Silent Call Answering on Android: Defeating Phone Spam by Removing Human Attention

A detailed proposal suggests abandoning traditional spam call blocking in favor of allowing all incoming calls to connect automatically while keeping them invisible to the user. The approach uses Android's Telecom Framework and InCallService to answer calls silently without ringing, notifications, or screen activation. This breaks the economic model of mass dialing systems by inflating answered call metrics with empty connections that contain no human. The concept separates the technical establishment of a call from delivering user attention, forcing spammers to detect real people after the connection is made. Implementation requires the app to hold the ROLE_DIALER role and selectively invoke Call.answer() based on custom rules instead of always showing the incoming call UI. The author argues this shifts the detection burden onto robocall platforms and reduces the value of every successful connection.

HabrTranslated from Russian

Read at source

A new concept in mobile security proposes stopping the endless arms race of spam call blocking and instead letting every call connect while denying spammers any human attention. The idea replaces conventional filtering with a silent-answer mechanism on Android devices that accepts the call for the network but keeps it completely invisible to the owner.

Traditional anti-spam systems attempt to classify callers before the phone rings by checking databases, complaint histories, and behavioral signals. Because spammers rotate SIM cards and numbers, these defenses require constant updates and still allow many calls to reach the user. The proposed alternative accepts that the call will always occur and instead ensures that the connection does not interrupt the person holding the device.

When an application is registered as the system dialer through ROLE_DIALER, it receives call events via InCallService. The standard flow immediately presents an incoming-call interface when Call.STATE_RINGING is detected. The new logic adds a check: if silent mode is enabled and conditions are met, the service calls call.answer(VideoProfile.STATE_AUDIO_ONLY) and returns without ever waking the screen or playing a ringtone.

The result is that the telephone network records the call as answered, yet the user continues working or watching media uninterrupted. Robocall platforms receive the ANSWERED status they need for their statistics, but the conversation contains only silence. This inflates their success metrics with empty sessions, forcing them to spend extra effort detecting whether a real person is present.

The author illustrates the economic impact with a simplified model. A campaign of 100,000 attempts that previously reached 30,000 humans could gain another 20,000 silent connections. The proportion of answered calls that actually contain a person drops from 100 % to 60 %, reducing the reliability of the ANSWERED signal that mass-dialing systems rely upon.

Implementation details emphasize that Call.answer() alone does not guarantee invisibility; the application must also suppress all UI, notifications, and audio routing that would normally accompany an incoming call. The author stresses that the technique is an engineering experiment rather than a finished product and that careful rules are still required to avoid silently answering important calls from doctors or couriers.

The broader philosophy is described as “concept of indifference.” Instead of building ever more sophisticated classifiers to decide which numbers to block, the phone simply stops treating every technically successful call as an event that deserves human attention. Spammers are left to solve the new problem of distinguishing a live person from an empty connection after the call has already been accepted.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Fraud & Social Engineering

Scammers Use *#62# USSD Command to Fabricate Surveillance Claims and Steal Victims' Funds
Aroshka Cloud Faces Scrutiny Over Alleged False Claims of SOC 24/7 Operations and High-End Infrastructure
Reports Surface on Alleged De-Anonymization of Admins Running Major Russian Hacker Forums