Request a Fraud Risk Assessment
We recommend you request a ‘Fraud Risk Assessment’ be carried out by one of our technicians, even if you have had one in the past. This is especially important if you have made new additions to your system or changed passwords since your last audit. Please be aware that there will be a nominal charge of £125.00 per system. The lead time is currently 10 working days.
Toll Fraud Destinations
We have seen calls to premium rate numbers i.e. 09xxx, non-geographic numbers i.e. 0871, even 0844, mobile Wi-Fi numbers i.e. 07xxx as well as international destinations.
Toll fraud usually occurs outside business hours when the activity is unlikely to be noticed. Fraudsters can make vast amounts of calls, often running up bills of thousands of pounds per trunk per day until stopped, and because your carrier has provided its service legitimately to you they will charge for these calls. This means a bad case of toll fraud can have serious financial impact on your business.
How Does It Work?
We will remotely access your system to do the assessment.
The checks will include the following:
- Check system administration passwords and password ageing & notify you if found to be default settings.
- Check a number of user mailbox passwords at random.
- Review the switch setup in respect of barring, including trunk barring, remote access.
- If appropriate, update barring policies – i.e. known current mobile Wi-Fi numbers, include in the barring tables.
- Recommendations for additional programming if required and any costs that may be associated.
- Report on findings and what actions should be taken.
How to: Steps you can take to protect your business against Toll Fraud
There are some basic steps that you should take immediately to protect your system. While we cannot eliminate the potential for Toll Fraud, taking the steps outlined and adhering to any recommendations following a review will mitigate the impact.
If you have SIP devices (iPad, soft phone, mobile client, SIP phones etc.)
- You must ensure that a ‘strong’ password is used – not the extension number or an easy to ‘guess’ passwords.
- You should only use SIP devices if both the phone system and the SIP device have a mechanism to secure SIP (e.g. Digest Authentication).
- Never expose SIP phones (softphones or hardphones) to the Internet without encryption or a VPN. Talk to Britannic if you need advice on how to secure remote devices.
- Ensure that your individual voicemail users have changed their passwords and that passwords should be more than 6 digits with a numbers and special characters.
Please follow the below links for additional, system-specific information. If you have further questions, please don’t hesitate to contact your Britannic Account Manager to discuss your specific requirements.
