAKEN technology does unveil illegal call spoofing, it doesn’t stop it or reduce the number of times it actually occurs. If you want to take full control of what happens to calls that are illegally spoofing your company numbers, Hiya connect Secure Call can help you do exactly that. Through Hiya Connect, you can choose whether the call is simply unveiled, blocked, or labeled as spoofed when the caller receives it. Interested in the impact Hiya Connect can have on your business? Download the [Forrester Consulting Total Economic Impact™ Study](https://work.hiya.com/forrester-tei-study-hiya-connect?itm_medium=website&itm_source=resources_page&itm_campaign=RPT-2201-forrester-tei-study&__hstc=45788219.e77dd28f011b35e29bf05f3631e31729.1702427484100.1702427484100.1702427484100.1&__hssc=45788219.1.1702427484100&__hsfp=2365361157&hsLang=en) commissioned by Hiya. [![Download the Forrester Report](https://blog.hiya.com/hubfs/impact_1200x627-png.png)](https://work.hiya.com/forrester-tei-study-hiya-connect?itm_medium=website&itm_source=resources_page&itm_campaign=RPT-2201-forrester-tei-study&hsLang=en) [![banner-hiya-reg](https://blog.hiya.com/hubfs/banner-hiya-reg.jpg)](https://www.hiya.com/products/connect/number-registration) ### Latest Articles ⚡️ - Hiya awarded 16 G2 Summer 2026 badges for branded caller ID Lena Prickett Jul. 9, 2026 - How Canada is leading the fight to stop bank scams Stephanie Boulanger Jun. 26, 2026 - How to check phone numbers for spam labels Michelle Wallace Jun. 9, 2026 ## Related articles ![](https://blog.hiya.com/hubfs/rogers-toronto-event-blog-hero.webp) ## [How Canada is leading the fight to stop bank scams](https://blog.hiya.com/how-canada-is-leading-the-fight-to-stop-bank-scams?hsLang=en) Stephanie Boulanger Jun. 26, 2026 ![](https://blog.hiya.com/hubfs/Blog_How-to-check-phone-numbers-for-spam-labels_B.webp) ## [How to check phone numbers for spam labels](https://blog.hiya.com/how-to-check-phone-numbers-for-spam-labels?hsLang=en) Michelle Wallace Jun. 9, 2026 ![](https://blog.hiya.com/hubfs/Hiya%20x%20DNA-blog@2x.webp) ## [Hiya and DNA Finland launch network-level call protection](https://blog.hiya.com/hiya-and-dna-finland-launch-network-level-call-protection?hsLang=en) Stephanie Boulanger Jun. 2, 2026 [![](https://blog.hiya.com/hubfs/hiya-new-purple.svg)](https://www.hiya.com/) [![](https://blog.hiya.com/hubfs/linkedin-1.svg)](https://www.linkedin.com/company/hiyainc) [![](https://blog.hiya.com/hubfs/facebook-1.svg)](https://www.facebook.com/hiyainc/) ###### Products - Connect - [Number Registration](https://www.hiya.com/products/connect/number-registration) - [Branded Call](https://www.hiya.com/products/connect/branded-call) - [View Plans](https://www.hiya.com/products/connect/pricing) - Protect - [Spam Analytics](https://www.hiya.com/products/protect/spam-analytics) - [AI Voice Detection](https://www.hiya.com/products/protect/ai-voice-detection) - Apps - [Hiya Spam Blocker](https://www.hiya.com/products/apps/hiya-spam-blocker) - [Hiya AI Phone](https://www.hiya.com/products/apps/hiya-ai-phone) ###### Solutions - Company size - [Enterprise](https://www.hiya.com/solutions/enterprise) - [Call Centers](https://www.hiya.com/solutions/call-center) - [Small and Medium](https://www.hiya.com/solutions/businesses) - Service providers - [Operators](https://www.hiya.com/solutions/operators) - [OEMs and technology](https://www.hiya.com/solutions/technology-partners) ###### Considering Hiya? - [Why Hiya](https://www.hiya.com/why-hiya) - [How it Works](https://www.hiya.com/how-it-works) - [Customer Stories](https://www.hiya.com/case-studies) - [Voice Intelligence Platform](https://www.hiya.com/why-hiya/voice-intelligence-platform) - [Trust Center](https://www.hiya.com/why-hiya/trust-center) - [Modern Slavery](https://www.hiya.com/company/modern-slavery) - [About Hiya](https://www.hiya.com/company/about) - [Careers: We're hiring!](https://www.hiya.com/company/careers) - [Contact us](https://www.hiya.com/contact-us) ###### Resources - [Resource Center](https://www.hiya.com/resources) - [Partner Program](https://partners.hiya.com/) - [Get Support](https://hiya.com/support) - [Developer Docs](https://developer.hiya.com/) - [Hiya Blog](https://hiya.com/blog) - [Events](https://www.hiya.com/events) - [Press Kit](https://www.hiya.com/newsroom#press-kit) ![ANAB](https://blog.hiya.com/hubfs/logo-anab.svg) ![ISO 27001](https://blog.hiya.com/hubfs/logo-iso27017.png) ![AICPA](https://blog.hiya.com/hubfs/logo-aicpa.svg) ![IAF](https://blog.hiya.com/hubfs/logo-iaf.svg) [Privacy Policy](https://www.hiya.com/legal/privacy) [Terms of Service](https://www.hiya.com/legal/terms-of-service) [App Data Privacy Policy](https://www.hiya.com/legal/app-data-protection-and-privacy-policy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Laleh Hassibi", "url" : "https://blog.hiya.com/author/laleh-hassibi" }, "dateModified" : "2025-10-15T19:47:15.210Z", "datePublished" : "2021-03-08T20:50:33.000Z", "headline" : "STIR/SHAKEN & Call Spoofing Explained | Hiya", "image" : [ "https://blog.hiya.com/hubfs/Stir%20shaken%201.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.hiya.com/stir/shaken-does-it-reduce-illegal-call-spoofing", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.hiya.com/hubfs/hiya-logo-3.svg" }, "name" : "Hiya Inc." } } ```