Re: [VoiceOps] 605-562 - Arbitrage scam?

Mon, 17 Jun 2019 22:55:21 -0700

To be fair with our aggressive fraud controls and our honeypots that are linked to our DDoS control system that nullroute SIP scanners, etc we don't see fraud much at all (it used to hit us a LOT, but we slow down scanners quite a bit), and most of what we do catch is speedruns toward NGNs and high cost prefixes in G20 nations these days just like the olden days. Less East Timor, more UK NGNs. Some Caribbean fraud but not a ton.

Beyond this reservation telco, I'm with Matt, if there's bad actors out there in the US let's throw out some OCNs and we can build up high risk destinations.

On Jun 17, 2019 19:18, Robert Dawson <[email protected]> wrote:

Interesting that you haven’t really seen that much domestic . . . I’d say that domestic fraud accounts for at least 40% of the attempts we have seen over the last year or so, with another 40% to NANP “island” destinations (DR in particular) and the remaining to international. Definitely different than a few years back when almost everything was to African destinations.

 

The fraudsters are very smart and evolve over time, always have to be vigilant!

 

From: Paul Timmins <[email protected]>
Date: Monday, June 17, 2019 at 6:48 PM
To: Robert Dawson <[email protected]>, Paul Timmins <[email protected]>, "[email protected]" <[email protected]>
Subject: RE: [VoiceOps] 605-562 - Arbitrage scam?

 

I can just augment my existing one we developed in house easily enough. But the new behavior that's concerning is hacked endpoints calling the numbers. I'm used to "traffic pumping" being  free services people actually want leveraging arbitrage, but attracting fraudulent traffic from hacked handsets isn't something I've ever seen on domestic traffic before.

 

Bold, since it implies there's revenue share, and federal law can reach a tribe in a way that the usual banana republic telco fraud in the 3rd world can't.

 

-Paul

 

 

From: VoiceOps [[email protected]] on behalf of Robert Dawson [[email protected]]
Sent: Monday, June 17, 2019 6:25 PM
To: Paul Timmins; [email protected]
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?

Jumping in on this one late – Pine Ridge is most well-known for the Ogala Lakota reservation that is located there. Numbers are in fact owned by Native American Telecom which is tribally owned and has had traffic pumping charges levelled against them as someone else mentioned. Payday lenders have used tribal law for years to get around usury laws, there was one company that was charging something like 900% effective interest. Repayment on a $10k loan was something like $75k. Wondering if they can somehow skirt Federal telecom law too?

 

Paul, you are 100% correct – any fraud detection system that is only looking at International destinations would not pick it up . . . you definitely need something that can, at a minimum, be configured to look at call velocity and volume to US destinations. I can make a recommendation if you are interested.

 

Rob

 

From: VoiceOps <[email protected]> on behalf of Paul Timmins <[email protected]>
Date: Wednesday, May 29, 2019 at 4:54 PM
To: Matthew Yaklin <[email protected]>, "[email protected]" <[email protected]>
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?

 

Yeah, what makes it notable in this case is it seems like it's dead air calls and hacked phones like traditional international fraud, not free conference call services.

 

On 5/29/19 4:16 PM, Matthew Yaklin wrote:

Nevermind.. you meant interstate calling fraud detection systems I assume. Sorry. Please ignore me. I just reread again.

 

Matthew Yaklin

Network Engineer

FirstLight

359 Corporate Drive │ Portsmouth, NH 03801

Mobile 603-845-5031

This email may contain FirstLight confidential and/or privileged information. If you are not the intended recipient, you are directed

not to read, disclose or otherwise use this transmission and to immediately delete same. Delivery of this message is not intended

to waive any applicable privileges.

 

From: VoiceOps <[email protected]> on behalf of Matthew Yaklin <[email protected]>
Sent: Wednesday, May 29, 2019 4:14:02 PM
To: Paul Timmins; [email protected]
Subject: Re: [VoiceOps] 605-562 - Arbitrage scam?

 

Paul,

 

Why do you mention international toll fraud when that is an area code and exchange for

Pine Ridge South Dakota?

 

And just imagining how small that company must be wouldn't a logical guess be more like they just messed up in some fashion?

 

But in your defense that telecom company is fishy and Sprint tried to sue them. I am not sure what ended up happening. Typical crap with free conf stuff and having traffic sent to a high cost area...

 

 

 

Matthew Yaklin

Network Engineer

FirstLight

359 Corporate Drive │ Portsmouth, NH 03801

Mobile 603-845-5031

This email may contain FirstLight confidential and/or privileged information. If you are not the intended recipient, you are directed

not to read, disclose or otherwise use this transmission and to immediately delete same. Delivery of this message is not intended

to waive any applicable privileges.

 

From: VoiceOps <[email protected]> on behalf of Paul Timmins <[email protected]>
Sent: Wednesday, May 29, 2019 3:50:35 PM
To: [email protected]
Subject: [VoiceOps] 605-562 - Arbitrage scam?

 

Is anyone else seeing lots of long duration calls to the 605-562
exchange that when you dial the respective number, it supervises to dead
air?

Seems like a new kind of toll fraud that international fraud detection
systems won't catch.

-Paul

_______________________________________________
VoiceOps mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/voiceops

 

_______________________________________________
VoiceOps mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/voiceops

Reply via email to