Numbering News

Europol is calling for a coordinated European response to tackle caller ID spoofing, an in increasingly common tool, used for online fraud and social engineering scams. Caller ID spoofing occurs when criminals falsify the information displayed on phones, making numbers appear legitimate to deceive victims. This practice is driving substantial financial and societal harm, with an estimated EUR 850 million lost worldwide each year.

Phone calls and text messages remain the primary entry point for these scams, representing roughly 64% of reported cases. By hiding their true identities and locations, criminals trick victims into revealing personal information, transferring funds, or granting access to devices and accounts, making it extremely difficult for law enforcement to trace and prosecute them.

A borderless threat

Caller ID spoofing is increasingly exploited by organised criminal networks operating across multiple jurisdictions. Fraudsters impersonate banks, government agencies, or even family members to gain trust. Some use it for so-called swatting incidents, making false emergency calls from a victim’s address, triggering large-scale emergency responses.

Investigations show the emergence of a “spoofing-as-a-service” business model, providing ready-made tools for impersonating trusted entities such as law enforcement or financial institutions. Operating from abroad, these networks exploit jurisdictional gaps to evade detection and prosecution.

Europol’s call for action

The current imbalance, where spoofing is easy to commit but hard to investigate, is unsustainable. Europol is urging measures that make it more costly and technically complex for criminals to hide behind spoofed identities, while enabling investigators to act swiftly across borders.

A Europol survey conducted across 23 countries revealed significant challenges in implementing anti-caller-ID spoofing measures. This means that the combined population of approximately 400 million people remain susceptible to these types of attacks.

Law enforcement highlighted major obstacles, including limited cooperation with telecom operators, fragmented regulations, and a lack of technical tools to identify and block spoofed calls.

Towards a coordinated European response

Europol and its partners have identified three priorities:

• Harmonised technical standards: develop EU-wide mechanisms to trace fraudulent calls, verify legitimate caller IDs, and block deceptive traffic.
• Enhanced cross-border collaboration: strengthen cooperation between law enforcement, regulators, and industry to share intelligence and evidence efficiently.
• Regulatory convergence: align national rules to enable lawful traceback, clarify legitimate uses of caller ID masking, and promote proven anti-fraud tools.

While anti-spoofing measures are essential, law enforcement expects criminals to adapt. Emerging threats such as SIM-based scams, anonymous prepaid services, and smishing schemes will require continued vigilance and cross-sector cooperation.

Europol’s proposed measures support the ProtectEU strategy, strengthening Europe’s collective capacity to combat organised crime and protect citizens from online and offline threats. Through sustained multi-stakeholder collaboration, Europe can restore integrity to its communication networks and reduce the growing harm caused by caller ID spoofing.

In a move set to redefine numbering standards across global networks, the International Telecommunication Union (ITU) has introduced an updated regulatory framework aimed at modernising how numbering resources are allocated and managed by telecom operators.

Under the new framework, digital—rather than geographic—number ranges are encouraged to support emerging services including IoT, machine-to-machine (M2M) communication, and 5G standalone deployments. National regulatory authorities (NRAs) are now being urged to reserve and safeguard these ranges, ensuring their efficient and fair usage across mobile operators, MVNOs, cloud communication platforms, and enterprise service providers.

Key Highlights of the New Framework

• Digit-agnostic number ranges: NRAs will now assign number blocks that aren’t tied to specific regions—enabling nationwide eligibility and simplifying number portability.
• IoT and M2M expansion: Dedicated numbering resources tailored specifically for IoT devices and M2M services, anticipating the explosion of machine identities across ultra-low-latency networks.
• Lifecycle safeguards: The framework enforces retention rules—number ranges must be quarantined and recycled responsibly, preventing “number aging” or exhaustion.
• Enforcement and compliance: Operators must now submit semi-annual audits of their numbering allocations and projected demand; non-compliance risks fines or revocation of numbering rights.

Telecom analysts view this as a crucial step not only for future-proofing legacy PSTN and mobile networks, but also for reducing regulatory friction as voice and data services converge. Maria Fernandez, Senior Analyst at Global Spectrum Insights, commented, “This framework acknowledges the shift to IP-based communication while protecting numbering assets. It strikes a smart balance between regulation and innovation.”

Industry players also welcome the changes. CloudVoice International, a leading cloud-telephony provider, stated, “Un-geographic number pools will let us offer clients national reach without city-based constraints—perfect for virtual PBX and global DID deployments.”

What This Means for the Industry

• Greater flexibility for operators: Enhanced agility in allocating number ranges for voice, SMS, and IoT.
• Improved customer convenience: Easier number portability, especially across devices and services.
• Scalable infrastructure: Supports the fast scaling needs of IoT, 5G, and virtual numbers.
• Enhanced regulatory clarity: Standardised processes and accountability reduce fragmentation and misuse.

As telecoms increasingly converge with the digital ecosystem, this ITU framework may be the telco equivalent of IPv6—providing the new numbering backbone for tomorrow’s connected world. International rollout is expected to step in throughout 2025, with regional regulators already hosting consultations on how best to adapt the proposals to local numbering habits.

Ofcom has announced a fresh set of rules to combat caller ID (CLI) spoofing and nuisance calls, requiring UK telecom providers to verify the authenticity of all outbound numbers before they reach end users.

From October 2025, operators must block any call presenting an invalid, unallocated, or non-E.164-compliant number. The move follows a surge in scams using falsified UK landline or mobile numbers to gain victims’ trust.

Ofcom’s Director of Telecom Security, Helen Carter, said: “These changes will cut off one of the scammers’ favourite tricks—pretending to be someone they’re not. By ensuring only valid, allocated numbers appear on caller ID, we’re making the phone network a safer place.”

Industry groups have welcomed the decision, noting that the alignment with global STIR/SHAKEN standards will make cross-border fraud prevention more effective and protect consumer confidence in voice services.