[sipnoc25-attendees] [EXTERNAL] BOF - Text Messaging Threats & Compliance

[Chris Wendt]

Hi David,

It’s a great topic.  Just yesterday we had our ATIS/SIP Forum IPNNI Task Force meeting, the standards group most associated with SHAKEN, for those that aren’t aware.  And we had a discussion about a path forward to creating an interested group that focuses on messaging.  We recently published a messaging landscape document ATIS-1000100 https://www.sipforum.org/download/voip-interconnection-over-the-public-internet-atis-1000100/  in which we took the first steps to try to identify the messaging landscape related to authentication and fraud and opportunities to address these issues.
As many of you know the messaging world works much differently than the voice world, the companies are often the same but the people are different, the regulation is different, the interconnectivity is different, and there is a shift from SMS to RCS that seems to suffer from same fraud issues as well.
So, i think it would be great to talk through these issues and see if there is any potential paths forward we can identify related to this community or work that can happen in IPNNI or a new group focused on these issues.

Thanks again for bringing it up David!  And very supportive of a BOF session on this topic.

-Chris

________________________________
From: sipnoc25-attendees-bounces at sipforum.org <sipnoc25-attendees-bounces at sipforum.org> on behalf of David Frankel <dfrankel at zipdx.com>
Sent: Monday, September 15, 2025 11:52:05 PM
To: sipnoc25-attendees at sipforum.org <sipnoc25-attendees at sipforum.org>
Subject: [EXTERNAL] [sipnoc25-attendees] BOF - Text Messaging Threats & Compliance

[THIS MESSAGE IS FROM AN EXTERNAL SOURCE REVIEW CAREFULLY]
________________________________
Hi fellow SIPNOC’ers – The SIPNOC overview makes references to Text Authentication and Robotext mitigation, but there isn’t anything on the program agenda explicitly addressing texting. How about a Tuesday night BoF on this broad topic? I have a few specific mor ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌
[https://image-processing-service.us-1.mimecastcybergraph.com/v2/banners?e=gfQGiTTzl5bS3oy8fSnJZLWsVJnksHPIg5sgCr3itMme6sEgDbqSd_FB1NOke89_HfUzYaTkGWZXGactMHiWeZbQ8XJ4WKRONQ9qf4ZqWsdegzNFX7E4MVRgY0Q4tmgEFbtsfKaoQHtMz-sP4CGCnMrfEusG8QJvsZmFKh-3vlcDfu8SuvZqhSbw0JDgkd7BLdZhcxdjqCCpKIp_kHwh5Ncr-g3zFUQ_b9s13siqQjOz52Ykn92PDQtl7Uq6BellvE11HIilR9fYZAI8p5d5RIj3nj1liZHELDvqNFqMDMNmdwsjJvXSiky0TBQs8um17wRO_UzxLFnFyxW2uATrKgUU-4xJvDR3UuovXkPZmhunzVNJPJsv2Abrqujcr8ziwI3efuGqecWk-xTuUmBWYgMqrg==]<https://report.mimecastcybergraph.com/?magiclink=https%3A%2F%2Fapi.services.mimecast.com%2Foauth2%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Do20nRkVXf7VUVnANkXhoOwGytEwGN0YAlyeDJn7oBTGNl2kN%26state%3DeyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMjU2R0NNIn0.gQc7wf2YMmtEqGqdZ6eFvBgYnarWS5f51N0hgGOnQ3W1IGgmrteijmLOVlkFfTIYTj7P6c4SCn3ObDWNzY3k9hf7Ry9QPyawAWtNasnKrH_ZvaULrgkn21KeS4elwkr9QgZo-3NFjrHLfzQqkXbZKypJy2sgdJeRxVfX5NNl2bXg_uMBCTa3y7UpZv41zvLHa7IcW0mwvTxQUZbNipgWe93xxe4WrpnonHZ_1fZceHrx7cJyDh6eJD3GuiTp-WUh6QzMwPOJE0v2LcuzbS76HeR3EtLX4oQSLYI9cfUcjyAG0iX_hMmnOUGcMFYIoJ9nJIX-WaQjLT7MM2fCPLjmQQ.yunrGFdgAJ2MD19z.w8ce2J5uCp1BIHASleCKppZTPEH_4ImEGE2zMs1B-6bOr6vlngNT9kgvBsW-915xUZ0dTCnUgVqcnAYsUKH4kGjWGxzq8fX1fB79vIyEsK2dH9NigGUPQOGWccMrVXXGsDkP6LbnqiRLTCpqeff1GDFMQMWSTIgPct7RQzJ1qlby2xxLLlK_vWZKgT7jLNGo1ECIsz6e6cpNHCL7ItyqaqWaOp7I8AZyiUuL1ZmoVcrdtVNkk8oa2O45jwep0VtAFlH1TlDO0Gd9JPT8MknJe2ig7CsN-k4EYSzQlww4M-WVbeHHS7kynH8Y6HQ5flUg1yWK2BZcwBFxINLIIWkWkL7kxsrrX0fD97oAayuQOBcCcSo-OlQ4K2ZRE9n-aUmNieD3y0dkGmUJ5-R-eJRXQ88Sq_YIp-CZ-YI2i5m4m8H3qtDlV30bNj2ph7-0DFu_6TjpYKrodkvOZZXDfVxJslmc27qqEd6MIxa0jdhZpoUkRV4rd7iAzhopMqKNV7B2w_ylN3C4hpedkjDPiX1k8I2KCL_2yIykRo3q7wZoMTlbg7VeB4gFPOizuT1fRZXlhTHpgcs_5a7xD4vEZ51K0MQq5TywkYIoGaq4kQAe_KsmjxoXtA3yZlmG6NwuAj-lkfXi1ya5LPg3xWo99xmZkUnO89dUZxnn9UpxA8ZFWrtm9DvVenGhnIm_hojnFHp0cMrChhjDCNUIc4pzQX17T2m36D4I9LTW8b5sNOhdCG6KUkemb-ly5RFWg6GCd5FySRbvjr3VyGlEZiPcXvls0yVBMr2PbxsWH7MunFnHhqdr_8OlRdCGh2Ki73gfx4Ge_rrYMA.k85Oqx8g9xQdlRfklS-yww%26redirect_uri%3Dhttps%3A%2F%2Freport.mimecastcybergraph.com%2Fcallback>
CGBANNERINDICATOR

Hi fellow SIPNOC’ers –



The SIPNOC overview makes references to Text Authentication and Robotext mitigation, but there isn’t anything on the program agenda explicitly addressing texting.



How about a Tuesday night BoF on this broad topic? I have a few specific morsels I can take a few minutes to share:



1) I’ve worked with an academic group that’s demonstrated an AI-based capability to engage with pig butchers at scale, following the bad actors from SMS to other messaging platforms over multiple interactions lasting weeks or months, culminating in a financial ask. I’m hoping to connect this team with telecom providers that can help them take this to a next level, with the goal of learning enough about the fraudsters’  operations so they can be intercepted before causing further financial harm. What they’ve done so far is, I think, pretty cool.



2) Separately, our Robocall Surveillance Platform has collected hundreds of thousands of unsolicited text messages (both SMS and MMS). We analyze message contents and track senders (by NNID for 10DLC source numbers). I can share what we are seeing, including messages that apparently originate from SIMboxes.



3) We query short-code senders with HELP and capture their responses. I can report on code-holders’ compliance with the mandate to respond to these requests.



Please let me know if you’d like to participate and if there are other texting topics you’d like to add. If I get minimal interest, I’ll ask Marc for a room and a time and we’ll hope to drive attendance and have a good discussion. We can prioritize our agenda to reflect group priorities.



I have a handout for #1 – if you’re interested and aren’t able to attend the BoF please ask me for that (or email for a softcopy).



David Frankel

www.rraptor.org<http://www.rraptor.org/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.sipforum.org/pipermail/sipnoc25-attendees/attachments/20250916/eb96571d/attachment-0001.html>