XFraud

• Telephone traffic arriving on an operator’s carrier switches and interconnection trunks is continuously checked for specific telephone numbers, format, plausibility, volume, origin, destination, time and other specific parameters.
• As part of this, various references are used as a basis for specific protective actions.
  • Lists: known fraudulent origin or destination numbers or ranges of numbers are automatically blocked.
  • Call volume and pattern: unknown, sudden sharp increases in telephone volumes are detected immediately.
  • Call times: sharp increase in call volumes at unusual times of the day or on unusual days are suspicious and are analyzed accordingly by XFraud, learned and, if necessary, alerted or even prevented.

• XFraud also uses internal operator sources to detect fraudulent calls. Incoming call data records (CDRs), for example, are analyzed by carrier switches in near real time and processed by an extremely wide variety of rules, logics and algorithms instantly.
• Newly discovered rule violations or unusual patterns are identified and appropriate rule actions are immediately applied to specific telephone number(s) or trunks.
• Country-specific, additional, external sources of information are dynamically available depending on the area of application (country) and regulation. When available, they are connected electronically via API and integrated into the processing logics.
• Additional, manual entries can be made using the graphical user interface at any time, either as an additive or a complementary solution.

• XFraud acts based on preconfigured action plans and self-learning algorithms
• Defined, dynamic lists with registered numbers or ranges of numbers
• Alerts via SMS, email and push notifications
• Automatic opening of trouble tickets
• Automatic switch provisioning and list enrichment of numbers/trunks to be blocked
  • Blocked numbers and trunks are marked uniquely and with a time stamp so that they can be post-processed

The XFraud Traffic Profiler is a logical control unit

• Threshold and alerting values are defined per month, day and hour, for example. Continuous comparisons with reference or historical data are conducted.
• Ad-hoc tests can also be performed manually in live mode. If required, individual rules can also be activated/deactivated in live mode.
• Destination screening using volume thresholds are also available as high-usage monitoring.

• XFraud produces statistical tables or graphical reports that assist users in manually identifying and narrowing down any qualifications of fraud.
• Fraudulent activities often start with a test at a usual time of day (proof of concept phase). The actual fraud then intentionally takes place at times when operational teams at carriers and service providers most likely won’t be working.
• Fraudsters commercially exploit surprise effects. XFraud helps operational teams with automatically detecting patterns and automatically initiating any necessary switch blocking. Appropriate push notifications are sent.

• Fraudulent activities often start with a test at a usual time of day (proof of concept phase) and in small, inconspicuous quantities.
• The actual fraud then intentionally takes place at times when operational teams at carriers and service providers most likely won’t be working, e.g. at night or on weekends and public holidays.