Spam Call Detection with Hybrid Call ID Spoofing Detection and Cryptographic User Authentication

Caller ID spoofing (CIS) remains a major challenge in combating spam calls, as attackers can generate spam even with seemingly legitimate identifiers. Existing CIS detection (CISD) approaches, whether network-based or device-based, suffer a high false positive ratio and are limited in scalability and effectiveness. This paper proposes a comprehensive spam call detection framework that combines CISD with cryptographic user authentication (UA) to ensure secure verification of authorized callers. We introduce a hybrid CISD method, integrating network- and device-based approaches to exploit their complementarity, and a SMS-based CISD method, SMSpoof. We design a novel receiver-initiated UA scheme, ReCall, which leverages a UA server to validate caller identity and securely bind users to call IDs. By employing CISD and ReCall jointly, the framework achieves both higher detection accuracy and efficiency. Experimental results demonstrate the feasibility and effectiveness of the proposed approach, showing significant improvements in spam detection, communication overhead, and computational efficiency.