1. What Everyone Needs to Know about
Protecting the CPaaS Ecosystem from
Unlawful Robocalls
Presented by:

2. www.youmailps.com © 2022 YouMail, Inc
Agenda
▷ The Unwanted Robocall Problem
○ STIR/SHAKEN Fixes Some, but Not All, Spoofing
○ Leased DIDs are Challenge for the Ecosystem
▷ Scenarios and Solutions for CPaaS Providers
○ Do your Customers Use Your DIDs? Are you Monitoring
Usage/Behavior?
○ Do your Customers Bring their Own DIDs? Are you Investigating
Reputation as Part of KYC?
▷ YouMail Protective Services Solutions
○ YouMail Score
○ YouMail Watch
▷ More Information about YouMail Protective Services
2

3. Unwanted Robocall Problem
3

4. www.youmailps.com © 2022 YouMail, Inc
Many Different Types of Calls…
4
Outright
Scams
Unlawful
Telemarketing

5. www.youmailps.com © 2022 YouMail, Inc
Unwanted Robocall Problems…
▷ “ Someone is trying to hijack your
identity and try to steal deeper
personal information. If it's not
fixed right away, then your
computer will become obsolete,
and all of your credential
information may get compromised.
If you are the one who is using
Microsoft Windows in your
computer, then please press one
now to speak with a security team
now. “
5
Spam
Unlawful
Fraud
What company is calling?
No call-callback number !!
Is this them or associated?
Fraud Likely, TSR Violation and Unwanted
Fraud Likely and TSR Violation
Implicit Brand Association (not overt)

6. www.youmailps.com © 2022 YouMail, Inc

7. STIR/SHAKEN Fixes Some, but Not All,
Spoofing
7
STI-VS
STI-AS

8. www.youmailps.com © 2022 YouMail, Inc
Leased Numbers are a Challenge
8

9. www.youmailps.com © 2022 YouMail, Inc
Some A or B Attested Calls are Unlawful
Originating Network Intermediate Network Terminating Network
STIR/SHAKEN says: This is not a concern from a TN spoofing perspective…
Content-Based Analytics says: This is a fraudulent or otherwise unlawful call. Block it !!
Call is NOT
Received at
Terminating
Network…

10. www.youmailps.com © 2022 YouMail, Inc
STIR/SHAKEN
KYC Monitoring
📱Prevent Some Spoofing
📈 👁️‍🗨️Aid in Accountability
⚖️Prevent Some Unlawful Calls
🧾Non-Repudiation
🛡️Unlawfulness Detection
👁️‍🗨️🏛️Fraud Prevention

11. www.youmailps.com © 2022 YouMail, Inc
STIR/SHAKEN
KYC Monitoring
Delegated Certs
Registered Numbers
S/S is Not Enough
• Spoofing Continues
• Some Attested Calls Unlawful
Cannot Know Customers’
Customers…
Safe Communications =
STIR/SHAKEN + KYC
+ Monitoring

12. Scenarios for CPaaS Providers
12

13. www.youmailps.com © 2022 YouMail, Inc
Scenarios for CPaaS Providers
▷ Do your Customers Use Your DIDs?
○ Are you Monitoring Usage/Behavior?
▷ Do Customers Bring their Own DIDs?
○ Are you Investigating Reputation as Part of
KYC?
13
Safe Communications =
STIR/SHAKEN + KYC
+ Monitoring

14. Solutions for CPaaS Providers
14

15. Score Solution

16. www.youmailps.com © 2022 YouMail, Inc
Scoring Types
▷ Fraud Score: Probability that telephone number is associated with
fraudulent activity including, but not limited to brand impersonation
▷ Unlawful Score: Probability that telephone number that are unlawful
based upon a variety of reasons including fraud as well as violation
of federal laws and state statutes such as DNC, TCPA, and
Telemarketing Sales Rules (FTC TSR).
▷ SPAM Score: Probability that telephone number is considered spam
based on fraud and unlawfulness as well as degree of general
unwantedness. This includes patterns indicative of undesired
behavior as well as crowd-sourced feedback.
16

17. www.youmailps.com © 2022 YouMail, Inc
Two Options for Delivering YouMail Score
▷ Embedded API
○ Local Cache
○ Periodic Updates
○ Suitable for
intermediate
network providers
▷ Per-Call Dip API
○ Query On-demand
○ Suitable for
terminating service
providers
17

18. Watch Solution

19. www.youmailps.com © 2022 YouMail, Inc
▷ DID/TFN Spoofing Identification: Based on DID/TFN registration
and context about the type of number owner/user, Watch may be
used as a means of expeditiously identifying spoofing.
▷ DID/TFN Health: Service providers (such as CPaaS providers) may
use Watch as part of KYC optimization to verify that DID/TFNs are
not associated with unlawful calling activities.
▷ DID/TFN Owner/User Governance: As a real-world example, one
of YouMail’s customers asked why we were blocking a particular
financial service company’s number. We told them why and it was
easily remediated.
19
“Watch” ? Monitoring Usage Behaviors

20. www.youmailps.com © 2022 YouMail, Inc
Use Case Example
▷ 1. Call from Premier Bank Card. To accept press one to send
a voicemail press two. To accept press one to send a voicemail
press two.
▷ 2. Call from Premier Bank Card. To accept press one to send
a voicemail press two. Press one press two.
▷ 3. Call from premier bank card to accept press one to send a
voicemail press two.
20

21. www.youmailps.com © 2022 YouMail, Inc
Watch Dashboard: Identify Robocall Campaigns
▷ Identify clean DIDs
as well as those
impacted by
unwanted robocall
campaigns
▷ Identify specific
unwanted robocall
narrative and audio
affecting DIDs
21
https://data.youmail.com/dashboard

22. More Information
22

23. www.youmailps.com © 2022 YouMail, Inc
YouMail vs. YouMail Protective Services
23
B2C and SMBs App B2B Solutions for Communication Service
Providers, Vendors and Enterprise

24. www.youmailps.com © 2022 YouMail, Inc
www.YouMailPS.com

25. www.youmailps.com © 2022 YouMail, Inc
Event-based vs. Content-based Analytics
▷ Event-based
methods rely upon
analysis of call event
data, which can be
indicative of what
may have occurred,
but is not definitive.
▷ Content-based
methods analyze
data that definitely
identifies illegal
robocalls such as call
payload (content) as
depicted in the
illustration
25
Content-based Analytics
have a False Positive Rate
of virtually Zero*
Event-based Analytics are
prone to much Higher False
Negative Rates*
*Regarding blockable calls (not spam)

26. www.youmailps.com © 2022 YouMail, Inc 26

27. ……………More Information
27
https://www.linkedin.com/in/gerrychristensen/
Gerry Christensen
VP of Protective Services
p: 206-472-7060 e: gchristensen@youmail.com