If we assume that the human element is unable or not skilled enough to discover a phishing attempt (or some other malicious endeavor that can be perpetrated verbally), what forms of defense can be deployed to aid in the authentication of a telephone call?
Specific example - if a telephone call is coming from a spoofed number:
- Can it be detected?
- Can it be prevented?
Primarily interested in the userland (or the equivalent enterprise) context, meaning "below" the provider. Although any musings or explanations that involves or references the provider would certainly be interesting, even if not directly useful.
Media where I live enjoys claiming you can't "defend" against these types of attacks/spoofs using strictly technical means -- are they right?