VoIP Fraud

Posted by Scott Laird Tue, 28 Jun 2005 02:43:19 GMT

It’s amazing the ways that people can find to steal money. The latest scam goes like this:

  1. Set up the local equivalent of a CLEC in some third-world country.
  2. Publish exorbitant rates for a block of numbers (say, $5/minute).
  3. Sign up with a US-based VoIP provider using a freshly-stolen credit-card number.
  4. Verify that the VoIP provider doesn’t know about your rates, and only charges a small fee to dial the country in question (say, $0.10/minute).
  5. Have a SIP auto-dialer call your numbers via the VoIP provider until the CC is declined or the account’s balance limit is hit.
  6. Repeat.
  7. At some point in the future, the VoIP provider will receive a massive bill from their upstream provider, while the Telco in whatever third-world country you’re using will hand you a big check.

This is just a twist on the old “modem dialer” scam, but it’s been costing VoIP providers big money. NuFone has apparently lost $400,000 recently, and other providers are reporting huge fraud rates–according to Teliax, roughly 1/3 of their new customer signups are fraudulent.

There’s a long thread following this on Digium’s list server.

It looks like this has helped kill at least one VoIP provider: LiveVoIP has declared bankruptcy, although they had a spotty reputation to start with.

Posted in ,  | Tags , , , ,  | 3 comments

Comments

  1. Mike said 5 months later:

    Quote ” rates–according to Teliax, roughly 1/3 of their new customer signups are fraudulent.”

    that was one day only. it triggered us into rethinking everything we do and now proud to say we have 0% fraud.

    our system is the MOST filtered out there with a false positive of around 0.2%

    Think Security , Think Teliax

    Just an update on a old thread i tought was needed

  2. segurança voip said 11 months later:

    it was obvious it would happen. And that’s just the begining of VoIP fraud.

  3. tanyalit@ukr.net said about 1 year later:

    Hello! We had an incident in our company. Our Gaitway CISCOAS5300 was broken into by someone and it was sent a great amount of traffic.

    Traffic was sent from these IPs: 202.190.202.140 65.99.220.228 65.99.200.70

    If you know these IPs please inform us. Thank you!

Comments are disabled