This kind of happens today, but I think the problem is too big. You'll need to employ thousands to process all the complaints and by the time you issue a fine, the company has closed and a new one has started.
I wonder how enforceable that France thing will be
What do you report to the police if the act isn't illegal?
Any number on that list is effectively a honeypot. I guess you could even distribute an app that automates the whole process: put your number on the list, log incoming calls, aggregate the data and report them in batches large enough to catch the government's attention.
So it turns out we really do need a technical solution, which is unforgeable and easily traceable access to the telephone network. Plus robust enforcement of consumer laws, something wildly out of fashion in the US.
We have that, but it's insufficient.
https://en.wikipedia.org/wiki/STIR/SHAKEN#Limitations
Although STIR/SHAKEN is frequently described as a "caller ID authentication technology", it does not authenticate any caller ID per se. Instead, it authenticates the originating carrier, but that solves a different problem. [...]
It critically relies on a set of trusted certificate authorities (CAs) to manage digital certificates. In the USA, several telecom companies were appointed by the FCC as the CAs. They serve as the root of the trust. All other telcos, must not only trust these CAs but also pay them for compliance with STIR/SHAKEN, typically based on a percentage of their annual revenue. The reliance on trusted third parties severely limits STIR/SHAKEN to work across borders.
> Plus robust enforcement of consumer laws, something wildly out of fashion in the US.Quite.
https://en.wikipedia.org/wiki/TRACED_Act#Criticism
The act requires FCC referrals to DOJ for willful robocall fraud. In the half-decade since enactment, with billions of scam calls and billions of dollars in consumer losses, the FCC made less than a dozen referrals.First, I am 100% for this legislation, but, as has been mentioned numerous times, here, it needs to be enforced.
We probably also need to marry it with a technical solution, that ensures that unverified numbers cannot be used (no spoofing possible).
Maybe a national "blacklist" of bad numbers, with a "three strikes and you're out" kind of thing.
But, human nature, that nasty old spoiler, is likely to raise its ugly head. I suspect this would be a great place for corruption to take hold.
I mean, everyone can call anyone and name any company already.
I haven't had too much trouble with telemarketers lately but there is a crowdsourced app in France called Saracroche that can be easily installed on your phone and blocks spam numbers by becoming the caller id service. You can also use the app to report a number and help build the huge database.
Alas, last time I checked numbers were something that was announced in-band, so it could be trivially faked by the caller. But I'm not sure if that's still true.
Even if there's no explicit laws around that, who's getting billed for the calls?
Phone calls are essentially end to end voip these days so we have the ability to deliver that metadata.
I never opt-in to anything. If I do get a call, I usually ask for the callers employee name and employee ID, their supervisors name and employee ID and the name of the company. Then I point out that it is illegal to call me and ask for them to get my name off their list.
It's been years since I've gotten any sort of telemarketing or survey call.