<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
</head>
<body>
<div style="font-family: Aptos, -apple-system, HelveticaNeue, sans-serif;font-size: 12pt">
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt;">
Hi David,</div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt;">
<br>
</div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt;">
It’s a great topic. Just yesterday we had our ATIS/SIP Forum IPNNI Task Force meeting, the standards group most associated with SHAKEN, for those that aren’t aware. And we had a discussion about a path forward to creating an interested group that focuses
on messaging. We recently published a messaging landscape document ATIS-1000100
<span style="color: rgb(0, 0, 0);"><a href="https://www.sipforum.org/download/voip-interconnection-over-the-public-internet-atis-1000100/">https://www.sipforum.org/download/voip-interconnection-over-the-public-internet-atis-1000100/</a> in which we took the
first steps to try to identify the messaging landscape related to authentication and fraud and opportunities to address these issues.</span></div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
As many of you know the messaging world works much differently than the voice world, the companies are often the same but the people are different, the regulation is different, the interconnectivity is different, and there is a shift from SMS to RCS that seems
to suffer from same fraud issues as well.</div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
So, i think it would be great to talk through these issues and see if there is any potential paths forward we can identify related to this community or work that can happen in IPNNI or a new group focused on these issues.</div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks again for bringing it up David! And very supportive of a BOF session on this topic.</div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div dir="ltr" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
-Chris</div>
</div>
<div id="ms-outlook-mobile-body-separator-line" style="font-family: Aptos, -apple-system, HelveticaNeue, sans-serif;font-size: 12pt" dir="auto">
<br>
</div>
<div id="ms-outlook-mobile-signature" style="font-family: Aptos, -apple-system, HelveticaNeue, sans-serif;font-size: 12pt">
<div></div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> sipnoc25-attendees-bounces@sipforum.org <sipnoc25-attendees-bounces@sipforum.org> on behalf of David Frankel <dfrankel@zipdx.com><br>
<b>Sent:</b> Monday, September 15, 2025 11:52:05 PM<br>
<b>To:</b> sipnoc25-attendees@sipforum.org <sipnoc25-attendees@sipforum.org><br>
<b>Subject:</b> [EXTERNAL] [sipnoc25-attendees] BOF - Text Messaging Threats & Compliance</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Aptos}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif}
a:link, span.x_MsoHyperlink
{color:#467886;
text-decoration:underline}
span.x_EmailStyle17
{font-family:"Aptos",sans-serif;
color:windowtext}
.x_MsoChpDefault
{}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="x_mc-ip-hide" style="display:block!important; height:auto!important; background:#FFFFFF!important; opacity:1!important; visibility:visible!important; color:#000000!important; font-size:12px!important; font-family:Helvetica,Arial,sans-serif!important; text-align:left!important">
<strong style="display:block!important; height:auto!important; background:#FFFFFF!important; opacity:1!important; visibility:visible!important; color:#000000!important; font-size:12px!important; font-family:Helvetica,Arial,sans-serif!important; text-align:left!important">[THIS
MESSAGE IS FROM AN EXTERNAL SOURCE REVIEW CAREFULLY]</strong><br>
<hr>
</div>
<div class="x_WordSection1">
<p class="x_MsoNormal">Hi fellow SIPNOC’ers –</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">The SIPNOC overview makes references to Text Authentication and Robotext mitigation, but there isn’t anything on the program agenda explicitly addressing texting.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">How about a Tuesday night BoF on this broad topic? I have a few specific morsels I can take a few minutes to share:</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">1) I’ve worked with an academic group that’s demonstrated an AI-based capability to engage with pig butchers at scale, following the bad actors from SMS to other messaging platforms over multiple interactions lasting weeks or months,
culminating in a financial ask. I’m hoping to connect this team with telecom providers that can help them take this to a next level, with the goal of learning enough about the fraudsters’ operations so they can be intercepted before causing further financial
harm. What they’ve done so far is, I think, pretty cool.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">2) Separately, our Robocall Surveillance Platform has collected hundreds of thousands of unsolicited text messages (both SMS and MMS). We analyze message contents and track senders (by NNID for 10DLC source numbers). I can share what
we are seeing, including messages that apparently originate from SIMboxes.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">3) We query short-code senders with HELP and capture their responses. I can report on code-holders’ compliance with the mandate to respond to these requests.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Please let me know if you’d like to participate and if there are other texting topics you’d like to add. If I get minimal interest, I’ll ask Marc for a room and a time and we’ll hope to drive attendance and have a good discussion. We
can prioritize our agenda to reflect group priorities.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">I have a handout for #1 – if you’re interested and aren’t able to attend the BoF please ask me for that (or email for a softcopy).</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">David Frankel</p>
<p class="x_MsoNormal"><a href="http://www.rraptor.org/" originalsrc="http://www.rraptor.org/">www.rraptor.org</a>
</p>
</div>
</div>
</body>
</html>