The revealed possibility of changing the identity of an SMS sender became the centre of media attention last week. T-Mobile Czech Republic a.s. is aware of this problem and is intensively working on its resolution.
Situation
The principal finding is the fact that the problem is not on the part of Czech operators but consists in insufficient security of some foreign SMS centres (SMSC). One of the functionalities of the EMI communication protocol, if activated, allows the identity of the SMS sender to be changed. The problem is removed by switching this functionality off. The false SMS is then sent from the foreign SMSC directly to the recipient's mobile. The "author" may not even learn of sending the SMS, not even from an itemized statement of services, as the false SMS is not charged to him/her. The problem does not concern GSM Banking, DMS or Premium SMS services.
Solution
Intensive negotiations of all Czech operators are now under way, with the aim of protecting all clients in the Czech Republic to the maximum extent possible. Together, we intend to request a statement from the GSM association pointing out this problem and its possible solution to all operators. Customer protection is in the interest of all operators and therefore, it can be expected that they will follow the instructions of the GSM association and thus protect their SMS centres sufficiently.
For the time being, we can recommend message recipients that they should be careful and should verify the authenticity of suspicious messages. Some Nokia models (for example, 6230), list in message details also the number of the SMSC from which the message was sent. If this number does not match any of the Czech operators' SMSC numbers, the message may be false. TMCZ is able to identify SMSCs from which spam or fake messages are sent, after which it immediately enters into negotiations with the operator of such a centre. If no agreement is reached, TMCZ blocks the risky SMSC. This measure will in no way affect Czech customers but will prevent those customers of the foreign operator who have the respective SMSC set up in their phones from sending SMS to the Czech Republic. This year, three SMSCs have been blocked this way - in Monaco, India and the Seychelles.
T-Mobile is doing everything to protect its customers to the maximum extent possible and believes that the active approach of Czech operators will soon contribute to removing the problem on a global scale.