Why blocking robocall numbers never works
You block the number. The next day the same recorded voice calls from a number one digit off, with your area code and your prefix, and you block that one too. A few months later your block list has two hundred entries in it and the calls arrive at exactly the rate they always did.
The list isn't failing because you haven't been thorough enough. It's failing because it is answering a question nobody asked. The number on your screen was never a fact about the caller.
Caller ID is a claim, not an identity
The calling party supplies the number it wants displayed. It travels with the call as a piece of signaling data, and for most of the history of the phone network nothing checked whether the caller had any right to it. Treat the number the way you'd treat the return address handwritten on an envelope: usually accurate, trivially forged, and worth nothing as proof.
Once you internalize that, the block list looks different. You are not blocking a caller. You are blocking a string of ten digits that the caller typed in and has already thrown away.
Neighbor spoofing
The reason the fakes look so familiar is deliberate. Dialers rotate through numbers that share your own area code and three-digit prefix, because a local-looking number gets answered far more often than an out-of-state one. It reads like a neighbor, a school, a clinic, somebody's cell.
Each number gets used for minutes and discarded. The supply is effectively the entire numbering plan. A block list, against that, is a record of numbers that have already been abandoned — always one step behind, by design, forever.
What STIR/SHAKEN actually does
STIR/SHAKEN is the industry framework that finally puts a signature on caller ID. The originating carrier cryptographically signs the call along with an attestation about the number:
- A, full attestation — the provider knows the customer and knows they're entitled to use that number.
- B, partial — the provider knows the customer but can't confirm their right to that number.
- C, gateway — the provider is just passing the call along and vouches for nothing.
The "Caller Verified" tag some handsets display is an A attestation and nothing more. It's genuine progress, and it has raised the cost of spoofing considerably. It is not a filter, for three reasons worth knowing:
- Attestation is about the carrier's customer, not the call. A high-volume call center with a legitimate contract and its own numbers gets A attestation for calls you'd still rather not receive. The signature says "this provider knows who sent this," not "this call is honest."
- It only survives an all-IP path. If any leg of the call crosses older TDM equipment, the signature is stripped and the call arrives unsigned at the far end. The FCC has an open proceeding on exactly this non-IP gap, and it remains a leading source of unsigned traffic.
- Plenty of signed traffic is junk. Signing tells you a provider took responsibility. It doesn't tell you the provider was careful.
Here's the part that should actually stop you
Every entry on your block list is a bet that the number belongs to the caller. It doesn't. That number is somebody's cell phone or somebody's front desk, picked out of the numbering plan an hour before it dialed you, and the person it belongs to is a victim of the same operation you are.
So what your block list accumulates over a year is not a defense. It's a growing list of innocent numbers your phone will now silently refuse — and one of them is eventually a customer calling back, a supplier, a clinic with a result. The failure is invisible from your side. They hear it ring; you never learn they tried. You have built a slow hole in your own reachability and called it security.
What helps instead
- Turn on your carrier's network-level filtering. It sees call patterns across millions of lines, which is where the signal actually lives — volume, duration, answer rates. Your phone can only see the one call.
- Use handset filtering knowingly. Sending every unknown number to voicemail works and costs you first-time callers. That's a real trade, not a free win.
- Put a gate in front of the human. Something answers, asks who's calling and what they need, and passes through only the ones with an actual answer. Most automated dialers are built to detect a human "hello" and hand off to an agent; a question that requires a real response ends a good share of them in seconds. The ones that get through are people, and people can be dealt with in one sentence.
- Stop maintaining the list. Delete it. It has never once shortened a campaign.
The goal isn't zero robocalls — nobody gets that. The goal is that they stop costing you attention, and that the real callers still get through.
A screening layer that answers everything and only interrupts you for the calls that matter is what RedCyfer Voice does on a live line.
Need this kind of thinking applied to your own setup? Get in touch →