Reminder: Ending of 3rd Party Authentication for STIR/SHAKEN - June 20th 2025

Just another reminder for US providers/resellers/wholesalers. Back in Nov 2024 the FCC released their Eighth Order for STIR/SHAKEN that ends 3rd party authentication for STIR/SHAKEN. The deadline for this is June 20th 2025.

The TL;DR is basically this:

  • The Provider must have an SPC token and their own certificate based on the token.
  • The Provider must determine and assign the Attestation of the outbound call.
  • The Provider must sign their own calls

This means that upstreams (such as Bandwidth and VoIP Innovations) can no longer sign calls on your behalf after June 20th 2025. Each VoIP provider will be 100% responsible for signing calls from their customers/network.

3 Likes

I have a FreePBX system hosted by CyberLink. Iā€™m not sure what if anything I need to do. Is there someone who can assist me for a reasonable charge?

Are you a VoIP provider or just using a PBX?

I use the PBX for my personal use. I own several LLCs that also use the PBX.

Then you have nothing to worry about.