What is Fake SMS Sender and How to Trace it?

Sending fake SMS messages from someone’s mobile number without his/her knowledge or consent, a term that is technically known as SMS Spoofing, is an old phenomenon. We were tipped by multiple readers about the availability of such SMS faking software in local market, however we then decided not to carry the news as it could aware the fraudsters of a new technique of fooling people.
Dunya News, however, carried this news yesterday by claiming that a new system has been introduced in Pakistan through which anyone can send text messages with a number ID of his/her choice.
Dunya TV said that this new system, which it dubbed as “Evil Mobile Software”, will allow anyone to send text messages from any mobile number which can cause serious privacy and social threats for anyone, especially the girls.
Since the news has reached the masses now, we thought of telling our readers a way of tracing spoofed messages through which you can prove that messages (with your number as sender) were indeed not sent by you.

What Fake SMS Sender can do?

By definition, with a spoofed SMS or faked SMS sender the originator of text message can set sender’s number of his/her choice, making it possible for anyone to send text messages from any number.
For example, with Fake SMS sender I can send an SMS which will show sender’s number as 0300-0000000, or I can set sender’s name as “ProPakistani” or anything.
This technology is used to send masked messages with alphanumeric names such as: Ufone, Warid, QAU, GIKI and so on.

How These Software Work?

All these software available in local market use services of international vendors for sending fake text messages. Countless international companies offer SMS masking to their clients who use their brand names as message sender in their marketing campaigns.
Few evil geniuses in Pakistan have developed desktop applications (they have named it VBG Fake SMS Sender) which can send text messages with any senders’ number by using network of these international SMS vendors (through APIs).
These local fraudsters are now selling Fake SMS senders by posting ads on classified websites to mint money, which is of course illegal.

How to Trace Fake SMS?

If you are victim of Fake SMS, i.e. if someone has sent text messages with your number with objectionable content then you need not to worry.
There’s a way of proving that message wasn’t sent from your number and that it is a Fake Message.
There are two ways to trace a Fake SMS:
1 – SMS center number of any spoofed message or fake message will be an international number, such as +445566776654 or +22XXXXXX or anything but not a Pakistani number (Pakistani numbers start with +92).
The SMS Message Center Number is a phone number that acts as a gateway for sending or receiving SMS messages between cellular devices. Since spoofed messages are sent by International vendors only, it is likely that SMS center number of a spoofed message will be an international number.
If you don’t know, SMS center number of a text message can be found by going in to message details.
For all messages that are legitimately originated from Pakistani networks will have following SMS center numbers:

• For Mobilink Numbers: +92300000042
• For Ufone Numbers: +923330005150
• For Zong Numbers: +923189244444
• For Telenor Numbers: +923455000010

2 – If you are a victim of Fake SMS then you can prove it wrong by obtaining your call detail from your cellular company. Almost all cellular companies (except Mobilink) offer online call detail records or you can obtain this list for respective service centers of mobile phone companies.
Spoofed message or Fake SMS will not appear in your call record, since it was never sent using your cellular network. Hence you can prove that a particular message was not sent by you or your number.

What Law Enforcement Agencies Should do?

Very simple, search on Google for those selling these VGB Fake SMS sending software. Call them as customers and get their contact details to hunt them down.
Furthermore they can contact classified websites to get these ads removed from their websites.

What You Should Do?

Spread the word, educate your FnF the ways of tracing a fake message. Report fraudsters to police or NR3C.