STIR/SHAKEN - Things You Need to Know

What is STIR/SHAKEN?

STIR/SHAKEN is a framework that’s designed to reduce fraudulent robocalls and illegal number spoofing (using a number without permission) by leveraging a set of industry-developed protocols and procedures.

  • STIR is short for ‘Secure Telephony Identity Revisited’ and is a set of protocols used to create a digital signature for a call.

  • SHAKEN is short for 'Secure Handling of Asserted information using toKENs' and is a set of standards for how service providers must deploy STIR within their networks.

STIR/SHAKEN will ensure that every call has their caller ID “signed” as legitimate by only authorized (STIR/SHAKEN Compliant) carriers and further validated by other authorized carriers before finally reaching the consumer. STIR/SHAKEN digitally validates the handoff of the call, no matter the network, which allows the phone company of the consumer to verify that the call is in fact from the number displayed on the CallerID.

Why do I care about STIR/SHAKEN?

The goal of STIR/SHAKEN is to prevent fraudsters from scamming consumers and businesses through unsanctioned robocalling and illegal phone number spoofing while making sure that legitimate calls are able to reach recipients at even higher completion rates.

  • Reduce Fraud and a much higher degree of difficulty for scammers to exist.

  • Reduce Spam calls and more meaningful call history.

  • Reduce Frustration due to endless unsolicited calls.

What are my responsibilities pertaining to STIR/SHAKEN as a VOXOX customer?

VOXOX Resellers and Wholesale customers will be required to work with our account managers to determine what level of attestation you qualify for. The “Attestation” value allows the originating service provider to clearly indicate the information it can vouch for and the degree of confidence they have in regards to the legitimacy of the call. There are three levels of attestation possible within the STIR protocol.

Full Attestation (indicated by an “A”)

Full attestation “A” is the highest degree of confidence that a carrier can sign calls with and is only provided to customers who have purchased phone numbers directly from VOXOX or have provided VOXOX with legal proof that the phone numbers belong to the customer.

  • All numbers have been purchased from VOXOX or the customer has provided legal proof that the phone numbers belong to them (full number list and an LOA).

  • Customer certifies that they will cooperate in any potential tracebacks as well as provide the identity of their own customers if required.

Partial Attestation (indicated by a “B”)

Partial Attestation “B” is the second-highest degree of confidence that a carrier can sign calls with and is provided to known/trusted customers, where the phone numbers have not been purchased directly from or registered with VOXOX.

  • The customer has a direct and established relationship with VOXOX and they have purchased numbers from another provider (not VOXOX), but have not provided proof of ownership of those numbers to VOXOX.

  • Customer certifies that they will cooperate in any potential tracebacks as well as provide the identity of their own customers if required.

Gateway Attestation (indicated by a “C”)

Gateway Attestation “C” is the lowest degree of confidence that a carrier can sign calls with and is provided primarily to international gateways or aggregators, where there is not a direct relationship back to the originator of the call.

  • Customers who have an indirect relationship with VOXOX (aggregators or international gateways).

When is this change happening?

While VOXOX has been signing calls for several months already, the official deadline for STIR/SHAKEN to be live is JUNE 30TH, 2021.


VOXOX may downgrade Customer attestation if the Customer does not adhere to attestation requirements upon reasonable notice and opportunity for cure. 

The customer may request a change to its attestation, which is contingent upon VOXOX approval.

The customer will sign an addendum to their MSA that will determine which option is selected.

Tracebacks will require specific client information and potentially involvement in order to be in compliance.