tcpa_law ยท 11 min read

Understanding TCPA, STIR/SHAKEN, and Your Rights Against Illegal Robocalls

The TCPA and STIR/SHAKEN are two key weapons in the fight against illegal robocalls. STIR/SHAKEN is a technology framework designed to combat illegal caller ID spoofing, allowing phone networks to verify that the number you see on your screen is legitimate. However, this technology is not perfect, and determined spammers still find ways to plague consumers with unwanted calls and texts. This is where the Telephone Consumer Protection Act (TCPA) provides a powerful legal remedy. Even with STIR/SHAKEN in place, if a company sends you illegal robocalls or automated texts without your consent, you may be entitled to recover $500 per violation. If the violation is found to be willful, that amount can increase to $1,500, and evidence from the STIR/SHAKEN system can be crucial in proving it.

What is the STIR/SHAKEN Framework?

STIR/SHAKEN is a technical protocol that may sound complex, but its goal is simple: to restore trust in your caller ID. The acronym stands for Secure Telephone Identity Revisited (STIR) and Signature-based Handling of Asserted information using toKENs (SHAKEN). Think of it as a digital fingerprint for phone calls. When a call is made, the originating provider attaches a digital certificate, or signature, to it. This certificate verifies that the call is genuinely coming from the number displayed on your phone.

The framework operates with a three-tiered system of attestation, or levels of trust. An "A" attestation is the highest level, meaning the carrier can confirm the caller is who they say they are and has the right to use that number. A "B" attestation means the carrier knows the caller but cannot verify their right to use the specific number. The lowest level, "C" attestation, means the carrier cannot verify the call's origin at all, which is a major red flag often associated with international gateways or spam operations. This system is a powerful tool against the common spammer tactic of caller ID spoofing.

For consumers, this often translates into visual cues on their smartphone screen, such as a checkmark or a "Caller Verified" message. While helpful, it's important to remember that this is a technical standard implemented by carriers. It is not a law in itself, but rather a tool to help enforce laws like the TCPA. The implementation of this framework by voice service providers is a key part of modern robocall mitigation strategies mandated by the federal government.

How Do TCPA and STIR/SHAKEN Work Together?

The relationship between the TCPA and STIR/SHAKEN is one of law and enforcement technology. The TCPA provides the legal foundation for consumer rights against unwanted calls and texts, while STIR/SHAKEN provides the technical evidence that can help prove a violation occurred. They are two sides of the same coin in the battle against telemarketing abuse. One is the shield, and the other is the sword that can deliver a financial penalty to violators.

For example, the TCPA requires companies to obtain your prior express written consent before sending you marketing messages using an autodialer. STIR/SHAKEN helps by making it harder for illegal callers to hide their identity behind a fake number. When a robocall comes through with a failed or low-level STIR/SHAKEN verification, it serves as a strong indicator that the call is illegitimate and likely in violation of the TCPA. More importantly, this data can be used as powerful evidence in a lawsuit.

In practice, if you sue a company under the TCPA for illegal robocalls, your attorney can use the discovery process to obtain the STIR/SHAKEN data associated with those calls. If the data shows the caller used a number with a "C" level attestation or otherwise tried to manipulate caller ID information, it can be used to argue that the violation was "willful and knowing." This is the key to unlocking treble damages, potentially increasing a settlement from $500 to $1,500 per call. The technical data provided by STIR/SHAKEN closes a loophole that spammers exploited for years.

Does STIR/SHAKEN Apply to Text Messages?

This is a critical point of clarification for consumers who are overwhelmed by spam texts. The STIR/SHAKEN framework was designed primarily for voice calls traveling over Internet Protocol (IP) networks. Its application to traditional SMS and MMS text messages is much more limited and not fully implemented across the industry. Therefore, you will not see a "Verified Sender" checkmark on a text message in the same way you might for a phone call.

However, this absolutely does not mean spammers get a free pass on texting. The Telephone Consumer Protection Act applies equally, and in some ways more stringently, to text messages. The law's prohibitions on using automated systems to contact you without your consent are the primary defense against text spam. Every illegal spam text is a potential TCPA violation, regardless of the underlying verification technology.

Whether a spammer sends an illegal message via a voice call or a text, the core legal principles of the TCPA remain the same. They need your consent, and they must honor your requests to opt out. In fact, failing to honor a "STOP" reply is one of the most common and clear-cut TCPA violations. You can learn more about your rights by reading about TCPA opt out requirements and how companies must comply. The absence of STIR/SHAKEN for texts does not weaken your legal standing.

The Limits of STIR/SHAKEN: Why Illegal Robocalls Still Get Through

While STIR/SHAKEN represents a significant step forward, it is not a silver bullet that has completely eliminated illegal robocalls. Consumers are right to wonder why their phones still ring with unwanted calls despite this technology. There are several reasons for these persistent gaps in the system, which are actively being exploited by determined spammers and scammers. Understanding these limitations helps explain why the TCPA remains such a vital tool for consumer protection.

First, the framework is most effective on calls that travel entirely over modern IP networks. Many calls, especially those originating from older or smaller carriers, may still use legacy non-IP technology where STIR/SHAKEN cannot be fully implemented. Second, a large volume of illegal robocalls originates from overseas, where U.S. carriers and regulators have less control and visibility. Scammers in other countries can route calls through complex pathways to obscure their true origin, making verification difficult.

Furthermore, the system is only as good as the carriers implementing it. While the FCC has mandated adoption, enforcement and compliance can be inconsistent. The FCC robocall rules are constantly evolving to close these loopholes, but it is an ongoing cat-and-mouse game. This is why individual consumer action under the TCPA is so important. When the technology fails to block a call, the law can still provide a remedy and create a financial disincentive for companies that break the rules. This article is for informational purposes only and does not create an attorney-client relationship.

Proving a Willful Violation for Higher Damages

One of the most powerful aspects of the TCPA is its provision for increased damages for willful or knowing violations. While a standard violation may entitle a consumer to $500, a willful one can triple that amount to $1,500. This is where STIR/SHAKEN data becomes incredibly valuable, not just as a blocking tool, but as a legal instrument. It provides a technical paper trail that can demonstrate a company's intent to deceive or harass consumers.

Intentional caller ID spoofing is a classic example of a willful violation. Before STIR/SHAKEN, a company could simply deny they spoofed a number, making it a difficult claim to prove. Now, call records with STIR/SHAKEN data can show that a caller knowingly used a number they were not authorized to use. If a call has a "C" attestation, indicating the carrier has no idea where it came from, it strongly suggests the caller is hiding their identity, which is a key element of a willful violation.

This evidence can be crucial during settlement negotiations or in court. When presented with network-level data that contradicts their claims, companies are far more likely to offer a fair settlement. You can see the results of such cases in the TCPA Settlement Tracker, which documents outcomes for consumers who fought back. The potential for treble damages makes pursuing a claim much more impactful and serves as a powerful deterrent. By documenting these illegal calls, you are helping build a case that may justify the highest penalties available under the law, and you could be entitled to significant compensation. If you suspect you have received illegal calls, you should submit your evidence for a free case review.

Real Examples of Violations

Understanding the theory is one thing, but seeing real-world examples helps clarify what a violation looks like. These scenarios often involve deceptive tactics designed to trick you into answering the phone or engaging with a text message.

(Incoming Call from a Local Area Code) You answer a call that appears to be from a local number in your neighborhood. However, the person on the line is a representative for "National Solar Solutions" calling from a different state. This is a classic case of caller ID spoofing designed to bypass your suspicion of out-of-state numbers. The call's STIR/SHAKEN data would likely show a low level of attestation, providing evidence that the caller intentionally misrepresented their origin.

(Text Message) You receive a text message that reads: "FINAL NOTICE for John: Your ABC Lending pre-approval expires in 24 hours. You are cleared for up to $5,000. Click here to claim: [link]." You have never done business with ABC Lending and did not consent to receive texts from them. This is a violation of the TCPA's requirement for prior express written consent for marketing messages.

(Robocall Voicemail) You get a voicemail from a prerecorded voice claiming to be from your credit card's security department. The message urges you to call back immediately to avoid account suspension. However, the number is not the official one on the back of your card. This is an illegal prerecorded call sent without your consent, and it is also a common phishing tactic.

How to Document Illegal Calls and Texts

If you believe you are receiving calls or texts that violate the TCPA, proper documentation is the most important step you can take to protect your rights. Solid evidence is the foundation of any successful claim. Simply deleting the annoying message is the worst thing you can do. Instead, treat your phone like a crime scene and preserve the evidence before you do anything else.

Follow these concrete steps for every suspicious call and text:

Check Your Phone Right Now

Many people have potential TCPA violations sitting on their phones and do not even realize it. You can perform a quick check in just a few seconds.

Open your messages and search the word STOP.

Did you find any threads where you replied "STOP" to a company, but they texted you again afterward? Or do you see texts from companies you never remember signing up for, often containing language like "Reply STOP to unsubscribe"? Each of those messages sent without your consent, or after you revoked it, could be a separate TCPA violation. Those violations could be worth $500 to $1,500 each.

Gathering screenshots of these messages is the first step toward holding these companies accountable. Once you have them, the next step is to have your evidence evaluated by a professional. You can Submit screenshots at SpamClaims.com for a free, no-obligation review of your potential claim.

Frequently Asked Questions

What is the main purpose of STIR/SHAKEN?

The main purpose of the STIR/SHAKEN framework is to combat illegal caller ID spoofing. For years, scammers have disguised their identity by making it appear that their calls are coming from a different number, such as a local number or a government agency like the IRS. STIR/SHAKEN works by having the originating phone carrier attach a digital certificate to the call, attesting to its legitimacy. This allows the receiving carrier to verify the caller ID information before the call reaches your phone. The goal is to restore trust in caller ID so consumers can be more confident that the number displayed on their screen is the real number calling them.

Can I sue a company even if their call was verified by STIR/SHAKEN?

Yes, absolutely. STIR/SHAKEN only verifies the caller's identity and their right to use a phone number; it does not legitimize the call's purpose or provide consent. The TCPA's rules still apply. For example, if a legitimate company with a verified number sends you illegal, autodialed marketing calls or texts without your prior express written consent, they are still violating the TCPA. The STIR/SHAKEN verification simply confirms who they are, which can actually make it easier to identify the correct defendant in a lawsuit. A verified call can still be an illegal call.

How can I tell if a call was verified by STIR/SHAKEN?

Many mobile carriers are now providing visual indicators on your smartphone's screen to show when a call has been authenticated through the STIR/SHAKEN framework. This can appear as a checkmark next to the caller's number, or a message that says "Caller Verified," "Verified Call," or something similar. The exact display varies by carrier (AT&T, Verizon, T-Mobile) and the phone's operating system (iOS or Android). If you do not see such a verification mark, it does not automatically mean the call is a scam, but it does indicate the carrier could not fully authenticate the call's origin. It should be treated with more suspicion.

Does STIR/SHAKEN stop all caller ID spoofing?

No, it does not stop all spoofing, although it has made it significantly more difficult for scammers. The system has limitations. It is most effective for calls that are entirely on modern IP-based networks and less effective for calls that originate on older networks or come from international locations where U.S. regulations do not apply. Determined criminals are constantly seeking new ways to bypass the system, such as using services that have not yet fully implemented the technology. This is why the TCPA remains a critical tool. While technology can block some illegal calls, the law allows consumers to seek financial compensation for the ones that still get through.

TLDR

Submit your spam screenshots for attorney review

This article is for informational purposes only and does not create an attorney-client relationship.