Fraud Types
Breaking into a business phone system or SIP trunk — usually through weak credentials or an exposed port — to place fraudulent outbound calls.
Attackers scan the internet for SIP endpoints on port 5060, then brute-force extension passwords or exploit default credentials and unpatched software. Once inside they place high volumes of international calls, often overnight.
Warning signs include registration attempts from unfamiliar IP ranges, sudden calls to destinations the customer has never dialed, and a spike in concurrent channels on a single trunk.
Your customer's compromised PBX becomes your fraud problem, because the traffic originates on your switch and appears in your settlement.
The unauthorized use of a phone system or account to place calls that someone else has to pay for, usually to expensive international destinations.
A virtual connection that carries voice calls over IP between a business phone system and a voice provider, replacing physical phone lines.
Fraud in which criminals drive traffic to expensive international premium numbers they control and take a share of the termination revenue.
The network element that sits at the edge of a voice network to control signaling and media, enforce security policy, and normalize SIP between networks.
SipShield scores live SIP traffic with patented AI so the controls behind this term run automatically — and leave the audit trail regulators expect.