Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-06-18 Thread Ryan Delgrosso
I had built a system not so long ago that tracked day over day traffic 
from my network by destination NPA/NXX and was able to pinpoint this 
sort of thing by simply looking for seismic deviations from the norm 
(volume or cost). Sure we would get occasional false positives when a 
new customer with a really specific marketing business might turn up, 
but it really wasn't hard to build and resulted in a good measure of 
safety from a backstop perspective.


We just used the systems output to focus manual investigations, not to 
power an automated system. Too much risk in automating domestic traffic 
cutoffs.


FWIW we were an end-user network, not a wholesale network so we didnt 
get the random sampling that wholesalers might which would likely have 
changed some of the knobs on my selected criteria.



On 6/17/2019 7:20 PM, Matthew Yaklin wrote:
I am not sure if this is feasible for someone to do easily so I do not 
bother you too much... but does anyone have a spreadsheet of the nanp 
npa-nxx(s) you keep a very close eye on for fraud? I am not sure how 
well we keep an eye on such things here. I would like to explore it 
more. Naturally we keep an very close watch on international and brute 
force attacks.


Matthew Yaklin
Network Engineer
FirstLight
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net | www.firstlight.net
This email may contain FirstLight confidential and/or privileged 
information. If you are not the intended recipient, you are directed
not to read, disclose or otherwise use this transmission and to 
immediately delete same. Delivery of this message is not intended

to waive any applicable privileges.


*From:* VoiceOps  on behalf of Robert 
Dawson 

*Sent:* Monday, June 17, 2019 7:18:43 PM
*To:* Paul Timmins; Paul Timmins; voiceops@voiceops.org
*Subject:* Re: [VoiceOps] 605-562 - Arbitrage scam?

Interesting that you haven’t really seen that much domestic . . . I’d 
say that domestic fraud accounts for at least 40% of the attempts we 
have seen over the last year or so, with another 40% to NANP “island” 
destinations (DR in particular) and the remaining to international. 
Definitely different than a few years back when almost everything was 
to African destinations.


The fraudsters are very smart and evolve over time, always have to be 
vigilant!


*From: *Paul Timmins 
*Date: *Monday, June 17, 2019 at 6:48 PM
*To: *Robert Dawson , Paul Timmins 
, "voiceops@voiceops.org" 

*Subject: *RE: [VoiceOps] 605-562 - Arbitrage scam?

I can just augment my existing one we developed in house easily 
enough. But the new behavior that's concerning is hacked endpoints 
calling the numbers. I'm used to "traffic pumping" being  free 
services people actually want leveraging arbitrage, but attracting 
fraudulent traffic from hacked handsets isn't something I've ever seen 
on domestic traffic before.


Bold, since it implies there's revenue share, and federal law can 
reach a tribe in a way that the usual banana republic telco fraud in 
the 3rd world can't.


-Paul



*From:*VoiceOps [voiceops-boun...@voiceops.org] on behalf of Robert 
Dawson [rdaw...@alliedtelecom.net]

*Sent:* Monday, June 17, 2019 6:25 PM
*To:* Paul Timmins; voiceops@voiceops.org
*Subject:* Re: [VoiceOps] 605-562 - Arbitrage scam?

Jumping in on this one late – Pine Ridge is most well-known for the 
Ogala Lakota reservation that is located there. Numbers are in fact 
owned by Native American Telecom which is tribally owned and has had 
traffic pumping charges levelled against them as someone else 
mentioned. Payday lenders have used tribal law for years to get around 
usury laws, there was one company that was charging something like 
900% effective interest. Repayment on a $10k loan was something like 
$75k. Wondering if they can somehow skirt Federal telecom law too?


Paul, you are 100% correct – any fraud detection system that is only 
looking at International destinations would not pick it up . . . you 
definitely need something that can, at a minimum, be configured to 
look at call velocity and volume to US destinations. I can make a 
recommendation if you are interested.


Rob

*From: *VoiceOps  on behalf of Paul 
Timmins 

*Date: *Wednesday, May 29, 2019 at 4:54 PM
*To: *Matthew Yaklin , "voiceops@voiceops.org" 


*Subject: *Re: [VoiceOps] 605-562 - Arbitrage scam?

Yeah, what makes it notable in this case is it seems like it's dead 
air calls and hacked phones like traditional international fraud, not 
free conference call services.


On 5/29/19 4:16 PM, Matthew Yaklin wrote:

Nevermind.. you meant interstate calling fraud detection systems I
assume. Sorry. Please ignore me. I just reread again.

*Matthew Yaklin*

Network Engineer

*FirstLight*

359 Corporate Drive │ Portsmouth, NH 03801

   

Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-06-18 Thread Mike Ray, MBA, CNE, CTE
I can confirm we’ve seen fraud to this NPANXX also on our carrier network.  In 
our case, a customer PBX was hacked and all of their call paths were filled 
with never-ending calls to random numbers in this exchange.  In our case also, 
all calls answered with dead air.  The calls stayed up until we killed them.  
Most LD companies don’t seem to terminate to this exchange at all, but Level 3 
did for a high price.  That was expensive; we had assumed that the FCC’s ICC 
reform had done away with high-cost domestic destinations.  We block this 
NPANXX now, and have never had a complaint about it being blocked.

 

 

Mike Ray, MBA, CNE, CTE

Astro Companies, LLC

11523 Palm Brush Trail #401

Lakewood Ranch, FL  34202

DIRECT: call or text 941 600-0207

 <http://www.astrocompanies.com/> http://www.astrocompanies.com

 

 

From: VoiceOps  On Behalf Of Robert Dawson
Sent: Monday, June 17, 2019 6:25 PM
To: Paul Timmins ; voiceops@voiceops.org
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?

 

Jumping in on this one late – Pine Ridge is most well-known for the Ogala 
Lakota reservation that is located there. Numbers are in fact owned by Native 
American Telecom which is tribally owned and has had traffic pumping charges 
levelled against them as someone else mentioned. Payday lenders have used 
tribal law for years to get around usury laws, there was one company that was 
charging something like 900% effective interest. Repayment on a $10k loan was 
something like $75k. Wondering if they can somehow skirt Federal telecom law 
too?

 

Paul, you are 100% correct – any fraud detection system that is only looking at 
International destinations would not pick it up . . . you definitely need 
something that can, at a minimum, be configured to look at call velocity and 
volume to US destinations. I can make a recommendation if you are interested.

 

Rob

 

From: VoiceOps mailto:voiceops-boun...@voiceops.org> > on behalf of Paul Timmins 
mailto:p...@timmins.net> >
Date: Wednesday, May 29, 2019 at 4:54 PM
To: Matthew Yaklin mailto:myak...@firstlight.net> >, 
"voiceops@voiceops.org <mailto:voiceops@voiceops.org> " mailto:voiceops@voiceops.org> >
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?

 

Yeah, what makes it notable in this case is it seems like it's dead air calls 
and hacked phones like traditional international fraud, not free conference 
call services.

 

On 5/29/19 4:16 PM, Matthew Yaklin wrote:

Nevermind.. you meant interstate calling fraud detection systems I assume. 
Sorry. Please ignore me. I just reread again.

 

Matthew Yaklin

Network Engineer

FirstLight

359 Corporate Drive │ Portsmouth, NH 03801

Mobile 603-845-5031

myak...@firstlight.net <mailto:myak...@firstlight.net>  | www.firstlight.net 
<http://www.firstlight.net> 

This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed

not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended

to waive any applicable privileges.

 

  _  

From: VoiceOps  <mailto:voiceops-boun...@voiceops.org> 
 on behalf of Matthew Yaklin  
<mailto:myak...@firstlight.net> 
Sent: Wednesday, May 29, 2019 4:14:02 PM
To: Paul Timmins; voiceops@voiceops.org <mailto:voiceops@voiceops.org> 
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam? 

 

Paul,

 

Why do you mention international toll fraud when that is an area code and 
exchange for

Pine Ridge South Dakota?

 

And just imagining how small that company must be wouldn't a logical guess be 
more like they just messed up in some fashion?

 

But in your defense that telecom company is fishy and Sprint tried to sue them. 
I am not sure what ended up happening. Typical crap with free conf stuff and 
having traffic sent to a high cost area...

 

 

 

Matthew Yaklin

Network Engineer

FirstLight

359 Corporate Drive │ Portsmouth, NH 03801

Mobile 603-845-5031

myak...@firstlight.net <mailto:myak...@firstlight.net>  | www.firstlight.net 
<http://www.firstlight.net> 

This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed

not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended

to waive any applicable privileges.

 

  _  

From: VoiceOps  <mailto:voiceops-boun...@voiceops.org> 
 on behalf of Paul Timmins  
<mailto:p...@timmins.net> 
Sent: Wednesday, May 29, 2019 3:50:35 PM
To: voiceops@voiceops.org <mailto:voiceops@voiceops.org> 
Subject: [VoiceOps] 605-562 - Arbitrage scam? 

 

Is anyone else seeing lots of long duration calls to the 605-562 
exchange that when you dial the respective number, it supervises to dead 
air?

Seems like a new kind of toll fraud that international fraud detection 
s

Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-06-17 Thread paul
To be fair with our aggressive fraud controls and our honeypots that are linked to our DDoS control system that nullroute SIP scanners, etc we don't see fraud much at all (it used to hit us a LOT, but we slow down scanners quite a bit), and most of what we do catch is speedruns toward NGNs and high cost prefixes in G20 nations these days just like the olden days. Less East Timor, more UK NGNs. Some Caribbean fraud but not a ton.Beyond this reservation telco, I'm with Matt, if there's bad actors out there in the US let's throw out some OCNs and we can build up high risk destinations.On Jun 17, 2019 19:18, Robert Dawson  wrote:



Interesting that you haven’t really seen that much domestic . . . I’d say that domestic fraud accounts for at least 40% of the attempts we have seen over the last year or so, with another 40% to NANP “island” destinations (DR in particular)
 and the remaining to international. Definitely different than a few years back when almost everything was to African destinations.
 
The fraudsters are very smart and evolve over time, always have to be vigilant!
 

From: Paul Timmins 
Date: Monday, June 17, 2019 at 6:48 PM
To: Robert Dawson , Paul Timmins , "voiceops@voiceops.org" 
Subject: RE: [VoiceOps] 605-562 - Arbitrage scam?


 







I can just augment my existing one we developed in house easily enough. But the new behavior that's concerning is hacked endpoints calling the numbers. I'm used
 to "traffic pumping" being  free services people actually want leveraging arbitrage, but attracting fraudulent traffic from hacked handsets isn't something I've ever seen on domestic traffic before.


 


Bold, since it implies there's revenue share, and federal law can reach a tribe in a way that the usual banana republic telco fraud in the 3rd world can't.


 


-Paul


 


 






From: VoiceOps [voiceops-boun...@voiceops.org]
 on behalf of Robert Dawson [rdaw...@alliedtelecom.net]
Sent: Monday, June 17, 2019 6:25 PM
To: Paul Timmins; voiceops@voiceops.org
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?



Jumping in on this one late – Pine Ridge is most well-known for the Ogala Lakota reservation that is located there. Numbers are in fact owned by Native American Telecom which is tribally owned and has had traffic
 pumping charges levelled against them as someone else mentioned. Payday lenders have used tribal law for years to get around usury laws, there was one company that was charging something like 900% effective interest. Repayment on a $10k loan was something
 like $75k. Wondering if they can somehow skirt Federal telecom law too?
 
Paul, you are 100% correct – any fraud detection system that is only looking at International destinations would not pick it up . . . you definitely need something that can, at a minimum, be configured to look
 at call velocity and volume to US destinations. I can make a recommendation if you are interested.
 
Rob
 

From: VoiceOps  on behalf of Paul Timmins 
Date: Wednesday, May 29, 2019 at 4:54 PM
To: Matthew Yaklin , "voiceops@voiceops.org" 
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?


 


Yeah, what makes it notable in this case is it seems like it's dead air calls and hacked phones like traditional international fraud, not free conference call services.


 


On 5/29/19 4:16 PM, Matthew Yaklin wrote:



Nevermind.. you meant interstate calling fraud detection systems I assume. Sorry. Please ignore me. I just reread again.
 



Matthew Yaklin


Network Engineer


FirstLight


359 Corporate Drive │ Portsmouth, NH 03801


Mobile 603-845-5031


myak...@firstlight.net |

www.firstlight.net


This email may contain FirstLight confidential and/or privileged information. If you are not the intended recipient, you are directed


not to read, disclose or otherwise use this transmission and to immediately delete same. Delivery of this message is not intended


to waive any applicable privileges.

 







From: VoiceOps
 on behalf of Matthew Yaklin

Sent: Wednesday, May 29, 2019 4:14:02 PM
To: Paul Timmins; voiceops@voiceops.org
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam? 

 




Paul,
 
Why do you mention international toll fraud when that is an area code and exchange for
Pine Ridge South Dakota?
 
And just imagining how small that company must be wouldn't a logical guess be more like they just messed up in some fashion?
 
But in your defense that telecom company is fishy and Sprint tried to sue them. I am not sure what ended up happening. Typical crap with free conf stuff and having traffic sent
 to a high cost area...
 
 
 



Matthew Yaklin


Network Engineer


FirstLight


359 Corporate Drive │ Portsmouth, NH 03801


Mobile 603-845-5031


myak...@firstlight.net |

www.firstlight.net


This email may contain FirstLight confidential and/or privileged information. If you are not the intended recipient, you are directed


not to read, disclose or otherwise use this transmission and to immediately delete 

Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-06-17 Thread Matthew Yaklin
I am not sure if this is feasible for someone to do easily so I do not bother 
you too much... but does anyone have a spreadsheet of the nanp npa-nxx(s) you 
keep a very close eye on for fraud? I am not sure how well we keep an eye on 
such things here. I would like to explore it more. Naturally we keep an very 
close watch on international and brute force attacks.

Matthew Yaklin
Network Engineer
FirstLight
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net | www.firstlight.net
This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed
not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended
to waive any applicable privileges.


From: VoiceOps  on behalf of Robert Dawson 

Sent: Monday, June 17, 2019 7:18:43 PM
To: Paul Timmins; Paul Timmins; voiceops@voiceops.org
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?


Interesting that you haven’t really seen that much domestic . . . I’d say that 
domestic fraud accounts for at least 40% of the attempts we have seen over the 
last year or so, with another 40% to NANP “island” destinations (DR in 
particular) and the remaining to international. Definitely different than a few 
years back when almost everything was to African destinations.



The fraudsters are very smart and evolve over time, always have to be vigilant!



From: Paul Timmins 
Date: Monday, June 17, 2019 at 6:48 PM
To: Robert Dawson , Paul Timmins , 
"voiceops@voiceops.org" 
Subject: RE: [VoiceOps] 605-562 - Arbitrage scam?



I can just augment my existing one we developed in house easily enough. But the 
new behavior that's concerning is hacked endpoints calling the numbers. I'm 
used to "traffic pumping" being  free services people actually want leveraging 
arbitrage, but attracting fraudulent traffic from hacked handsets isn't 
something I've ever seen on domestic traffic before.



Bold, since it implies there's revenue share, and federal law can reach a tribe 
in a way that the usual banana republic telco fraud in the 3rd world can't.



-Paul







From: VoiceOps [voiceops-boun...@voiceops.org] on behalf of Robert Dawson 
[rdaw...@alliedtelecom.net]
Sent: Monday, June 17, 2019 6:25 PM
To: Paul Timmins; voiceops@voiceops.org
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?

Jumping in on this one late – Pine Ridge is most well-known for the Ogala 
Lakota reservation that is located there. Numbers are in fact owned by Native 
American Telecom which is tribally owned and has had traffic pumping charges 
levelled against them as someone else mentioned. Payday lenders have used 
tribal law for years to get around usury laws, there was one company that was 
charging something like 900% effective interest. Repayment on a $10k loan was 
something like $75k. Wondering if they can somehow skirt Federal telecom law 
too?



Paul, you are 100% correct – any fraud detection system that is only looking at 
International destinations would not pick it up . . . you definitely need 
something that can, at a minimum, be configured to look at call velocity and 
volume to US destinations. I can make a recommendation if you are interested.



Rob



From: VoiceOps  on behalf of Paul Timmins 

Date: Wednesday, May 29, 2019 at 4:54 PM
To: Matthew Yaklin , "voiceops@voiceops.org" 

Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?



Yeah, what makes it notable in this case is it seems like it's dead air calls 
and hacked phones like traditional international fraud, not free conference 
call services.



On 5/29/19 4:16 PM, Matthew Yaklin wrote:

Nevermind.. you meant interstate calling fraud detection systems I assume. 
Sorry. Please ignore me. I just reread again.



Matthew Yaklin

Network Engineer

FirstLight

359 Corporate Drive │ Portsmouth, NH 03801

Mobile 603-845-5031

myak...@firstlight.net<mailto:myak...@firstlight.net> | 
www.firstlight.net<http://www.firstlight.net>

This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed

not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended

to waive any applicable privileges.





From: VoiceOps 
<mailto:voiceops-boun...@voiceops.org> on behalf 
of Matthew Yaklin <mailto:myak...@firstlight.net>
Sent: Wednesday, May 29, 2019 4:14:02 PM
To: Paul Timmins; voiceops@voiceops.org<mailto:voiceops@voiceops.org>
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?



Paul,



Why do you mention international toll fraud when that is an area code and 
exchange for

Pine Ridge South Dakota?



And just imagining how small that company must be wouldn't a logical guess be 
more like

Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-06-17 Thread Robert Dawson
Jumping in on this one late – Pine Ridge is most well-known for the Ogala 
Lakota reservation that is located there. Numbers are in fact owned by Native 
American Telecom which is tribally owned and has had traffic pumping charges 
levelled against them as someone else mentioned. Payday lenders have used 
tribal law for years to get around usury laws, there was one company that was 
charging something like 900% effective interest. Repayment on a $10k loan was 
something like $75k. Wondering if they can somehow skirt Federal telecom law 
too?

Paul, you are 100% correct – any fraud detection system that is only looking at 
International destinations would not pick it up . . . you definitely need 
something that can, at a minimum, be configured to look at call velocity and 
volume to US destinations. I can make a recommendation if you are interested.

Rob

From: VoiceOps  on behalf of Paul Timmins 

Date: Wednesday, May 29, 2019 at 4:54 PM
To: Matthew Yaklin , "voiceops@voiceops.org" 

Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?

Yeah, what makes it notable in this case is it seems like it's dead air calls 
and hacked phones like traditional international fraud, not free conference 
call services.  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌  ‌
Report This 
Email<https://shared.outlook.inky.com/report?id=YWxsaWVkdGVsZWNvbS90d2ViYkBhbGxpZWR0ZWxlY29tLm5ldC8xNmZlM2Y2Y2ExZjhlOGY0MWNiZTc3NGFhZWFmNWViNS8xNTU5MTYzMjY4LjU3#key=a6e58de17f79cb436fb6a8de1903c45b>

Yeah, what makes it notable in this case is it seems like it's dead air calls 
and hacked phones like traditional international fraud, not free conference 
call services.

On 5/29/19 4:16 PM, Matthew Yaklin wrote:

Nevermind.. you meant interstate calling fraud detection systems I assume. 
Sorry. Please ignore me. I just reread again.


Matthew Yaklin
Network Engineer
FirstLight
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net<mailto:myak...@firstlight.net> | 
www.firstlight.net<https://shared.outlook.inky.com/link?domain=www.firstlight.net=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eJxVj1FLwzAUhf9LnstWOgeuT6K4vqwZuLYhYVDS5c6ku6kjSdei-N-N4ss4j-fj8J0vMjokOdEhXPPj8ricpmlxNs4HNO86LAYIJCEBpDUqYhLRgAqAcPqwv4V2IEOLcIO4kibkj-Js9pI1F1U0XjB66w6bVGWN4Zdn3RXzVbC3VLAZebYJO7tG9fI4UyuwzHjM6yx6jfuCpyWjRlSnFS22WrCtpawx9BDZql6XFf8se_6w6-tVFDFDADfIKHGW6CEhowfXgpUGW6mUA--jWJig657uTvw_3NckH0bE7x8pe14I.MEYCIQDBUkbZVVYIyjYcaQ2KsyXkbdP6zkKTS9f4rhdhCTREsgIhAJzUxaR_DVNCkLjxMbfdowwodXsQsw6Mf6StGvmkM8cU>
This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed
not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended
to waive any applicable privileges.


From: VoiceOps 
<mailto:voiceops-boun...@voiceops.org> on behalf 
of Matthew Yaklin <mailto:myak...@firstlight.net>
Sent: Wednesday, May 29, 2019 4:14:02 PM
To: Paul Timmins; voiceops@voiceops.org<mailto:voiceops@voiceops.org>
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?


Paul,



Why do you mention international toll fraud when that is an area code and 
exchange for

Pine Ridge South Dakota?



And just imagining how small that company must be wouldn't a logical guess be 
more like they just messed up in some fashion?



But in your defense that telecom company is fishy and Sprint tried to sue them. 
I am not sure what ended up happening. Typical crap with free conf stuff and 
having traffic sent to a high cost area...






Matthew Yaklin
Network Engineer
FirstLight
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net<mailto:myak...@firstlight.net> | 
www.firstlight.net<https://shared.outlook.inky.com/link?domain=www.firstlight.net=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eJxVj1FLwzAUhf9LnstWOgeuT6K4vqwZuLYhYVDS5c6ku6kjSdei-N-N4ss4j-fj8J0vMjokOdEhXPPj8ricpmlxNs4HNO86LAYIJCEBpDUqYhLRgAqAcPqwv4V2IEOLcIO4kibkj-Js9pI1F1U0XjB66w6bVGWN4Zdn3RXzVbC3VLAZebYJO7tG9fI4UyuwzHjM6yx6jfuCpyWjRlSnFS22WrCtpawx9BDZql6XFf8se_6w6-tVFDFDADfIKHGW6CEhowfXgpUGW6mUA--jWJig657uTvw_3NckH0bE7x8pe14I.MEYCIQDBUkbZVVYIyjYcaQ2KsyXkbdP6zkKTS9f4rhdhCTREsgIhAJzUxaR_DVNCkLjxMbfdowwodXsQsw6Mf6StGvmkM8cU>
This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed
not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended
to waive any applicable privileges.


From: VoiceOps 
<mailto:voiceops-boun...@voiceops.org> on behalf 
of Paul Timmins <mailto:p...@timmins.net>
Sent: Wednesday, May 29, 2019 3:50:35 PM
To: voiceops@voiceops.org<mailto:voiceops@voiceops.org>
Subject: [VoiceOps] 605-562 - Arbitrage scam?

Is anyone else seeing lots of long duration calls to the 605-562

Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-05-29 Thread Paul Timmins
Yeah, what makes it notable in this case is it seems like it's dead air 
calls and hacked phones like traditional international fraud, not free 
conference call services.


On 5/29/19 4:16 PM, Matthew Yaklin wrote:


Nevermind.. you meant interstate calling fraud detection systems I 
assume. Sorry. Please ignore me. I just reread again.



*Matthew Yaklin*
Network Engineer
*FirstLight*
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net | www.firstlight.net
/This email may contain FirstLight confidential and/or privileged 
information. If you are not the intended recipient, you are directed/
/not to read, disclose or otherwise use this transmission and to 
immediately delete same. Delivery of this message is not intended/

/to waive any applicable privileges./


*From:* VoiceOps  on behalf of Matthew 
Yaklin 

*Sent:* Wednesday, May 29, 2019 4:14:02 PM
*To:* Paul Timmins; voiceops@voiceops.org
*Subject:* Re: [VoiceOps] 605-562 - Arbitrage scam?

Paul,


Why do you mention international toll fraud when that is an area code 
and exchange for


Pine Ridge South Dakota?


And just imagining how small that company must be wouldn't a logical 
guess be more like they just messed up in some fashion?



But in your defense that telecom company is fishy and Sprint tried to 
sue them. I am not sure what ended up happening. Typical crap with 
free conf stuff and having traffic sent to a high cost area...





*Matthew Yaklin*
Network Engineer
*FirstLight*
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net | www.firstlight.net
/This email may contain FirstLight confidential and/or privileged 
information. If you are not the intended recipient, you are directed/
/not to read, disclose or otherwise use this transmission and to 
immediately delete same. Delivery of this message is not intended/

/to waive any applicable privileges./


*From:* VoiceOps  on behalf of Paul 
Timmins 

*Sent:* Wednesday, May 29, 2019 3:50:35 PM
*To:* voiceops@voiceops.org
*Subject:* [VoiceOps] 605-562 - Arbitrage scam?
Is anyone else seeing lots of long duration calls to the 605-562
exchange that when you dial the respective number, it supervises to dead
air?

Seems like a new kind of toll fraud that international fraud detection
systems won't catch.

-Paul

___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops



___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-05-29 Thread Shripal Daphtary
we got hit with many 100k's from a few users.  its a really expensive npa
nxx.  free conf call type of service.



On Wed, May 29, 2019 at 3:51 PM Paul Timmins  wrote:

> Is anyone else seeing lots of long duration calls to the 605-562
> exchange that when you dial the respective number, it supervises to dead
> air?
>
> Seems like a new kind of toll fraud that international fraud detection
> systems won't catch.
>
> -Paul
>
> ___
> VoiceOps mailing list
> VoiceOps@voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>
___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-05-29 Thread Matthew Yaklin
Nevermind.. you meant interstate calling fraud detection systems I assume. 
Sorry. Please ignore me. I just reread again.


Matthew Yaklin
Network Engineer
FirstLight
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net | www.firstlight.net
This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed
not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended
to waive any applicable privileges.



From: VoiceOps  on behalf of Matthew Yaklin 

Sent: Wednesday, May 29, 2019 4:14:02 PM
To: Paul Timmins; voiceops@voiceops.org
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?


Paul,


Why do you mention international toll fraud when that is an area code and 
exchange for

Pine Ridge South Dakota?


And just imagining how small that company must be wouldn't a logical guess be 
more like they just messed up in some fashion?


But in your defense that telecom company is fishy and Sprint tried to sue them. 
I am not sure what ended up happening. Typical crap with free conf stuff and 
having traffic sent to a high cost area...




Matthew Yaklin
Network Engineer
FirstLight
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net | www.firstlight.net
This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed
not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended
to waive any applicable privileges.



From: VoiceOps  on behalf of Paul Timmins 

Sent: Wednesday, May 29, 2019 3:50:35 PM
To: voiceops@voiceops.org
Subject: [VoiceOps] 605-562 - Arbitrage scam?

Is anyone else seeing lots of long duration calls to the 605-562
exchange that when you dial the respective number, it supervises to dead
air?

Seems like a new kind of toll fraud that international fraud detection
systems won't catch.

-Paul

___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops
___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


Re: [VoiceOps] 605-562 - Arbitrage scam?

2019-05-29 Thread Matthew Yaklin
Paul,


Why do you mention international toll fraud when that is an area code and 
exchange for

Pine Ridge South Dakota?


And just imagining how small that company must be wouldn't a logical guess be 
more like they just messed up in some fashion?


But in your defense that telecom company is fishy and Sprint tried to sue them. 
I am not sure what ended up happening. Typical crap with free conf stuff and 
having traffic sent to a high cost area...




Matthew Yaklin
Network Engineer
FirstLight
359 Corporate Drive │ Portsmouth, NH 03801
Mobile 603-845-5031
myak...@firstlight.net | www.firstlight.net
This email may contain FirstLight confidential and/or privileged information. 
If you are not the intended recipient, you are directed
not to read, disclose or otherwise use this transmission and to immediately 
delete same. Delivery of this message is not intended
to waive any applicable privileges.



From: VoiceOps  on behalf of Paul Timmins 

Sent: Wednesday, May 29, 2019 3:50:35 PM
To: voiceops@voiceops.org
Subject: [VoiceOps] 605-562 - Arbitrage scam?

Is anyone else seeing lots of long duration calls to the 605-562
exchange that when you dial the respective number, it supervises to dead
air?

Seems like a new kind of toll fraud that international fraud detection
systems won't catch.

-Paul

___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops
___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops