answering machine detection

Three false-answer patterns SIP traces cannot classify alone

Dead air, fake ringback and early media can all confuse outbound dialers, but they are different signals—and none alone proves a carrier fault.

By Barnaby Oak·October 11, 2026·4 min read
What matters here
  1. A SIP answer response confirms signaling state, not that a person or voicemail answered.
  2. Early media before a final answer is not automatically false answer supervision.
  3. Pair call signaling with audio evidence to investigate suspected carrier false answers.

False answer supervision is not one sound or one SIP message. It is a mismatch between what the call path reports and what happened at the called party. In outbound operations, three patterns deserve separate treatment: dead air after an apparent answer, ringback audio after an answer indication, and early media that a dialer mistakes for an answered call.

These are operational patterns, not a definitive taxonomy of carrier behavior. A trace can establish what the network signaled. Audio can establish what the caller heard. Neither alone proves why the mismatch occurred or which party caused it.

Dead air after an answer

The simplest case is a call that reaches an answer state in signaling, but produces silence or no useful audio. A dialer may treat the call as connected even though no person or voicemail is speaking. Depending on the call path, the result can look like a ghost call: an agent or prospect is connected to an empty channel.

A SIP trace is still useful. It can show the response sequence and whether media was negotiated or packets flowed. But a successful answer response is not proof that the called party picked up. Nor does silence alone prove carrier fault; media routing, endpoint behavior and other call-path problems can also leave an answered call quiet.

Fake ringback in a SIP trunk

Fake ringback describes ringback audio heard after signaling says the call is answered. The caller hears what sounds like continued ringing, while the dialer may already consider the call connected. It is a useful symptom to investigate, not a diagnosis. Ringback-like audio can be delivered as media, and the timing of that audio relative to the SIP answer matters.

Looking only at message codes can miss the user-facing contradiction. Looking only at the audio can miss whether the network sent a provisional response, a final answer, or both. Compare timestamps and media: when did the final answer arrive, when did RTP begin, and what did the audio contain? That gives an operator a stronger basis for deciding whether the call was falsely supervised or merely had an unusual progress signal.

Early media is a different case

Early media is audio exchanged before the final answer, often after a provisional SIP response that indicates progress. It can carry ringback, an announcement or another network message. Its presence does not, by itself, mean false answer supervision. The problem arises when a dialer or an intermediate system treats early media as if the called party answered, or when call records and the actual media tell conflicting stories.

This distinction matters in debugging. A trace that shows early media followed by a normal final answer is not the same event as a final answer followed by silence. Treating both as “FAS” can send an investigation in the wrong direction. Check the protocol state and audio timing before changing dialer behavior or assigning the issue to a carrier.

What each detection approach can tell you

SIP tracing is the right first tool for reconstructing signaling: responses, timing and media negotiation. It is not an acoustic classifier. A 200 OK cannot tell you whether the audio was a human greeting, voicemail, ringback or silence. Call records add useful context, but they also do not reveal the content of the audio.

Built-in dialer AMD can make a human-versus-voicemail decision, but operators should validate how it behaves against their own traffic and latency constraints. Silence-based rules can struggle when the opening audio is atypical. Real-time audio analysis adds evidence about the sound itself; it should complement, not replace, signaling review when the question is whether a carrier falsely reported an answer.

AMDY.IO provides real-time audio analysis to distinguish human responses from voicemails and flags carrier false answers. It supports integration through a native installer or WebSocket API. That makes it an option for teams that want acoustic classification alongside their dialer workflow, not a substitute for examining the SIP path. The service includes 50,000 free detections upon signup; teams should still test against their own call mix before drawing performance conclusions.

For a practical investigation, compare call-level traces, records and audio evidence, then look for repeatable discrepancies by route or carrier. The paper’s guide to auditing carrier false answer supervision in Asterisk covers that evidence-gathering process. For teams weighing audio classification against longer analysis windows, the discussion of acoustic fingerprints and the cost of waiting adds the latency trade-off.

Choose evidence before a remedy

Dead air, fake ringback and early media are not interchangeable labels. Dead air describes missing or unhelpful audio after an apparent answer. Fake ringback describes ringback-like audio that conflicts with the answer state. Early media describes audio before final answer and may be entirely normal. A sound-based detector can help classify what reached the call, while SIP analysis establishes when the network said it happened.

Keep both records when investigating suspected FAS. A signaling-only check risks mistaking an answered state for a human conversation. An audio-only check risks missing the protocol sequence. The useful finding comes from aligning the two.

More from AMDY.IO News