robocalls · 6 min read

Robocall STIR/SHAKEN Explained: What It Means for Your Phone

The robocall STIR/SHAKEN framework is a technology standard designed to combat the persistent problem of illegal caller ID spoofing. If you've ever received a call that appeared to be from a local number but was actually a scammer from halfway around the world, you've experienced spoofing. STIR/SHAKEN acts as a digital verification system, allowing phone networks to confirm that the caller ID information you see is legitimate. However, this technology is not a silver bullet. Even with these measures, you may still receive illegal robocalls, and when you do, your rights under the Telephone Consumer Protection Act (TCPA) are still your strongest defense. The TCPA provides for statutory damages of $500 per illegal call, which can increase up to $1,500 if the violation is found to be willful or knowing.

What is STIR/SHAKEN and How Does It Work?

STIR/SHAKEN is an industry-wide framework mandated by the Federal Communications Commission (FCC) to fight back against fraudulent robocalls. The name is an acronym for Secure Telephone Identity Revisited (STIR) and Signature-based Handling of Asserted information using toKENs (SHAKEN). In simple terms, it works like a digital certificate for phone numbers. When a call is placed, the originating service provider attaches a digital signature, or a level of "attestation," that verifies the caller's right to use that number. The receiving phone company then checks this signature to determine if the caller ID is legitimate.

Think of it like a sealed letter. A call with the highest level of attestation is like a letter sent from a known, trusted source with a wax seal intact. A call with a lower level of attestation might be like a letter from an unknown sender, or one where the seal's authenticity cannot be confirmed. This caller ID authentication helps your phone carrier identify potentially spoofed calls before they even reach you. Some carriers may display a "Call Verified" message on your screen for calls that pass the STIR/SHAKEN test, giving you more confidence in who is calling.

More importantly, this system provides a powerful tool for law enforcement and regulators to trace illegal robocalls back to their source. By creating a digital paper trail, STIR/SHAKEN makes it harder for scammers to hide their tracks. This is a crucial part of the broader FCC robocall mitigation strategy, but it is important to remember that it is a technical solution, not a legal one that grants you compensation directly. Your power to get paid comes from the TCPA.

Why Do I Still Get Robocalls If STIR/SHAKEN Exists?

While STIR/SHAKEN is a significant step forward, it has limitations, which is why your phone still rings with unwanted calls. One major reason is that implementation is not yet universal. While major providers have adopted the technology, some smaller carriers or those using older technology may not have fully implemented the framework, leaving gaps that scammers can exploit. International carriers are also on a different timeline, which means many offshore call centers can still place spoofed calls into the U.S. network.

Furthermore, STIR/SHAKEN does not block calls. It only verifies them. A call can be 100% verified as coming from a legitimate number and still be illegal under the TCPA. For example, if a legitimate company uses an autodialer to call your cell phone with a marketing message without your prior express written consent, that call is illegal, regardless of whether its number was verified. The core of your rights rests on consent, not on call verification.

Scammers are also constantly adapting their methods. Some have moved from spoofing to using huge banks of real, legitimate phone numbers that they acquire and use for short periods. Since these are real numbers, they may pass the STIR/SHAKEN test, even though the calls themselves are illegal. Because of these limitations, consumers must remain vigilant and understand their legal options for fighting back, including pursuing illegal robocalls compensation for violations.

Your Legal Rights Under the TCPA Despite STIR/SHAKEN

STIR/SHAKEN is a tool for carriers, but the Telephone Consumer Protection Act (TCPA) is your tool for justice. The TCPA places strict rules on how and when companies can contact you using autodialers and prerecorded messages. Even if a caller's number is verified by STIR/SHAKEN, they still must have your prior express written consent to send you marketing robocalls or automated texts. Without that consent, each call or text is a violation.

This is the most critical point to understand: a verified number does not equal a legal call. If you are on the National Do Not Call Registry and a company robocalls you for sales purposes, it is a violation. If you have previously told a company to stop calling you and they continue, those subsequent calls are violations. The TCPA empowers you to hold these violators accountable, with penalties of $500 per call, text, or fax. If a court finds the company knowingly and willfully broke the law, that amount can be tripled to $1,500 per violation.

Many consumers who have received a barrage of unwanted calls have successfully filed claims and received significant payouts. You can see a history of these cases in our TCPA Settlement Tracker. This article is for informational purposes only and does not create an attorney-client relationship. However, understanding your rights is the first step toward stopping harassment and potentially recovering damages.

Real Examples of Unwanted Robocalls

Even in a post-STIR/SHAKEN world, the content of a call or text is what often determines its legality. If you did not give a company permission to contact you, the call is likely illegal. Here are a few examples of calls that would still be TCPA violations:

"Hi, this is Jessica from ABC Solar reaching out with an incredible offer for homeowners in your area. We can install a new solar panel system on your roof for zero down. Press 1 to speak with a specialist now."

"This is a final notice regarding your car's factory warranty. Our records indicate you have not extended your coverage. Failure to act may result in you being liable for all repair bills. To speak with a warranty expert, press 1 now."

If you never gave ABC Solar or the car warranty company express written consent to robocall you, these are illegal. The fact that their number might show up as "Verified" does not change that. The core issue is consent, and without it, you may be entitled to compensation.

How to Check Your Phone for TCPA Violations

Identifying potential TCPA violations is easier than you might think. You can review your own phone's history for evidence of illegal robocalls and robotexts. Follow these simple steps to see if you have a potential claim.

• Review Your Call Log: Open your phone's call history. Look for repeated calls from the same unknown numbers or numbers you do not recognize. Pay attention to calls flagged as "Spam" or "Scam Likely" by your carrier, but also look for any calls that left a prerecorded voicemail message.
• Search Your Text Messages: Open your messaging app. Use the search function to look for keywords like "STOP," "unsubscribe," or "opt-out." If you replied STOP to a sender and they continued to text you afterward, they have violated the TCPA by not honoring your request in a timely manner. Also search for common spam topics like "DEBT RELIEF," "AUTO WARRANTY," or "AMAZON RAFFLE."
• Take Screenshots: For every potential violation you find, take a clear screenshot. For texts, make sure the screenshot shows the sender's number, the date and time of the message, and the content of the text itself. For calls, screenshot your call log showing the number and the date and time of the call.
• Document Everything: Keep a simple log noting the phone number, the date and time of the contact, and a brief description of the message. This documentation is crucial evidence. Learning more about robocall harassment damages can help you understand what this evidence is worth.

Check Your Phone Right Now

One of the clearest signs of a TCPA violation is a company ignoring your command to stop contacting you.

Open your messages and search the word STOP.

Did any company continue to text you after you sent that message? The law requires businesses to honor opt-out requests. If a company sent you even one more marketing text after you replied STOP, they may owe you $500 to $1,500 for that violation. Gather your screenshots and submit them for a free case evaluation.

Submit screenshots at SpamClaims.com

Frequently Asked Questions

What do the STIR/SHAKEN attestation levels mean?

Phone carriers assign one of three attestation levels to a call. "A" attestation is the highest level, meaning the carrier has authenticated their subscriber and knows they have the right to use the phone number. "B" attestation means the carrier has authenticated its subscriber, but cannot verify they have the right to use the number (for example, a call coming from a business's private phone system). "C" attestation is the lowest level, meaning the call's origin cannot be verified at all, which often happens with international calls or those from certain VoIP providers. Calls with C-level attestation are the most likely to be spoofed.

Does STIR/SHAKEN apply to text messages?

Currently, the STIR/SHAKEN framework applies specifically to voice calls made over IP networks. It does not directly apply to SMS or MMS text messages. However, the wireless industry and regulators are actively working on similar solutions for text messaging to combat spam texts. This includes creating a registry for businesses that send mass texts and implementing better filtering technologies. Regardless, illegal robotexts are still covered by the TCPA, and you have the same rights to be free from unconsented automated messages whether they come as a call or a text. The rules of consent and the statutory damages of $500 to $1,500 apply equally.

Can I sue a robocaller even if their number is verified?

Absolutely. A verified checkmark from STIR/SHAKEN does not make an illegal call legal. The verification simply confirms that the phone number you see on your caller ID is the real number the call is coming from. It says nothing about whether the caller has obtained your consent. If a company uses an autodialer or a prerecorded message to call your cell phone for marketing purposes without your prior express written consent, the call is illegal. The TCPA focuses on consent, not caller ID authenticity. Therefore, you can, and should, pursue a claim for any robocall you did not agree to receive.

How long do I have to file a robocall lawsuit?

The statute of limitations for filing a lawsuit under the TCPA is generally considered to be four years. This comes from a federal "catch-all" statute of limitations for federal laws that do not specify their own time limit. This means you have four years from the date of the illegal call or text to file a claim. Because of this generous window, it is worth looking back through your call logs and text messages for violations that may have occurred years ago. To understand the process, you can learn more about the typical robocall lawsuit timeline.

TLDR

• The TCPA allows you to claim $500 for each illegal robocall, potentially increasing to $1,500 if the violation was willful.
• STIR/SHAKEN is a technology that helps carriers verify caller ID information to fight against spoofed calls.
• The system does not block robocalls; it only authenticates the caller's number. A verified call can still be illegal.
• The legality of a robocall or robotext depends on whether the sender had your consent, not whether their number was verified.
• You can check your phone for evidence by searching for ignored "STOP" replies in your texts and looking for unauthorized prerecorded messages in your voicemail.
• If you've received illegal robocalls or texts, document the evidence and submit your claim at SpamClaims.com.

Submit your spam screenshots for attorney review

This article is for informational purposes only and does not create an attorney-client relationship.