News

News

How to Prevent VoIP Fraud and Toll Fraud

VoIP toll fraud is when attackers hijack your SIP credentials or PBX to make expensive international calls on your dime—often overnight—so prevention is about locking the front door and watching the meter.

Definition: Toll fraud is unauthorized use of a phone system to place calls (usually premium/international) for profit; in VoIP it exploits weak SIP credentials, open ports, or misconfigured trunks.

How attacks happen

Vector Weakness
Default credentials admin/admin on SIP accounts
Open SIP ports PBX exposed to the internet
Unrestricted outbound No destination/rate limits
No monitoring Fraud runs undetected for hours

Controls that work

  • Strong, unique credentials on every SIP account and the PBX.
  • Firewall + SBC at the edge; never expose the PBX directly.
  • Outbound restrictions: block high-risk destinations, set per-account limits.
  • Alerting: notify on spikes in call volume or off-hours international.
  • Regular updates and disabling unused accounts/trunks.

Newrock perspective

Newrock SBC enforces access control and topology hiding; OM-series supports account lockout and rate controls, and UMS helps spot anomalies across sites.

FAQ

Who pays for fraudulent calls?

Usually the system owner—carriers rarely refund toll fraud losses.

Is cloud safer than on-prem?

Both need hardening; cloud shifts some responsibility to the provider.

What's the fastest win?

Change default credentials and put an SBC/firewall in front of SIP.

How do I detect it quickly?

Set thresholds and alerts on call count/cost; review logs daily.

Conclusion

Toll fraud is preventable, not inevitable. Strong credentials, an SBC at the edge, outbound limits, and alerting turn a costly nightmare into a non-event.

Customer-centric, focus on customer value

Consult now

Copyright © New Rock Technologies, Inc. All Rights Reserved. 沪ICP备15008515号-1