Changing IMEI number, using identical number in different country? - Security Discussion

Basically from what I've read, changing IMEI number is illegal in most countries, however it would be detectable only if the 2 devices are using the same carrier? Or worldwide?
For example, device 1 is in USA using Verizon, and device 2 is in Europe using Vodafone. Would it cause issues anyway?

alxv1 said:
Basically from what I've read, changing IMEI number is illegal in most countries, however it would be detectable only if the 2 devices are using the same carrier? Or worldwide?
For example, device 1 is in USA using Verizon, and device 2 is in Europe using Vodafone. Would it cause issues anyway?
Click to expand...
Click to collapse
In many countries it isn't illegal. The intent of the law is to stop criminals changing the numbers and then selling the phones, and I understand prosecutions are usually brought on this basis, not for changing your own one.
If the change is made outside a jurisdiction where it is illegal then it may comply with the letter of the law. Some countries also have a limit of how many phones you can carry out of the country.
It may also happen inadvertently if you load a new rom onto your phone, legislators often don't have the technical knowledge to see the implications of their laws. (How would you correct it back?)
The IMEI number has a checkdigit so any number can't be used.
If you are worried about tracking and privacy then this is a quite legitimate goal, but don't forget the sim card number also associates with the user, also any apps that login. Also don't forget to disable the base station software push services on your phones.
To avoid causing problems for random users, ie both devices being blacklisted, use that of another old phone you own or try to do some research on number allocation.
It seems from other online comments that both telephone number and IMEI are cross referenced within that particular network. Often blacklisted IMEI numbers will work in other jurisdictiins, which is why people are sometimes caught travelling with a bag packed full of phones.
On a positive note though there is nothing to stop you trying to make a boot script to change mac address, but remember that the second digit should always be even.

david68429 said:
In many countries it isn't illegal. The intent of the law is to stop criminals changing the numbers and then selling the phones, and I understand prosecutions are usually brought on this basis, not for changing your own one.
If the change is made outside a jurisdiction where it is illegal then it may comply with the letter of the law. Some countries also have a limit of how many phones you can carry out of the country.
It may also happen inadvertently if you load a new rom onto your phone, legislators often don't have the technical knowledge to see the implications of their laws. (How would you correct it back?)
The IMEI number has a checkdigit so any number can't be used.
If you are worried about tracking and privacy then this is a quite legitimate goal, but don't forget the sim card number also associates with the user, also any apps that login. Also don't forget to disable the base station software push services on your phones.
To avoid causing problems for random users, ie both devices being blacklisted, use that of another old phone you own or try to do some research on number allocation.
It seems from other online comments that both telephone number and IMEI are cross referenced within that particular network. Often blacklisted IMEI numbers will work in other jurisdictiins, which is why people are sometimes caught travelling with a bag packed full of phones.
On a positive note though there is nothing to stop you trying to make a boot script to change mac address, but remember that the second digit should always be even.
Click to expand...
Click to collapse
Sorry for the late reply, thanks for the very useful info!

Related

Is there danger in giving out the IMEI?

I had a software company ask me for the IMEI for my phone - is there any issue with me giving them this number? Ultimately, what malicious activies could they perform with knowing my IMEI?
Thanks!
if they report your imei to the police as a stolen phone it's blocked and precious few ever gotten their imei off those lists making the phone useless
They could duplicate the imei number to an other device and make illegal activities using that imei number which is billed to you.
You wonder the story next
Semseddin said:
They could duplicate the imei number to an other device and make illegal activities using that imei number which is billed to you.
You wonder the story next
Click to expand...
Click to collapse
you would also have to have their same sim number for that to work.
josefcrist said:
you would also have to have their same sim number for that to work.
Click to expand...
Click to collapse
Right!
IMEI refers to the International Mobile Equipment Identifier, a unique 15 digit code programmed into each mobile phone during production. The number holds information regarding manufacturer, model type and the approval body for the handset. The identification, bound into the IMEI when combined with the use of blacklisting and a connection the CEIR (Central Equipment Identity Register, is one route to preventing stolen devices being used on authorized networks. However, if the integrity of the code relating to the communication of the IMEI with the network is not guaranteed, the device is open to attack. This is the case with many current handsets, allowing impersonation of the IMEI and again rendering this security feature ineffective and redundant.
Year 22nd Dec 2008 in Turkey, there was a police operation for cloned phones and illegally saved imei numbers... Police has arrested over 50 people and got over 10 thousand cloned phones with real imei numbers... One of the arrested told to police that they bought the imei numbers from some internet sites as packages of 1000 imei numbers... It is really harmfull to post imei numbers on the web... Be carefull while buying secondhand phones also...
That Should Sum It up
It is very important to not give to anyone your imei number. Here in Greece we had few affairs with that issue.
thank God there ain any Android Signed
Semseddin said:
They could duplicate the imei number to an other device and make illegal activities using that imei number which is billed to you.
Click to expand...
Click to collapse
one more reason to hate nokia and their bloody Symbian Signed. opda must have milions of imeis worldwide cause of theire stupid software. long live google and the android
Giiving imei number is like givn ur bank card pin......Dont do it!
is this still true, till this day? are there any security updates made to prevent these danger?
I gave out my IMEI number to a person posing as a personnel from MTN in Abuja, Nigeria. He said that they going to upgrade my phone to 4 G platform. Is there anything like this from MTN Nigeria?
Abuamatullah said:
I gave out my IMEI number to a person posing as a personnel from MTN in Abuja, Nigeria. He said that they going to upgrade my phone to 4 G platform. Is there anything like this from MTN Nigeria?
Click to expand...
Click to collapse
Almost every phone is like this.
When the carriers developed a certain product, they could just update your phone through your software (A last patch for the phone). ? By going to system update.
The software is always limited to what your hardware's phone could do, and you should have expertise to know that.
What I meant here is, after they released a product, they would forgot it and go to the drawing board and make a more improved phone, they won't really need your phone because they are the ones who manufactured it(same for the source codes). It would be seemingly suspicious for someone to have an interest to your phone which will be outdated in a couple of months or a year.

One last note on legality/illegality of an IMEI if I may please.

In response toF(RED) in a previous thread.
Hmmm, jurisdiction is the key word here.
From my research the IMEI is purchased by the manufacturer for each phone they produce.
In this case Samsung purchases it from the Brits. So the jurisdiction lies in the British jurisdiction.
That being the case, the carriers in the U.S. have no jurisdiction to affect Samsungs' IMEI numbers. Samsung (which is based in Korea) paid for it, NOT the U.S. carriers.
In light of that, anyone in the U.S. owning a Samsung device should not fall in the jurisdiction of the Brits with respect to what they do with a device they purchase in the U.S., as in purchasing the device in the U.S. basically YOU are in effect purchasing the rights to that IMEI from the moment the carrier sells a Samsung phone to you, at which point the carrier no longer has the right to dictate anything with respect to the IMEI, and as such the carrier can't legally TOUCH your IMEI (barring it having been reported by the owner as lost or stolen of course, which is what the intents and purposes of an IMEI is all about and why it has been been implemented on a device in the first place) nor would it be illegal for you to change the IMEI of a device that you purchased the rights to through transfer of ownership (once you pay for the phone the carrier in effect will be transferring the rights of that IMEI to you) since it's YOUR phone.
So basically if you can produce a receipt for the purchase of the device, no law is broken with respect to the IMEI by the owner but I would tend to think if your IMEI is not rightfully blocked by a carrier (if you did not report your phone to the carrier that it was stolen) Then it would be illegal for the CARRIER to block your phones IMEI...,and if they did then you would in turn have a right to change it because in the carrier doing so, they illegally blocked a phones IMEI that is your property and there would be no other recourse than to change it so that it can be used on their network because your IMEI purchased with the phone is legally and rightfully free to use their network.
If you have a receipt for your purchase and you have issues with your IMEI, then you go back to your Carrier for clarification and or resolution.
Jurisdiction is not the key word:
What is IMEI?
Mobile phones, except the serial number have also IMEI number. IMEI — International Mobile Equipment Identity. IMEI — a common standard for all mobile devices, which is assigned to the phone at the time of manufacture it in the factory. It's the unique number, which is broadcasting to the carrier to authorize phone in the network. Structure of the IMEI is the same for all phones regardless of manufacturer. IMEI number is also used to track and block lost or stolen phones by the carrier, which further prevents to use of such devices. However, blocking IMEI in one carrier network have no effect in others networks.
Thank You and Thread Closed.

How is IMEI modification illegal (in USA)?

Just curious, my question is
Code:
Why is IMEI modification illegal in USA?
How is it illegal? Who prohibits it: FCC, Congress bill, Federal law....?
NOTE: I am NOT asking how to modify IMEI
That's against xda TOS. I'm asking why it is illegal. There's a difference.
Been trying to find an answer to this. From this previous thread, no one can give me a straight answer. Can't find any answer relating to US laws
I can find answers relating to UK laws:
example: In UK, it is illegal due to this Mobile Telephones (Re-programming) Act 2002 passed in 2002.. but then there's a loophole (i can modify IMEI if I created the device, or the manufacture allowed me to)... (I havent read any of the amendments to see if those loopholes are changed)
Currently, there is no specific law the prohibits the reprogramming of IMEI's explicitly. However, because IMEI's are used by wireless carriers as a unique ID, by reprogramming your IMEI, if that new IMEI shares an IMEI with someone else, you would be "impersonating" that person digitally, and therefore you would still be in violation of the law. Also note that wireless carriers use a blacklist by request of the government to blacklist stolen phones by IMEI, so if you have a blacklisted phone, and you reprogram the IMEI, you would be facing stiffer penalties than by just being in possession of a stolen mobile device.
syung said:
Currently, there is no specific law the prohibits the reprogramming of IMEI's explicitly. However, because IMEI's are used by wireless carriers as a unique ID, by reprogramming your IMEI, if that new IMEI shares an IMEI with someone else, you would be "impersonating" that person digitally, and therefore you would still be in violation of the law.
Click to expand...
Click to collapse
For GSM phones, IMEI is the device identifier, IMSI is the identifier for the sim card/subscriber. carriers should be using IMSI to identify users, not IMEI.
(for CDMA networks, the MEID/ESN identifies both the device and the subscriber .
but of course, carriers might be using IMEI + IMSI (google "Samsung lost IMEI" - IMEI set to 0 or blank when you flash custom roms. Some people can't use the phones, some people can)
Also note that wireless carriers use a blacklist by request of the government to blacklist stolen phones by IMEI, so if you have a blacklisted phone, and you reprogram the IMEI, you would be facing stiffer penalties than by just being in possession of a stolen mobile device.
Click to expand...
Click to collapse
A) T-mobile and At&t only began to share their blacklist recently... verizon will join them shortly this year. don't think there's a unified national list yet)
B) there's always a trade off between good and bad....
(i don't like using this analogy, but can't think of another one. let's stick to phones)
guns = bad guys can kill innocent people = bad
guns = good guys can use to protect themselves = good
weight bad v. good
The reason it is illegal is due to cell phone cloning. As I stated in the last thread. Yet you decide to open another? Well here is a little bit more detail
What is Cell Phone Cloning Fraud?
Every cell phone is supposed to have a unique factory-set electronic serial number (ESN/IMEI) and telephone number (MIN). A cloned cell phone is one that has been reprogrammed to transmit the ESN/IMEI and MIN belonging to another (legitimate) cell phone. Unscrupulous people can obtain valid ESN/MIN combinations by illegally monitoring the radio wave transmissions from the cell phones of legitimate subscribers. After cloning, both the legitimate and the fraudulent cell phones have the same ESN/MIN combination and cellular systems cannot distinguish the cloned cell phone from the legitimate one. The legitimate phone user then gets billed for the cloned phone’s calls. Call your carrier if you think you have been a victim of cloning fraud.
As changing the IMEI is cloning a device it falls under this FCC law.
Now after having one thread closed and you open another on this same topic that you know is not to be talked about on XDA, I will leave it as this. If you have any more issues concerning this contact the FCC about it.
Thread closed

[Q] Changing imei number

Hi guys, I have a at&t htc one x that I bought about 2 years ago.
My country laws don't let us use phones that bought from abroad. We need to pay about 50 dollars (which I did last year) to allow to use the phone legally. Somehow when I back to my country 2 days ago, I saw that my phone has blocked once again now I can't use the phone This shouldn't be happen because I followed the legal procedure and I have to use the phone forever in my country.
Anyway I won't pay once again even if I won't be able to use the phone. I have a imei number from my old htc hd2 (I don't use that phone anymore) If I can replace imei numbers I will keep using my phone without problem.
Can I change my at&t one x's imei number somehow? My phone is rooted but I don't have any idea about how to change imei
Thanks for help!
Nobody here can advise you what to do in your situation fire a few reasons.
1. Changing the IMEI of a device is illegal in any country.
2. Attempting to subvert any law is strictly and specifically forbidden by XDA rules.
3. Any member attempting to break any law, or assisting another prison to break any law, is subject to severe repercussions.
Sent from my Evita
THIS^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Changing IMEI is illegal in many countries therefore not allowed on XDA.

S8+ IMEI Help

Ok so this is going to be a long one... sorry in advance if I've broken any site rules posting here (made an account so I could make this post).
First, I work retail loss prevention for an off-brand retailer (in the USA). About 3 months ago we found a T-Mobile s8+ in one of our fitting rooms. The phone was turned into me via one of the store employees where I let it sit in my office for 3 days while turned on, hoping someone who knows the original owner would call it. No one called, so I took the phone to my local T-Mobile store to turn it in or see if they could contact the owner. The T-Mobile representative told me that they would be unable to take the phone from me, or give me any information regarding the owner. So the phone sat in my stores Lost and Found box for 30 days as policy. Once those 30 days passed our policy states to throw out the phone with the normal trash. Being an expensive phone, and the technology lover I am, I kept the phone which I had all legal right to do since the store had thrown it out.
The phone itself had a pin-lock and probably some sensitive data regarding the previous owner which I was able to clear out via a re-flash of the OS on the phone (i'm not a bad guy I didn't want their personal data).
So, obviously, the phone itself has an IMEI number reported as "Lost" with T-Mobile. Which means I'm basically unable to use it on our carrier (Metro PCS), however my wife was using it for the camera and other apps while at the house.
Flash forward another month and my wife's phone begins to start acting up so I figured there could be some way to work out to let her use this s8+ (I own a normal s8 myself and have no real use for the s8+). So i called T-Mobile customer support, explained the situation described above, and they told me I would need to take the phone to a Samsung store to have the device refurbished? Well, I drove about 30 minutes out to the nearest Samsung store to be told they don't perform such a service.
So I decided to look into altering the IMEI# of the s8+ to a clean IMEI of my wife's current phone or an older one we no longer use, and all the laws and specifications regarding what can and can't be done. All I could dig up regarding IMEI laws in the US was here: congress.gov/bill/112th-congress/senate-bill/3186/text/is -- Which isn't actually a law it's a proposed bill that never got passed. I did find some stuff from the FCC about cell phone cloning fraud:fcc.gov/consumers/guides/cell-phone-fraud -- but this also doesn't exactly fit my situation since we only want to use one phone, not two under the same identifications. There also is the concern of 'is it really fraud if I own both phones in question?'.
So this brings us to the current status: I have this phone that I obtained legally with a bad IMEI and cannot use it for everyday purposes.
Any help on how we can get the phone to a usable state would be greatly appreciated.
[Edit update]: I realize this is a very unusual situation, and am fully aware of the stigma regarding asking what to do regarding bad IMEI numbers and just want to clarify that I do not intend to break any laws or act with malicious intent to others. I simply want to have a phone, which I own legally, working.
Best your gonna get on this is google can be your friend. We dont discuss this in any form here.
Starhound said:
Ok so this is going to be a long one... sorry in advance if I've broken any site rules posting here (made an account so I could make this post).
First, I work retail loss prevention for an off-brand retailer (in the USA). About 3 months ago we found a T-Mobile s8+ in one of our fitting rooms. The phone was turned into me via one of the store employees where I let it sit in my office for 3 days while turned on, hoping someone who knows the original owner would call it. No one called, so I took the phone to my local T-Mobile store to turn it in or see if they could contact the owner. The T-Mobile representative told me that they would be unable to take the phone from me, or give me any information regarding the owner. So the phone sat in my stores Lost and Found box for 30 days as policy. Once those 30 days passed our policy states to throw out the phone with the normal trash. Being an expensive phone, and the technology lover I am, I kept the phone which I had all legal right to do since the store had thrown it out.
The phone itself had a pin-lock and probably some sensitive data regarding the previous owner which I was able to clear out via a re-flash of the OS on the phone (i'm not a bad guy I didn't want their personal data).
So, obviously, the phone itself has an IMEI number reported as "Lost" with T-Mobile. Which means I'm basically unable to use it on our carrier (Metro PCS), however my wife was using it for the camera and other apps while at the house.
Flash forward another month and my wife's phone begins to start acting up so I figured there could be some way to work out to let her use this s8+ (I own a normal s8 myself and have no real use for the s8+). So i called T-Mobile customer support, explained the situation described above, and they told me I would need to take the phone to a Samsung store to have the device refurbished? Well, I drove about 30 minutes out to the nearest Samsung store to be told they don't perform such a service.
So I decided to look into altering the IMEI# of the s8+ to a clean IMEI of my wife's current phone or an older one we no longer use, and all the laws and specifications regarding what can and can't be done. All I could dig up regarding IMEI laws in the US was here: congress.gov/bill/112th-congress/senate-bill/3186/text/is -- Which isn't actually a law it's a proposed bill that never got passed. I did find some stuff from the FCC about cell phone cloning fraud:fcc.gov/consumers/guides/cell-phone-fraud -- but this also doesn't exactly fit my situation since we only want to use one phone, not two under the same identifications. There also is the concern of 'is it really fraud if I own both phones in question?'.
So this brings us to the current status: I have this phone that I obtained legally with a bad IMEI and cannot use it for everyday purposes.
Any help on how we can get the phone to a usable state would be greatly appreciated.
[Edit update]: I realize this is a very unusual situation, and am fully aware of the stigma regarding asking what to do regarding bad IMEI numbers and just want to clarify that I do not intend to break any laws or act with malicious intent to others. I simply want to have a phone, which I own legally, working.
Click to expand...
Click to collapse
This is illegal and will bring you to jail so dont even try it
kpwnApps said:
This is illegal and will bring you to jail so dont even try it
Click to expand...
Click to collapse
In most countries yes not all but either way frowned talks on xda
Update: I no longer need assistance.
Side Note: Here is the US law regarding changing mobile identification numbers: govinfo.gov/app/details/USCODE-2011-title18/USCODE-2011-title18-partI-chap47-sec1029
Starhound said:
Update: I no longer need assistance.
Side Note: Here is the US law regarding changing mobile identification numbers: govinfo.gov/app/details/USCODE-2011-title18/USCODE-2011-title18-partI-chap47-sec1029
Click to expand...
Click to collapse
Yes as that may be true. But the rules here on xda as well as the rest of the world prohibit this. I do agree with you on the law here in US though. ???
Starhound said:
Update: I no longer need assistance.
Side Note: Here is the US law regarding changing mobile identification numbers: govinfo.gov/app/details/USCODE-2011-title18/USCODE-2011-title18-partI-chap47-sec1029
Click to expand...
Click to collapse
That law is surpassed by the cell phone cloning act of the early 90's. In the US it is illegal to alter the IMEI or even have tools that allow you to do so. It effects the IMEI and ESN (for older phones) many sites have been closed down for it. XDA has a very strong stance against it.
https://www.fcc.gov/consumers/guides/cell-phone-fraud
solitarios.lupus said:
That law is surpassed by the cell phone cloning act of the early 90's. In the US it is illegal to alter the IMEI or even have tools that allow you to do so. It effects the IMEI and ESN (for older phones) many sites have been closed down for it. XDA has a very strong stance against it.
I'm not really here to argue if the act is illegal or not (it is). But, to point out I also wasn't exactly asking on instruction on how to change an IMEI.
I only asked what laws are in place that specify the legality of the situation (which has been solved), and what -can- be done in this situation (remains unsolved).
-Thank you
Click to expand...
Click to collapse
Starhound said:
solitarios.lupus said:
That law is surpassed by the cell phone cloning act of the early 90's. In the US it is illegal to alter the IMEI or even have tools that allow you to do so. It effects the IMEI and ESN (for older phones) many sites have been closed down for it. XDA has a very strong stance against it.
I'm not really here to argue if the act is illegal or not (it is). But, to point out I also wasn't exactly asking on instruction on how to change an IMEI.
I only asked what laws are in place that specify the legality of the situation (which has been solved), and what -can- be done in this situation (remains unsolved).
-Thank you
Click to expand...
Click to collapse
The only thing that can be done is turn it in to t-mobile. If I t was me. I would turn it in to t-mobile so they can return it to the proper owner.
Click to expand...
Click to collapse
solitarios.lupus said:
Starhound said:
The only thing that can be done is turn it in to t-mobile. If I t was me. I would turn it in to t-mobile so they can return it to the proper owner.
Click to expand...
Click to collapse
I attempted to do exactly that about 3 days after the phone was turned in to me (as described in original post). T-Mobile refused to take it from me. Nor would they give me information to contact the owner. Maybe that's not their standard policy, I don't know.
Click to expand...
Click to collapse
Starhound said:
solitarios.lupus said:
I attempted to do exactly that about 3 days after the phone was turned in to me (as described in original post). T-Mobile refused to take it from me. Nor would they give me information to contact the owner. Maybe that's not their standard policy, I don't know.
Click to expand...
Click to collapse
I can tell you that is not their policy. Mail it to the corporate office with a letter saying what happened and where you took it. That person will be fired on the spot. But that is up to you. Either way it is useless unless you use it on att.
Click to expand...
Click to collapse
Starhound said:
solitarios.lupus said:
That law is surpassed by the cell phone cloning act of the early 90's. In the US it is illegal to alter the IMEI or even have tools that allow you to do so. It effects the IMEI and ESN (for older phones) many sites have been closed down for it. XDA has a very strong stance against it.
I'm not really here to argue if the act is illegal or not (it is). But, to point out I also wasn't exactly asking on instruction on how to change an IMEI.
I only asked what laws are in place that specify the legality of the situation (which has been solved), and what -can- be done in this situation (remains unsolved).
-Thank you
Click to expand...
Click to collapse
I have your same issue. A phone was forgotten on the bathroom of my cafe and nobody reclaimed for more than 6 months. Once tried to used after this long time the phone seems to be reported lost and imei locked. I cleaned up the phone to erase all the old personal information but not able to use it.
I understand the role on this forum and nobody want talk about it. would be really appreciate if you can privately point me to the right direction to make the phone working.
I won't contribute to the pocket of a lot of people on youtube or ebay selling the service for 50 pound. This is not a businness for me but just try to use a phone instead of bin it
Mine is a G950F model
Thanks
Click to expand...
Click to collapse

Categories

Resources