STIR/SHAKEN Call Authentication Framework

Current understanding

STIR/SHAKEN is the FCC-mandated caller ID authentication framework that voice providers use to sign and verify calls traversing IP networks, with a Governance Authority overseeing token issuance and policy. The FCC has proposed strengthening the framework by codifying caller ID attestation standards (A/B/C levels), expanding Governance Authority oversight, and introducing Know-Your-Upstream-Provider (KYUP) baseline requirements to close gaps that illegal robocallers exploit. Status: proposed rule — not yet in effect.

Evidence log

• 2026-09-09 — Improving the Effectiveness of the Robocall Mitigation Database; Call Authentication Trust Anchor; Advanced Methods To Target and Eliminate Unlawful Robocalls: 2026 FCC proposed rule tightening the Robocall Mitigation Database (accuracy, vetting, faster removal of noncompliant providers) reinforces the STIR/SHAKEN ecosystem by ensuring only legitimately certifying providers remain listed as compliant. (novelty: 2)
• 2026-04-15 — Protecting American Consumers from Robocalls Act: cross-connection with protecting-american-consumers-robocalls-act: Consumer robocall protection bill layers on the STIR/SHAKEN call authentication baseline. (novelty: 2)
• 2010-12-22 — Truth in Caller ID Act of 2009: Truth in Caller ID Act (2009, enacted) provides the underlying federal prohibition on caller ID spoofing that STIR/SHAKEN attestation and Governance Authority oversight operationalize technically across IP voice networks. (novelty: 3)
• 2025-07-30 — REP VA Act: REP VA Act (introduced) would require the VA to consolidate outbound veteran calls under a single identifiable telephone number, a practice complementary to STIR/SHAKEN attestation by making legitimate government caller IDs easier for recipients to recognize and for downstream authentication to verify. (novelty: 2)
• 2026-07-09 — Enhancing Know-Your-Upstream-Provider Requirements and Strengthening STIR/SHAKEN (Call Authentication Trust Anchor; Advanced Methods To Target and Eliminate Unlawful Robocalls): cross-connection with voice-provider-kyc-robocall-mitigation: KYUP baseline requirements sit at the intersection of the STIR/SHAKEN authentication framework and voice-provider KYC obligations, extending diligence duties from end customers to upstream interconnecting providers. (novelty: 3)

Open questions

Related