1 / 50

Dismantling an International Fraud Ring in Brazil

Dismantling an International Fraud Ring in Brazil. cliff jordan. oct 2003. Communications Fraud Control Association (CFCA) Conference San Diego, California. Purpose of Discussion. Share our lessons learned from experience with International Fraud Ring in Brazil

chiku
Download Presentation

Dismantling an International Fraud Ring in Brazil

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Dismantling an International Fraud Ring in Brazil cliff jordan oct 2003 Communications Fraud Control Association (CFCA) Conference San Diego, California

  2. Purpose of Discussion Share our lessons learned from experience with International Fraud Ring in Brazil Discuss impact of Sep 11th on Telephone Fraud in Brazil

  3. Our Industry Environment Anatel Regulations for Fixed Line Local and LD Operators Bad Debt Risk Not allowed to discriminate against customers based on credit history or ability to pay for basic service. Bad Debt Risk 2. Not allowed to block service for Bad Debt until after 2 warnings and 30 days have passed from due date of invoice. Fraud Risk 3. Basic Customers are NOT Subscribed to an LD Operator. They choose the LD Operator at the time of dialing the LD call. call via Embratel For example: • 0021-1-914-827-9086 • 0023-1-240-337-5907 call via Intelig

  4. Our History Jun 1999 – Sep 2000 • Jun 1999 – PIC Code dialing started. • Jan 2000 – Billing customers started. • Jul 2000 – First Fraud Reports • Aug 2000 – Blocking of International calls begins • Sep 2000 – Fraud Control Department organized • Sep 20, 2000 – First Police Action for Fraud NEED MORE HELP FAST!! 1 Manager + 1 Analyst + 1 Developer =

  5. Typical Fraud Scenario with Arab International Fraud Ring Step 1 – Brazil Fraudster calls Saudi Fraudster and sets up Long Duration call Step 2 – Saudi Fraudster with client tells Brazil Fraudster where his client wants to call (eg. friend in India)

  6. Typical Fraud Scenario with Arab International Fraud Ring Step 3 – Brazil Fraudster makes second call (eg. India) Step 4 – Brazil Fraudster conferences the two calls together Step 5 – Saudi client talks to friend in India

  7. Typical Fraud Scenario with Arab International Fraud Ring Step 6 – Brazil Fraudster and Saudi Fraudster settle the money between them

  8. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2000 – Dec 2000 1200 800 400 0 Investigated Fraud Systems and purchased Sheriff • CDR Based • Near Realtime • Greater Influence on Customized Development • Neural Network Engine • Thresholds • Case Manager To be installed in Feb 2001. Until then.....

  9. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2000 – Dec 2000 1200 800 400 0 We were blocking MANIACS! • Long Duration calls to Hot Countries over 2 hours • Accumulated duration to Hot Countries of 5 hours + per day Hot Countries = Mideast and some LatAm Countries • No pre-checking of Customer Info, Payment Info • Used above criteria and GUT Feelings! • 98% Accuracy

  10. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2000 – Dec 2000 1200 one week without blocking! 800 400 0 We made a COUPLE of little mistakes... • Blocked a TV Network for calls related to international news gathering • Blocked an Isreali Hospital Result?..... We got executive direction to validate customer first!

  11. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2000 – Dec 2000 1200 800 400 0 We Then Recognized... 1. Sheriff would not be agressive enough for this fraud. 2. We needed a system that could do the following: • Automatically Blacklist B number after Long Duration call • Automatically Blacklist A number after Long Duration call • Stop the Long Duration call in progress 3. We heard of a system that could meet these needs... For us it was ECTEL’s FraudView system – discussions began

  12. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jan 2001 – Mar 2001 1200 Allowed fraud in prep for police action 800 400 0 Progress... • Hired 5 more analysts and 3 supervisors and trained them! 2. Installed Sheriff in February 2001 Result? ..... Fraud amount dropped! 3. Began sharing of information with our competitor Intelig 4. Decided to attempt a second police action in March in Rio

  13. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jan 2001 – Mar 2001 1200 800 400 0 Second Police Action, Rio – March 9th, 2001 Please meet: Ismael – from Palestine Syed – from Bangladesh New Fraud Technology... DTMF boxes

  14. DTMF Box Fraud Scenario with Arab International Fraud Ring Step 1 – Saudi Fraudster calls DTMF box in Brazil which triggers first Long Duration call from Brazil to Saudi.

  15. DTMF Box Fraud Scenario with Arab International Fraud Ring #1 0021-91-345-6667 Step 2 – Saudi Fraudster sends via DTMF a code and destination phone number (eg. India) across Long Duration call

  16. DTMF Box Fraud Scenario with Arab International Fraud Ring #1 0021-91-345-6667 Step 3 – Box automatically opens second line, dials destination (eg. India), and conferences the two calls Step 4 – When call to India completes, India disconnects call

  17. DTMF Box Fraud Scenario with Arab International Fraud Ring #1 0021-254-567-2223 Step 5 – Box is now ready to accept another DTMF command

  18. DTMF Box Fraud Scenario with Arab International Fraud Ring #1 0021-964-654-1112 Step 5 – Box is now ready to accept another DTMF command

  19. Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jan 2001 – Mar 2001 1200 800 400 0 Second Police Action, Rio – March 9th, 2001 Please meet: Ismael – from Palestine Syed – from Bangladesh New Fraud Technology... DTMF boxes

  20. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jan 2001 – Mar 2001 1200 800 400 0 Installed Pilot Version of FraudView – March 12th, 2001 Discovered: 1. We could now see the DTMF signals sent by Fraudsters 2. We could automatically block when DTMF patterns seen 3. Block = Insert SILENCE on the line We configured FraudView to automatically: 1. Block when detection of reverse direction DTMF signals sent by Fraudsters 2. Blacklist and Block on Long Duration calls to Hot Countries

  21. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Apr 2001 – Jun 2001 1200 Allowed fraud in prep for police action 800 Fraud rose with Sheriff alone 400 0 Began using both Sheriff and Pilot Version of FraudView Did another police action in May, again in Rio Signed contract for ECTEL FraudView De-installed Pilot Version of FraudView as part of installation of Production FraudView

  22. Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Apr 2001 – Jun 2001 1200 800 400 0 May 30th, 2001 Meet: Rio de Janeiro • Names Unknown – 4 Brazilians • Fraudsters were trained and brought in from Foz de Iguaçu. • Were paid a little over minimum wage • Claimed their boss was Arab from Foz de Iguaçu.

  23. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jul 2001 – Sep 2001 1200 800 Fraud dropped! 400 0 Hired 12 new fraud analysts and 7 support staff FML trained new analysts and support staff Installation of Production FraudView complete It now became very difficult for the Arab International Fraud Ring to complete the Long Duration leg!

  24. A DESPERATE Fraud Scenario with Arab International Fraud Ring Step 1 – Try to setup Long Duration call a. Hacked into PABX in Greece and reoriginated to Saudi – caught via DTMF!

  25. A DESPERATE Fraud Scenario with Arab International Fraud Ring Step 1 – Try to setup Long Duration call a. Hacked into PABX in Japan and reoriginated to Saudi – caught via DTMF!

  26. A DESPERATE Fraud Scenario with Arab International Fraud Ring Step 1 – Try to setup Long Duration call a. Hacked into PABX in Texas, US and reoriginated to Saudi – caught via DTMF!

  27. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jul 2001 – Sep 2001 1200 800 400 Sep 11! 0 September 11, 2001 – Hot Country traffic at average levels

  28. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jul 2001 – Sep 2001 1200 800 400 Sep 11! 0 September 11, 2001 An event that begs a whole set of questions... 1. Did any of the communications of the Sep 11th terrorist attack pass through the Embratel network as part of the fraud that we had been fighting? 2. Could it be that terrorists are frauding our network like the call-sellers, Drug dealers, and the Arms dealers?

  29. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jul 2001 – Sep 2001 1200 800 400 Sep 11! 0 September 11, 2001 3. Is al Qaeda or any other terrorist group funded by this Arab International Fraud Ring? 4. Does the Arab International Fraud Ring have any connections or is affiliated with al Qaeda or any other terrorist group? 5. What will be the impacts on our industry as a result of the new realities of terrorism?

  30. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Jul 2001 – Sep 2001 1200 800 400 Sep 11! 0 September 11, 2001 Stay tuned.... Some answers to these and other like questions are coming in the next the few slides...

  31. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 2001 We increased the complexity of the filters and were able to quickly find the fraudsters as soon as they made their first call. The fraud amounts dropped even further in October. The month the dominos began to fall for the Arab International Fraud Ring in Brazil....

  32. Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 5th, 2001 Salvador, Bahia (northeast Brazil) Meet: • Roberto Barreto de Matos, 23 anos • Telephone Technician • Contracted by unknown Arab from Foz de Iguaçu, Brazil to setup and maintain a clandestine switch. • Falsified Identification Documents to adquire 16 telephone lines. Used computer and modems. • Was paid R$3000 monthly to maintain the system • Suspicious neighbors notified the police which led to the search warrent and subsequent arrest.

  33. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 5th, 2001 Foz de Iguaçu, Cascavel and surrounding area Meet: • José de Fatima Carnietto – innocent victim of stolen ID NEVER FOUND • Fraudsters stole his ID. • Rented an apt in Cascavel (near Foz de Iguaçu) in Jun 01. • There lived 4 men between 20 and 26 years old. • Adquired several telephone lines. NEVER FOUND Saudi Arabia, Pakistan, Afghanistan, Italy, USA, Canada, Sudan, and Egypt • Completed calls to: • Calls made between June 26 and Aug 23. Abandoned apt. • Owner entered apartment on Oct and phone bills, and called police. • We found over 50 accounts with name Fatima Carnietto.

  34. Arrested Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 10th, 2001 Maringá, near Foz de Iguaçu Meet: • Valdir Vitalino • Alex Honorato da Silva • Ederaldo Felix dos Santos • Daniel Trabanca • Idiane Aparecida Wolff • José Antonio de Sá • Clipped onto at least 10 seperate accounts in Maringá between July and August. • Believed to have run at least 6 clandestine switches in the area of Maringá. • Police found passport of Ederaldo with US Visa application. • Bank transactions with fraudsters in Saudi done through Bank West Union in Paraguay in name of Maria Lúcia Ferreira Josefi. • Completed calls to: Saudi Arabia, Egypt, Africa, and Pakistan

  35. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 Visit to Foz de Iguaçu • Border town between Brazil, Argentina, and Paraguay • Location of largest waterfalls in Western Hemisphere • Strong Arab community (over 20,000 residents) • Headquarters for Arab International Fraud Ring in Brazil

  36. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 Visit to Foz de Iguaçu • Bin Laden visted Foz along with other South American towns in this region between 1995 and 1999.

  37. Arrested Arrested Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 17th, 2001 Curitiba, Brazil Meet: CHINAIS FLED • Roberto Alli Chinais – Lebanon, Leader of Group • Deivis Helen Calamucci - Lebanon • Mohamed Mahmoud El Husseini - Kuweit • Hachem Mahmoud Husseini - Kuweit • Ran clandestine switches in Curitiba in June 2000 and Feb 2001 • Federal Police claim Roberto Alli Chinais is another member of the Arab Mafia in Brazil.

  38. Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 18th, 2001 Foz de Iguaçu, Brazil Meet: • Muhamed Hassan Atwi - Lebanon • Paulo César Caramorí - Brasilian • Names Unknown – 3 Brazilians • Were arrested for running clandestine switches in Foz de Iguaçu, within 1st day of fraud. • Embratel and Intelig acted together and sent Federal Police two addresses. • Federal Police secured search warrents within 2 hours and sent agents to both addresses. • At one address, they found the 1 Arab and 1 Brazilian and arrested them. • At other address they found nothing but telephone wires. Neighbors said that 3 occupants had just fled from the apartment with telephone equipment in hand.

  39. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 19th, 2001 Brasilia, Brazil Meet: • unknown • Federal Police found a PABX setup as a clandestine switch in an apartment in Brasilia. • Found also with equipment a package of cocaine.

  40. Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 October 24th, 2001 Mato Grosso, Brazil Meet: • Ghassan Jamil Al Kayal - Lebanon • Jamil Alkayal – Lebanon • Rubens Nunes de Barros - Brasilian • Were arrested Oct 10th for suspicion of communications with terrorist groups. • Police found 2 clandestine switches in Mato Grosso believed to be run by these men. • Police found 8 clandestine switches in Cuiabá believed to be run by these men.

  41. Arrested Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 November 22nd, 2001 Foz de Iguaçu, Brazil Meet: • Ivan Balic - Croatia ? Relationship with Arab Mafia • Darko Kuvic – Croatia • Thomas Slov - Croatia • Were arrested within one day of the start of the fraud. • Were routing calls through a calling card service in the US to Kuweit and Saudi Arabia. • No information on who hired them. • Claimed they were tourists.

  42. Interesting Relationships Found by Police • Accused of imposing monthly tax to Arab owned stores in Ciudade del Este, Paraguay to fund Hezbollah • Accused of transfering $50 Million USD to Hezbollah • Pro-Terrorist Propaganda and training material found in raid of his residence in Ciudade del Este, Paraguay in December 2001. Barakat fled to Brazil. • Assad Ahmad Barakat Owns electronics store in Ciudade del Este, Paraguay Owns videogame store in Ciudade del Este, Paraguay • Afif Abib Eid • Muhamed Hassan Atwi Ran clandestine switches in Maringá, Brazil Ran clandestine switches in Foz de Iguaçu, Brazil • Ederaldo Felix dos Santos • Paulo César Caramouri

  43. Interesting Relationships Found by Police • Accused of imposing monthly tax to Arab owned stores in Ciudade del Este, Paraguay to fund Hezbollah • Accused of transfering $50 Million USD to Hezbollah • Pro-Terrorist Propaganda and training material found in raid of his residence in Ciudade del Este, Paraguay in December 2001. Barakat fled to Brazil. • Assad Ahmad Barakat • Arrested in Foz de Iguaçu, Brazil on charges of terrorism in June of 2002. Captured while exiting his electronics store. Sent to maximum security prison in Brasilia. • Nov 2002, Sobhi Mahmoud Fayad, a worker for Barakat was arrested in Ciudad del Este on suspicion of raising funds for Hezbollah. Detained after police saw him writing down license-plate numbers outside a U.S.-sponsored disaster-management meeting. • May 2003, Hassan Abdallah Dayoub, married to Barakat´s first cousin was arrested in the airport at Asuncion, Paraguay while trying to smuggle 5 pounds of cocaine on a trip to Syria. Owns electronics store in Ciudade del Este, Paraguay Owns videogame store in Ciudade del Este, Paraguay • Afif Abib Eid • Muhamed Hassan Atwi

  44. Oct 00 Nov 00 Dec 00 Jan 01 Feb 01 Mar 01 Apr 01 May 01 Jun 01 Jul 01 Aug 01 Sep 01 Oct 01 Nov 01 Dec 01 Jan 02 Oct 2001 – Dec 2001 1200 800 400 0 December, 2001 The month of December appeared very quiet from the Arab International Fraud Ring! Did we win the fraud war? Did they decide to no longer commit telephone fraud? Why do we have an upward trend then in December? The fraud moved to ..... CELLULAR! All Brasil’s Intl Cellular traffic goes through Embratel and Intelig (competitor). This created a business opportunity for Embratel to market fraud service...

  45. 2002 - 2003 • Other related frauds began in 2002 that are related to this International Arab Fraud Ring: Clandestine Switches providing exclusive VIP cellular service for prison inmates, specifically to brasilian mafia leaders. The switches were setup by people trained by the Arab Fraud Ring. Recordings done by the Federal Police of these cellular calls reveal how drugs, arms, and prostitution are trafficked, and how the money is laundered and transferred via banks in Paraguay. Fernandinho Beira-Mar, largest supplier of drugs to Rio continues his operations while in prison getting drugs from FARC in Columbia and buying and selling of arms coming in from the tri-border area (Foz de Iguaçu). Thousands of Russian made AK-47s and millions of bullets and attempts at buying Stinger Missiles. Fernandinho is recorded ordering his contact on the outside to contact the “Lebonese Terrorists in Foz de Iguaçu” to learn how to put together a Clandestine Switch. By way of the Clandestine Switches, prisoners launched a “follow-me” telephone fraud scheme that victimized many brasilian residents.

  46. 2003 • Some key regulations for Cellular companies changed in 2003 in Brasil: • All cellular customers can now pick their long distance carrier with each call (casual calling). • This shifted the responsibility of long distance fraud to the long distance carriers. • All cellular companies can now offer long distance service with their own pic-code • This means they are responsible for the fraud that happens with their pic-code • Net result for Embratel: As the dominant carrier, we lost some traffic to competition in 2003. However, we still have some of the smaller companies with their own long distance pic-code requesting our realtime fraud service in addition to transport of their calls.

  47. Recent Examples of Fraud Traffic from a cellco using our network... Intl Destination Dur (min) Date / Time Origen-Brasil 1. 00xx96638354362B 99.87 17-10-03 09:48:57 2799820666 DTMF = >001592431881207<01592431881207*>999<999<99999999>99999999 >9999990015999<9999990015999>0015999<0015999<01592431587803 >999<99999 Comment: This is a call from a cell phone (part of a clandestine switch) in Brasil to Saudi Arabia. The destination sent reverse DTMF to open up other lines to call via Telefonica (0015) to Pakistan (92431881207) and (9243158780). Intl Destination Dur (min) Date / Time Origen-Brasil 2. 00xx9616490780C0 497.95 17-10-03 18:26:41 1199953229 DTMF = >003149413142539<014941142599<01129420841>003161296420841 >00152511133568<0152511158<999>999>999<999<0215949425792# <0155949425792 Comment: This is a call from a cell phone (part of a clandestine switch) in Brasil to Lebanon. The destination sent reverse DTMF to open up other lines to call via Telemar (0031) to Germany (49413142539, 4941142599) and Australia (61296420841). Then calls were routed through Embratel to French Guiana (5949425792).

  48. Recent Examples of Fraud Traffic from a cellco using our network... Intl Destination Dur (min) Date / Time Origen-Brasil 3. 00xx48693269071 88.83 20-10-03 10:20:49 1196000909 DTMF = <021842407408#>002184240674038#<**>***>002184350848013# <02184350848013#>002184350848013#<02184350848013#>*** <***>111111<111111<0 Comment: This is a call from a cell phone (part of a clandestine switch) in Brasil to Poland. The destination sent reverse DTMF to open up other lines to call via Embratel (0021) to Vietnam (84350848013). • The losses for this Cellco in August of 2003 for NOT using our realtime fraud service are between 3 and 4 Million Reais • (1.0 – 1.4 Million dollars).

  49. Summary of Lessons Learned For Embratel 1. One secret to success in stopping fraud is to have good equipment (systems) and well trained analysts. (6 month ROI or less is entirely possible) 2. Realtime Detection (SS7 monitoring), DTMF detection, and Realtime Blocking, proved INVALUABLE in detection and halting of this Call-Sell fraud. 3. We knew that associated with telephone fraud was drug trafficking, arms dealing, but now also we understand that it is also associated with terrorism. KNOW YOUR CUSTOMERS! 4. Working cooperatively with the law enforcement can be beneficial to both parties. 5. You may win a battle and secure a product/service from fraud, but the war still goes on as the fraudster moves to another weakness in your network. 6. Sharing of fraud data and working cooperatively with your competitor truly helps both mutually and helps clean up the industry.

  50. Interesting Reading on the Internet linking TERRORISM with telephone fraud: English http://www.cnn.com/2001/WORLD/americas/11/07/inv.terror.south/ http://www.meib.org/articles/0201_l2.htm Portuguese http://epoca.globo.com/edic/20011022/especial1a.htm http://oglobo.globo.com/especiais/terror/1721902.htm http://www.terra.com.br/istoe/1675/internacional/ 1675_triplice_encrenca2.htm Italian http://www.panorama.it/mondo/americhe/articolo/ix1-A020001020446/idpag1-1 Also other articles documenting individual cases are available. Email request to: cliff@embratel.com.br clifford m. jordan manager - fraud control and prevention Embratel cliff@embratel.com.br cliff.jordan@mci.com 55-21-2519-2032

More Related