document d'information générale CLI Refiling.pptx

fraude management, outils de contrôle et de sécurisation des revenus

1. UNDERSTAND INNOVATE SOLVE 1 CLI Refiling/Manipulation

2. Agenda : 2 CLI Refiling Scenarios CLI Refiling Detections CLI Refiling Impact  

3. 3 CLI Refiling Scenarios Part One

4. SIM Box vs CLI Manipulation Incoming Call Incoming Call Carrier Operator GW-MSC MSC 4 Tower Tower On-Net SIM Box Customer

5. 5 CLI Manipulation Also known as: CLI Refiling, CLI Masking or CLI Spoofing. When a Carrier or an Operator changes the Caller ID; then route the call through trunks using lower Rates to increase the margin Carrier CLI refiling Operator CLI refiling CLI Manipulation Types

6. Operator CLI Manipulation Victim Operator Local Trunk 0.02$ International Trunk 0.25$ Offending Operator Customer [phone] [phone] [phone] The Offending Operator refiles Caller number with their number then route the call through local dedicated Trunk 6

7. Carrier CLI Manipulation Victim Operator Special Rate Trunk 0.09$ International Trunk 0.25$ Offending Carrier Customer [phone] [phone] [phone] The Offending carrier sends the call through the dedicated route with discounted rates or refiles the caller number to discounted country numbers 7

8. 8 CLI Refiling Detection Part Two

9. CLI Refiling Indicators: These are the common trends where CLI Refiling is occurring: Decrease in International Voice termination traffic / increase in domestic (local) transit traffic. Decrease in International Voice termination traffic on one trunk (higher tariff) and increase in another trunk (lower tariff). Decrease in International Voice termination traffic from one origin (higher CLI-based tariff) and increase in another origin (lower CLI-based tariff). International calls from local A party CLIs with good voice quality. Most of qualifications from TCG campaign are Unknown or Unallocated ranges. 9

10. CLI Refiling Detection : Information Required for Detecting CLI Refiling for Analysis : Sample detections for a specific period from completed calls with chargeable durations for each operator to further investigate which Trunk suspect refiled CLIs came from. Interconnect CDRs for all calls terminated to TCG numbers in the sample for the given period.  Incoming trunk information which identifies the owner of the trunk and its type (Local, International). 10

11. CLI Refiling Detection : Map record samples with the provided Interconnect CDRs using Received CLIs from the campaign results and the calling number from the CDRs, Date and time of the call, duration of the calls and the called phone numbers.   Verify the trunk type: check all calls and classify based on the incoming trunk.  11

12. 12 CLI Manipulation Impact Part Three

13. Financial Impact 13 Customer Experience Impact Security Impact CLI Manipulation Impact The operator’s revenue from International terminated traffic is impacted by billing the calls with rate less that what Some customers don’t answer calls from numbers they don’t know. The customer will not be able to call back a manipulated CLI Scammers can use International traffic to impersonate actual subscribers. Criminals can also use it to remain anonymous

14. www.latro.com [email protected] THANK YOU!