Phone Number/Caller ID spoofing

Recently I learned that my phone number was used by someone else to try and scam someone or something to that effect, I've had spoofed numbers try to call me in the past, and OSINT investigations turned up with nothing substantial as to who the caller really was, so I've got some questions, mainly out of curiosity before I throw my sim card in the microwave and get a new one. How does one go about this spoofing? Is it possible to uncover who's behind the false number? If so, how? Have a good day, Lainons

impossible to find out who's behind the false number unless you have court order warrant for the ISP to take triangulation of the signal of the spoofed numbers IMSI Spoofing the number is generally a GPRS low level protocol breaking of A5/1 encryption (which is fairly easy but they have to be next to you to capture those packets going to the base station), or some high level protocol trickery (read zero day) These sorts of things are hard for the amateur to work out so I suggest you get paranoid of who might be on your tail, as they can read your SMS and listen to your phone calls from another part of the network if they're able to spoof your phone number (and even break your 2FA) Again, read this as a 3 letter agency paranoia

Sometimes I wonder if I should bait these scammers into a deaddrop that is just a trap.

>before I throw my sim card in the microwave and get a new one. That won't do anything. The scammers spoofing your phone number are just using VoIP software that let's them set the caller ID info as whatever number they want and they're generating random numbers with your area code whenever they call some with the same area code so that their target will be more likely to answer. It's a feature of telephony software, not a bug, so there's nothing you can do. The legal use case is so that businesses can call you from whatever call center they want, but it appears to come from their customer service number, or a local business owner can call you from their personal phone, but look like it's coming from their office. >Is it possible to uncover who's behind the false number? If so, how? For you individually, no. You can report it to the FCC or your country's equivalent and maybe they'll find whoever did it eventually, but by then another scammer will have taken their place. >>20069 >Spoofing the number is generally a GPRS low level protocol breaking of A5/1 encryption (which is fairly easy but they have to be next to you to capture those packets going to the base station), or some high level protocol trickery (read zero day) What? Most spoofers just use VoIP software and configure it with fake caller id info. They don't need to be near to you or exploit a zero day.

>>20068 It's government institutions and corporate entities.

>>20078 this is correct. it's caller ID, not some sort of crazy 3 letter agency soykaf. >>20069 t. schizo retard that has no idea what they're talking about there's no reason to burn your sim card over it, even if you get a new phone number it will keep happening. it's completely random. such is the unfortunate reality of the phone system.

>>20068 >Is it possible to uncover who's behind the false number? If so, how? I suspect they may be located in India.

caller id spoofing is easy if you have contacts with some mobile provider the reason why it still exists is because legitimate institutions use that, so when (real) call center worker calls you he calls from 1234-642767638 (1234-MICROSOFT) instead of some random number that can not be found from microsoft website. an example from real world is microsoft telephone 2fa (what i need for work, i seriously hope nobody uses office 365 services at home), when the robot calls me demanding to press # the caller id is just "Microsoft" of course we can not have nice things without abusers, so this is how it ends.

I could spoof my mobile number after signing for SIP provider and submitting the number for some extra call balance (few bucks). When I called someone using SIP client routed through this server they could see my mobile number, when dialing the phone itself, each time random number was assigned - it's impossible to call yourself with your own caller ID. Since signing up for this SIP provider and giving them my number was rather simple (I don't recall the details and what kind of additional confirmations like text message with special operator commands for sharing ownership or similar), so hypothetically a fraudulent entity could obtain legit caller ID numbers currently used by other people. It all boils down to an ancient telephone network backbone protocol not updated since 1980's and running visualized on modern computer hardware on top of Internet.