This website uses cookies

Read our Privacy policy and Terms of use for more information.

SERIESTEL · 001 of 6
DOMAINTelecommunications
ACCESSSignal subscribers (PDF)
Phone number analysis breaks a number into its structural components: country code, area code, carrier, line type, and porting history. Carrier lookup resolves the operator behind the number and flags VoIP, virtual, or disposable lines that sit between the analyst and the real account holder. The core identifier throughout is the E.164-formatted number, which normalises every input to a single international standard regardless of how the number was originally recorded.
A phone number is an attribution signal, not just a contact detail. It places a subject in a country, ties them to a carrier, exposes whether the line is a throwaway, and links the account to a history of reuse across platforms and breach data sets. The technique applies wherever a number appears in source material: registration data, leaked records, messaging platform profiles, or field reporting. Each data point, individually, is ambiguous. The pattern, corroborated across sources, is not.
TEL-001 sets out the methodology for parsing a number, resolving its carrier and line type, and probing its presence across messaging platforms and breach data sets to evidentiary standard.
IN THIS CARD
Eight
workflow steps
Six
tooling sources
Five
false-positive checks
Six
chain-of-custody requirements
REQUIRED TOOLSSix platforms covering carrier lookup, breach data, and messaging enumeration.
OPSECIsolation and attribution risks when querying carrier and breach APIs.
WORKFLOWEight-step sequence from E.164 normalisation to chain-of-custody documentation.
FALSE POSITIVESPorted numbers, recycled lines, and VoIP misclassification risks.
CHAIN OF CUSTODYSix requirements for timestamped, hashed, verifiable query output.
KEY QUERIESOperator syntax for number search, breach lookup, and platform enumeration.
DELIVERABLE

Download the card

A PDF version of TEL-001 is available to download below.
logo

The rest of this card is for Signal subscribers.

What remains: the step sequence, the tool list, the false-positive checks and the chain-of-custody note.

Join Signal

Signal includes:

  • Full OSINT Reference Card library, 21 domains
  • Methods, every tradecraft tutorial in full
  • AI in OSINT, every tutorial and field report
  • OSINT Hub community access