Home › Cybersecurity wiki › What is toll fraud?

Wiki

What is toll fraud?

Toll fraud runs up telephone or premium rate charges by abusing a phone system, a voicemail box, or a calling plan that the victim must pay.

The loss appears as call charges, which separates it from a stolen card purchase or a three party resale scheme.

How it works

Attackers place expensive calls through a company phone system, a voicemail feature that dials outward, or a compromised calling account.
Bills can grow for hours before anyone notices the destinations.

Restricting premium and unexpected international routes stops most of the loss even while the entry point is still under investigation.
Volume alerts matter because the fraud is measured in minutes and money.

Concrete examples

  • A company phone system places hundreds of premium calls overnight.
  • A voicemail box is set so callers are forwarded into an outbound call.
  • A cloud calling account dials expensive routes from a country it never used.

Protective measures

  • Block premium destinations and unexpected international routes by default.
  • Turn off outbound dialing from voicemail unless a real process needs it.
  • Alert when call volume or cost jumps far above the normal day.
  • Protect phone administration accounts with strong authentication separate from ordinary mail.